Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-options and RFC4302

"Frank Brockners (fbrockne)" <fbrockne@cisco.com> Mon, 08 April 2019 12:40 UTC

Return-Path: <fbrockne@cisco.com>
X-Original-To: ippm@ietfa.amsl.com
Delivered-To: ippm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2805E1202EA; Mon, 8 Apr 2019 05:40:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=iCVkBoPl; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=H1dtQOmQ
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jm1HugXpVFMu; Mon, 8 Apr 2019 05:40:46 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C961F1203E6; Mon, 8 Apr 2019 05:40:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7090; q=dns/txt; s=iport; t=1554727245; x=1555936845; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=mMlltHxATSz4xX9dXj6pt52qaQ+RwsBlo3xJfq219ZE=; b=iCVkBoPlp+MsiXRhjFU2nF7iokeKWH7s/ILTsaY+4lobrL6D31ttJWVf egsozD9XJoaVGa2ZtK/2Z8QgXb1KxI6BHCjN2TZHTbaG1LcnJd+ohjEic ltksRlLYCC7qzCoFl0erRGg+MvuQCd/qHfr7gTFFvij9AjKUxtxyi69b1 Q=;
IronPort-PHdr: 9a23:UhOxDBduL1eN8h99ROQmTjHJlGMj4e+mNxMJ6pchl7NFe7ii+JKnJkHE+PFxlwGQD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFnpnwd4TgxRmBceEDUPhK/u/YSYgG89BUlJN9HCgOk8TE8H7NBXf
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AIAAA8QKtc/5pdJa1lGQEBAQEBAQEBAQEBAQcBAQEBAQGBUQQBAQEBAQsBgT0pJwNoVCAECycKhASDRwOEUopUgleJOI1ggS6BJANUDgEBGA0HhEACF4VOIjQJDQEBAwEBCQECAQJtHAyFSgEBAQEDAQEhEQwBASUHCwELBAIBCBEEAQEBAgIjAwICAh8GCxQBCAgCBAENBQiDG4FdAxUBAgyiLAKKFHGBL4J5AQEFgTEBAwICgz8NC4IMAwWBCyUBi0YXgUA/gRFGgkw+gQSBFkcBAQOBNymDCDGCJopgD4InmD02CQKIAYg8g16CBYYWjEGLU4YigUSMGAIEAgQFAg4BAQWBTziBVnAVO4JsggqBJAEBgkmFFIU/cgGBJ4x3gS4BgR8BAQ
X-IronPort-AV: E=Sophos;i="5.60,325,1549929600"; d="scan'208";a="256627983"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Apr 2019 12:40:44 +0000
Received: from XCH-ALN-013.cisco.com (xch-aln-013.cisco.com [173.36.7.23]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x38Cei5l017509 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 8 Apr 2019 12:40:44 GMT
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-013.cisco.com (173.36.7.23) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Apr 2019 07:40:43 -0500
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Apr 2019 07:40:43 -0500
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 8 Apr 2019 08:40:42 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mMlltHxATSz4xX9dXj6pt52qaQ+RwsBlo3xJfq219ZE=; b=H1dtQOmQiq4nPNjql8Zr9y/vp5vgn9LK34PV+zQjWfakRMbw4k7E9eBGe9i06+0PuSCeMhq8Ms2hie9sOWANGqEgAohuXvXXeuQhoaNdeS10uVwIk/47Tk2mTAU0byKD+xGRHDsD2lpthIdeU6UKPhtVGK4lMQaQ7DnYflJHKl8=
Received: from MN2PR11MB3629.namprd11.prod.outlook.com (20.178.252.31) by MN2PR11MB3712.namprd11.prod.outlook.com (20.178.253.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.15; Mon, 8 Apr 2019 12:40:41 +0000
Received: from MN2PR11MB3629.namprd11.prod.outlook.com ([fe80::ad94:267b:a12e:1a64]) by MN2PR11MB3629.namprd11.prod.outlook.com ([fe80::ad94:267b:a12e:1a64%2]) with mapi id 15.20.1771.016; Mon, 8 Apr 2019 12:40:41 +0000
From: "Frank Brockners (fbrockne)" <fbrockne@cisco.com>
To: "Shwetha Bhandari (shwethab)" <shwethab@cisco.com>, Brian E Carpenter <brian.e.carpenter@gmail.com>, Mark Smith <markzzzsmith@gmail.com>
