RE: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>

"Chengli (Cheng Li)" <chengli13@huawei.com> Thu, 06 June 2019 02:46 UTC

Return-Path: <chengli13@huawei.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B553120172 for <ipv6@ietfa.amsl.com>; Wed, 5 Jun 2019 19:46:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FpBXjLcV4WOU for <ipv6@ietfa.amsl.com>; Wed, 5 Jun 2019 19:46:51 -0700 (PDT)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE755120152 for <ipv6@ietf.org>; Wed, 5 Jun 2019 19:46:50 -0700 (PDT)
Received: from LHREML712-CAH.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id BA1291880C8383D6BD49; Thu, 6 Jun 2019 03:46:48 +0100 (IST)
Received: from lhreml712-chm.china.huawei.com (10.201.108.63) by LHREML712-CAH.china.huawei.com (10.201.108.35) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 6 Jun 2019 03:46:48 +0100
Received: from lhreml712-chm.china.huawei.com (10.201.108.63) by lhreml712-chm.china.huawei.com (10.201.108.63) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Thu, 6 Jun 2019 03:46:48 +0100
Received: from DGGEML423-HUB.china.huawei.com (10.1.199.40) by lhreml712-chm.china.huawei.com (10.201.108.63) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Thu, 6 Jun 2019 03:46:47 +0100
Received: from DGGEML529-MBX.china.huawei.com ([169.254.6.38]) by dggeml423-hub.china.huawei.com ([10.1.199.40]) with mapi id 14.03.0439.000; Thu, 6 Jun 2019 10:46:43 +0800
From: "Chengli (Cheng Li)" <chengli13@huawei.com>
To: Tom Herbert <tom@herbertland.com>
CC: "Darren Dukes (ddukes)" <ddukes@cisco.com>, IPv6 List <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>
Subject: RE: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>
Thread-Topic: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>
Thread-Index: AQHVG7AiKtV//UGE8UW/dkSeKW04D6aN676g
Date: Thu, 06 Jun 2019 02:46:42 +0000
Message-ID: <C7C2E1C43D652C4E9E49FE7517C236CB0260AEFB@dggeml529-mbx.china.huawei.com>
References: <20160428004904.25189.43047.idtracker@ietfa.amsl.com> <588C586F-C303-418E-8D26-477C4B37CF92@gmail.com> <C7C2E1C43D652C4E9E49FE7517C236CB0260698D@dggeml529-mbx.china.huawei.com> <E5ED231C-2592-4D5F-9FA5-CA3D97994BE8@cisco.com> <C7C2E1C43D652C4E9E49FE7517C236CB0260A5F8@dggeml529-mbx.china.huawei.com> <CALx6S34fzjWOrLGaz=VnSRAq-zYDZAEy_f51UJCs8ginTffp=w@mail.gmail.com>
In-Reply-To: <CALx6S34fzjWOrLGaz=VnSRAq-zYDZAEy_f51UJCs8ginTffp=w@mail.gmail.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.130.185.75]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/pXg7jDP_aeQ1KehT497gMIBpo_o>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Jun 2019 02:46:54 -0000

Great!  https://trac.ietf.org/trac/6man/ticket/69 is really helpful!  

Thanks for your reply. I agree that the Hdr Ext Len is reasonable to be immutable.

Regards,
Cheng



-----Original Message-----
From: Tom Herbert [mailto:tom@herbertland.com] 
Sent: Wednesday, June 05, 2019 11:05 PM
To: Chengli (Cheng Li) <chengli13@huawei.com>
Cc: Darren Dukes (ddukes) <ddukes@cisco.com>; IPv6 List <ipv6@ietf.org>; Bob Hinden <bob.hinden@gmail.com>
Subject: Re: 6man w.g. last call for <draft-ietf-6man-segment-routing-header-19.txt>

On Wed, Jun 5, 2019 at 1:21 AM Chengli (Cheng Li) <chengli13@huawei.com> wrote:
>
> Hi Darren,
>
>
>
> Thanks for your reply. It seems like reasonable to pre-allocate space for IOAM. Also, PBT[1] based Telemetry can avoid this problem.
>
>
>
> However, in Stateless SFC[2], the NSH TLV can be included in SRH to carry metadata. The length of metadata may be mutable and hard to be pre-computed when the MD type is 2.
>
> Maybe we still can pre-allocate enough space for this scenarios, but I still think we should make HDR as mutable.
>
>
>
> The fields that will not be changed en route will not affect the length of the SRH.
>
> The mutable fields  will not count when compute ICV, and the changes of them are allowed, so why to limit  the change of length? There is no need to limit the length of these fields, because this does not help on Authentication but brings limitation.
>
>
>
> It is a general problem for IOAM and SFC, which need to add metadata into data packets.
>
Hi Chengli,

Please look at https://trac.ietf.org/trac/6man/ticket/69 which describes some of the operational problems of adding/deleting TLVs.
There is also an attribution problem.

The contents of a packet are attributed to the source which is indicated by the source address. Fundamentally, the source of the packet owns the bits and is responsible for the content. If an intermediate node sets alternative content in a packet then at the destination that content is attributed to the source. This content may not conform to host policy, or for that matter might even be illegal, and without any proper paper trail of who set the content, the source is held accountable.

