[Idr] Comments about draft-dong-idr-node-target-ext-comm

"Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net> Thu, 28 July 2022 12:21 UTC

Return-Path: <zzhang@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0024CC13CCC0 for <idr@ietfa.amsl.com>; Thu, 28 Jul 2022 05:21:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.689
X-Spam-Level:
X-Spam-Status: No, score=-7.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.582, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=p5RRhVKI; dkim=pass (1024-bit key) header.d=juniper.net header.b=FJLWj1kW
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jd_ygCVFrWXv for <idr@ietfa.amsl.com>; Thu, 28 Jul 2022 05:20:56 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F62EC157B41 for <idr@ietf.org>; Thu, 28 Jul 2022 05:20:54 -0700 (PDT)
Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.17.1.5/8.17.1.5) with ESMTP id 26S8EDvR013603; Thu, 28 Jul 2022 05:20:42 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=8m+T2DnrrNjSZeMPuP6O3nVMofabGV/GfZt1VJdOAys=; b=p5RRhVKIIqfEPmwe4dkbM88VAxU44pmf/p/pGg0rh8wyxlpf42iwfCigo+dudSkx4V1c zbVhbX88mElZ6cyiMke2ayo0a20pc/oC3W30/419MOGIGl4NbA5Qwg8azfHcM7iaez5Q 0MzPExLZh4IPRjjcjMQGM4Hwn9MAeRj1StDvW+0u3nMknfZ+PGz+nQg1tnlzp7U0np+P xYx0KPLLsFao+Nw9n9UazHI40xliqNq1aHufgzU5bhiPOIcqyEyUqckSesx8qiRNjSIY iozh6YU046B+TLR8PltfvppPPlDGTJQ7S3/at6b0IohysproZnoyCnvst1p4fYsq08nj VQ==
Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2175.outbound.protection.outlook.com [104.47.55.175]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 3hkps00cpt-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 28 Jul 2022 05:20:42 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aqXugF1DFzkYM6KnP/dTzIJybeSQ7ePNbWcnucCkSCBiP+LoQ7MjuBJMDsdE8oUlrSeB0ksHvwC/L8fmkTc0WneMIMJPGVqvsUf70vT3aZ/azzer2VuGRp1MlMvlbjCu6VPwdrRQBVnoG0Cw2JR+I9Xe4ra/YRVRplHkq9iimplIzIF7c70Fc6p78h4UsVx8E7ypVLNUo11d+F+FbuOYUgsh4xu5dvqOVxbaHAfWGKiDt5ka5dsUYXvsCbe01OCLI3/oJO/RiiZyn4E3OTRhyMPNprrHEhfyaNbRuSOUwWGzXvISO8kGlaeH1FBP69nFfdtVH6523ln0fqkBj1z8jA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8m+T2DnrrNjSZeMPuP6O3nVMofabGV/GfZt1VJdOAys=; b=VSNC/yWAeRmVKAdMIKQGnYE8JDQ+0ux5YaNEgGfrJ0HcbiW32nl59fX7Px7UVxaQDWcctjqMu2BNkU8SefKMvTWliiQePrtF/iWR9g5LqXu5YQH3cesbkDvsP2cBSEJJeDsLfNnNX9WYNus/OfoKIsRPyZBdH0gAlveK/ax07okEfLSqFGe3Uh6tREebZiOlL5jKKrCt6jWAyQHl2gIchNb5UL/R/jeglxuvnlYiyg5d5h+/mPs7MGt9ZvPX1emR9613Sq6fk0tn0l7Ci+XS/+EurBBZH/5VNU0zYRJVTeh/CN2rTe4u/JNAocAJVmHVfpbPe6gfGs7vDe/ElYCQ/w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8m+T2DnrrNjSZeMPuP6O3nVMofabGV/GfZt1VJdOAys=; b=FJLWj1kWTMYP5cXSC4B6mJ58lx3h5ASI55OQtqHVYBqBHs6EjlVM89lOnG3lVqMdZJ9nNrsjL+SZS6QtIdbwZBgg5xnmyLHn4xX15x4HFGaFm+9nHyKXgZCuoxOOlNZOR0DRK1muIQgLbZgodAM8W6fyj6B4u0PMmDNJ03y8KYs=
Received: from BL0PR05MB5652.namprd05.prod.outlook.com (2603:10b6:208:6a::19) by CO6PR05MB7761.namprd05.prod.outlook.com (2603:10b6:5:344::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5482.1; Thu, 28 Jul 2022 12:20:39 +0000
Received: from BL0PR05MB5652.namprd05.prod.outlook.com ([fe80::7594:32f4:79c2:cc08]) by BL0PR05MB5652.namprd05.prod.outlook.com ([fe80::7594:32f4:79c2:cc08%6]) with mapi id 15.20.5482.011; Thu, 28 Jul 2022 12:20:39 +0000
From: "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>
To: "Dongjie (Jimmy)" <jie.dong@huawei.com>, 'Zhuangshunwan' <zhuangshunwan@huawei.com>, "gunter.van_de_velde@nokia.com" <gunter.van_de_velde@nokia.com>
CC: "idr@ietf. org" <idr@ietf.org>
Thread-Topic: Comments about draft-dong-idr-node-target-ext-comm
Thread-Index: AdiiendpCX1fRAHTT7qGEx7MYYC9hg==
Date: Thu, 28 Jul 2022 12:20:39 +0000
Message-ID: <BL0PR05MB5652EC60D898CA51E2C5F76DD4969@BL0PR05MB5652.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2022-07-28T12:20:36Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=a599bf4a-364a-4773-87cd-04616fd9d756; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 86530c41-4dc2-4d83-a9ca-08da70939565
x-ms-traffictypediagnostic: CO6PR05MB7761:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR05MB5652.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(39860400002)(136003)(396003)(376002)(346002)(366004)(5660300002)(52536014)(8936002)(76116006)(66946007)(66556008)(66476007)(66446008)(64756008)(8676002)(4326008)(55016003)(2906002)(38100700002)(122000001)(38070700005)(86362001)(33656002)(41300700001)(478600001)(9686003)(6506007)(7696005)(110136005)(316002)(966005)(71200400001)(66574015)(186003)(160933001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BL0PR05MB5652.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 86530c41-4dc2-4d83-a9ca-08da70939565
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2022 12:20:39.5005 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 3jOGa4TAw+eNXP4xjXczxD+Ludde9CpiVOd+uGy8SGotzRSEWMqWbjEsNgCEEr/dVctYddRCjq8DstYQajcBIA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR05MB7761
X-Proofpoint-ORIG-GUID: fdYpJM21QSOIJkNvaOtpJJyVGtJAq_Cg
X-Proofpoint-GUID: fdYpJM21QSOIJkNvaOtpJJyVGtJAq_Cg
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.205,Aquarius:18.0.883,Hydra:6.0.517,FMLib:17.11.122.1 definitions=2022-07-28_05,2022-07-28_02,2022-06-22_01
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 malwarescore=0 suspectscore=0 clxscore=1031 mlxlogscore=999 adultscore=0 spamscore=0 lowpriorityscore=0 priorityscore=1501 bulkscore=0 phishscore=0 mlxscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2206140000 definitions=main-2207280054
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/lNJYcWeWgvuz0oJAyReimKfdNa4>
Subject: [Idr] Comments about draft-dong-idr-node-target-ext-comm
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Jul 2022 12:21:01 -0000

