Re: [Iotops] Automatically connecting to stub networks...

Toerless Eckert <tte@cs.fau.de> Fri, 04 December 2020 08:57 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: iotops@ietfa.amsl.com
Delivered-To: iotops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 022313A135B; Fri, 4 Dec 2020 00:57:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.869
X-Spam-Level:
X-Spam-Status: No, score=-0.869 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.779, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9NNnqD5Y6JNh; Fri, 4 Dec 2020 00:57:46 -0800 (PST)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2457C3A1163; Fri, 4 Dec 2020 00:57:45 -0800 (PST)
Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 9402A548053; Fri, 4 Dec 2020 09:57:38 +0100 (CET)
Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id 8CF86440059; Fri, 4 Dec 2020 09:57:38 +0100 (CET)
Date: Fri, 04 Dec 2020 09:57:38 +0100
From: Toerless Eckert <tte@cs.fau.de>
To: otroan@employees.org
Cc: Ted Lemon <mellon@fugue.com>, 6MAN <6man@ietf.org>, iotops@ietf.org
Message-ID: <20201204085738.GZ44833@faui48f.informatik.uni-erlangen.de>
References: <695953.1606952552@dooku> <B989299A-ED3C-4205-A4E2-DA080F574B33@fugue.com> <20201203174901.GW44833@faui48f.informatik.uni-erlangen.de> <36EA3F9D-A79D-4BC0-B894-54B7D3054476@fugue.com> <20201204064930.GY44833@faui48f.informatik.uni-erlangen.de> <B9DC56CD-E2A7-469C-9E8F-596554DA1A80@employees.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <B9DC56CD-E2A7-469C-9E8F-596554DA1A80@employees.org>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/iotops/KrUlbwzTifQHBZNhTbsh22KmaI0>
Subject: Re: [Iotops] Automatically connecting to stub networks...
X-BeenThere: iotops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IOT Operations <iotops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/iotops>, <mailto:iotops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/iotops/>
List-Post: <mailto:iotops@ietf.org>
List-Help: <mailto:iotops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/iotops>, <mailto:iotops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Dec 2020 08:57:49 -0000

On Fri, Dec 04, 2020 at 09:19:13AM +0100, otroan@employees.org wrote:
> Question, what are the requirements here?

Indeed. Lets first focus on that.

> A) Stub network. Is it possible to restrict the topology to a single root/single level of leafes?

I would fear the current business cases might be fine with such a limitation,
but i for once would find it dissatisfactory if the protocol solution
would be limited to just one level.

> It prohibits multi-homing. What about the case where a node is attached to the stub with a hypervisor and VMs requiring addressing?
> Is sending all traffic via the root acceptable? Instead of short-cutting between stub routers?
> 
> B) Is it possible to restrict the solution to the site having been delegated enough address space?
> Or do you need to handle the cases where the site has:
> a) not received enough /64s to number all links
> b) have only been delegated a single /64
> c) have only a shared /64
> d) have only a single address

Not trying to answer all these points, but:

To me the most simple model is around the following constraints/requirements:
  
      stub-router ----link --- infra-router

a) stub-router and infra-router are potentially different admin, aka:
   we do not want to use signaling between them such as a typical
   link-state-routing protocol where you can not create good trust-domain
   boundries within the topology. Dijkstra protos are a bit better, but
   i think no one has tried to come up with good definitions for "internal"
   trust boundaries.

b) infra-router hands out prefix(es) to stub-router. It shouldn't have
   anything to say about how stub-router uses them. So stub-router could
   subtend sub-prefixes as it sees fit. Infra router does NOT accept
   prefixes back from stub-router. 

Not sure yet about similar rules for the naming / services for DNS-SD,
but there may need to be some similar rules.

And from service provider use cases, i remember various other DHCP options
that infra-router may need to see proxied across stubb-router to clients
if/when clients rely on DHCP opions instead of DNS-SD to discover specific
services. Which for example in the home a lot of the service-provider
equipment such as IPTV STBs expects to be able to do.

Cheers
    Toerless

> 
> Cheers,
> Ole
> 



-- 
---
tte@cs.fau.de