So the source requires fine grained control over what the network is allowed to change, and authentication is means to enforce that intermediate nodes only change the packet in permissible ways. If a network node wants to change more than what the source allows, it is free to encapsulate the packet for transit across the network, thus itself becoming the source of the packet and so can set content in the encapsulating headers per a different policy.

Tom

>
>
> Thanks,
>
> Cheng
>
>
>
>
>
> [1] 
> https://tools.ietf.org/html/draft-song-ippm-postcard-based-telemetry-0
> 3
>
> [2] 
> https://tools.ietf.org/html/draft-xuclad-spring-sr-service-programming
> -02#section-7.2.1
>
>
>
>
>
> -----Original Message-----
>
> From: Darren Dukes (ddukes) [mailto:ddukes@cisco.com]
>
> Sent: Tuesday, May 28, 2019 1:22 AM
>
> To: Chengli (Cheng Li) <chengli13@huawei.com>
>
> Cc: Bob Hinden <bob.hinden@gmail.com>; IPv6 List <ipv6@ietf.org>
>
> Subject: Re: 6man w.g. last call for 
> <draft-ietf-6man-segment-routing-header-19.txt>
>
>
>
> Hi Cheng, thanks for the support, I have a couple comments inline.
>
>
>
>
>
> > On May 27, 2019, at 8:41 AM, Chengli (Cheng Li) <chengli13@huawei.com> wrote:
>
> >
>
> > Support. Many thanks to authors for their contributions! I agree that we should specify how the AH works with SRH in other drafts.
>
> >
>
> > But I can NOT find any text of describing Hdr Ext Len is not mutable in RFC8200.
>
> > Hdr Ext Len SHOULD be mutable, otherwise, use cases like incremental SRv6 IOAM[1] can not work.
>
>
>
> draft-ali-6man-spring-srv6-oam-01 actually reserves TLV at an SR Source node for use by segment endpoint nodes, so it doesn’t change the size of TLVs (see 4.4.2.1 and 4.4.2.2 of that draft).
>
>
>
> > All the use cases of inserting or deleting new TLV, or updating TLV with new length value are not allowed if Hdr Ext Len is not mutable.
>
>
>
> Use cases you’re thinking of should be able to use a method similar to that in draft-ali-6man-spring-srv6-oam, I would be interested to hear about them.
>
>
>
> Thanks
>
>   Darren
>
>
>
> >
>
> > I think it is a limitation to SRv6 that we should avoid it definitely.
>
> >
>
> >
>
> > Best Regards,
>
> > Cheng
>
> >
>
> > [1]. 
> > https://tools.ietf.org/html/draft-ali-6man-spring-srv6-oam-01#sectio
> > n-4.4.1
>
> >
>
> > -----Original Message-----
>
> > From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Bob Hinden
>
> > Sent: Wednesday, May 22, 2019 9:40 PM
>
> > To: IPv6 List <ipv6@ietf.org>
>
> > Cc: Bob Hinden <bob.hinden@gmail.com>
>
> > Subject: 6man w.g. last call for 
> > <draft-ietf-6man-segment-routing-header-19.txt>
>
> >
>
> > Hello,
>
> >
>
> > This message starts a new two week 6MAN Working Group Last Call on advancing:
>
> >
>
> >       Title           : IPv6 Segment Routing Header (SRH)
>
> >       Authors         : Clarence Filsfils
>
> >                         Darren Dukes
>
> >                         Stefano Previdi
>
> >                         John Leddy
>
> >                         Satoru Matsushima
>
> >                         Daniel Voyer
>
> >             Filename        : draft-ietf-6man-segment-routing-header-19.txt
>
> >             Pages           : 32
>
> >             Date            : 2019-05-21
>
> >
>
> >    
> > https://tools.ietf.org/html/draft-ietf-6man-segment-routing-header
>
> >
>
> > as a Proposed Standard.
>
> >
>
> > This document was in an extended last call that started in March of 2018.   An issue tracker was set up, and eight new versions of the draft were produced and discussed on the list and at face to face 6man sessions.   All of the issues in the tracker have been closed.  The chairs believe it is ready to advance, but given the number of changes and the time that elapsed, a new w.g. last call is warranted.  Please review the new document.
>
> >
>
> > Our thanks to the authors/editors and the working group for the work on this document.
>
> >
>
> > Substantive comments and statements of support for publishing this document should be directed to the mailing list. Editorial suggestions can be sent to the author.  This last call will end on 5 June 2019.
>
> >
>
> > Thanks,
>
> > Bob & Ole
>
> >
>
> >
>
> >
>
> >
>
> > --------------------------------------------------------------------
>
> > IETF IPv6 working group mailing list
>
> > ipv6@ietf.org
>
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>
> > --------------------------------------------------------------------
>
> >
>
> > --------------------------------------------------------------------
>
> > IETF IPv6 working group mailing list
>
> > ipv6@ietf.org
>
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>
> > --------------------------------------------------------------------
>
>
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------