[Idr] draft-ietf-idr-flowspec-redirect-ip-04 - Shepherd's review prior to WG LC
Susan Hares <shares@ndzh.com> Mon, 20 October 2025 14:05 UTC
Return-Path: <shares@ndzh.com>
X-Original-To: idr@mail2.ietf.org
Delivered-To: idr@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E8B1177FD6F5 for <idr@mail2.ietf.org>; Mon, 20 Oct 2025 07:05:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QIFAMfNuox0K for <idr@mail2.ietf.org>; Mon, 20 Oct 2025 07:05:08 -0700 (PDT)
Received: from BN1PR04CU002.outbound.protection.outlook.com (mail-eastus2azhn15010016.outbound.protection.outlook.com [52.102.138.16]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DCBF577FD59A for <idr@ietf.org>; Mon, 20 Oct 2025 07:04:00 -0700 (PDT)
Received: from CH5P221CA0014.NAMP221.PROD.OUTLOOK.COM (2603:10b6:610:1f2::7) by BN0PR08MB6886.namprd08.prod.outlook.com (2603:10b6:408:125::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.11; Mon, 20 Oct 2025 14:03:58 +0000
Received: from CH2PEPF0000014A.namprd02.prod.outlook.com (2603:10b6:610:1f2:cafe::b8) by CH5P221CA0014.outlook.office365.com (2603:10b6:610:1f2::7) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9228.17 via Frontend Transport; Mon, 20 Oct 2025 14:03:58 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 40.93.13.61) smtp.mailfrom=ndzh.com; dkim=none (message not signed) header.d=none;dmarc=bestguesspass action=none header.from=ndzh.com;
Received-SPF: Pass (protection.outlook.com: domain of ndzh.com designates 40.93.13.61 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.13.61; helo=DM2PR04CU003.outbound.protection.outlook.com; pr=C
Received: from us-east-2b.obx-outbound.inkyphishfence.com (13.59.96.180) by CH2PEPF0000014A.mail.protection.outlook.com (10.167.244.107) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9253.7 via Frontend Transport; Mon, 20 Oct 2025 14:03:58 +0000
Received: from DM2PR04CU003.outbound.protection.outlook.com (mail-dm2pr04cu00305.outbound.protection.outlook.com [40.93.13.61]) by obx-inbound.inkyphishfence.com (Postfix) with ESMTPS id 5D43298EA4; Mon, 20 Oct 2025 14:03:57 +0000 (UTC)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=fDKz9lRhPe1NSw32KoJhgh2T7MPtZGW5OXixUqEzx3nKUzfgDfpgQQVwsG3LZjORpwfdhNhXlAEdfd//HbJd2vqfC++KeEOEOPaEg1MaKIhnD5Uj8DB2KrIN8Ld4LYMmY/X5Sv8lDoX0/+ctBHeMxLZQLPmffIf6K/8J+0IzCL1lwFTa5Jb0WanjPjUymZ3s4b74jDbkqvWXXBrgPkfBSFsn0bCq1YSvJHLniQg24viauOtEQXRQIrRgH07BSkxWBQUFQAP+yiKJeB2zLncoPhEyEB0UVc981P315dkFi5JKXcVoWUBeEuKnl1hcPhmfRUgJZIm/rLI4FPvJMDmtpg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=wrvT8/6SDu8NOtWkVD9rsxI7xFMDUbqmoPJ/5QhklSA=; b=B9g9pathHj654A2qArNYPgMmcL5jLZcrM8CGwqiy+hbdlZqcXd8sPOHOTy0MAbfD4DYB59Yi6GtoIn5n5DksMmzyHlVLjHGITdwV6RiwynUSsqBd/+ulUcSEVz8dlZ2QberCYwdpqnXqS+FQuwLegzYbJHvLWleDqdCNDlt1ZubnJoDRbSizGzozJMFmLjATGsn9uyxD8xYPeM/0sHkyHIMda3RX6YfpqpCmp5q1zZtCQr93fjCD5mvOcHHQFjHNUmDMi++wI9Rgr855Av82yw7M1dByFOhjRfotHdXpFk7fJhP4Ct7rzSEIyz0UfLT/1TFgif8/FkyvrfteyUsplQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ndzh.com; dmarc=pass action=none header.from=ndzh.com; dkim=pass header.d=ndzh.com; arc=none
Received: from DM8PR08MB7413.namprd08.prod.outlook.com (2603:10b6:8:a::9) by CO6PR08MB7769.namprd08.prod.outlook.com (2603:10b6:303:144::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.6; Mon, 20 Oct 2025 14:03:41 +0000
Received: from DM8PR08MB7413.namprd08.prod.outlook.com ([fe80::8a0:8971:98a2:37e5]) by DM8PR08MB7413.namprd08.prod.outlook.com ([fe80::8a0:8971:98a2:37e5%5]) with mapi id 15.20.9253.011; Mon, 20 Oct 2025 14:03:39 +0000
From: Susan Hares <shares@ndzh.com>
To: 'idr' <idr@ietf.org>
