Re: [Int-area] question about xping (draft-bonica-intarea-eping)

Ron Bonica <rbonica@juniper.net> Tue, 28 March 2017 22:27 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68ADB129572 for <int-area@ietfa.amsl.com>; Tue, 28 Mar 2017 15:27:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level:
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8xBGTT0B5WF for <int-area@ietfa.amsl.com>; Tue, 28 Mar 2017 15:27:03 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0119.outbound.protection.outlook.com [104.47.37.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04A9D128616 for <int-area@ietf.org>; Tue, 28 Mar 2017 15:27:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=4EVqLOS1tFCpXZ8g9lzjYawBbvsYxj53Ts7hBIBvXWE=; b=iE7YdQlObgBCSbkgYt009MzrvOnmiGPvWIpeyM148YWM1ytmtbDL0ECJ6wqQENStK2OydzIboUYEMRHoLJaedOddfcsxYfsPdPxoW+uhbYIvs49n3q9qJQQ2khAu1pFXDATEH1iIdo36d1dk0m0u2BkIjcBHEaLfz2ZxuL4zfow=
Received: from BLUPR0501MB2051.namprd05.prod.outlook.com (10.164.23.21) by DM2PR0501MB1663.namprd05.prod.outlook.com (10.160.136.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1005.2; Tue, 28 Mar 2017 22:27:01 +0000
Received: from BLUPR0501MB2051.namprd05.prod.outlook.com ([10.164.23.21]) by BLUPR0501MB2051.namprd05.prod.outlook.com ([10.164.23.21]) with mapi id 15.01.1005.009; Tue, 28 Mar 2017 22:27:00 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Sowmini Varadhan <sowmini.varadhan@oracle.com>, Reji Thomas <rejithomas@juniper.net>, "furry@google.com" <furry@google.com>, "chris.lenart@verizon.com" <chris.lenart@verizon.com>
CC: "int-area@ietf.org" <int-area@ietf.org>
Thread-Topic: question about xping (draft-bonica-intarea-eping)
Thread-Index: AQHSqArDy5KxMIdon0qqjf3UAs9WKKGq0r3A
Date: Tue, 28 Mar 2017 22:27:00 +0000
Message-ID: <BLUPR0501MB2051EA17D498590F6335FA24AE320@BLUPR0501MB2051.namprd05.prod.outlook.com>
References: <20170328213205.GC6413@oracle.com>
In-Reply-To: <20170328213205.GC6413@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: oracle.com; dkim=none (message not signed) header.d=none;oracle.com; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.241.10]
x-microsoft-exchange-diagnostics: 1; DM2PR0501MB1663; 7:HzKxDDr/0UqPrmEoBBSM3w3F2TSpN3G8SOyQqKD/ZSqF+3X/O0+U+1/APQCO0+IWh/thuE5r9MuLrDk7422VMf5rXoKrdmbPF9p17sRAVAUQT3PGrjeirUsbBo3aOOvWeAa0ABB3tbbXxnbgvoiZMAEa+9UmOLYzj5zccCZPlWKh/YZs84slhICgFs8FJwshR4cGPaBFmpaVSyFd65MP7tNkDVqrn56rpVqZsI0yZPt7Fmr3XUQ3PH33hnoxGEzQ7mAl/Z1iyj3ar5L9yVcxRkdWC0rWje3OQSa/VJzkZ3MvvT9tf4pUTsxZtMHpeqFMOY0Ks71YEfbd7fYaqCMRdQ==
x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(39450400003)(39860400002)(39850400002)(39410400002)(39840400002)(13464003)(377454003)(2906002)(7696004)(8936002)(4326008)(53936002)(2950100002)(2201001)(189998001)(86362001)(122556002)(38730400002)(54356999)(33656002)(6246003)(3660700001)(305945005)(3280700002)(76176999)(2501003)(50986999)(2900100001)(229853002)(7736002)(102836003)(74316002)(9686003)(6116002)(230783001)(3846002)(66066001)(6436002)(8676002)(99286003)(77096006)(25786009)(81166006)(53546009)(6506006)(5660300001)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1663; H:BLUPR0501MB2051.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
x-ms-office365-filtering-correlation-id: 077b2f32-5505-4cc7-d0d6-08d476298d9f
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081); SRVR:DM2PR0501MB1663;
x-microsoft-antispam-prvs: <DM2PR0501MB1663BAA566074C24D4AF858BAE320@DM2PR0501MB1663.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(60795455431006)(138986009662008)(211936372134217)(146099531331640)(154440410675630);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(6041248)(20161123560025)(20161123562025)(20161123558025)(20161123564025)(20161123555025)(6072148); SRVR:DM2PR0501MB1663; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1663;
x-forefront-prvs: 0260457E99
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2017 22:27:00.5778 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1663
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/pT9o2HO2VVyVdUIgReCNnFLojmY>
Subject: Re: [Int-area] question about xping (draft-bonica-intarea-eping)
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Mar 2017 22:27:05 -0000

Hello Sowmini,

Good point! We addressed this in a previous version of the draft, but accidentally dropped it from the current version.

Our current thinking is:

- If the destination and probed interfaces are in the same VRF, the ICMP Extended Echo Reply message will reflect the state of the probed interface
- If the destination interface is in the general or management VRF and the probed interface is in another VRF, the ICMP Extended Echo Reply message will reflect the state of the probed interface
- Otherwise, the ICMP Extended Echo message will contain an error code indicating that the probed interface does not exist.

I will add this back to the next revision of the draft.

                                              Ron

> -----Original Message-----
> From: Sowmini Varadhan [mailto:sowmini.varadhan@oracle.com]
> Sent: Tuesday, March 28, 2017 5:32 PM
> To: Ron Bonica <rbonica@juniper.net>; Reji Thomas
> <rejithomas@juniper.net>; furry@google.com; chris.lenart@verizon.com
> Cc: int-area@ietf.org; sowmini.varadhan@oracle.com
> Subject: question about xping (draft-bonica-intarea-eping)
> 
> Hi,
> 
> The draft says
>    ".. the destination and probed
>    interfaces must be local to one another (i.e., both interfaces must
>    belong to the same node)."
> 
> However, virtualization raises some questions about how this should work,
> and maybe the draft should nail down some of the details with more clarity.
> 
> What if the probed interface is assigned to a different VRF than the
> destination interface? e.g, What is the expected xping response if I receive
>      # xping-I red0/0/0.0 10.10.10.1
> on interface blue0 in the "blue" vrf, and red0 is in "red" VRF?
> Does the answer change if the destination interface is on the management
> VRF?
> 
> similar question for other forms of virtualization, e.g,, What if the probed
> interface is assigned to a different network-namespace than the destination
> interface of an xping req?
> Does it matter if the above xping is received on the default network
> namespace vs some other network namespace?
> 
> One could argue that all the physical intefaces are owned by the "node"
> (the management VRF? default netns?) but virtual interfaces like tunnels and
> macvlans are a grayer area (unlike physical interfaces, the latter do not
> default back to the mgmt VRF or default netns when the virtual object is
> destroyed, so their ownership is unclear).
> 
> How should xping work in the face of virtual interfaces, e.g., the linux
> macvlan? How does it work when an interface is renamed?
> Will xping allow me to probe for "tun0" or "Portchannel1"?
> 
> --Sowmini