RE: What is necessity for SRH, and other EH, insertion/removal?

Ron Bonica <rbonica@juniper.net> Mon, 09 December 2019 19:00 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE32512004C for <ipv6@ietfa.amsl.com>; Mon, 9 Dec 2019 11:00:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=LpUO5Xwp; dkim=pass (1024-bit key) header.d=juniper.net header.b=Pc9/YVoo
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZYSlMmNuxnyF for <ipv6@ietfa.amsl.com>; Mon, 9 Dec 2019 11:00:43 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF934120025 for <ipv6@ietf.org>; Mon, 9 Dec 2019 11:00:43 -0800 (PST)
Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xB9IviaJ010242; Mon, 9 Dec 2019 11:00:40 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=co/OZUHpJ+ksuPXlZb66neGkP9ffA9N6vVnu6SIUlnE=; b=LpUO5Xwp3x3MMeqWWWp3WTRRMyk9IC0bOaW+ZWnUInLLrCXyrnSpCK0JJWBOFko9QDLw Qne6f+DQ/7ksAFR7AxKnrmNmlfRhKJWMnCvpm/fkxRb6DL8AwvCxAJF3LlFDIVfHac+f DNWjZUb4D4I1Imu6EEYb8PNmoKbgPiuheaik/VTlIELwfx9xpnOcTmnR4bPwUQbFJoJ/ RX6ZKRx2NF8QsDxvZbrkcliEUbaiJouyIeT87Hnm7lnVTLR9CbXGY/1GPygbWcm3B6N7 AK8jUmI9twy3xfDUehpphHI7W5zvK8itBfqL9J991cc0O6EbMdsNPvm10LYLBfmDmuRt TQ==
Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2177.outbound.protection.outlook.com [104.47.58.177]) by mx0b-00273201.pphosted.com with ESMTP id 2wrajdb9c8-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 09 Dec 2019 11:00:40 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hV1yJz/cPmy3w+Un4UQ2tKhrmSgqXyDJqQe7DF2XR+lk6CtDrmAOAo9Y7RNEHKQG7UouHqw0eTHD2Oziu1+LcK9QyIn1SyNBIWI+6o04QpkV/pRNMfeOiqDsVTUHxtXneO8jYt6Ylv6Ajb0b/SLzmmKlHZkLZADiMqVj8+NFK9dWZ4Q0n66gMaorp9IA5Tc366WEbZZfMZWs8EjPyqSTkLn44hn/Aea5RDJEUMLw+4cfip2gFFD5ueaJaRaqnNSwJZACW7lDx4eGdSh1vmQJ76pulHunRSJsW2M6xC8+gCxkMTD87+yriaoaRDdHhJJWX6tqT8CN9FqsZPfLBkcc5w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=co/OZUHpJ+ksuPXlZb66neGkP9ffA9N6vVnu6SIUlnE=; b=Hi0In5sSMxNA8HU0plS8hTwzMtpLDRxIz1rYcI1ANvtKMHUGd++NlC5nJ/vxwwZVlcABt8/5jqMd6Gzfw5uWANJIsuaAFyMs/70Cuuz9/Tx8WlLzUpfGHvD0QeKgTBqafsKOQIJCZxrJoQM6Ez4PwQI9wchdP9/n4Vpv2OpIYSYKtuVZ64MlnjLo5MwZUu+0OH9SN2a2aoGx6Yx8/KQETso16ylUCGCtyG2JCJeloqD8rsgnhWSyNJsV8onLVyHr7GZ4zrgTgQ1cGkwqwtosn9m8kYWa726fCJ9sdQxHwbI6YnlFQrV8CxtCnzi2w8S4XdxOC1dZAaewBdRuKEd/Zg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=co/OZUHpJ+ksuPXlZb66neGkP9ffA9N6vVnu6SIUlnE=; b=Pc9/YVooW///gh0Usa/K8ZCe/gDT+j9SXObKPStGgBTk9UDys0VcC3ki880hlYm5wl1IkC8DEEW9aCSemTADNp/wK7aetvWjLR8VIOH6eULtYo5XF4NyMwvlVQLw/a3X1d1tWLlFWCnRP+wMjv3xfRtV1aN3hPFMiUXUItflv2I=
Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB4372.namprd05.prod.outlook.com (52.133.220.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.5; Mon, 9 Dec 2019 19:00:37 +0000
Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::185e:d297:6499:4987]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::185e:d297:6499:4987%7]) with mapi id 15.20.2516.003; Mon, 9 Dec 2019 19:00:37 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Warren Kumari <warren@kumari.net>
