Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-deployment-00 feedback (Re: v6 option types for IOAM data fields)
Mikael Abrahamsson <swmike@swm.pp.se> Tue, 02 April 2019 06:05 UTC
Return-Path: <swmike@swm.pp.se>
X-Original-To: ippm@ietfa.amsl.com
Delivered-To: ippm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 553FE120049; Mon, 1 Apr 2019 23:05:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.3
X-Spam-Level:
X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i5zlUfqZA_Lt; Mon, 1 Apr 2019 23:05:46 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17CE7120013; Mon, 1 Apr 2019 23:05:46 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 8C6A6B2; Tue, 2 Apr 2019 08:05:43 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1554185143; bh=Bths6+lqYYE2UI1W6mHzIkWjCcn0OJ8Wj/zrNnCoT/Y=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=WgACF7u6weoqqPK6M3j1QOMJy1mpLc5P9nQOtB1JUbWS6+q2ObCEZy2JHSJ9og3eh zP9EjUWMAUejFuH2/XS/2ksP2ELiDQVtQlaCifnNAyfxQ4eWvt2Ea3CpGBOPcldcBz QzWQTvOJ7nxP7fr3PRCQ6+VaalWDSA0gYj0wkMxQ=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 89059B1; Tue, 2 Apr 2019 08:05:43 +0200 (CEST)
Date: Tue, 02 Apr 2019 08:05:43 +0200
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: "Frank Brockners (fbrockne)" <fbrockne@cisco.com>
cc: Mark Smith <markzzzsmith@gmail.com>, "C. M. Heard" <heard@pobox.com>, 6man WG <ipv6@ietf.org>, "ippm@ietf.org" <ippm@ietf.org>
In-Reply-To: <BN8PR11MB36181C47785968D8FCA2DED9DA550@BN8PR11MB3618.namprd11.prod.outlook.com>
Message-ID: <alpine.DEB.2.20.1904020744260.3490@uplift.swm.pp.se>
References: <CACL_3VGxyn-PYosFsKPVdd8C=P5AbE6HD1zrimHKuh2MPkhnuQ@mail.gmail.com> <505272eac2dd44fa891d4d36d14da9af@XCH-RCD-008.cisco.com> <CAO42Z2wGMzc_RT=eWTx9Ve-5reS0nCWiteGOuE16=MB4Fg8mkg@mail.gmail.com> <f50040ab52d04867b9a5cefa1c3131c3@XCH-RCD-008.cisco.com> <CAO42Z2zgguekybwVuCh8Az3mK8gHp292BYnWYhJq-8KEyfKzOA@mail.gmail.com> <7ea9049fe6f44a40aefe4801bd796322@XCH-RCD-008.cisco.com> <CAO42Z2y5TS1+8YxNsr=BKz5v8-ZPTiO-M7CU2k6FzNqVZoU4VA@mail.gmail.com> <CY4PR11MB1335960AD9BF9A4B990F7E10DA4A0@CY4PR11MB1335.namprd11.prod.outlook.com> <CAO42Z2xqq=uksNQPxvF_CRSxf1V_MADbFurzW4hqQW0v478cyw@mail.gmail.com> <DM6PR11MB36254EAC97ACF07F5BAD43CADA5F0@DM6PR11MB3625.namprd11.prod.outlook.com> <DM6PR11MB362528DB0EADA21493CC49A3DA590@DM6PR11MB3625.namprd11.prod.outlook.com> <alpine.DEB.2.20.1904011139550.3490@uplift.swm.pp.se> <BN8PR11MB36181C47785968D8FCA2DED9DA550@BN8PR11MB3618.namprd11.prod.outlook.com>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ippm/r7bgAMASFfyQDt0IfeCxdxL3mp8>
Subject: Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-deployment-00 feedback (Re: v6 option types for IOAM data fields)
X-BeenThere: ippm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF IP Performance Metrics Working Group <ippm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ippm>, <mailto:ippm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ippm/>
List-Post: <mailto:ippm@ietf.org>
List-Help: <mailto:ippm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ippm>, <mailto:ippm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Apr 2019 06:05:49 -0000
On Mon, 1 Apr 2019, Frank Brockners (fbrockne) wrote: > ...FB: There is obviously no easy answer. Couple of thoughts: > * IOAM is considered a "domain specific" feature (see > draft-ietf-ippm-ioam-data-05, section 3). Routers in the IOAM domain > should be IOAM capable. And IMHO, we should add a statement to > draft-ioametal-ippm-6man-ioam-ipv6-deployment that an implementation of > IOAM MUST ensure "C1". > > * That said, there can be situations, where C1 cannot be achieved, e.g. > consider a network which does ECMP scheduling based on packet length. > > * What one could consider - and which is one suggested deployment model > - is that by default IOAM data fields are added to _all_ customer > packets. The decapsulating node would decide whether the IOAM > information contained in a packet would be used (and exported) or not. > That way one would not need to deal with the situation that some traffic > carries IOAM while other does not - and might thus be treated > differently. Yes, I think this is the only way. Is there a risk that intermediate routers would not be IOAM capable? I think the C1 requirement is really really hard to fulfil and I'm also afraid that adding the IOAM header will actually make ECMP stop working on some