Re: Routing Header Insertion

"Voyer, Daniel" <daniel.voyer@bell.ca> Fri, 08 May 2020 15:35 UTC

Return-Path: <prvs=390daf8a7=daniel.voyer@bell.ca>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9DBE3A0BDD for <ipv6@ietfa.amsl.com>; Fri, 8 May 2020 08:35:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 56J0Halx7BRg for <ipv6@ietfa.amsl.com>; Fri, 8 May 2020 08:35:20 -0700 (PDT)
Received: from ESA1-Wyn.bell.ca (esa1-wyn.bell.ca [67.69.243.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67FCE3A0BF7 for <6man@ietf.org>; Fri, 8 May 2020 08:35:19 -0700 (PDT)
Received: from dm5cch-d00.bellca.int.bell.ca (HELO DG1MBX01-WYN.bell.corp.bce.ca) ([198.235.102.30]) by esa01corp-wyn.bell.corp.bce.ca with ESMTP; 08 May 2020 11:35:10 -0400
Received: from DG1MBX04-WYN.bell.corp.bce.ca (2002:8eb6:120e::8eb6:120e) by DG1MBX01-WYN.bell.corp.bce.ca (2002:8eb6:120b::8eb6:120b) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 8 May 2020 11:35:10 -0400
Received: from DG1MBX04-WYN.bell.corp.bce.ca ([fe80::4dcc:588c:b497:9730]) by DG1MBX04-WYN.bell.corp.bce.ca ([fe80::4dcc:588c:b497:9730%22]) with mapi id 15.00.1497.006; Fri, 8 May 2020 11:35:10 -0400
From: "Voyer, Daniel" <daniel.voyer@bell.ca>
To: Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>, Robert Raszuk <robert@raszuk.net>
CC: 6man <6man@ietf.org>
Subject: Re: Routing Header Insertion
Thread-Topic: Routing Header Insertion
Thread-Index: AQHWJJd4av9EC0U0WkSKKX23xm52eqieU1OA
Date: Fri, 08 May 2020 15:35:10 +0000
Message-ID: <208AE1DB-6E54-494A-8E92-8D9D41560CFF@bell.ca>
References: <B2412568-7DA4-4742-844D-B2E94114DC10@bell.ca> <DM6PR05MB6348B22D75A7015AC966981CAEA50@DM6PR05MB6348.namprd05.prod.outlook.com> <CAOj+MMFVnV2B6dLYnK1WMTZFfdaE_ZO=OZW9M7bmgnJQmHKB=A@mail.gmail.com> <DM6PR05MB6348870F8D1934BC136F1089AEA50@DM6PR05MB6348.namprd05.prod.outlook.com>
In-Reply-To: <DM6PR05MB6348870F8D1934BC136F1089AEA50@DM6PR05MB6348.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.36.20041300
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.24.25.6]
Content-Type: multipart/alternative; boundary="_000_208AE1DB6E54494A8E928D9D41560CFFbellca_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/VV6Dh1_FIA1wVwRV4PnHz8iKTmI>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 May 2020 15:35:30 -0000

Hi Ron,

> Those need to be put at the end of the line, so that they are visited *after* the nodes in the repair path.

Exactly as defined in the pseudocode. https://tools.ietf.org/html/draft-filsfils-spring-srv6-net-pgm-insertion-00#section-3.2

Just to also remind you the context of this email is SRH insertion for TI-LFA as demonstrated by Juniper and other vendors in the EANTA report. Nothing to do with uSID solution.

It’s also nice to know, from the report - obviously, that it interop with the other vendor’s platform.

Thanks
dan

From: ipv6 <ipv6-bounces@ietf.org> on behalf of Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>
Date: Thursday, May 7, 2020 at 1:46 PM
To: Robert Raszuk <robert@raszuk.net>
Cc: 6man <6man@ietf.org>
Subject: RE: Routing Header Insertion

Robert,

The problem is that the IPv6 destination address contains 5 uSID that represent 5 nodes yet to be visited. Those need to be put at the end of the line, so that they are visited *after* the nodes in the repair path.



Yes, there are some very clever solutions that you and I understand. But will the guy in the NOC who doesn’t live and breath SR be able to figure it out the first time he sees it.

                                                                             Ron




Juniper Business Use Only
From: Robert Raszuk <robert@raszuk.net>
Sent: Thursday, May 7, 2020 1:28 PM
To: Ron Bonica <rbonica@juniper.net>
Cc: Voyer, Daniel <daniel.voyer@bell.ca>; Eric Vyncke (evyncke) <evyncke@cisco.com>; 6man <6man@ietf.org>
Subject: Re: Routing Header Insertion

[External Email. Be cautious of content]

Hi Ron,

>  Yes, the problem can be solved, but not without deep though and vigorous head scratching.

Well don't we still have the indicators of Active, Next and Last uSIDs in SRH ? If so what is so difficult if you keep your original SRH as is and provide FRR using new SRH ? Moreover if you POP the additional SRH @ ptotectied path PHP FRR endpoint may not even noticed he is acting as such endpoint and that is very cool thing.

The problem perhaps becomes a nice exercise to solve how to handle TI-LFA when you have uSID list in DA address of the packets and where there is no SRH at all :) Clearly a valid deployment scenario. But since you are already deep into it I will let you figure it out :)

> When a solution is that complex, it is probably beyond the capability of any operations staff.

Well it would be a mistake to count on all operators doing this handling in P4 code on their own custom platforms. For rest of them a simple knob would be sufficient to enable it and enjoy.

Thx,
R.


On Thu, May 7, 2020 at 7:03 PM Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org<mailto:40juniper.net@dmarc.ietf.org>> wrote:
Hi Daniel,

TI-LFA with SRH insertion poses problems in the following cases:


  *   When the packet already contains an SRH
  *   When the IPv6 Destination Address contains uSIDs

In the first case, when the packet already contains an SRH, TI-LFA with SRH insertion results in a single packet that contains two SRH’s. No reading of RFC 8200 allows this.

The second case is more complex. Assume that in your uSID strategy:


  *   The uSID block identifier is 32 bits long
  *   Each uSID is 16 bits long
  *   The end-of-carrier marker is also 16 bits long

In this case, you can fit 5 uSIDs in the IPv6 address.

On the first segment, when the destination address still contains 5 uSIDs, a PLR detects link failure and invokes TI-LFA procedures. The repair tunnel contains 3 segments. If the PLR executes TI-LFA with insertion procedures, what does the resulting IPv6 Destination address look like? What does the SRH look like?

Yes, the problem can be solved, but not without deep though and vigorous head scratching. When a solution is that complex, it is probably beyond the capability of any operations staff.

The above-mentioned problems could have been avoided if TI-LFA created its repair tunnel by prepending an IPv6 header with its own SRH.

                                                                                                 Ron


Juniper Business Use Only