Re: I-D Action: draft-voyer-6man-extension-header-insertion-02.txt

Tom Herbert <tom@herbertland.com> Thu, 30 November 2017 21:54 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52B051294F4 for <ipv6@ietfa.amsl.com>; Thu, 30 Nov 2017 13:54:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VizlD0OWYsAe for <ipv6@ietfa.amsl.com>; Thu, 30 Nov 2017 13:54:44 -0800 (PST)
Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EF3C1294F0 for <ipv6@ietf.org>; Thu, 30 Nov 2017 13:54:44 -0800 (PST)
Received: by mail-qt0-x234.google.com with SMTP id b10so3001162qti.11 for <ipv6@ietf.org>; Thu, 30 Nov 2017 13:54:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=I83KPG3xnZxkO3wyvvWTliN35drDQJTmi6EOuyRlBcs=; b=xuzcMWaLN32EShQFRQy9FYZKvzmBD61fy7kpGgYc8VHgZpC4c1Owa3Vdebz6oZdVui 7oyHC0tpBD/jpSNb7/4LjhGtHSw8ZI9f0j+xofFVbYv0kpbuQTnRVjuA5JqKUrUhGWnw QmGFGpgO+1a+Mvrsx+huRohfP7NcucwIV1TX76Y2vUiFtPm1mOduyWkBlmpNooD+KbuA hlxM/rCxgMPHem+I+EdYkhikdBEXGeijhinoOizLxyubsXRYDieC/bwJpdQ6XW8k3cU/ nNA61uUgU/2kJ2QIXLq+M4T6xnvQQzZShbCrVK7NiVE+grM45IxHP259G2OZCWmcy9XD RoGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=I83KPG3xnZxkO3wyvvWTliN35drDQJTmi6EOuyRlBcs=; b=hH+usp05FblDXl9UbNj40tTfGPeNKzgHAnME2u/IjQ7u6bAT8XAzpa9GOy7sy5UI2S MsbVRChHb77q7pgGJUBD5SUcrjIl2rkD8lKORV/4JeBbqCA7g0o1pLIP8BGGN8/wsZoF ybPcT75v/jqBsk92tVIR4ab+HoeyGfaIuTarG1JKdxOQ3tjLb9eAnS/ShkKe/j3h9CEC sb+gJCFajyZ+jmKScW/SoSahl7L8HPl3Cqrw1fjT1zrdBXploAN5RwPBxFGcFCkpxf5H uA+u3DgoQEb7t1aUjc2uyy2GdqKmwrEhibpvySoQlK7Lw7LlZB3JPXtFGWvGQqwEyc8c Ca8g==
X-Gm-Message-State: AKGB3mLk/zrYWrwmcLzsS/g16WPeOji0FZPgnC3Sz9n4+7+xbeC4dj6/ MrSKFi9LqX7fU2I0h2jVHK+vnMzlRYWhwJtAhZ3fVA==
X-Google-Smtp-Source: AGs4zMai/u9f7TPtEU3w+t+uQhuzLCAs/ptmn24IwL1MVDlNWzVSPsVnLxN8N3bEy32iJxgYriP7seNj88y7EAk6v+s=
X-Received: by 10.200.49.99 with SMTP id h32mr5555813qtb.196.1512078883522; Thu, 30 Nov 2017 13:54:43 -0800 (PST)
MIME-Version: 1.0
Received: by 10.200.43.121 with HTTP; Thu, 30 Nov 2017 13:54:43 -0800 (PST)
In-Reply-To: <CA+b+ER=6AJAKY-7YREQXv6VQ7XSAQrpDd-=bcqA2hLUXSKq_Mg@mail.gmail.com>
References: <151120281628.21912.1099097760493570225@ietfa.amsl.com> <4ca3fd6b-4cd6-f6ac-ce03-415c2c9a4c3c@gmail.com> <f4425076-2f76-5713-2819-9d26671d56bb@si6networks.com> <4E92F160-C586-4C7B-BAEF-97C204856A8A@employees.org> <bc9d7f57-8687-7f85-8ac3-49751683232b@si6networks.com> <CA+b+ERnKbRXgFycgKd7EXMVvS1Mu_RTC5tfPbNE781TDZ49rYA@mail.gmail.com> <CALx6S34XAA7Fo96Es9z1Yz+Eo9XdWvPHXmCAcw_WSzP8JNjKuQ@mail.gmail.com> <CA+b+ER=6AJAKY-7YREQXv6VQ7XSAQrpDd-=bcqA2hLUXSKq_Mg@mail.gmail.com>
From: Tom Herbert <tom@herbertland.com>
Date: Thu, 30 Nov 2017 13:54:43 -0800
Message-ID: <CALx6S37MuMUbL+JBrBEeqrwX_A7+3UX4YcHs011GjuEqWQ4q9w@mail.gmail.com>
Subject: Re: I-D Action: draft-voyer-6man-extension-header-insertion-02.txt
To: Robert Raszuk <robert@raszuk.net>
Cc: Fernando Gont <fgont@si6networks.com>, draft-voyer-6man-extension-header-insertion@ietf.org, 6man WG <ipv6@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/r9SwrIM5U36tUiJjm1piFCJOwuo>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Nov 2017 21:54:46 -0000

On Thu, Nov 30, 2017 at 1:25 PM, Robert Raszuk <robert@raszuk.net> wrote:
> Tom,
>
> Imagine the case where packets are subject to go via service chains. I can
> steer the packet to the router which has service nodes connected to it but
> original src address may be used to decide which service given packet is
> subject to take.
>
> Sure I can impose an SR function and map it up front such that the router
> above would never need to inspect src address, but why to construct such
> architecture which only allows limited set of network programming as opposed
> to offer the choice on how to setup things by network operators ?
>
Robert,

Because the architecture, or at least protocol, is not correct.

Suppose a device inserts an EH into a packet that downstream causes
the packet to be dropped and generates an ICMP error which goes back
to the source. What is a source host supposed do with this? It might
be able to determine that it didn't send the EH, and if it's lucky it
might even be able to parse the offending EH and maybe even sees the
problem that caused the error. But then what? How does the host tell
the network to stop mucking with its packets so that they no longer
get dropped and the source host doesn't get blamed?

ICMP handling is just one of several issues that needs to be
addressed. If the only answer is that these aren't concerns because
the protocol is only deployed in controlled networks, then I claim
that's nothing more than hand waving which is not robust and doesn't
scale.

Tom