Re: [Int-area] Call for adoption of draft-pignataro-intarea-gre-ipv6-01

Ronald Bonica <rbonica@juniper.net> Tue, 09 December 2014 00:11 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DA541A02BE for <int-area@ietfa.amsl.com>; Mon, 8 Dec 2014 16:11:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.902
X-Spam-Level:
X-Spam-Status: No, score=-0.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_SUMOF=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id euhQzr9NPfQq for <int-area@ietfa.amsl.com>; Mon, 8 Dec 2014 16:11:24 -0800 (PST)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0126.outbound.protection.outlook.com [65.55.169.126]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A4461A0016 for <int-area@ietf.org>; Mon, 8 Dec 2014 16:11:24 -0800 (PST)
Received: from CO1PR05MB442.namprd05.prod.outlook.com (10.141.73.146) by CO1PR05MB489.namprd05.prod.outlook.com (10.141.71.144) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 9 Dec 2014 00:11:22 +0000
Received: from CO1PR05MB442.namprd05.prod.outlook.com (10.141.73.146) by CO1PR05MB442.namprd05.prod.outlook.com (10.141.73.146) with Microsoft SMTP Server (TLS) id 15.1.31.17; Tue, 9 Dec 2014 00:11:20 +0000
Received: from CO1PR05MB442.namprd05.prod.outlook.com ([169.254.13.233]) by CO1PR05MB442.namprd05.prod.outlook.com ([169.254.13.233]) with mapi id 15.01.0031.000; Tue, 9 Dec 2014 00:11:20 +0000
From: Ronald Bonica <rbonica@juniper.net>
To: Joe Touch <touch@isi.edu>, "int-area@ietf.org" <int-area@ietf.org>
Thread-Topic: [Int-area] Call for adoption of draft-pignataro-intarea-gre-ipv6-01
Thread-Index: AdAP5IxQ9j4gb0leTMSUngJtm1Sc2QADW0cAAC3Wm+AAlCybgAAHTkVQAArlLAAAACaNMA==
Date: Tue, 09 Dec 2014 00:11:19 +0000
Message-ID: <CO1PR05MB442F9545B7F1DE8E6542CCBAE650@CO1PR05MB442.namprd05.prod.outlook.com>
References: <CO1PR05MB4422E21CEEA9590DD5024EDAE780@CO1PR05MB442.namprd05.prod.outlook.com> <5480AAF2.9060407@isi.edu> <CO1PR05MB442A60E064CE000FE3E914EAE790@CO1PR05MB442.namprd05.prod.outlook.com> <5485C0F1.5050207@isi.edu> <CO1PR05MB44279B344B1299AD4799539AE640@CO1PR05MB442.namprd05.prod.outlook.com> <54863B16.6010406@isi.edu>
In-Reply-To: <54863B16.6010406@isi.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [66.129.241.13]
x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB442;UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB442;
x-forefront-prvs: 0420213CCD
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(24454002)(479174003)(377454003)(189002)(199003)(51704005)(31966008)(4396001)(86362001)(92566001)(66066001)(54206007)(551984002)(64706001)(20776003)(561944003)(21056001)(74316001)(54606007)(33656002)(76176999)(54356999)(101416001)(19580405001)(19580395003)(50986999)(76576001)(2656002)(87936001)(97736003)(106356001)(62966003)(68736005)(40100003)(107886001)(122556002)(230783001)(102836002)(99286002)(107046002)(93886004)(120916001)(46102003)(105586002)(77156002)(99396003); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB442; H:CO1PR05MB442.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:CO1PR05MB489;
X-OriginatorOrg: juniper.net
Archived-At: http://mailarchive.ietf.org/arch/msg/int-area/qFPX1kPD6b1Z4nyoPXq4JzrZeTI
Subject: Re: [Int-area] Call for adoption of draft-pignataro-intarea-gre-ipv6-01
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Dec 2014 00:11:27 -0000

Joe,

This document UPDATES RFC 2784.  As such, it can be viewed as deltas to RFC 2784.

The introduction to RFC 2784 holds the answer to your question. I include its text below. The final sentence answers your question.

                                                                                                 Ron

Introduction

   A number of different proposals [RFC1234, RFC1226] currently exist
   for the encapsulation of one protocol over another protocol. Other
   types of encapsulations [RFC1241, RFC1479] have been proposed for
   transporting IP over IP for policy purposes. This memo describes a
   protocol which is very similar to, but is more general than, the
   above proposals.  In attempting to be more general, many protocol
   specific nuances have been ignored. The result is that this proposal
   may be less suitable for a situation where a specific "X over Y"
   encapsulation has been described.  It is the attempt of this protocol
   to provide a simple, general purpose mechanism which reduces the
   problem of encapsulation from its current O(n^2) size to a more
   manageable size. This memo purposely does not address the issue of
   when a packet should be encapsulated.  This memo acknowledges, but
   does not address problems such as mutual encapsulation [RFC1326].

   In the most general case, a system has a packet that needs to be
   encapsulated and delivered to some destination.  We will call this
   the payload packet.  The payload is first encapsulated in a GRE
   packet.  The resulting GRE packet can then be encapsulated in some
   other protocol and then forwarded.  We will call this outer protocol
   the delivery protocol. The algorithms for processing this packet are
   discussed later.

   Finally this specification describes the intersection of GRE
   currently deployed by multiple vendors.


