Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?

Robert Raszuk <robert@raszuk.net> Sat, 07 August 2021 23:47 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98BEB3A0D1C for <ipv6@ietfa.amsl.com>; Sat, 7 Aug 2021 16:47:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tAPwMSdexU9Y for <ipv6@ietfa.amsl.com>; Sat, 7 Aug 2021 16:47:16 -0700 (PDT)
Received: from mail-lf1-x130.google.com (mail-lf1-x130.google.com [IPv6:2a00:1450:4864:20::130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99F893A0D19 for <ipv6@ietf.org>; Sat, 7 Aug 2021 16:47:16 -0700 (PDT)
Received: by mail-lf1-x130.google.com with SMTP id f42so26000182lfv.7 for <ipv6@ietf.org>; Sat, 07 Aug 2021 16:47:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=aryiVhuPhXDd2no2bNa7aPF/NPNnWHTr499T8PrSqhM=; b=KPaDAf1FC3UEmRnksIuVc+xpm1ebqe180W1TwBuHsRDi+cfKTMbRrTL5mDRjtGbXyo uOzlkQp0Tf3wpu2KJ5gfGozVJe8NvoCPmGolpDAw5xQD2vJJHxyFOzO2uV7Dl3zNtKUF dxYZdwCAY9aCHhc6EML6SCLxTVYpz4pHIwGBo1H6t3LXpKTu2B+cRdFxcJFumGsNAhhw Ax900yhWzfKvFshHMvgunyBzc6HYrJRy4P3zpb5Zr55tnaP4P4+l1t7BHs7JEVHPBtHO t9jMuaN1YLbR1g4d/1t+PC31k+YHhrYlTO2GzZWKl5K/xFpngZPZC6JS8BvaLeZHNB90 F1Iw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=aryiVhuPhXDd2no2bNa7aPF/NPNnWHTr499T8PrSqhM=; b=jWcFDKvzGgnmjfz5IBpVnducVBv387wK7oZKKBMHtYHLAsSm1PQhzBWCYXUr+SR6yP trvaGlIes9y+R7XHw9FlvwHxiVINq592aiDplUVAg6NqS0UByaj7hduRqFUjxlxEomlD +UGeFd0uHAw0Na/DRWSRxHt9rpIIMd3S9Q+Nk+0gsfsCVX7QisKS92ZAvgFH5GmCKkTr QF8FN2yeyyc4TOZflAKdwFesfQ5hdWgc31wu8HQzhAbQHzcdhbps6cKmgFmKaEevtVM/ xlfKBgxuUFTu95NQgdYKrnqOueg0Aiw7nxFrdBV+REhaX+5ddopjaWfZ4bx/VKYJig86 m3pw==
X-Gm-Message-State: AOAM5315GMTwNArnLzuE9U9UgDCWmZLsYkNPM29v5gv+r5N5bpMdUk1Y GlgDYPU5V+f2dXDLeaj0UYq2EP/OM6CFDjOA5q0prA==
X-Google-Smtp-Source: ABdhPJx0GLJHOgnvozOTcuDhAaFQhvX6zUiafTIXmD4ZlVp72f6VSv5Taxl7WT7srlLmncY3gCfqSGYyb16H7BRi3m8=
X-Received: by 2002:a05:6512:3e6:: with SMTP id n6mr12499796lfq.541.1628380033024; Sat, 07 Aug 2021 16:47:13 -0700 (PDT)
MIME-Version: 1.0
References: <db8c1a5534e9412ebcfa37682d75f862@huawei.com> <C23D7023-B5B7-47C6-8AC5-65A98822A724@lurchi.franken.de> <CANMZLAZGawUjRhSSE_rA8AyqMx=mx1WFeJ_tZq0KVEXJd2XBfQ@mail.gmail.com> <20210807014730.GA28901@faui48f.informatik.uni-erlangen.de> <CAO42Z2yezZh5-B0PwCuNt2FUMAW-FjMK8QZ8uL4TsPhs26zziw@mail.gmail.com> <20210807151716.GA3098@faui48f.informatik.uni-erlangen.de> <CALZ3u+a_7XQ+R8mV+9KzwRwxa0riP-QD_2R69ycV0NL9jy_S3Q@mail.gmail.com> <20210807175410.GA63079@faui48f.informatik.uni-erlangen.de> <CALx6S36b33LD_hNFvptOJuny4g98=dhq3RtKsGeLx3ks-yYjFg@mail.gmail.com> <6F63D7FE-8768-4BD8-846E-61E50E44228F@lurchi.franken.de> <CALx6S36pbw2angEmDpu5DnX2nix9KgxFs7ExU17x+JXQFs23TA@mail.gmail.com> <CALZ3u+Yt2X3faSVW7K0eaxmaQy6iA6p4=f0c4E_F4CP0tfjHYw@mail.gmail.com> <CAOj+MMHu9wSuG87_vBaGNY0oU0kMu9KPFPAwcP9+eFviCMErPg@mail.gmail.com> <CALZ3u+YRfWspGYbFPQQyEGBxsS+0VhSAZq4MHWnWrMaW1HU-tQ@mail.gmail.com>
In-Reply-To: <CALZ3u+YRfWspGYbFPQQyEGBxsS+0VhSAZq4MHWnWrMaW1HU-tQ@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sun, 08 Aug 2021 01:47:32 +0200
Message-ID: <CAOj+MMF2Vr1LRin0WpBTM6UeRfi4FGQUpgp0SX4G2ftvtm23mA@mail.gmail.com>
Subject: Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?
To: Töma Gavrichenkov <ximaera@gmail.com>
Cc: Tom Herbert <tom@herbertland.com>, 6man WG <ipv6@ietf.org>, IETF discussion list <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006d92d105c900c54f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/WWw6Lscs0EkzoT5AKg2bzcjjjII>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Aug 2021 23:47:23 -0000

