Re: What if? [was Re: Extension Header Insertion]

Warren Kumari <warren@kumari.net> Wed, 11 December 2019 01:12 UTC

Return-Path: <warren@kumari.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9025B120086 for <ipv6@ietfa.amsl.com>; Tue, 10 Dec 2019 17:12:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=kumari-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a48vApOTnyMl for <ipv6@ietfa.amsl.com>; Tue, 10 Dec 2019 17:12:39 -0800 (PST)
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 932AC120059 for <6man@ietf.org>; Tue, 10 Dec 2019 17:12:39 -0800 (PST)
Received: by mail-qk1-x72f.google.com with SMTP id d71so10281663qkc.0 for <6man@ietf.org>; Tue, 10 Dec 2019 17:12:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kumari-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=yHJOFytfG6yZ0RVnKQn0JW+Pux2XRQhEWFmamtKRPL4=; b=Oqeh2dmp133qwHCJBnCBcD3uYcQObP83lTVfq8PZIhCTiR+4zcsOaf1nYCUeAHGW/h eDzZ20vGx4P31mQ2Xi4kh07xbT0QUu+AnFk81eiAT6TrXLgiPtTXdviMbsZ19+Tz8OLk j+8d/ClEKlVO3SstFaiCqfmMc+OLpkUree9XfJgZJo0ECFk67nRRHTmwJu1bJp2camAr Nd3VM7T36UG7ZmD4tjhoK/b5XA0SrhFEq/dsp8WQc1vsKgOy7eCV6LFuoVF+sdUbRrGo B7n3fPVtA0LB+uolBn9WFJQAxfmxMDBx9OAfPv3x40prI1wd5L88cOgDpeJB3uy/JH80 uP7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=yHJOFytfG6yZ0RVnKQn0JW+Pux2XRQhEWFmamtKRPL4=; b=N6ReHEx4w3GCmG4KMCjs+8FU69fXRCU04SqQ0o3MO/m3uSkyjEdH3xFvUXCDX+tKoO JGbd6nDcfEPiM9nXODa/dGrD6MDfAJr/ZBKyfoHz5ELGjK7rBcQFVoi3BNo+8dfCtveh 9uh5lCbEW56w6wNe5teYd+Czso9KN3ADwi2m5LXhprSpiEasfkGMX7jO12JuI9VpjTPL +kpcKcCUWlSet5iDGnpc0R1Ghd7bfloZCAMVFf78/Y56zigjUxl3cVgmx+mcmbisvWqy mcrxXk78f9MZe5vw4cY/z6YNwh8FaaqbOyGBnwmXLXB7VLqC7YbmagpJ31sRxqFBLDAR lGmw==
X-Gm-Message-State: APjAAAUpP4LO/Xdfd/buZ9LzPnwhifwdiuL6e4voRaDX6Zhy3ZtgdP+0 rXewW0udz8FNL1owFhGsSjc1QpIv6ayp0aIO5X71CA==
X-Google-Smtp-Source: APXvYqyV5HJY3nzuH30PB9KCxYdWnIwnHKVarUry4cckxRkSnT/IEt6zi1+HTgFfBwBXDPAe5YFo+o2ybk/uSSSOCBY=
X-Received: by 2002:a37:9083:: with SMTP id s125mr662029qkd.192.1576026758206; Tue, 10 Dec 2019 17:12:38 -0800 (PST)
MIME-Version: 1.0
References: <BN7PR05MB5699D9BA988F96E2F41CD390AE580@BN7PR05MB5699.namprd05.prod.outlook.com> <00dc01d5ae73$c361b450$4a251cf0$@olddog.co.uk> <dbcdeb1a-0091-da2b-20df-d991e6c06091@gmail.com> <9bc47200-4fea-37ce-0ede-cbf6a5f70ea9@gmail.com> <99e4bdd0-711d-7406-d3bf-786b0238c1e7@gont.com.ar> <44e6225f-97bc-37ba-c13e-b7bafa446fcc@gmail.com> <A5439DC7-5B11-40E9-BC32-6E675E2EDC20@cisco.com> <7a0b4be6-9149-29d8-c253-19127bfcef14@gmail.com>
In-Reply-To: <7a0b4be6-9149-29d8-c253-19127bfcef14@gmail.com>
From: Warren Kumari <warren@kumari.net>
Date: Tue, 10 Dec 2019 20:12:02 -0500
Message-ID: <CAHw9_iKDn-LLOPpyEJk8=5-8K5q0pvNeLXn58-JPTihAxE5fEw@mail.gmail.com>
Subject: Re: What if? [was Re: Extension Header Insertion]
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: "Darren Dukes (ddukes)" <ddukes@cisco.com>, 6man <6man@ietf.org>, Fernando Gont <fernando@gont.com.ar>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/ciC1nRIb4-MJIoyJowv56gyQhSY>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Dec 2019 01:12:41 -0000

On Tue, Dec 10, 2019 at 7:51 PM Brian E Carpenter
<brian.e.carpenter@gmail.com> wrote:
>
> Thanks Darren. I will hold off on the spring draft until we see a new version, since several of us are simply repeating ourselves at this point.
>
> On balance I'm inclined to point a finger at RFC8200:
>
> >    Each extension header should occur at most once, except for the
> >    Destination Options header, which should occur at most twice (once
> >    before a Routing header and once before the upper-layer header).
>
> I now think that either that "should" should be a "must", or there
> should be an explicit statement that only one routing header is
> allowed. The complexities of multiple routing headers are endless.
>
> What do others think?
[ Of hats, I have none... ]

I think that not having RFC2119 language in this section is very
unfortunate, and creates a situation where different people read
different things into it (and are convinced that their interpretations
are clearly the right ones....)