> -----Original Message-----
> From: Joe Touch [mailto:touch@isi.edu]
> Sent: Monday, December 08, 2014 6:58 PM
> To: Ronald Bonica; int-area@ietf.org
> Subject: Re: [Int-area] Call for adoption of draft-pignataro-intarea-gre-ipv6-
> 01
> 
> Hi, Ron,
> 
> The first - and IMO, only important - question is whether this doc is supposed
> to document what SHOULD BE or what IS.
> 
> If you're documenting what IS, there should be no question that any of us
> need to answer - get a few devices, see what they do and report.
> 
> If we're talking about that these devices ought to do, we have a lot more
> work to do, and I don't think it's useful to evaluate any one aspect
> individually until the doc has been adopted by the WG - which, IMO, ought to
> include a clear agreement on the scope of the doc.
> 
> Since we don't have that, I don't agree that wordsmithing is productive yet.
> 
> So IMO this is something to put a pin in and circle back to once we know the
> scope of the doc.
> 
> Joe
> 
> On 12/8/2014 3:07 PM, Ronald Bonica wrote:
> > Joe,
> >
> > I get your point. How does the following text sound?
> >
> > OLD>
> > Following guidance provided in Section 5 of [RFC2460], GRE ingress nodes
> SHOULD implement PMTUD, in order to discover and take advantage  of
> PMTUs greater than the IPv6 required minimum (1280 octets). However, a
> GRE ingress node MAY simply restrict itself to sending packets no larger than
> 1280 octets, and omit implementation of PMTUD.
> > <OLD
> >
> > NEW>
> >
> > 5. MTU Considerations
> >
> > "IPv6 requires that every link in the internet have an MTU of 1280 octets or
> greater. On any link that cannot convey a 1280-octet packet in one piece,
> link-specific fragmentation and reassembly must be provided at a layer
> below IPv6" [RFC 2460].
> >
> > IP adjacencies formed by GRE over IPv6 share this requirement. The IP
> adjacency MUST have an MTU of 1280 octets or greater. This requirement is
> fulfilled if all permissible routes between the GRE ingress and GRE egress
> have PMTU greater than or equal to the sum of the following:
> >
> > - 1280
> > - GRE header length
> > - GRE delivery header length
> >
> > It is also satisfied if the following procedure is executed:
> >
> > - the GRE ingress encapsulates the payload in a single GRE header and
> > IPv6 delivery header
> > - the GRE ingress divides the IPv6 delivery packet into fragments no
> > larger than 1280 octets
> > - the GRE egress reassembles the IPv6 delivery packet
> > - the GRE egress removes the GRE header and IPv6 delivery header <NEW
> >
> >                                                                Ron
> >
> >
> >
> >> -----Original Message-----
> >> From: Joe Touch [mailto:touch@isi.edu]
> >> Sent: Monday, December 08, 2014 10:17 AM
> >> To: Ronald Bonica; int-area@ietf.org
> >> Subject: Re: [Int-area] Call for adoption of
> >> draft-pignataro-intarea-gre-ipv6-
> >> 01
> >>
> >> Hi, Ron (et al.),
> >>
> >> The proposed change highlights exactly the problem: only minimal,
> >> presumably transient versions of IPv6 should be limited to sending
> >> packets no larger than 1280. I.e., only those versions are supposed
> >> to omit source fragmentation.
> >>
> >> Later in RFC2460 support for 1500-byte fragment reassembly is
> >> required, so it's not appropriate to quote this section in isolation
> >> as the sole recommendation for GRE.
> >>
> >> Joe
> >>
> >> On 12/5/2014 8:38 AM, Ronald Bonica wrote:
> >>> Joe,
> >>>
> >>> Would you agree to the following change?
> >>>
> >>> OLD>
> >>> Following guidance provided in Section 5 of [RFC2460], GRE ingress
> >>> nodes
> >> SHOULD implement PMTUD, in order to discover and take advantage of
> >> PMTUs greater than the IPv6 required minimum (1280 octets).  However,
> >> a GRE ingress node MAY simply restrict itself to sending  packets no
> >> larger than
> >> 1280 octets, and omit implementation of PMTUD.
> >>> <OLD
> >>>
> >>> NEW>
> >>> In as much as the GRE ingress is an IPv6 node, the following
> >>> guidance from
> >> RFC 2460 applies:
> >>>
> >>> " It is strongly recommended that IPv6 nodes implement Path MTU
> >>>    Discovery [RFC-1981], in order to discover and take advantage of path
> >>>    MTUs greater than 1280 octets.  However, a minimal IPv6
> >>>    implementation (e.g., in a boot ROM) may simply restrict itself to
> >>>    sending packets no larger than 1280 octets, and omit implementation
> >>>    of Path MTU Discovery."
> >>>
> >>> <NEW
> >>>
> >>>> -----Original Message-----
> >>>> From: Joe Touch [mailto:touch@isi.edu]
> >>>> Sent: Thursday, December 04, 2014 1:42 PM
> >>>> To: Ronald Bonica; int-area@ietf.org
> >>>> Subject: Re: [Int-area] Call for adoption of
> >>>> draft-pignataro-intarea-gre-ipv6-
> >>>> 01
> >>>>
> >>>>
> >>>>
> >>>> On 12/4/2014 9:05 AM, Ronald Bonica wrote:
> >>>> ...
> >>>>> [RPB]
> >>>>> The GRE ingress in an IPv6 source. As per RFC 2460, an IPv6 source
> >>>>> MUST either execute PMTUD procedures or restrict itself to sending
> >>>>> packets no longer than 1280 octets. How can you argue with that?
> >>>>
> >>>> RFC2460 includes sending IPv6 packets up to 1500 bytes that are
> >>>> reassembled at the destination IP address - in the case of a
> >>>> tunnel, that's
> >> the egress.
> >>>>
> >>>> Each *fragment* must be no larger than 1280, agreed.
> >>>>
> >>>> PMTUD is recommended, not required (it's not a MUST).
> >>>>
> >>>> Joe