> In practice, routing on the Internet does never change this way.

I recommend you spend a moment on RIPE BGP Play to observe how real life
routing paths change to any anycast address sourced by more then one ASN.

If my TCP session is supposed to last 1s - maybe routing changes will not
impact it. But if someone uses anycast to establish long lasting TCP
sessions (say 12h) - Good Luck !

And that is with or without stable flow lable. Just look at IPv4 where flow
label does not exist.

Thx,
R.

On Sun, Aug 8, 2021 at 1:27 AM Töma Gavrichenkov <ximaera@gmail.com> wrote:

> Peace,
>
> Now, speaking of compromises,
>
> On Sun, Aug 8, 2021 at 1:09 AM Robert Raszuk <robert@raszuk.net> wrote:
> > Every second routing may decide for you to prefer some other BGP path
> and your anycast destination may end up in different destination naturally
> only by following the destination routing paradigm.
>
> In my opinion, this is a perfect sample of a bad engineering approach.
> Here's why.
>
> In practice, routing on the Internet does never change this way.  A
> single BGP route announcement takes some 30 seconds to propagate, and
> sometimes a route withdrawal takes more than 4 minutes.  Severe
> routing changes by an AS are just not expected to happen more
> frequently than a few times in an hour, and massive changes shouldn't
> happen more often than once in a few hours, because they might cause
> routing loops, weird routing issues, and prolonged network
> unavailability otherwise.
>
> This is the limitation to rely on for an application, or, somewhat
> worse, for a transport protocol.
>
> Engineering is basically a process of developing compromises over
> limitations.  You need to thoroughly understand the latter to build a
> system.  Engineers don't build houses capable of resisting the energy
> of an intergalactic meteor landing.  Your car would break and kill you
> if you smash it into the wall cruising 900 mph, and I don't even need
> to know the make to tell you that, because I already know your car
> certainly isn't a Batmobile, and it's therefore built on compromises,
> over limitations, and there are warning signs on every road because of
> that.
>
> An attempt to pretend the Internet engineering doesn't have to keep
> any limitations in mind just leads to bad engineering practices.
> There's always a compromise, and you need to know the limitations.
>
> And there are no limitations on the Internet of the past, present, or
> the future, which could possibly make the anycast impractical.
> Application designs may do, because of poor engineering practices, but
> that's it.
>
> --
> Töma
>