Re: Comments about draft-dunbar-lsr-5g-edge-compute, -idr-5g-edge-compute-app-meta-data and -6man-5g-edge-compute-sticky-service

Gyan Mishra <hayabusagsm@gmail.com> Sat, 13 November 2021 05:37 UTC

Return-Path: <hayabusagsm@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B37FF3A114F; Fri, 12 Nov 2021 21:37:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.087
X-Spam-Level:
X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kdNyWaSxXFql; Fri, 12 Nov 2021 21:37:10 -0800 (PST)
Received: from mail-pl1-x635.google.com (mail-pl1-x635.google.com [IPv6:2607:f8b0:4864:20::635]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFC3D3A114E; Fri, 12 Nov 2021 21:37:10 -0800 (PST)
Received: by mail-pl1-x635.google.com with SMTP id v20so10098487plo.7; Fri, 12 Nov 2021 21:37:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=qlT7AF1RsOPqM/E/IWS43df7xoWw6W/rJYumgzR37fw=; b=RCTFQPv4siVxh4L+4nQ2aBiC68fYaqvduT+9ssSFCB3Wr0GVt1xAVrGOenrvJSVpJt /J6MaQWv5juKvZmrobu/6df6eTU4nhQ1Wj9pyO0LQ0zymJQlBELdepLarbxD3Ae0KorG p8Cwm8IocZBvRpQhaoWuterl7DyJaN9UMGjZn9rIF5SCRUJifAn6xnl6BuTERlCNnuOB JBsDp/i0DgM3dMoCAqrtdW53gd2+8NSrGFuCvDCbIVCIzfstvu9WPe1wNFZBC1L/1fGQ eRWfVCQw2MMCkCrACRtiIe8KHF9Jg+CBvNLX+Mr5kuKjYwtxD1BfArCgdapDRIklbC2u twfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=qlT7AF1RsOPqM/E/IWS43df7xoWw6W/rJYumgzR37fw=; b=LW6CaX1fRvWM/Qc7iFnpx/g1tVtAzgGhLHvC+9L+LccTrS/kqfqCRj9/NFm2gfLMoF mWDGn6jlgig3Ph9tlWjrdNoB6c3hxnrRd2LgkBMF9AeIeZf5mxRzyJB4ZK60VfqWpG4w fqxvirR4EYQ31DDIWSU3GAgtjdX5j+4XyvGQ8qz3B+AtBsCyqr+2owPWfKICtACACl6L KSeI/kUzcIcZNJiMxLVuY3TCyNymjbGSYYToS7RgkFURzk7UH+ghnFtBGsJix483X/3+ k4qXJ3eJJ8JVG4zTc9a30o8p/SVk9W+t0i47dQmONedbpgIhjppqglgxT3J3VTeJAZfE oMPg==
X-Gm-Message-State: AOAM5300Uh7f01x6+iz3AoB7UDeSlnkPk7HMfJT/FBkfiqEAI1tr8i9l w7xWsPmVn8/T/wQs811nTyr4icYAEE9rm2xz7O5Ek66l
X-Google-Smtp-Source: ABdhPJxlwit9mWDtz+H3MDqdk6CHOorok0PrQizFeaVYVTI2UQmINo2nQx00BYOxaHAIfKgG6tbJrEN4OHRbU2FP2UM=
X-Received: by 2002:a17:90b:4f85:: with SMTP id qe5mr24501827pjb.167.1636781829014; Fri, 12 Nov 2021 21:37:09 -0800 (PST)
MIME-Version: 1.0
References: <BYAPR05MB5654A1148F1946DD4825D116D4949@BYAPR05MB5654.namprd05.prod.outlook.com> <CO1PR13MB4920FBF72B01F744D949D47F85949@CO1PR13MB4920.namprd13.prod.outlook.com> <CO1PR13MB49207124E2E45E7241CE4E5885949@CO1PR13MB4920.namprd13.prod.outlook.com>
In-Reply-To: <CO1PR13MB49207124E2E45E7241CE4E5885949@CO1PR13MB4920.namprd13.prod.outlook.com>
From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Sat, 13 Nov 2021 00:26:11 -0500
Message-ID: <CABNhwV0tUX4ueRkeHDu_DunxFx=vKnW56zNPLNWMCu0TufJ0zg@mail.gmail.com>
Subject: Re: Comments about draft-dunbar-lsr-5g-edge-compute, -idr-5g-edge-compute-app-meta-data and -6man-5g-edge-compute-sticky-service
To: Linda Dunbar <linda.dunbar@futurewei.com>
Cc: IPv6 List <ipv6@ietf.org>, "Jeffrey (Zhaohui) Zhang" <zzhang@juniper.net>, "idr@ietf. org" <idr@ietf.org>, "lsr@ietf.org" <lsr@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007e462c05d0a4f7c6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/ESbUDqA-5kr5o4xZekKomIKvxv4>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Nov 2021 05:37:16 -0000

