Re: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 05 June 2019 20:48 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B53E12013B for <ipv6@ietfa.amsl.com>; Wed, 5 Jun 2019 13:48:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jSj_FiLpTmNb for <ipv6@ietfa.amsl.com>; Wed, 5 Jun 2019 13:48:02 -0700 (PDT)
Received: from mail-pg1-x532.google.com (mail-pg1-x532.google.com [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0D90120091 for <ipv6@ietf.org>; Wed, 5 Jun 2019 13:48:02 -0700 (PDT)
Received: by mail-pg1-x532.google.com with SMTP id a3so2305pgb.3 for <ipv6@ietf.org>; Wed, 05 Jun 2019 13:48:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=gkE+KRFo1g4yYTNIvQpfZLOsLHZ+NUAuWMcPee9v3Ms=; b=Zb7GVPxfEouMdJPE4V+zvBWkOJA9QBpTEtoeKfkbsAQ2FEYN58mdea6fI5nzPi9YOq kUiuB5BkEjoMVRMmU3wQH67mO4K9KLuPPrvtgAQepQBnKvq6BfUY5rjs1GhUm2KX1RQ8 OT5rTopdTN6fAqWGJ65f83Dr5VNFo6cIUe9lgkoygKRxjPZtnkW3/Ckzw4Nu8ljVKQKR 09sIrkLQL5azp0cKCZ200IbABt+ivHPW7vHuLiGDltMXvFEAzEEwKFAGaV63uGu20tbP 9pjkrNR9F7HsQ7hqFwQtVLrIzW0bA4jHX+ZrZAnmshTwbaODczAE9zDhD4JlVLzPiacI U3ZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=gkE+KRFo1g4yYTNIvQpfZLOsLHZ+NUAuWMcPee9v3Ms=; b=ph9Nrkur0gb+8klzeVlSMvv7hgEaKvERM0udSQ4oXyMRXs7trYQ1n6Jzq9dD3EXNa2 T045fWp609AqcjlSdV8T6XucIuZCI2UkSV8VmqSWWLzvYzg2LS9dPy7RR1ktXUFw2xxH L0dI+zlqTkwkxR2QbP3gPYAqZO/oo0U6GPNMkfVA5roRGaWmRyh01N9FeIo2WiqWtXf4 GSQxpvXYjjutFutEzK42Y1t1wRJ4GNFFDWp8wJTsYXQ0sxFPJaHhmXnuAGLExV94sSdU Nrhk6bP24+/0WwC8k57P5g0OyZonIh1c1E7K1iH5jpISBC2+IGi4FeDKkJJsk6nYk1Ia iSYQ==
X-Gm-Message-State: APjAAAWqNrjI7yG5XGCOCyjsIZ6THgJsWCmqXSoNVkVjO3iv8+ilI/RT 4h4T9cfr4Fxo6SioNb4QEh8=
X-Google-Smtp-Source: APXvYqyGn06YEveI3n6Gsu8c1dXxftJxwyWpSfSOtQx4tDjdbwOmaTr2Z21yGmz41zAGu9tJwWAEmA==
X-Received: by 2002:aa7:91c5:: with SMTP id z5mr41736787pfa.34.1559767682055; Wed, 05 Jun 2019 13:48:02 -0700 (PDT)
Received: from [192.168.178.30] (32.23.255.123.dynamic.snap.net.nz. [123.255.23.32]) by smtp.gmail.com with ESMTPSA id s66sm28227068pgs.87.2019.06.05.13.47.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 05 Jun 2019 13:48:01 -0700 (PDT)
Subject: Re: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>
To: "Chengli (Cheng Li)" <chengli13@huawei.com>, Tom Herbert <tom@herbertland.com>
Cc: IPv6 List <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>
References: <20160428004904.25189.43047.idtracker@ietfa.amsl.com> <588C586F-C303-418E-8D26-477C4B37CF92@gmail.com> <C7C2E1C43D652C4E9E49FE7517C236CB0260698D@dggeml529-mbx.china.huawei.com> <CALx6S37Cw3t_cfBZvpX+G+ArNJTtKDxcF3YscV6_W+wnV7_4CQ@mail.gmail.com> <C7C2E1C43D652C4E9E49FE7517C236CB0260A54F@dggeml529-mbx.china.huawei.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <9e2877ce-a983-c29b-2298-57a337d23419@gmail.com>
Date: Thu, 06 Jun 2019 08:47:57 +1200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0
MIME-Version: 1.0
In-Reply-To: <C7C2E1C43D652C4E9E49FE7517C236CB0260A54F@dggeml529-mbx.china.huawei.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/fsR2RJvDcX7ZwG32BytWSdKdV54>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jun 2019 20:48:05 -0000