Thread-Topic: draft-ietf-idr-flowspec-redirect-ip-04 - Shepherd's review prior to WG LC
Thread-Index: AdxBx69zxGdHcrcATSanobFeKrpkaQ==
Date: Mon, 20 Oct 2025 14:03:39 +0000
Message-ID: <DM8PR08MB7413A3AACE9FA36893437495B3F5A@DM8PR08MB7413.namprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ndzh.com;
x-ms-traffictypediagnostic: DM8PR08MB7413:EE_|CO6PR08MB7769:EE_|CH2PEPF0000014A:EE_|BN0PR08MB6886:EE_
X-MS-Office365-Filtering-Correlation-Id: bb20d45a-5e81-485c-302f-08de0fe1837f
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|366016|1800799024|376014|19092799006|10070799003|8096899003|13003099007|38070700021;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM8PR08MB7413.namprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(19092799006)(10070799003)(8096899003)(13003099007)(38070700021);DIR:OUT;SFP:1102;
Content-Type: multipart/alternative; boundary="_000_DM8PR08MB7413A3AACE9FA36893437495B3F5ADM8PR08MB7413namp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR08MB7769
ARC-Authentication-Results: i=2; obx-inbound.inkyphishfence.com; spf=pass smtp.mailfrom=ndzh.com; dmarc=pass header.from=ndzh.com; dkim=pass header.d=ndzh.com; arc=pass
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=inkyphishfence.com; s=arc-20181011; t=1760969037; h=mime-version : message-id : date : subject : to : from; bh=wrvT8/6SDu8NOtWkVD9rsxI7xFMDUbqmoPJ/5QhklSA=; b=PzMLJcFzJMx+2jH6v7XryURJIH/sKk1elcbjJBSDBa4n+V5Ze3xuIvM9pH1G5G0v2OJug skimHv36vfyt2BM0nvwW4Zg1rBCdJDG+1Vk6z+bY9Aqm6fcAITA5HJAC4kByYrHmT6dwF67 GR8lmSL4SXoe4rW1pjxDCuHr317A4Rg=
Authentication-Results-Original: obx-inbound.inkyphishfence.com; spf=pass smtp.mailfrom=ndzh.com; dmarc=pass header.from=ndzh.com; dkim=pass header.d=ndzh.com; arc=pass
ARC-Seal: i=2; cv=pass; a=rsa-sha256; d=inkyphishfence.com; s=arc-20181011; t=1760969037; b=og8NDFlXddF2Sjf8gimvTibXxf4EXrNaKra8bvsHHML+gueAF4OlYuAGDcPEv5qAzfAfy nw/I3KPOMfGB465UnTgKdfjyqSl6JoAkB2w0Nbrzb20+1ULKrKQzmjPhDgaquXmy4h3rdF/ vyzygVw8QBS+EKsDM5dXGzrcCHPbB+k=
X-Inky-Outbound-Processed: True
X-EOPAttributedMessage: 0
X-MS-Exchange-SkipListedInternetSender: ip=[40.93.13.61];domain=DM2PR04CU003.outbound.protection.outlook.com
X-MS-Exchange-ExternalOriginalInternetSender: ip=[40.93.13.61];domain=DM2PR04CU003.outbound.protection.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersStripped: CH2PEPF0000014A.namprd02.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 9a199dda-2f54-4f3a-2947-08de0fe17867
X-IPW-GroupMember: False
X-Microsoft-Antispam: BCL:0;ARA:13230040|35042699022|14060799003|156008|36860700013|1800799024|19092799006|376014|82310400026|13003099007|8096899003|11100799054;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:13.59.96.180;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM2PR04CU003.outbound.protection.outlook.com;PTR:mail-dm2pr04cu00305.outbound.protection.outlook.com;CAT:NONE;SFS:(13230040)(35042699022)(14060799003)(156008)(36860700013)(1800799024)(19092799006)(376014)(82310400026)(13003099007)(8096899003)(11100799054);DIR:OUT;SFP:1501;
X-OriginatorOrg: ndzh.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2025 14:03:58.0808 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: bb20d45a-5e81-485c-302f-08de0fe1837f
X-MS-Exchange-CrossTenant-Id: d6c573f1-34ce-4e5a-8411-94cc752db3e5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d6c573f1-34ce-4e5a-8411-94cc752db3e5;Ip=[13.59.96.180];Helo=[us-east-2b.obx-outbound.inkyphishfence.com]
X-MS-Exchange-CrossTenant-AuthSource: CH2PEPF0000014A.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0PR08MB6886
Message-ID-Hash: RCFXYET2BNZZ53TZIAKSD4ZK2ZMZC2X7
X-Message-ID-Hash: RCFXYET2BNZZ53TZIAKSD4ZK2ZMZC2X7
