Re: IPv6 header insertion in a controlled domain

[Fernando Gont <[e-mail]>]

On 9/12/19 17:22, Gyan Mishra wrote:
> 
> I would like to make a point which I tried to do earlier on this thread
> that with SRv6 any flow entering the domain from an external CE device
> is “encapsulated” upon entering the domain as an overlay BGP service
> instance and then in the underlay is hop by hop routed based on explicit
> segment list from SRH header inserted on the ingress PE node of the SR
> domain.
> 
> What I am trying to say is that we had asked Spring to do encapsulation
> since in flight eh insertion violated 8200 IP6 spec.  It appears the
> fact is that encapsulation is part of the SRv6 spec for flow entering
> the SR domain from a customer CE external device.
> 
> So now if we have Spring do another encapsulation it would be a double
> encapsulation.
> 
> In another thread with Adrian I have asked a detailed questions related
> to the the TI-LFA 2nd EH header which I believe TI-LFA behavior is
> similar to MPLS ldp remote LFA when with MPLS a label is added at the
> PLR junction point.  So with TI-LFA I believe an encapsulation has to
> happen for that to work and must already be in the specification.  I am
> still researching to find the spec where that is stated.
> 
> 
> So in a nutshell it is very possible we maybe good to go and SRv6 is
> abiding by the IPv6 rules with eh insertion.
> 
> See draft below.  
> 
> https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-26 
> <https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header-26#section-3>
> 
> I had posted a draft from BESS WG that mentions the encapsulation as
> part of the SRv6 spec.
> 
> So it does appear that SRv6 is following adherence to IPV6 specification.

What do you mean by SRv6? draft-ietf-6man-segment-routing-header?
Something else?

If you meant draft-ietf-6man-segment-routing-header, and without
re-reading now, I'd probably agree.

Now, if you mean network-programming, then the very words "Penultimate
segment popping" should probably ring some bells. Because if you are
popping anything at any place other than the last segment, you are
violating RFC8200.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492