Re: [Idr] draft-dong-idr-node-target-ext-comm route distribution procedures

"Dongjie (Jimmy)" <jie.dong@huawei.com> Thu, 20 October 2022 09:41 UTC

Return-Path: <jie.dong@huawei.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49ACDC1522B6; Thu, 20 Oct 2022 02:41:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.911
X-Spam-Level:
X-Spam-Status: No, score=-6.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0645SgSm2UfK; Thu, 20 Oct 2022 02:41:56 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D6EAC14F74D; Thu, 20 Oct 2022 02:41:56 -0700 (PDT)
Received: from fraeml702-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4MtMyb19pLz6H73n; Thu, 20 Oct 2022 17:40:07 +0800 (CST)
Received: from kwepemi500018.china.huawei.com (7.221.188.213) by fraeml702-chm.china.huawei.com (10.206.15.51) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2375.31; Thu, 20 Oct 2022 11:41:52 +0200
Received: from kwepemi500017.china.huawei.com (7.221.188.110) by kwepemi500018.china.huawei.com (7.221.188.213) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.31; Thu, 20 Oct 2022 17:41:50 +0800
Received: from kwepemi500017.china.huawei.com ([7.221.188.110]) by kwepemi500017.china.huawei.com ([7.221.188.110]) with mapi id 15.01.2375.031; Thu, 20 Oct 2022 17:41:50 +0800
From: "Dongjie (Jimmy)" <jie.dong@huawei.com>
To: Jeffrey Haas <jhaas@pfrc.org>, "draft-dong-idr-node-target-ext-comm@ietf.org" <draft-dong-idr-node-target-ext-comm@ietf.org>, "idr@ietf.org" <idr@ietf.org>
Thread-Topic: draft-dong-idr-node-target-ext-comm route distribution procedures
Thread-Index: AQHY5AeoVuelabLFg0CSll7c2rKdza4W988w
Date: Thu, 20 Oct 2022 09:41:50 +0000
Message-ID: <460c958c80ed4837bf703b37b8dff3f8@huawei.com>
References: <20221019221038.GC10497@pfrc.org>
In-Reply-To: <20221019221038.GC10497@pfrc.org>
Accept-Language: en-US, zh-CN
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.112.40.66]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/zLavxI0AUyAihfcYyX6zbseOs-g>
Subject: Re: [Idr] draft-dong-idr-node-target-ext-comm route distribution procedures
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Oct 2022 09:41:57 -0000

Hi Jeff,

Thanks a lot for your review and comments on this document. 

The essence of this document is to introduce a new extended community type (NT), which can be used by a receiving BGP node to determine whether it is the target node or not. 

Regarding the distribution procedure, as described in the updated version, by default RR does not take the NT into consideration in route distribution. This is analogous to the processing of VPN routes without RT-Constrain. 

That said, this document tries to introduce an optional procedure to improve the route distribution efficiency based on NT. It could be considered as a starting point for further discussion. The authors realized that this optional procedure may or may not work in different network scenarios (e.g. the deployment of hierarchical RRs), thus whether it can be enabled needs depends on the operators policy and understanding to their network. This policy also needs to apply to the EBGP peer case (Sorry the current version is not very clear on this).

Your suggestion about using RT-constrain for this distribution control is interesting and deserve some further discussion. And in the controller based route distribution case, BGP-LS may also be an option to build the distribution graph on RRs. Actually this makes me wonder whether it would be better if we split the optional distribution optimization from the NT extended community definition in this draft. What do you think?

Best regards,
Jie

> -----Original Message-----
> From: Jeffrey Haas [mailto:jhaas@pfrc.org]
> Sent: Thursday, October 20, 2022 6:11 AM
> To: draft-dong-idr-node-target-ext-comm@ietf.org; idr@ietf.org
> Subject: draft-dong-idr-node-target-ext-comm route distribution procedures
> 
> Authors,
> 
> As noted in other threads, I personally think the use case for targeting a
> specific node is clear in terms of community addressing.  I have a number of
> concerns about the distribution machinery portion of your draft.
> 
> I would roughly summarize your proposal as an attempt to flood the routes
> with this extended community through the AS and have them land only on
> the expected device.
> 
> In a fully-meshed iBGP network, an implementation can always know what
> its attached iBGP BGP Identifiers are.  So, it's possible to target routes to
> such nodes immediately.
> 
> In a network with route reflectors, given the lack of the BGP Identifier
> distribution graph, your strategy is "just pass it through the reflectors".
> I would observe that a route reflector may know that it is a route reflector,
> but may not know that its peer is also a route reflector.  This means you
> can't do selective propagation without this knowledge.
> 
> Finally, while you generally place inter-domain "for further study", you do
> cover the eBGP case when an adjacent router has a local match for itself and
> then it looks for the adjacent eBGP match.
> 
> If my summary of the procedures is roughly correct, this is an attempt to try
> to do work that would be more easily covered by simply using RT-Constrain.
> For an N node network, you'd have N RT-Constrain routes which will build
> the necessary flooding graph as per the usual procedures.  eBGP routers
> could signal into that either directly via RT-Constrain eBGP procedures;
> alternatively, the ASBRs could emit a RT-Constrain route for each of their
> eBGP neighbors by proxy.
> 
> Of course, there's one large hold-up with regard to such a methodology:
> RT-Constrain is not per-AFI/SAFI for its flooding graph.  In general, this
> hasn't been a problem for features deployed for RT-Constrain since the
> communities in question tend to be associated with specific AFI/SAFIs.
> However, there's no guarantee that a given AFI/SAFI node-targeted route has
> an appropriately congruent AFI/SAFI flooding topology along the
> RT-Constrain graph.
> 
> Solving the RT-Constrain AFI/SAFI congruency issue may be helpful here, and
> perhaps has overlapping use with other possible BESS use cases.
> 
> -- Jeff