X-MailFrom: shares@ndzh.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-idr.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "wim.henderickx@gmail.com" <wim.henderickx@gmail.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Idr] draft-ietf-idr-flowspec-redirect-ip-04 - Shepherd's review prior to WG LC
List-Id: Inter-Domain Routing <idr.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/qZq64zw2z2H9rYOEvHIcxFjNYmM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Owner: <mailto:idr-owner@ietf.org>
List-Post: <mailto:idr@ietf.org>
List-Subscribe: <mailto:idr-join@ietf.org>
List-Unsubscribe: <mailto:idr-leave@ietf.org>
Greetings Jeff, Wim, and Adam: The Flow-Specification V1 action described in draft-ief-idr-flowspec-redirect-ip-04 (https://datatracker.ietf.org/doc/draft-ietf-idr-flowspec-redirect-ip/) is an old draft. It is reported to have many implementations (juniper, Cisco, Huawei). This is a shepherd's review of draft-ietf-idr-flowspec-redirect-ip-04.txt prior to WG LC. I have three high-level questions. 1) Is the "C=0" correct in the following paragraph in section 2.2? If a BGP speaker receives a flow-spec route with multiple "redirect- to-IP" extended communities and this route represents the one and only best path, it SHOULD load-share the redirected/copied packets across all the "target addresses" according to its ECMP configuration. If the BGP speaker is not capable of redirecting and copying the same packet it SHOULD ignore the extended communities with C=0. If the BGP speaker is not capable of redirecting/copying a packet towards multiple "target addresses" it SHOULD deterministically select one "target address" and ignore the others. The logic starts with : a) multiple redirect-to-ip Ext-Communities on 1 NLRI with one and only best path result: load share redirected/copied packets to target addresses via ECMP b) what appears to be an exception in 2nd sentence. Can you clarify this text please with an example to the list? 2. The following paragraph in section 2.2 depends on the above paragraph. If (C=0) is correct, could you give an example of how the logic below works. If a BGP speaker receives multiple flow-spec routes for the same flow-spec NLRI and all of them are considered best and usable paths according to the BGP speaker's multipath configuration and each one carries one or more "redirect-to-IP" extended communities, the BGP speaker SHOULD load-share the redirected/copied packets across all the "target addresses", with the same fallback rules as discussed in the previous paragraph. Note that this situation does not require the BGP speaker to have multiple peers. (For example, BGP Add-Paths [RFC7911] could be used for the flow-spec address family.) Please provide an example of how this logic is applied. 3. What does the Cisco IOS-XR support in this draft? According to the text, it does not support the following: * Section 2 - IPv4 Extended Community, * Section 2 - IPv6 Extended Community, * Section 2 - Redirect (C==0) * Section 2 - Redirect (C=1) * Section 2.1 - Validation * Section 2.2 - Redirecting - Longest prefix match * Section 2.2 - Redirection - Best path ECMP * Section 2.2 - Multiple community with ECMP load sharing * Section 2.2 - Redirect-to-IP in Redirect-to-VRF How does the cisco implementation qualify for as a 2nd implementation. After the author set answers these questions, we will progress to an IPR call Prior to WG LC. Cheerily, Susan Hares
- [Idr] draft-ietf-idr-flowspec-redirect-ip-04 - Sh… Susan Hares
- [Idr] Re: draft-ietf-idr-flowspec-redirect-ip-04 … Jeffrey Haas
- [Idr] Re: draft-ietf-idr-flowspec-redirect-ip-04 … Susan Hares