Hi Linda and Jeffrey

I have worked on designs in the using Anycast application VIPs for fast
failover recovery and reading through my notes  what we found was that
using Anycast failover from network fault recovered much better instantly
based on Core / DC convergence for IP application traffic as compared to
using DNS GEO load balancing relying on DNS to provide a different address
in failover scenario is much slower and resulted in

As Jeffrey pointed out most all router vendors support flow based ECMP load
balancing default and not per packet to avoid out of order packets issues
and the session does have affinity to the path for the duration of the
session remains on the hashed path.  So when the application VIP from the
primary DC fails the session is reset TCP RST and the application flow
reestablished on the next closest proximity data center.

So the issue that arise with Anycast design to be careful of is the core
exist point distance to each DC exit point from the core must have enough
of a variation in the metric or will result in session instability and
flapping as traffic patterns change or links within the core failover the
session may get constantly reset. Recommend that within region or close
proximity to not rely on Anycast as that can result in instability.

This is described in detail in the link below and matches my Anycast design
experiences.

https://weborigin.cachefly.com/anycast-think-before-you-talk-part-ii/

In Linda’s 5G DC POP architecture as it’s regional and nominal metric
difference or ECMP paths iBGP tie breaker or iBGP ECMP load sharing per
flow load balancing in the core the problem is with the UE flipping between
DC POPs TCP reset upon DC POP failure however if there are multiple DC POP
ECMP path and multiple DC failures occur the session could be reset a few
times.  As the flow has affinity to the path it’s on flow based load
balancing only when the ECMP hashed path used for the DC flow fails would
the TCP session reset and fail to alternate POP but still should be
instantaneously.

The link below talks about the issues related to relying on application
server and content load balancers to use stickiness and issues as it relies
on a cookie sent to the browser and in some cases the browser could block
the cookie so has to accepted by the client.


https://stackoverflow.com/questions/53703163/aws-alb-sticky-cookie-issue

This link talks about Citrix Netscaler load balancer which I am familiar
with the issues related to persistence for a flow and can yield uneven load
balancing over the core links polarization of flows.


   -

   Persistence – When enabled, persistence (by definition) creates uneven
   loading because the NetScaler appliance must direct requests from a
   specific client to a specific server. Only unique or expired clients get
   load balanced according to the load balancing method.


https://support.citrix.com/article/CTX120542


Kind Regards

Gyan

On Thu, Nov 11, 2021 at 12:44 PM Linda Dunbar <linda.dunbar@futurewei.com>
wrote:

> Forget to mention:
>
> The local DNS to schedule traffic from different ingress routers to
> different Load Balancers can become a bottleneck if network condition is
> not leveraged.
>
>
> Linda
>
> _____________________________________________
> *From:* Linda Dunbar
> *Sent:* Thursday, November 11, 2021 9:18 AM
> *To:* Jeffrey (Zhaohui) Zhang <zzhang@juniper.net>; lsr@ietf.org; 'IPv6
> List' <ipv6@ietf.org>; 'idr@ietf. org' <idr@ietf.org>
> *Subject:* RE: Comments about draft-dunbar-lsr-5g-edge-compute,
> -idr-5g-edge-compute-app-meta-data and -6man-5g-edge-compute-sticky-service
>
>
> Jeffrey,
>
> You are not alone in thinking the problem is best solved at "app layer".
> My sister working for Cloud Operator's Layer4 & Layer 7 Load balancer
> division debated with me all the time.
>
> They can:
> - deploy many load balancers, each managing traffic among many active
> servers.
> - local DNS to schedule traffic from different ingress routers to
> different Load Balancers
>
> As pointed in this NANOG presentation:
> *https://pc.nanog.org/static/published/meetings/NANOG77/2082/20191030_Wang_An_Architecture_Of_v1.pdf*
> <https://pc.nanog.org/static/published/meetings/NANOG77/2082/20191030_Wang_An_Architecture_Of_v1.pdf>
>
> << OLE Object: Picture (Device Independent Bitmap) >>
> Leveraging the network condition to optimize traffic can solve those
> issues.
>
> From the forwarding perspective, it is same as introducing TE metrics into
> Path computation. When TE metrics, bandwidth, etc. change, the path change
> accordingly.
>
> Linda Dunbar
>
> -----Original Message-----
> From: Jeffrey (Zhaohui) Zhang <zzhang@juniper.net>
> Sent: Thursday, November 11, 2021 8:08 AM
> To: Linda Dunbar <linda.dunbar@futurewei.com>; lsr@ietf.org; 'IPv6 List' <
> ipv6@ietf.org>; 'idr@ietf. org' <idr@ietf.org>
> Subject: Comments about draft-dunbar-lsr-5g-edge-compute,
> -idr-5g-edge-compute-app-meta-data and -6man-5g-edge-compute-sticky-service
>
> Hi,
>
> I did not have time to comment during today's LSR session so I am bringing
> this to the list. I am also adding IDR and 6man lists because all these
> three drafts are about the same use case.
>
> There were a long email discussion on the 6man draft here:
> https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailarchive.ietf.org%2Farch%2Fmsg%2Fipv6%2F4rw-pBcNZN7mzkArjUtVUzLcQJU%2F&amp;data=04%7C01%7Clinda.dunbar%40futurewei.com%7C36cfe5852ea24a8f730108d9a51ca3bf%7C0fee8ff2a3b240189c753a1d5591fedc%7C1%7C0%7C637722364713687643%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&amp;sdata=ILSLOrYcIROMHb%2FxCI2AqMHm%2FAHQA6BXGoJvArZaj30%3D&amp;reserved=0
> back in March.
>
> There are basically two problems here:
>
> 1. which server to pick
> 2. how to stick to the same server when a UE (mobile device) moves
>
> The long discussion on the 6man list is mainly focused on #2. I don't know
> if we can say there was a conclusion, but some people (me included) believe
> that both problems are best solved at "app layer" instead of routing layer
> - just put a load balancer next to the 5G UPF.
>
> Jeffrey
>
> -----Original Message-----
> From: Jeffrey (Zhaohui) Zhang
> Sent: Thursday, March 25, 2021 3:46 PM
> To: Linda Dunbar <linda.dunbar@futurewei.com>; Kaippallimalil John <
> john.kaippallimalil@FUTUREWEI.COM>; IPv6 List <ipv6@ietf.org>; idr@ietf.
> org <idr@ietf.org>
> Subject: questions about draft-dunbar-idr-5g-edge-compute-app-meta-data
> and draft-dunbar-6man-5g-edge-compute-sticky-service
>
> Hi Linda, John,
>
> I have the following questions.
>
> The two related drafts listed the following three problems respectively:
>
>       1.3. Problem#1: ANYCAST in 5G EC Environment.............. 6
>       1.4. Problem #2: Unbalanced Anycast Distribution due to UE
> Mobility.................................................. 7
>       1.5. Problem 3: Application Server Relocation............. 7
>
>       1.2. Problem #1: ANYCAST in 5G EC Environment.............. 4
>       1.3. Problem #2: sticking to original App Server........... 5
>       1.4. Problem #3: Application Server Relocation............. 5
>
> Why is problem #2 different in the two drafts? Is it true that none of the
> two drafts address problem #3?
> The idr draft talk about "soft anchoring" problem and solution - how is
> that different from the "sticky service"?
>
> Thanks.
> Jeffrey
>
> Juniper Business Use Only
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>
-- 

<http://www.verizon.com/>

*Gyan Mishra*

*Network Solutions A**rchitect *

*Email gyan.s.mishra@verizon.com <gyan.s.mishra@verizon.com>*



*M 301 502-1347*