Re: [Idr] Error in draft-ietf-idr-sdwan-edge-discovery use of Encapsulation Extended Community

John Scudder <jgs@juniper.net> Wed, 28 February 2024 00:37 UTC

Return-Path: <jgs@juniper.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA8B1C151062; Tue, 27 Feb 2024 16:37:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b="sSh4RdM5"; dkim=pass (1024-bit key) header.d=juniper.net header.b="bZtPEBLW"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q-pPow1CdVOg; Tue, 27 Feb 2024 16:37:05 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC0BDC14F689; Tue, 27 Feb 2024 16:37:05 -0800 (PST)
Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.17.1.24/8.17.1.24) with ESMTP id 41RMPVbb007771; Tue, 27 Feb 2024 16:37:01 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:content-id:content-transfer-encoding:mime-version; s=PPS1017; bh=OEY0pdd10kcNu3RoOPp9va99d9AMPdU0UnlpmKaJ2W4=; b=s Sh4RdM5mgEkfV+BY/Fg5eYjzfNiS+BeZDUaHJdnc4VNt7BzZHgHeOZuhq/Q2+nww cOxoQtHZL8e/T3MmLgp6UbvhrsEPwHuXd9c559ZXYb09tn+SImHCN8G4MKD6nHmg eupn9UE0P4A9Rlt2cqs0DW56ioHEK/WL/qkp4TDYVlBSBeVsHzOUvl6ST0jVO6Ds tokxZTFdGr71ss9ftflE9gbWDRkraeCfSuQP7gLZi/A9PqTzOynIW8TjZ/y2pdDM 4V8asNI1/gEMhPULMf5qO/Qnulml+1HvL4pO/SyKsAKqO3C6tRT+uLwHqWTnqmrf WOfRKDkJfR8HZFS13TK8w==
Received: from sj2pr03cu001.outbound.protection.outlook.com (mail-westusazlp17010001.outbound.protection.outlook.com [40.93.1.1]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 3wff8hna3k-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 27 Feb 2024 16:37:01 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QnuHQ2rOPWLRuyP1P9xqJMey4Xd/w9Z64LtgX85nuwnxpwfpPOnhbw0qn7FQx2u0LZFYri/D2BMQSexZpPrb7K4g7NZ9pnOOnE2XErGR9GRMqBvMQ0EltKMjB7ToYRHIaDFfdU4V0ki17wKQzTQSkGXnh5OoksbfYpA6Y7ZSNfqtrS+rob1AGI8QCmBRNSh2leJ38kTcC3c8O6oD3/pMRDZV3ejAc4L3dPQuw5Ad2e530IVCyJqtcaccqAplL1eFCBpfGi7QMwYvtMmZRVjpdBAY9avCjX+NM0IRerEhGFOdJE1j7Bpuh3L7djrUkaAL86n+5Xk/nRdC5pYSRPNczw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OEY0pdd10kcNu3RoOPp9va99d9AMPdU0UnlpmKaJ2W4=; b=dDki78LXRrKGMnw0gYFrZ5FmmLhKmrHjCuLV8SgVymcNasfynDd/m16tBGSyo6vfHWbn+nwRACevctuIiRfrRsyIQFSoUeN7UVZfTNRijn2EdfG1W+PJsDCZ8ZCO9EGW9VoMC3e54YFW0TMPzlLG5j5YrfB31FRebg65olOQrZM+rNnJdQW75Bi9AX+gPkNoz1a4GviqT65WXvRpL4WJqkWs8u9FSLJGss+Ub8b/OckD5F+GfHY62cIH+Y7VCV0FRnIqkLSf+44mC3N6iVYZSG+UrTBOZkxoAWu8g3hQSD/HrFMynf1pnrw+w4XBOj66yg4kp7ATknrC1jeW1jH3VA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OEY0pdd10kcNu3RoOPp9va99d9AMPdU0UnlpmKaJ2W4=; b=bZtPEBLWX8yHI0ASIBcnBKW+7i32y4lC9LuUBxMz2Q9hsElaViidmbSfL2abY3z/kZewdnaKL2RhZtXuEACoMKX4z0zR4oMKIpKXOSd899GSp2gCIO63esZvZ1tpyXOCh8Hsvzy17pJfGEAlyNhRuJkeh0LydxzlQ9xHNekANtM=
Received: from CH2PR05MB6856.namprd05.prod.outlook.com (2603:10b6:610:3e::11) by DS0PR05MB10298.namprd05.prod.outlook.com (2603:10b6:8:ca::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.39; Wed, 28 Feb 2024 00:36:57 +0000
Received: from CH2PR05MB6856.namprd05.prod.outlook.com ([fe80::e182:8767:9915:7b07]) by CH2PR05MB6856.namprd05.prod.outlook.com ([fe80::e182:8767:9915:7b07%6]) with mapi id 15.20.7316.037; Wed, 28 Feb 2024 00:36:57 +0000
From: John Scudder <jgs@juniper.net>
To: Linda Dunbar <linda.dunbar@futurewei.com>
CC: Robert Raszuk <robert@raszuk.net>, "idr@ietf.org" <idr@ietf.org>, "draft-ietf-idr-sdwan-edge-discovery@ietf.org" <draft-ietf-idr-sdwan-edge-discovery@ietf.org>
Thread-Topic: Error in draft-ietf-idr-sdwan-edge-discovery use of Encapsulation Extended Community
Thread-Index: AQHaab1b0El+Em0vTUqZbYQ57EWzzbEezuKAgAAB5ICAAAbwgIAABJsAgAABokaAAAQxgIAABswA
Date: Wed, 28 Feb 2024 00:36:57 +0000
Message-ID: <A1DC1B7C-B767-48A9-9BEA-A5EFBE85E9C9@juniper.net>
References: <7FDF55CE-3E6B-47EC-8504-C9884BD212A9@juniper.net> <CO1PR13MB4920A302CE1D5AE545CD243485592@CO1PR13MB4920.namprd13.prod.outlook.com> <3CC853C3-960C-4AE2-BB45-69E8F48356B9@juniper.net> <CO1PR13MB4920C89AD7FCF4245DF9444185592@CO1PR13MB4920.namprd13.prod.outlook.com> <CAOj+MMEpC5caAtKCLSc6MrHUX1Qa3gtPO919nYpk9jyTdYXuSA@mail.gmail.com> <1DB2D1F0-E0F9-41F6-B49A-0126D25BE2DD@juniper.net> <PH0PR13MB4922F82CF2D623474D4BD8A585582@PH0PR13MB4922.namprd13.prod.outlook.com>
In-Reply-To: <PH0PR13MB4922F82CF2D623474D4BD8A585582@PH0PR13MB4922.namprd13.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3774.400.31)
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CH2PR05MB6856:EE_|DS0PR05MB10298:EE_
x-ms-office365-filtering-correlation-id: 0aa32399-7899-453d-a8cf-08dc37f55ea8
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR05MB6856.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(38070700009); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <60E2B58C1D97894098533E2F0260C39F@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH2PR05MB6856.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0aa32399-7899-453d-a8cf-08dc37f55ea8
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2024 00:36:57.4315 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: LlPVVSrn0EBc8DZjirI2QwfhlBcuHdO2ACvjJ1xPU4vEom1+sHkEPCW920I8nDyK
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR05MB10298
X-Proofpoint-GUID: P3Lx-ZHG0CI_pbvtS_I8-T4vLMRw8XSI
X-Proofpoint-ORIG-GUID: P3Lx-ZHG0CI_pbvtS_I8-T4vLMRw8XSI
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-02-27_11,2024-02-27_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 impostorscore=0 lowpriorityscore=0 spamscore=0 suspectscore=0 bulkscore=0 mlxlogscore=999 clxscore=1015 priorityscore=1501 mlxscore=0 malwarescore=0 phishscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2402120000 definitions=main-2402280002
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/xwA6zbgvk1vsa_gOCDo3vAPIUV0>
Subject: Re: [Idr] Error in draft-ietf-idr-sdwan-edge-discovery use of Encapsulation Extended Community
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Feb 2024 00:37:09 -0000