CC: 6man WG <ipv6@ietf.org>, "ippm@ietf.org" <ippm@ietf.org>
Thread-Topic: draft-ioametal-ippm-6man-ioam-ipv6-options and RFC4302
Thread-Index: AQHU7ZsQBNpblfNakEeVkMFddv/mRqYxZEuAgAAcGACAALLEAIAAAhew
Date: Mon, 08 Apr 2019 12:40:41 +0000
Message-ID: <MN2PR11MB3629518B1C263D674D907526DA2C0@MN2PR11MB3629.namprd11.prod.outlook.com>
References: <3b1c3ecb-960f-2294-9943-e01a8ef80f27@gmail.com> <CAO42Z2yKUKZYsiAX0UqF7Vg2T2QUc-pE56GzDS3Kf-==OfvzTA@mail.gmail.com> <dc1413a3-61f0-1bb5-cec2-80149adedeab@gmail.com> <21B42A6C-AB87-42C1-B315-4B5FEE770542@cisco.com>
In-Reply-To: <21B42A6C-AB87-42C1-B315-4B5FEE770542@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=fbrockne@cisco.com;
x-originating-ip: [173.38.220.59]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 1a7e69da-e185-4577-6b5c-08d6bc1f693c
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(2017052603328)(7193020); SRVR:MN2PR11MB3712;
x-ms-traffictypediagnostic: MN2PR11MB3712:
x-ms-exchange-purlcount: 3
x-microsoft-antispam-prvs: <MN2PR11MB37121F054B3C59A0BFCA63E2DA2C0@MN2PR11MB3712.namprd11.prod.outlook.com>
x-forefront-prvs: 0001227049
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(376002)(396003)(136003)(366004)(13464003)(189003)(199004)(8676002)(316002)(86362001)(81166006)(14454004)(966005)(81156014)(6116002)(3846002)(106356001)(5660300002)(105586002)(2906002)(478600001)(66066001)(52536014)(9686003)(486006)(6306002)(55016002)(6246003)(53936002)(7696005)(4326008)(305945005)(6506007)(71200400001)(561944003)(11346002)(26005)(25786009)(68736007)(186003)(446003)(99286004)(53546011)(102836004)(76176011)(74316002)(476003)(7736002)(256004)(14444005)(6436002)(229853002)(33656002)(97736004)(8936002)(93886005)(71190400001)(110136005)(54906003); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3712; H:MN2PR11MB3629.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: mvVP0rUyMOLx25ri5OFVRzc2uAJYLmGZKzNjbo/+0LykYh4YxXazBIio1XzhI64yqh/nKWXFHDE1JQKwwKEMWa3YmYXPy7o177U3pHqWElF5H2Yr7jgRNMFXiNWZEcaZ8xQnI5BqFzEuQUDkrYHkWRmqwoFR35ENXJV00y+WskFYWcnXvAmKItaDo+X4fkGArYuwgWUFr4mnpFGK3Go1bpdONu+FLLB9Lx9hXfp0Qn7OQtjOMOS9Om8rHjtUSRxNh5zhZDbJpktjZC5q7DSQTrxxg0aAZo0FiqMf5GXWEeWRXA4tZrvKFTmyukLLqm4WZFFacAkzwrHBibaAlbpBFcHvcpeqclBvSujPHPTpvE15AaIPMzZBd+jjVAeGc76QNGqagik4i+AJrTVYVZL1jGi1fz2k2WkVem7ztB1gTYo=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 1a7e69da-e185-4577-6b5c-08d6bc1f693c
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Apr 2019 12:40:41.3588 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3712
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.23, xch-aln-013.cisco.com
X-Outbound-Node: rcdn-core-3.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ippm/mZEU9w5oypTaWk8wupgApl5DevM>
Subject: Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-options and RFC4302
X-BeenThere: ippm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF IP Performance Metrics Working Group <ippm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ippm>, <mailto:ippm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ippm/>
List-Post: <mailto:ippm@ietf.org>
List-Help: <mailto:ippm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ippm>, <mailto:ippm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Apr 2019 12:40:52 -0000