CC: "adrian@olddog.co.uk" <adrian@olddog.co.uk>, Tom Herbert <tom@herbertland.com>, 6man <ipv6@ietf.org>
Subject: RE: What is necessity for SRH, and other EH, insertion/removal?
Thread-Topic: What is necessity for SRH, and other EH, insertion/removal?
Thread-Index: AQHVrSI6ditkyykD50mwIA9TzeGMIaeu8ZoAgAIh1MCAAOmHgIAALoXw
Content-Class:
Date: Mon, 09 Dec 2019 19:00:37 +0000
Message-ID: <BN7PR05MB5699D008E3B21CEA77A1B897AE580@BN7PR05MB5699.namprd05.prod.outlook.com>
References: <CALx6S34vG=L_5nw_FzxHBUy+7tbWH4dhOh8xodOfKf2oOdrarg@mail.gmail.com> <04a501d5ad25$f0745a50$d15d0ef0$@olddog.co.uk> <BN7PR05MB56998243A0F4C8EE03D0816BAE580@BN7PR05MB5699.namprd05.prod.outlook.com> <CAHw9_iJbRc5tFKdC_NXteuRo_RCtNgmu19=EUAUpp8hY3LW9fA@mail.gmail.com>
In-Reply-To: <CAHw9_iJbRc5tFKdC_NXteuRo_RCtNgmu19=EUAUpp8hY3LW9fA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-12-09T19:00:35.0850066Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=d448dbed-6fc9-4994-b763-a515e2a8b2f0; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.3.2.8
dlp-reaction: no-action
x-originating-ip: [66.129.242.15]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 15bc4bf0-bbb2-4846-bb62-08d77cda13ed
x-ms-traffictypediagnostic: BN7PR05MB4372:
x-microsoft-antispam-prvs: <BN7PR05MB437233DD55B5F1913744DF2AAE580@BN7PR05MB4372.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 02462830BE
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(13464003)(189003)(199004)(81166006)(81156014)(2906002)(26005)(55016002)(229853002)(8676002)(66556008)(66446008)(64756008)(9686003)(6916009)(76116006)(66946007)(8936002)(54906003)(5660300002)(305945005)(52536014)(498600001)(7696005)(966005)(71200400001)(66476007)(71190400001)(33656002)(53546011)(86362001)(4326008)(6506007)(186003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4372; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 15bc4bf0-bbb2-4846-bb62-08d77cda13ed
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Dec 2019 19:00:37.3147 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ELbv3wxyWk9jNhE0VwTfUM/NdwF/HYwe6nj1PeduOPXh/I42UgxMJY5f5Y7vZqibc0LKrNk3zrQwjykfBs6LTA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4372
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-09_04:2019-12-09,2019-12-09 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 suspectscore=0 phishscore=0 lowpriorityscore=0 adultscore=0 impostorscore=0 bulkscore=0 priorityscore=1501 clxscore=1015 spamscore=0 mlxlogscore=999 malwarescore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912090151
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/F2RvO7egvC5PVtSphsIzDwAY2qM>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Dec 2019 19:00:46 -0000

