Re: [Idr] recap my questions and issues raised during IDR Thurs session for draft-ietf-idr-tunnel-encaps-12

John Scudder <jgs@juniper.net> Wed, 12 June 2019 17:15 UTC

Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A568712011A; Wed, 12 Jun 2019 10:15:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.709
X-Spam-Level:
X-Spam-Status: No, score=-2.709 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BbWcWAVJxZgH; Wed, 12 Jun 2019 10:15:45 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D08A21200F8; Wed, 12 Jun 2019 10:15:45 -0700 (PDT)
Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x5CHETnn004911; Wed, 12 Jun 2019 10:15:41 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=j4iUjGg1EcC8rxz5dtVR/SDquaHlR2LBYbPsaEY2NVc=; b=Rz0SkzFJF5gPUvHHvcjybg0kG7/xXf637cTqYIPZN3kPpJi2HQ21pz8A+88jRhTEWBkM Wu2llj16A31AAnbB3dxSartl6RfZ7vuvliVVGCeUEZStx1/Bb62JzZacsSAz+qbQ0J1P 4K0Y+QWOkGLOKuLMM6bWqaxgrOqij3gsbzssosy1EPofOtz9wET+56v++JRMQtH59ItY GTCpeGyqH7Rut6q93Cc3LwmS2tNfydE0DalnEacgxb7fGttD0y4tY63+SnO6oIyRzJM9 bQ+IhTSqoU6bEdc7i74FGTWLe5JkBosr+vKIubiGAnxQvmwDVEF6tdAq7LB579DrzRrO GA==
Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp2054.outbound.protection.outlook.com [104.47.49.54]) by mx0a-00273201.pphosted.com with ESMTP id 2t32u8rary-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 12 Jun 2019 10:15:40 -0700
Received: from DM6PR05MB4714.namprd05.prod.outlook.com (20.176.109.215) by DM6PR05MB4876.namprd05.prod.outlook.com (20.176.112.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1987.11; Wed, 12 Jun 2019 17:15:39 +0000
Received: from DM6PR05MB4714.namprd05.prod.outlook.com ([fe80::1549:ffd0:8373:4593]) by DM6PR05MB4714.namprd05.prod.outlook.com ([fe80::1549:ffd0:8373:4593%3]) with mapi id 15.20.1987.008; Wed, 12 Jun 2019 17:15:38 +0000
From: John Scudder <jgs@juniper.net>
To: Keyur Patel <keyur@arrcus.com>
CC: Linda Dunbar <ldunbar@futurewei.com>, Robert Raszuk <robert@raszuk.net>, "idr@ietf.org" <idr@ietf.org>, "draft-ietf-idr-tunnel-encaps@ietf.org" <draft-ietf-idr-tunnel-encaps@ietf.org>
Thread-Topic: [Idr] recap my questions and issues raised during IDR Thurs session for draft-ietf-idr-tunnel-encaps-12
Thread-Index: AdUfzDTwk+JWx4NrTbCw24feqIEcxQADfhQAAABU8AAALY6XEAAB/DuAAADA04AAGnlYgAAHy0SAAANKonD//6TtAIAAeiGA
Date: Wed, 12 Jun 2019 17:15:38 +0000
Message-ID: <900E9356-CB87-4148-BAE9-238A6C3A3230@juniper.net>
References: <MN2PR13MB358247036D97F6620E2CB987A9130@MN2PR13MB3582.namprd13.prod.outlook.com> <234E41A5-F754-4630-B73C-8A9D52E44198@juniper.net> <6691B6FF-E9F5-4E9B-8D91-E8371993EDB5@juniper.net> <MN2PR13MB35826173FB5AC8D019497438A9ED0@MN2PR13MB3582.namprd13.prod.outlook.com> <5E89EE56-8852-4A1C-B072-EFE15ADA2618@juniper.net> <9E64708F-5E78-422C-8339-3447529BABB4@arrcus.com> <CAOj+MMFVhNFUnAe-QxyWHX65PY=VQmCK0N5aOcx=5nAApX5z4g@mail.gmail.com> <68538D45-E8CD-4FDA-ABA4-BEC4A7586410@juniper.net> <MN2PR13MB3582C58B3C84105B43191547A9EC0@MN2PR13MB3582.namprd13.prod.outlook.com> <F0F388CC-9B96-4E35-8E20-72A3B0C75347@arrcus.com>
In-Reply-To: <F0F388CC-9B96-4E35-8E20-72A3B0C75347@arrcus.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [66.129.241.10]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 21425038-c75b-4d57-c759-08d6ef599758
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:DM6PR05MB4876;
x-ms-traffictypediagnostic: DM6PR05MB4876:
x-microsoft-antispam-prvs: <DM6PR05MB487630C97A874D4477732ECCAAEC0@DM6PR05MB4876.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0066D63CE6
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(346002)(376002)(39860400002)(366004)(136003)(189003)(199004)(25786009)(14444005)(54896002)(66574012)(76176011)(68736007)(256004)(8936002)(102836004)(4326008)(3846002)(478600001)(6116002)(53936002)(6916009)(36756003)(229853002)(14454004)(186003)(99286004)(6506007)(5660300002)(236005)(6512007)(76116006)(66066001)(33656002)(7736002)(26005)(446003)(53546011)(66946007)(2906002)(6436002)(73956011)(91956017)(8676002)(66446008)(54906003)(64756008)(2616005)(86362001)(6246003)(6486002)(476003)(11346002)(71200400001)(71190400001)(66556008)(81166006)(81156014)(66476007)(486006)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB4876; H:DM6PR05MB4714.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: RsFcu7VFYumttte19z7biy6kDyXq9++KxSLkgtaKQWYwB4UrXsSKhAUpZM8jUVi2EXG2UqdSysR1ENaKh1NThi//PFpr34DoH+8FTtxY9s7+tW5mn6DLENgZ6m0mOAlNGfyZIxZ+4IP+YrYugr7PRnxZCVxk1doJvZXw9ndAKDrmzzQt3y2vqRTXi28eJzFKim3p57jbEjKGNxVRwMsHqGO7mRI4Cx6USL8GvTqrnbARo+q0yLXmGj8KNMvXhIKG7K0XBK7oYL4Svxv03cgNDT0hMxTCvXApYdWpPkO2TuqekjAA0XhR4AbvGG7ABaWyR+QP2FxrVENB6oYstjWeDghuE06rQ31gI9Aw3/Ua+zbnQTdu9Hstan9Uitc7IyJrYAlPrAirCT45MQPzvmxWecbbiQIrDZgrFPiNwC+luws=
Content-Type: multipart/alternative; boundary="_000_900E9356CB874148BAE9238A6C3A3230junipernet_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 21425038-c75b-4d57-c759-08d6ef599758
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jun 2019 17:15:38.7860 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: jgs@juniper.net
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4876
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-06-12_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1906120116
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/bo4QLNsVz-AX06fKv72JbuKcEhg>
Subject: Re: [Idr] recap my questions and issues raised during IDR Thurs session for draft-ietf-idr-tunnel-encaps-12
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Jun 2019 17:15:48 -0000

(As a contributor)

I guess the disconnect arises from how each reader parses “remote”. To me, and I guess other reviewers who also didn’t notice a problem, it is self-evident that “remote” means “the other end of the tunnel from the point of view of the router encapsulating the packet”. This conversation makes it clear that’s not the only possible reading. As mentioned earlier, I would have no objection to clarifying that point.

—John

On Jun 12, 2019, at 12:58 PM, Keyur Patel <keyur@arrcus.com<mailto:keyur@arrcus.com>> wrote:

Hi Linda,

My comments inlined #Keyur

From: Linda Dunbar <ldunbar@futurewei.com<mailto:ldunbar@futurewei.com>>
Date: Wednesday, June 12, 2019 at 8:54 AM
To: John Scudder <jgs@juniper.net<mailto:jgs@juniper.net>>, Robert Raszuk <robert@raszuk.net<mailto:robert@raszuk.net>>
Cc: Keyur Patel <keyur@arrcus.com<mailto:keyur@arrcus.com>>, "idr@ietf.org<mailto:idr@ietf.org>" <idr@ietf.org<mailto:idr@ietf.org>>, "draft-ietf-idr-tunnel-encaps@ietf.org<mailto:draft-ietf-idr-tunnel-encaps@ietf.org>" <draft-ietf-idr-tunnel-encaps@ietf.org<mailto:draft-ietf-idr-tunnel-encaps@ietf.org>>
Subject: RE: [Idr] recap my questions and issues raised during IDR Thurs session for draft-ietf-idr-tunnel-encaps-12
Resent-From: <keyur@arrcus.com<mailto:keyur@arrcus.com>>

John and authors:

The Section 1.1 says that if R1 sends packets to R2, the remote endpoint of such tunnel is R2. Of course, from R1’s perspective, R2 is the remote endpoint.
But when R2 composes a Tunnel-Encap Update, it is not obvious and not intuitive at all that R2 needs to call itself “remote”. That is where the confusion is. I have raised this question back in -10 version, repeated the question on IDR mailing list, but no one answered.

