Re: [IPv6] I-D Action: draft-ietf-6man-enhanced-vpn-vtn-id-05.txt

"Dongjie (Jimmy)" <jie.dong@huawei.com> Fri, 15 September 2023 07:22 UTC

Return-Path: <jie.dong@huawei.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DD1EC15155F; Fri, 15 Sep 2023 00:22:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q1nfgQ_Uf35W; Fri, 15 Sep 2023 00:22:05 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D715BC15155E; Fri, 15 Sep 2023 00:22:04 -0700 (PDT)
Received: from lhrpeml100004.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Rn59W62hLz68409; Fri, 15 Sep 2023 15:17:19 +0800 (CST)
Received: from kwepemi500017.china.huawei.com (7.221.188.110) by lhrpeml100004.china.huawei.com (7.191.162.219) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.31; Fri, 15 Sep 2023 08:22:01 +0100
Received: from kwepemi500017.china.huawei.com (7.221.188.110) by kwepemi500017.china.huawei.com (7.221.188.110) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.31; Fri, 15 Sep 2023 15:21:59 +0800
Received: from kwepemi500017.china.huawei.com ([7.221.188.110]) by kwepemi500017.china.huawei.com ([7.221.188.110]) with mapi id 15.01.2507.031; Fri, 15 Sep 2023 15:21:59 +0800
From: "Dongjie (Jimmy)" <jie.dong@huawei.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "ipv6@ietf.org" <ipv6@ietf.org>
CC: 6man Chairs <6man-chairs@ietf.org>
Thread-Topic: [IPv6] I-D Action: draft-ietf-6man-enhanced-vpn-vtn-id-05.txt
Thread-Index: AQHZsH5S3S63CXKcN0W6SZueBRIVJa+vLQlQgGCa5OCAAZxxAIAHv3sQgAK5L9A=
Date: Fri, 15 Sep 2023 07:21:59 +0000
Message-ID: <3615acc969d6450f9d05b3b2fb36894f@huawei.com>
References: <168869836381.53981.17478975928854194568@ietfa.amsl.com> <85ccf1723eff442b834f2ad47d0405b3@huawei.com> <AS8PR02MB10146A99CBC41B7C16DB80A0888EEA@AS8PR02MB10146.eurprd02.prod.outlook.com> <d6ba0291575d4514896ec8c76164f5ba@huawei.com> <DU2PR02MB10160000D9AAFEFE93E449FC288F0A@DU2PR02MB10160.eurprd02.prod.outlook.com>
In-Reply-To: <DU2PR02MB10160000D9AAFEFE93E449FC288F0A@DU2PR02MB10160.eurprd02.prod.outlook.com>
Accept-Language: en-US, zh-CN
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.112.40.66]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/T3OkEKTxopBXOWoW97ji0ZzIplY>
Subject: Re: [IPv6] I-D Action: draft-ietf-6man-enhanced-vpn-vtn-id-05.txt
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Sep 2023 07:22:09 -0000

Hi Med, 

Thanks for the discussion. Please see further clarifications inline:

> >
> > The reason to make it encoded in the option is that such behavior
> > could be changed per-packet.
> 
> [Med] This is adding extra complexity for a usage that is not clear to me. Do you
> have a concrete example where the match behavior should be per packet and
> per VTN?

What I actually mean is the S flag may be set to different value for different sub-flows or different type of packets in a VTN. 

For example, Some flows in a VTN may be required to only use the resource of the VTN, while for some other flows of the VTN the resource of the VTN should be used if available, but the traffic must get through even if a match is not made. Another example is that for some specific OAM packets, the S bit must be set so that the test result can correctly reflect the status of the connectivity in the VTN. The S bit may also be changed during some transition scenarios. 

With the S bit in the packet, this only needs to be done on the ingress nodes. While making it a configuration knob would require every node in the network to be configured. That would be more complex and not practical. 

> 
>  Depends on some policy on the headend
> > node, the behavior represented by the S bit could be set for a
> > specific set of packet on the specified path/VTN , while for the rest
> > of traffic on the same path/VTN, the S bit is unset. Making it a
> > configuration knob would either lose such flexibility, or introduce
> > complex configuration on every node along the path.
> >
> > In this design the flags fields are generic and can apply to VTN IDs
> > with different Context Types. That's why the flags are preceding the
> > Context field.
> 
> [Med] Swapping the fields does not mean that you would loose that. The
> benefit of swapping is that the flag fields can be extended (if needed in the
> future) with more adjacent bits.

You're right that if more flags are needed at some time in the future, then they can be allocated from the Reserved field. But we already have 8 flags available and we only have used one (currently the S flag), so it does not feel like an immediate problem or even one that is likely in the foreseeable future. And, anyway, there is no real need for flag fields to be contiguous. 

So this does not feel like a very important change. A bit like "I would not have done it like this" rather than a strong technical reason to change.

Best regards,
Jie

> > >
> > > Although the discussion in Section 5, it is somehow still vague
> > what
> > > is eligible to be conveyed in this option. For example, I
> > understand
> > > that some sort of slice id is not excluded but is that only when
> > a slice involves a VTN?
> > >
> > > ==
> > >    Note that, in the context of 5G network slicing, if a
> > deployment
> > >    found it useful, the four-octet VTN ID field may be derived
> > from the
> > >    four-octet Single Network Slice Selection Assistance
> > Information
> > >    (S-NSSAI) defined in 3GPP [TS23501].
> > > ==
> >
> > The text here just provides an option that when VTN is used for the
> > transport part of 5G network slicing, there could be mapping
> > relationship between the 5G Slice ID (S-NSSAI) and the VTN ID of this
> > option. Then according to the S-NSSAI of a 5G network slice, the VTN
> > ID could be derived, and the packet could be encapsulated with an
> > outer IPv6 header with the corresponding VTN ID value in the VTN
> > option.
> 
> [Med] Please update that note in the draft to indicate that the option may be
> inserted only ** when VTN is used **. Thanks.
> 
> ...
> ________________________________________________________________
> ____________________________________________
> Ce message et ses pieces jointes peuvent contenir des informations
> confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou
> copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le
> signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages
> electroniques etant susceptibles d'alteration, Orange decline toute
> responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
> 
> This message and its attachments may contain confidential or privileged
> information that may be protected by law; they should not be distributed, used
> or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this
> message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been
> modified, changed or falsified.
> Thank you.