Hi Cheng,
On 05-Jun-19 19:03, Chengli (Cheng Li) wrote:
> Hi Tom,
> 
> Please see inline.
> 
> Cheng
> 
> -----Original Message-----
> From: Tom Herbert [mailto:tom@herbertland.com] 
> Sent: Monday, May 27, 2019 11:41 PM
> To: Chengli (Cheng Li) <chengli13@huawei.com>
> Cc: Bob Hinden <bob.hinden@gmail.com>; IPv6 List <ipv6@ietf.org>
> Subject: Re: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>
> 
> On Mon, May 27, 2019 at 5:42 AM Chengli (Cheng Li) <chengli13@huawei.com> wrote:
>>
>> Support. Many thanks to authors for their contributions! I agree that we should specify how the AH works with SRH in other drafts.
>>
>> But I can NOT find any text of describing Hdr Ext Len is not mutable in RFC8200.
> 
> Chengli,
> 
> Extension headers are not inserted or deleted by any node along a packet's delivery path per RFC8200. Changing the length of an extension header is equivalent to deleting an extension header and inserting a new one in its place.
> 
> [Cheng] Then we should updated the RFC8200? Otherwise, TI-LFA, Binding SID and Insertion mode can not work. But this is not related to SRH drafts. We need another draft maybe to describe that if needed.

No, this was debated at length during the development of RFC8200 and was clearly
excluded. I will not repeat the arguments here, but it is all in the list archive.

>> Hdr Ext Len SHOULD be mutable, otherwise, use cases like incremental SRv6 IOAM[1] can not work.
> 
> This topic has come up before in 6man list, in fact this is the subject of draft-voyer-6man-extension-header-insertion-05. In those discussions, issues in robustness, accountability and attribution (both for operational and legal purposes), security, operations (breaks ICMP for instance) have been brought up. The proponents of extension header insertion have yet to adequately address those issues.

Exactly. (And this is one of the motivations for draft-carpenter-limited-domains. There might be scenarios where we could deviate from the current rules, but they are not scenarios involving the open Internet.)

>> All the use cases of inserting or deleting new TLV, or updating TLV with new length value are not allowed if Hdr Ext Len is not mutable.

Exactly. And it isn't mutable. Hence the need for the encapsulation model for SRH or IOAM in general. None of this discussion is new.

   Brian

> 
> Adding and deleting TLVs is the topic in "https://trac.ietf.org/trac/6man/ticket/69", please look at that. Note that the ticket is closed, but it's pretty obvious that this it is not resolved and the text in the latest draft seemingly creates a loophole to do this by defining a "SID type" for that purpose.
> 
>>
>> I think it is a limitation to SRv6 that we should avoid it definitely.
> 
> Then it's also a general limitation in IPv6. For instance, IOAM is useful networks that don't use segment routing. So if Adding/Deleting TLVs is needed for SR TLVs then there's also needed for Hop-by-Hop options. But, rather this is necessary and sufficient has yet to be proven. There are two alternatives to adding TLVs: 1) Use IP encapsulation which properly allows "EH insertion" in the outer header since the encapsulator is sourcing an IPv6 packet 2) Use a mutable TLV type (defined for HBH, DO, and SR options) that includes sufficient scratch space for intermediate nodes to write their data.
> 
> [Cheng] Regarding IOAM, I can not see how incremental  IOAM can work if adding TLV is forbidden. Luckily, we can use PBT based Telemetry to avoid this limitation:  https://tools.ietf.org/html/draft-song-ippm-postcard-based-telemetry-03
> 
> Tom
> 
>>
>>
>> Best Regards,
>> Cheng
>>
>> [1]. 
>> https://tools.ietf.org/html/draft-ali-6man-spring-srv6-oam-01#section-
>> 4.4.1
>>
>> -----Original Message-----
>> From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Bob Hinden
>> Sent: Wednesday, May 22, 2019 9:40 PM
>> To: IPv6 List <ipv6@ietf.org>
>> Cc: Bob Hinden <bob.hinden@gmail.com>
>> Subject: 6man w.g. last call for 
>> <draft-ietf-6man-segment-routing-header-19.txt>
>>
>> Hello,
>>
>> This message starts a new two week 6MAN Working Group Last Call on advancing:
>>
>>        Title           : IPv6 Segment Routing Header (SRH)
>>        Authors         : Clarence Filsfils
>>                          Darren Dukes
>>                          Stefano Previdi
>>                          John Leddy
>>                          Satoru Matsushima
>>                          Daniel Voyer
>>         Filename        : draft-ietf-6man-segment-routing-header-19.txt
>>         Pages           : 32
>>         Date            : 2019-05-21
>>
>>     https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header
>>
>> as a Proposed Standard.
>>
>> This document was in an extended last call that started in March of 2018.   An issue tracker was set up, and eight new versions of the draft were produced and discussed on the list and at face to face 6man sessions.   All of the issues in the tracker have been closed.  The chairs believe it is ready to advance, but given the number of changes and the time that elapsed, a new w.g. last call is warranted.  Please review the new document.
>>
>> Our thanks to the authors/editors and the working group for the work on this document.
>>
>> Substantive comments and statements of support for publishing this document should be directed to the mailing list. Editorial suggestions can be sent to the author.  This last call will end on 5 June 2019.
>>
>> Thanks,
>> Bob & Ole
>>
>>
>>
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
> .
>