#Keyur: Hopefully this has been clarified.

Many thanks to John responding to my questions. Those emails have helped me to understand the intent of the draft. But I am sure that many implementors who don’t participate in this discussion and future new people coming to IDR will be confused as I was. No wonder it is so hard for any new people to participate/contribute to IDR.

Simply put, this draft is to announce a node’s tunnel encapsulation capabilities (either by its own, or by a third party), Correct?

#Keyur: And the tunnel endpoint address (minimally. Abstract has it covered).

It will be very helpful to implementors, who are not participating in the discussion today, to add this one sentence to the beginning of Section 3.1:

Remote Endpoint is from receivers’ perspective. When an endpoint A announces its tunnel encapsulation capabilities, it put its own address in the “Remote Endpoint” sub-TLV.

It will be even more helpful to add this sentence to the Abstract and Introduction:
This draft is to announce an endpoint’s (a node or an interface)  tunnel encapsulation capabilities (either by its own, or by a third party), so that receivers can establish appropriate tunnels to this endpoint.

#Keyur: Super. Thanks! As a FYI: There is a text that is in Abstract section 1.2 and section 1.3 which says what you have said and I quote them.

Abstract
<snip>
This document adds support for additional
   tunnel types, and allows a remote tunnel endpoint address to be
   specified for each tunnel.

</snip>

Section 1.2
<snip>
There is no way to use the Tunnel Encapsulation attribute to
      specify the remote endpoint address of a given tunnel; [RFC5512]
      assumes that the remote endpoint of each tunnel is specified as
      the NLRI of an UPDATE of the Encapsulation-SAFI.
</snip>

Section 1.3
<snip>
Defining a new "Remote Endpoint Address sub-TLV" that can be
      included in any of the TLVs contained in the Tunnel Encapsulation
      attribute.  This sub-TLV can be used to specify the remote
      endpoint address of a particular tunnel.

</snip>
Regards,
Keyur


Thank you very much.

Linda








From: John Scudder <jgs@juniper.net<mailto:jgs@juniper.net>>
Sent: Wednesday, June 12, 2019 8:50 AM
To: Robert Raszuk <robert@raszuk.net<mailto:robert@raszuk.net>>
Cc: Keyur Patel <keyur@arrcus.com<mailto:keyur@arrcus.com>>; Linda Dunbar <ldunbar@futurewei.com<mailto:ldunbar@futurewei.com>>; idr@ietf.org<mailto:idr@ietf.org>; draft-ietf-idr-tunnel-encaps@ietf.org<mailto:draft-ietf-idr-tunnel-encaps@ietf.org>
Subject: Re: [Idr] recap my questions and issues raised during IDR Thurs session for draft-ietf-idr-tunnel-encaps-12

(As an individual contributor)



On Jun 12, 2019, at 6:07 AM, Robert Raszuk <robert@raszuk.net<mailto:robert@raszuk.net>> wrote:

If A sends an update to B with field of "remote endpoint" does this field apply to A or B ? Is it remote from sender perspective or receiver perspective of BGP update. That is the dilemma here.

If you read section 1.1 you’ll see (emphasis added):


   In this scenario, when R1 transmits packet P, it should transmit it

   to R2 through one of the tunnels specified in U's Tunnel

   Encapsulation attribute.  The IP address of the remote endpoint of

   each such tunnel is R2.  Packet P is known as the tunnel's "payload".


That seems to leave nothing to the imagination. But wait you might say, that describes RFC 5512, how am I supposed to know tunnel-encaps has not reversed the definition? For that, we can take a look at section 5, "Semantics and Usage of the Tunnel Encapsulation attribute”, which is exactly where I as a reader would go look to find the semantics and usage, before I decided to complain they were not clear. The bulleted list in that section leaves no room for doubt as to whether the field applies to A or B: it applies to B.

So, as a reader, who is looking for clarity and not for things to complain about, I think the document is clear.

(As a co-chair)

Despite what the individual contributor said above, if the authors desire to add a short definition of “Remote Endpoint” to address these complaints, I wouldn’t have a problem with that and don’t think it would require another last call period.

Regards,

—John