Hi Linda,

> On Feb 27, 2024, at 7:12 PM, Linda Dunbar <linda.dunbar@futurewei.com> wrote:
> 
> Our intent of using Encapsulation Extended Community is to indicate that Client routes need to be forwarded by a tunnel,
> but there is too much information about the  Tunnel attributes to be included in the Client route advertisement and those attributes are associated with the WAN ports (instead with Client Routes).
> 
> We need to interpret the "barebones" as a hook to inform the peer nodes to use information carried in  the second UPDATE to establish the tunnel for the Client routes.

I don’t see why you need any indication beyond the next hop. It’s both necessary (so that the recipient can find the route that has the tunnel information) and sufficient (because once it finds that route, it will see it includes tunnel information). This is exactly what Section 8 explains. 

> I don't understand why RFC9012 doesn't allow this. What harm does it cause?

If RFC 9012 was still in draft, and you had suggested the idea above as a change to the spec, we could have had this discussion. But it’s moot now — RFC 9012 is what it is, and what it is, very specifically and precisely does *not* allow a tunnel type that has mandatory sub-TLVs to be used as an Encapsulation Extended Community, and does *not* require any additional information beyond the next hop to “glue” a client route to an underlay route that has a tunnel attribute. 

If you want to use RFC 9012, it is what it is. If you think (for some reason I don’t yet understand) that you need to have an extra “hook” beyond the next hop, you can specify some new thing to do that.

—John