Hi Jie, Shuwan, Gunter,

   Currently BGP does not have a generic mechanism of designating the
   set of nodes to which the information is to be distributed.  Route
   Target (RT) as defined in [RFC4364] was designed for the matching of
   VPN routes into the target VPN Routing and Forwarding tables (VRFs)
   on the PE nodes. 

RFC6514 already uses IP address specific RTs to target routes to certain nodes. The receiving nodes then use other information to put the routes into appropriate VRFs.
Using other types of RTs to target a set of nodes should also work as a general mechanism.

   [I-D.ietf-idr-segment-routing-te-policy] introduces
   the mechanism of steering the SR Policy information to the target
   head end node based on RT, it is only applicable to the SR Policy
   Address Family.  

It should be no problem to use this for any address family.

   Although it is possible to reuse RT to control the
   distribution of non-VPN information to one or a group of receiving
   nodes, such mechanism is not applicable when the information to be
   distributed is VPN-specific and is advertised with another set of RTs
   for the VRF matching, as the matching or any of the VPN RT in the BGP
   route would result in that route being imported to a local VRF,
   regardless of whether the receiving node is the target node or not.

https://datatracker.ietf.org/doc/draft-zzhang-idr-rt-derived-community/ describes a generic method:
- Use a general-purpose RT to target nodes
- Use an extended community derived from the VPN RT to tell the targeted node that the route is associated with the VPN

   Another possible approach is to configure, on each router, a
   community and the corresponding policies to match the community to
   determine whether to accept the received routes or not.  Such
   mechanism relies on manual configuration thus is considered error-
   prone.  It is preferable by some operators that an automatic approach
   can be provided, which would make the operation much easier.

But the node advertising the route needs to know which targeted nodes to encode. That may not be straightforward.

   This document defines a new type of BGP Extended Community called
   "Node Target".  The mechanism of using the Node Target extended
   community to control the BGP route distribution only to particular
   BGP nodes is also specified.

This seems to complicate the RTC based route propagation:
- the RTC advertisements now need to include these new communities
- a logical AND criteria is needed
- if a route needs to go to several nodes, then each needs to be encoded by the source and compared against on each hop.

Jeffrey


Juniper Business Use Only