Cc'ing IPPM as well. 

Frank

> -----Original Message-----
> From: ipv6 <ipv6-bounces@ietf.org> On Behalf Of Shwetha Bhandari (shwethab)
> Sent: Montag, 8. April 2019 14:33
> To: Brian E Carpenter <brian.e.carpenter@gmail.com>; Mark Smith
> <markzzzsmith@gmail.com>
> Cc: 6man WG <ipv6@ietf.org>
> Subject: Re: draft-ioametal-ippm-6man-ioam-ipv6-options and RFC4302
> 
> Just to clarify on the incremental tracing, draft-ietf-ippm-ioam-data
> [https://tools.ietf.org/html/draft-ietf-ippm-ioam-data-05] defines tracing that
> can be achieved in 3 modes:
> 1. Pre-allocated Trace [Section 4.2.1]: that does not change the size of the trace
> option in transit.
> 2. Incremental Trace [Section 4.2.2]: which was designed based on hardware
> prototyping and optimization to insert trace data at fixed offset from the header
> and grow the option in transit.
> 3. We also have another mode of tracing being discussed called Immediate
> export or Post card mode* that has minimal tracing data added to the option.
> 
> Not all encapsulation of IOAM data are expected to recommend/implement all
> the modes of tracing.
> We could not get to the discussion in 6man about incremental trace option,
> please refer to Slide 16 in
> [https://datatracker.ietf.org/meeting/104/materials/slides-104-6man-sessb-in-
> situ-oam-ioam-in-ipv6-and-deployment-considerations-for-in-situ-oam-with-
> ipv6-options-00]. Based on feedback we can decide if this option makes sense in
> v6 representation of IOAM trace data at all.
> We will expand the discussion of incremental tracing and the caveats in the next
> revision of draft-ioametal-ippm-6man-ioam-ipv6-deployment.
> 
> Thanks,
> Shwetha
> 
> * Immediate export/Post card mode tracing : does not require the tracing data
> to be carried within the option in the packet, but has instructions on what to
> collect and export with minimal context for correlation.
> draft-ietf-ippm-ioam-data-05 – Immediate export flag draft-song-ippm-
> postcard-based-telemetry
> 
> On 4/8/19, 7:23 AM, "ipv6 on behalf of Brian E Carpenter" <ipv6-
> bounces@ietf.org on behalf of brian.e.carpenter@gmail.com> wrote:
> 
>     Top-posting for one point:
>     As far as I am aware, RFC8200 does *not* state that the
>     option data length must not be changed in a mutable
>     hop-by-hop option.
> 
>     Regards
>        Brian
> 
>     On 08-Apr-19 12:12, Mark Smith wrote:
>     >
>     >
>     > On Mon., 8 Apr. 2019, 09:38 Brian E Carpenter,
> <brian.e.carpenter@gmail.com <mailto:brian.e.carpenter@gmail.com>> wrote:
>     >
>     >     Hi,
>     >
>     >     As far as I understand the IOAM "Incremental Trace Option" and the
>     >     proposed mapping to IPv6 options, the draft seems to imply that an
>     >     IAOM option might get bigger as the packet flows through multiple
>     >     IAOM-aware routers.
>     >
>     >     (In fact I see that this is confirmed explicitly in
>     >     draft-ioametal-ippm-6man-ioam-ipv6-deployment.)
>     >
>     >     That is in direct conflict with RFC4302 (page 26), since the option
>     >     data length is included in the ICV calculation, even if the option
>     >     data is excluded.
>     >
>     >     I don't know if that is a show stopper, but at the very least the draft
>     >     should state that it will break the IPsec Authentication Header mechanism.
>     >
>     >     It will also potentially break PMTUD. Again, I don't know if that really
>     >     matters, but I think it needs to be stated.
>     >
>     >     I also note that this proposal is another good example for
>     >     draft-carpenter-limited-domains. We're getting to the point where
>     >     most proposals for IPv6 extensions are limited-domain protocols.
>     >
>     >
>     >
>     > And even in a limited domain, if the processing behaviour doesn't comply
> with RFC8200, then it isn't IPv6 anymore.
>     >
>     > Protocol specs aren't just packet formats (of course it would be much easier
> for everybody if they were, but then they aren't a protocol - an agreement on
> behaviour.)
>     >
>     >
>     >
>     >     Regards
>     >        Brian Carpenter
>     >
>     >     --------------------------------------------------------------------
>     >     IETF IPv6 working group mailing list
>     >     ipv6@ietf.org <mailto:ipv6@ietf.org>
>     >     Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>     >     --------------------------------------------------------------------
>     >
> 
>     --------------------------------------------------------------------
>     IETF IPv6 working group mailing list
>     ipv6@ietf.org
>     Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>     --------------------------------------------------------------------
> 
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------