Good point. Worse than slow. Low bandwidth.

                                   Ron



Juniper Business Use Only

-----Original Message-----
From: Warren Kumari <warren@kumari.net> 
Sent: Monday, December 9, 2019 11:14 AM
To: Ron Bonica <rbonica@juniper.net>
Cc: adrian@olddog.co.uk; Tom Herbert <tom@herbertland.com>; 6man <ipv6@ietf.org>
Subject: Re: What is necessity for SRH, and other EH, insertion/removal?

On Sun, Dec 8, 2019 at 9:26 PM Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org> wrote:
>
> Hi Adrian,
>
> If the destination node can process Routing headers on the fast path, but does not recognize the SRH, it SHOULD:
>         - skip over the SRH, because Segments Left is equal to zero (as per RFC 8200)
>         - forward the packet at line speed
>
> If the destination node cannot process Routing headers on the fast path, it will:
>         - punt the packet to the slow path
>         - skip over the SRH, because Segments Left is equal to zero (as per RFC 8200)
>         - forward the packet, albeit slowly
>

Wait, what?

The slow path is not "slow" in the sense of it takes its time figuring out what to do with the packets, it is "slow" in the sense that it is a much lower bandwidth. My slow path is already sufficiently busy doing things like BFD, ICMP, TTL expired, and, depending which slow path you are meaning, things like routing updates and SSH and management and things like that.

I suspect what actually happens is:
If the destination node cannot process Routing headers on the fast path, it will:
         - punt the packet to the slow path
         - hit the control plane policer
         - throw away the packet

Expecting the slow path (PFE or RE or ...) to touch transit traffic simply won't work at any kind of scale.

W
[0]: it also takes longer to figure out what to do with the packets, but that is a secondary concern

>                                                                                          
> Ron
>
>
> Juniper Business Use Only
>
> -----Original Message-----
> From: ipv6 <ipv6-bounces@ietf.org> On Behalf Of Adrian Farrel
> Sent: Saturday, December 7, 2019 12:44 PM
> To: 'Tom Herbert' <tom@herbertland.com>; '6man' <ipv6@ietf.org>
> Subject: RE: What is necessity for SRH, and other EH, insertion/removal?
>
> Hi Tom,
>
> Thanks for breaking the thread and focussing us back on technical questions.
>
> I can see some small value in PSP just as there is in MPLS PHP. This arises in the combination of two circumstances:
> - The destination node is not SRH-capable
> - The source node and/or the node that determines the SR path is not aware that the destination is not SRH-capable In that case, the penultimate segment end point can know that its segment neighbour end point is not SRH-capable and can perform PSP.
>
> Whether this is ever the case with a central controller is unclear.
>
> I'm not sure that this is a big use case, although MPLS PHP has proven to have use cases as a form of "pop and go" especially when the next hop needs to process the payload as "native".
>
> There may be other use cases, and I'd be keen to learn about them.
>
> The principle of keep things simple yet extensible would suggest that if there are no substantial reasons to include a function it should be shelved until there is a use case, but that this should be done in a way that allows additions if necessary.
>
> Cheers,
> Adrian
>
> -----Original Message-----
> From: ipv6 <ipv6-bounces@ietf.org> On Behalf Of Tom Herbert
> Sent: 07 December 2019 17:17
> To: 6man <ipv6@ietf.org>
> Subject: What is necessity for SRH, and other EH, insertion/removal?
>
> Pulling this out into a separate thread. Pertinent questions are:
>
> Why is extension header insertion and removal at necessary?
>
> Why isn't the proposed alternative of IPIP encapsulation sufficient?
> (where the encapsulating headers contain the extension headers that 
> would otherwise be inserted)
>
> Please note, I'm asking for the technical justification of the protocol design, saying that it's necessary because it's already being deployed isn't useful in this regard.
>
> Tom
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: 
> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/ipv6
> __;!!NEt6yMaO-gk!WzZKN3lbJ3IPeRv55moUERJbxW2t8ERi7n1WUHmRTQTT1SP56_ODQ
> LQ5_06G_k7T$
> --------------------------------------------------------------------
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: 
> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/ipv6
> __;!!NEt6yMaO-gk!WzZKN3lbJ3IPeRv55moUERJbxW2t8ERi7n1WUHmRTQTT1SP56_ODQ
> LQ5_06G_k7T$
> --------------------------------------------------------------------
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: 
> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/ipv6
> __;!!NEt6yMaO-gk!T9-gMf5yF_eHZ_kaa7MQrUDQvc9H0DBQ-LLbs9_TZO5xex3T0taI5
> WEiT-oTITeA$
> --------------------------------------------------------------------



--
I don't think the execution is relevant when it was obviously a bad idea in the first place.
This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants.
   ---maf