platforms (because they would not have the capability to look deep enough into the packet to find L4 information, so it'll go back to 2 tuple ECMP instead of 5 tuple. But this question can only be answered by people with deep NPU knowledge... > ...FB: The comparison to MPLS is interesting. How often do MPLS packets > leak and cause harm? For IOAM, > draft-ioametal-ippm-6man-ioam-ipv6-options-02 proposes a deployment > model similar to what we do for MPLS: Unless an interface is explicitly > configured for IOAM, packets with IOAM data fields MUST be dropped. > Hence leakage would only occur, if we have a clearly misbehaving router > which violates this rule. Similar to you, I'd also greatly appreciate > any pointers to research on how common MPLS leaked packets are. When it comes to "cause harm" I imagine there are (at least) two ways to cause harm, one is privacy/secrecy/security loss and the other one is actual operational loss. I know of bugs where labeled packets went the wrong way and caused them to be lost, I've also seen bugs where bugs caused traffic to "hop" between VRFs in MPLS VPN (or to "global" VRF). I don't have numbers on this though. Depending on the deployment scenario, it might make sense to make IOAM packets not valid for non-IOAM aware devices (basically encap entire packet/payload), but that might be a problem for intermediate non-IOAM nodes then. This would affect the ECMP requirement. I can see cases where one would operationally turn on IOAM for some customers traffic and then see the problem go away because now ECMP changed. > ...FB: One idea that Shwetha came up with to identify the source AS of a > leaked packet, would be to add a new new IOAM E2E option - as proposed > in section 5.1.1 bullet 2 of > draft-ioametal-ippm-6man-ioam-ipv6-deployment-01. Yes, that'd solve that problem. How much has the silicon people been involved so far in the design of the headers? What is the current thinking of amount of data going into the IOAM header? Considering things like trace options etc it seems to me the header can grow quite large? To satisfy the ECMP requirement what about putting the IOAM information as a trailer behind the regular payload? Or is there a problem for the hw to manipulate information that far into the packet (I also imagine this will considerably lower the forwarding performance of IOAM packets on IOAM aware platforms). -- Mikael Abrahamsson email: swmike@swm.pp.se
- [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields C. M. Heard
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Mark Smith
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Mark Smith
- Re: [ippm] v6 option types for IOAM data fields Tom Herbert
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Mark Smith
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Tom Herbert
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Tom Herbert
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- [ippm] draft-ioametal-ippm-6man-ioam-ipv6-deploym… Mark Smith
- Re: [ippm] v6 option types for IOAM data fields Rajiv Asati (rajiva)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Rajiv Asati (rajiva)
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Rajiv Asati (rajiva)
- Re: [ippm] v6 option types for IOAM data fields Tom Herbert
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] v6 option types for IOAM data fields Frank Brockners (fbrockne)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Frank Brockners (fbrockne)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Mikael Abrahamsson
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Frank Brockners (fbrockne)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Mikael Abrahamsson
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Mikael Abrahamsson
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Frank Brockners (fbrockne)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- [ippm] 答复: draft-ioametal-ippm-6man-ioam-ipv6-dep… Pengshuping (Peng Shuping)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Barak Gafni
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Pengshuping (Peng Shuping)
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Mark Smith
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Jai Kumar
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Mark Smith
- Re: [ippm] draft-ioametal-ippm-6man-ioam-ipv6-dep… Tom Herbert