I personally think that the spirit behind the Postel principle
applies, and that the should is a prohibition against there being more
than one, and that if receivers happen to do something sane in this
case, it is close to luck, not spec.

I'm not religious, but this seemed apropo:
"Then Abimelek called Abraham in and said, “What have you done to us?
How have I wronged you that you have brought such great guilt upon me
and my kingdom? You have done things to me that should never be done.”
- Genesis 20:9
:-P

W


>
> Regards
>    Brian Carpenter
>
> On 11-Dec-19 11:04, Darren Dukes (ddukes) wrote:
> > Hi Brian.
> >
> > I do believe that “assumption” you mention in draft-ietf-spring-network-programming is to be removed as a result of the last call discussion on spring@.
> >
> > As I mentioned in a separate thread, RFC8200 states "IPv6 nodes must accept and attempt to process extension headers in any order and occurring any number of times”, the ‘assumption’ could been seen as a reminder of that requirement, but I don’t think thats necessary either.
> >
> > There is no draft adopted by SPRING nor 6MAN that proposes multiple SRH be added to a packet.
> >
> > If 6MAN intends to adopt a standards track definition of SRH insertion, then that document would need to fully describe the possible ramifications, including this one.  This we know, and are having much lively discussion on it.  I think we are safe to never have it ’sneak in’ without 6man having a say :)
> >
> > Darren
> >
> >> On Dec 10, 2019, at 2:27 PM, Brian E Carpenter <brian.e.carpenter@gmail.com <mailto:brian.e.carpenter@gmail.com>> wrote:
> >>
> >> Hi Fernando,
> >>
> >> On 10-Dec-19 21:39, Fernando Gont wrote:
> >>> Hi, Brian,
> >>>
> >>> On 9/12/19 20:21, Brian E Carpenter wrote:
> >>>> So, let's assume that two consecutive SRH headers are allowed in the same packet.
> >>>
> >>> Part of the problem with all these discussions is that folks seem to
> >>> assume that there is no rationale for the existing rules, and they
> >>> insist on changing them without providing any analysis/rationale.
> >>>
> >>> RFC8200 contains what should be considered a recommendation (at the very
> >>> least) against multiple routing headers.
> >>>
> >>>
> >>> A RH is meant to convey some sort of information about the path that a
> >>> packet can traverse. So two SRHs would mean that the same packet should
> >>> follow two different paths, at the same time. That doesn't seem to be
> >>> much sense to me.
> >>
> >> I agree. That's why I am seriously asking whether we should recall
> >> draft-ietf-6man-segment-routing-header-26 from the RFC Editor in order
> >> to resolve this. Either (a) there MUST be at most one SRH in a packet,
> >> or (b) the semantics and conflict resolution for multiple SRHs need to
> >> be specified.
> >>
> >> At the moment we (6MAN) are on track to publish a Proposed Standard RFC
> >> that leaves this ambiguous, and SPRING has a draft in WGLC that assumes (b).
> >>
> >>   Brian
> >>
> >>>
> >>>
> >>>
> >>>> So the first one (an example from draft-ietf-6man-segment-routing-header-26) is:
> >>>>
> >>>>       Segments Left=2
> >>>>       Last Entry=2
> >>>>       Flags=0
> >>>>       Tag=0
> >>>>       Segment List[0]=S3
> >>>>       Segment List[1]=S2
> >>>>       Segment List[2]=S1
> >>>>
> >>>> and the second one is
> >>>>
> >>>>       Segments Left=1
> >>>>       Last Entry=1
> >>>>       Flags=0
> >>>>       Tag=0
> >>>>       Segment List[0]=S4
> >>>>       Segment List[1]=S5
> >>>>
> >>>> I made that up and it's obviously nonsense, but if this is allowed why aren't the rules for processing conflicting SRHs described in draft-ietf-6man-segment-routing-header-26? Do we need to recall it from the RFC Editor queue to be fixed?
> >>>
> >>> It is clearly recommended against.
> >>>
> >>> However, the very draft-voyer-6man-extension-header-insertion doesn't
> >>> even provide a rationale for EH insertion in the first place, let alone
> >>> for this specific case that you (reasonably) raise.
> >>>
> >>> Unfortunately, when operating in a mode where analysis is discoraged,
> >>> and "why?" questions are dismissed, I'm not sure there is any other
> >>> possible alternative outcome than this -- documents with lots of
> >>> unspecified stuff, violating specs at will, and designs try to cover up
> >>> what seem to be sub-optimal design choices (like using 128-bit labels
> >>> for what are expected/supposed to be limited domains) by screwing up the
> >>> architecture to save bytes that were wasted elsewhere.
> >>>
> >>> Thanks,
> >>>
> >>
> >> --------------------------------------------------------------------
> >> IETF IPv6 working group mailing list
> >> ipv6@ietf.org <mailto:ipv6@ietf.org>
> >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >> --------------------------------------------------------------------
> >
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf