RE: [spring] WGLC - draft-ietf-spring-srv6-network-programming

"Ketan Talaulikar (ketant)" <ketant@cisco.com> Thu, 12 March 2020 15:28 UTC

Return-Path: <ketant@cisco.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83B293A0C7B; Thu, 12 Mar 2020 08:28:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=SFvJdba4; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=KXuuzn+R
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Ne-usyz1Tss; Thu, 12 Mar 2020 08:28:20 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DFF73A0C38; Thu, 12 Mar 2020 08:28:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=24958; q=dns/txt; s=iport; t=1584026900; x=1585236500; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=MQ3gvE8XEh1spWdjFYkAWSKFn6sJ7dfVgegHcSU2YJ4=; b=SFvJdba46YnbvSkbj4L9aBhmPJV5OWrlbW+3SdZ59aKrTte8EgiZqXQR 0vClf8JE2FmwYBEEaSEmhDTKrE4onEAEoBxsDvsgBa9SzpvB0S32bKXNd IjL0zMJFcL79x7dXcEP7M3qIBi74n2bn64otInQXIsHgXzBEznw4a7CS8 Q=;
IronPort-PHdr: 9a23:eTjdMBQYKyYl8Yf+9nyzVePvMNpsv++ubAcI9poqja5Pea2//pPkeVbS/uhpkESUDNfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH15g640NmhA4RsuMCEn1NvnvOi83AM1ESHdu/mqwNg5eH8OtL1A=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AvCACkVGpe/5xdJa1mHAEBAQEBBwEBEQEEBAEBgXuBJS8kLAVsWCAECyoKhAuDRQOKb4JfkzSEYoJSA1QJAQEBDAEBJQgCBAEBhEMCF4F/JDgTAgMBAQsBAQUBAQECAQUEbYVWDIVjAQEBAQIBEhEKEwEBNwEEBwQCAQgRBAEBKwICAjAdCAIEDgUIGoMFgX1NAw4gAQ6gaQKBOYhidYEygn8BAQWBQ0GDJxiCDAmBOIwvGoFBP4ERR4JNPoJkAQECAYE6KgUHH4JkMoIskG6FdYoUj0IKgjyHVo80gkqIJo5ngWeETZM0klkCBAIEBQIOAQEFgWkiKoEucBWDJwlHGA2OHQwXg1CEWTuFQXQCgSeKT4EyAYEKBQEB
X-IronPort-AV: E=Sophos;i="5.70,545,1574121600"; d="scan'208,217";a="650781697"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Mar 2020 15:28:19 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 02CFSIV5015956 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 12 Mar 2020 15:28:19 GMT
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 12 Mar 2020 10:28:18 -0500
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 12 Mar 2020 10:28:18 -0500
Received: from NAM04-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 12 Mar 2020 10:28:18 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=L+Zb5Vd02wteC4WKBAyQ8fLYhM7lsl2IhhUbfWmlsuQZmgcj5MbGi23mrMt5j2OCxZF141NlWsU9CLQjtDzc8jQk27vCS0moeyGs6YNUV0Ur9XIV0mKOPX01LT8rS0rIdjVyTorqLfS/SlEwgSAPWMMtcut4g3j+9cE7il7jancdi6Il32E8E4VGabdy1nI3qw1KgRx67gvp+uwZzLPt0MxwdTWYbzK7HVriyrH7siCypJXgD58v1nMNNt7km/kiLAWy+/qoLulVkya3pbTnSH98JMiq93hhNrakBfsXeunwvvQa8ibPoYM/u1Enkc6skpoyNoeXGuc8tKf/yt0ERQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=MQ3gvE8XEh1spWdjFYkAWSKFn6sJ7dfVgegHcSU2YJ4=; b=ONZD5EKzK+bUvMc8QyKg246EwwtkKjjXbID6xgSVG+lQLXcZoEgzlDPegqQDK4m1xRs5Oyvid6uZ56/gLRi2B2jD1e2ByUhSLnvFTrHzZFzm7OQ+tVnJcRHb22EgPDzndvmzLaBFfKOTZtf3Z6p6YG1GHCX2qf0ql+OeQtaAuidIGh7PGdmxvSx8HU6ErV9rozBaLbK0bab3zhnVaqIir4pGWEaNH4R8nUM1JOZE2roT7zApNLRwMfbqjsicPazh4bLattyD3G/srhTDp7hD6qdOBRBHnF1D2KrdZm/SaK6bn0s9EgymGPeTvwagdh0SysvN7SQTNAtfKVqwh3u8YA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MQ3gvE8XEh1spWdjFYkAWSKFn6sJ7dfVgegHcSU2YJ4=; b=KXuuzn+RK5CLKOicfc0QTXHj2mHaEDE9uvntk3kcuPNcfrCdkjVJWe+Z7ThTdL0VcqDv7F71NLaLEKfw/1PewYHXevargnAl4vRIJ7TGIloc19aIxU2BuJS9z1Q4ThaM4ILiLbe9XJotC8GlNQ+HjYQ5avZqF/nZW9uW/0lCFQs=
Received: from MW3PR11MB4570.namprd11.prod.outlook.com (2603:10b6:303:5f::22) by MW3PR11MB4698.namprd11.prod.outlook.com (2603:10b6:303:5a::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.16; Thu, 12 Mar 2020 15:28:17 +0000
Received: from MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::95ae:a984:9998:f2c8]) by MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::95ae:a984:9998:f2c8%7]) with mapi id 15.20.2793.018; Thu, 12 Mar 2020 15:28:17 +0000
From: "Ketan Talaulikar (ketant)" <ketant@cisco.com>
To: Sander Steffann <sander@steffann.nl>
CC: Andrew Alston <Andrew.Alston@liquidtelecom.com>, "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com>, "spring@ietf.org" <spring@ietf.org>, 6man WG <ipv6@ietf.org>
Subject: RE: [spring] WGLC - draft-ietf-spring-srv6-network-programming
Thread-Topic: [spring] WGLC - draft-ietf-spring-srv6-network-programming
Thread-Index: AdWrjZKMyJw/FcG0Qj29O28HuDn7+xFNkTUAAAh6zQAAUFctAABT0o7wAOZRhgAAGh18EAAHJ0aAAACo8mAACRCYAAAojBqAAAAsuqAAAZIPAAAAQnrQAAHrbAAAADupkAABchcAAAKDA7A=
Date: Thu, 12 Mar 2020 15:28:17 +0000
Message-ID: <MW3PR11MB4570AD011172680A9B5B8589C1FD0@MW3PR11MB4570.namprd11.prod.outlook.com>
References: <17421_1575566127_5DE93B2F_17421_93_1_53C29892C857584299CBF5D05346208A48D1A3DA@OPEXCAUBM43.corporate.adroot.infra.ftgroup> <3e2da3a5-5d1b-10a0-aeb4-320c57584241@nokia.com> <265A3B0A-358B-4163-B7E1-2FFE36B3607E@liquidtelecom.com> <14D40038-77D4-43DB-AC36-1199EE547944@cisco.com> <DBBPR03MB5415A2097FD500326B7907FCEEE30@DBBPR03MB5415.eurprd03.prod.outlook.com><C223D73B-D556-427C-82AB-0042C33E32F4@cisco.com> <DBBPR03MB5415ADF9271EE267C3205CCBEEFC0@DBBPR03MB5415.eurprd03.prod.outlook.com><0F51DF13-B058-4850-91E1-AF4B49DE158C@cisco.com> <DBBPR03MB54150C911B32F8F0B2CC7C59EEFC0@DBBPR03MB5415.eurprd03.prod.outlook.com><ED4F23CB-C6EE-454F-89B5-E4C088218046@cisco.com> <DBBPR03MB54159F78083CBCA412243A91EEFD0@DBBPR03MB5415.eurprd03.prod.outlook.com> <MW3PR11MB45701FA2CE7AC6823891A1F1C1FD0@MW3PR11MB4570.namprd11.prod.outlook.com><AF5782C8-DB7C-4C20-BDB5-E9212DCC3244@steffann.nl> <MW3PR11MB457048CF5DA72DF87D1BC0ABC1FD0@MW3PR11MB4570.namprd11.prod.outlook.com><5004D04F-11DB-4F3E-B5F1-2D6309FC449B@steffann.nl> <MW3PR11MB4570257104C28AFC09D00670C1FD0@MW3PR11MB4570.namprd11.prod.outlook.com> <E23B8581-16ED-4C1D-8FF6-AE28F599D74A@steffann.nl>
In-Reply-To: <E23B8581-16ED-4C1D-8FF6-AE28F599D74A@steffann.nl>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ketant@cisco.com;
x-originating-ip: [72.163.220.23]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a9f54bfd-aa63-4500-d456-08d7c699fd39
x-ms-traffictypediagnostic: MW3PR11MB4698:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <MW3PR11MB469888D60AF6D1513523777AC1FD0@MW3PR11MB4698.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0340850FCD
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(376002)(396003)(346002)(366004)(199004)(966005)(186003)(26005)(66446008)(52536014)(81156014)(81166006)(8676002)(6506007)(53546011)(478600001)(7696005)(8936002)(6916009)(5660300002)(76116006)(66556008)(2906002)(4326008)(71200400001)(9326002)(64756008)(33656002)(66946007)(66476007)(86362001)(55016002)(316002)(9686003)(54906003); DIR:OUT; SFP:1101; SCL:1; SRVR:MW3PR11MB4698; H:MW3PR11MB4570.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata: SPSUfQIcpXqfERmE/NPPC/7OYz+IhNCU/assCuZtUgstCsFOgQo1Od5BzaoHAqYKsO6vM9WYzKssqPBlQSmxzDFiynaRcnWlgxaRH6ags8kirD47+3bnvUsyd4gDmTlGHrgCDrzs/yST96EiClTuYg==
Content-Type: multipart/alternative; boundary="_000_MW3PR11MB4570AD011172680A9B5B8589C1FD0MW3PR11MB4570namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: a9f54bfd-aa63-4500-d456-08d7c699fd39
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2020 15:28:17.5701 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 52Xp3273HMzxgsvsz/49P/OJDh3BmqyLtifqJ3FR7ZHPTyk+/740UZqFH1sYlFnWZ/+DG/qrR+KKDZzJg8TATA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR11MB4698
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com
X-Outbound-Node: rcdn-core-5.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/z09RD5ErKAct1MC3cPtkRCIvhU4>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2020 15:28:24 -0000

Hi Sander,



Please check inline below.



-----Original Message-----
From: Sander Steffann <sander@steffann.nl>
Sent: 12 March 2020 19:14
To: Ketan Talaulikar (ketant) <ketant@cisco.com>
Cc: Andrew Alston <Andrew.Alston@liquidtelecom.com>; Pablo Camarillo (pcamaril) <pcamaril@cisco.com>; spring@ietf.org; 6man WG <ipv6@ietf.org>
Subject: Re: [spring] WGLC - draft-ietf-spring-srv6-network-programming



Hi,



> In this context, we are talking about allocations for the provider's infrastructure.



No, we’re not. Allocations are the superblocks that RIRs delegate to an LIR. Before being allowed to use address space an LIR has to make assignments from that allocation. It is that assignment policy that seems incompatible with the way that net-pgm seems to use addresses.

[KT] I was talking about the allocation for use for SRv6 – that is for the provider’s infrastructure.

> > So what is it that you and Andrew see in the net-pgm draft or the SRv6 proposal that lead you to believe such a change in the IPv6 assignment or allocation sizes are required by RIRs?

>

> Well, your example mentions that a /40 is used for SRv6 in a very large setup. A regular business entity has a /48 and a regular ISP will have a /29 available.

> [KT] The example of /40 is for a large SP across their network infrastructure – not a single POP.



I understand. At least one RIR has a policy that doesn’t allow for assignments to network-side infrastructure, only assignments per PoP. I’m not saying this shouldn’t be fixed (I think this is an oversight), but this working group should be aware of that.



> I think it is necessary to look at what an expected address space requirements for SRv6 will be for such entities, and whether that fits and leaves enough remaining address space for the rest of the network.

> [KT] Sure and I would expect such discussions to happen at NOGs or in other operational forums including within the IETF.

>

> What is also necessary is to see if the way SRv6 uses addresses is compatible with the RIR policies. In the RIPE NCC region we havehttps://www.ripe.net/publications/docs/ripe-707#assignment_infra, which basically allows for a separate /48 per PoP and a single /48 for in-house operation of the operator. If changes are required in RIR policies their communities need to be told so, and mutual expectations of what will and will not be considered acceptable address space use will have to be discussed.

> [KT] I believe so and we should get the feedback and inputs of operators that have deployed or deploying it. AFAIK none of them have raised such a concern or any issue with the RIR policies.



That’s nice. I’m just making you and the rest of the working group aware of the incompatibilities that I have noticed. Apparently so far you have been lucky that you haven’t hit the limits of RIR policies yet, or that the operators have violated the RIR policy without realising it. This is why I am informing the WG of this potential issue that might need some work.

[KT] I think it is unfair to say that operators deploying SRv6 are not aware of their RIR’s policies and cannot be expected to perform their allocations appropriately. Coming to the net-pgm document itself, there are no incompatibilities – let me clarify in further comments what might be the source of this misconception.



> > I am assuming this is the same "IP Space burn" topic that Andrew alludes to …

>

> Yes

> [KT] Thanks for confirming. So this is then a discussion on how providers want to manage their address space and allocations within it for SRv6. Nothing prevents such a discussion from continuing. I just don’t see how this as being related to the progression of the net-pgm draft towards publication.



The draft introduces an new IPv6 address format, so I think it has to at least give guidelines on the expected use and the expected sizes of LOC (L), FUNCT (F) and ARG (A). Although 3.1 says "F and A may be any value as long as L+F+A <= 128” I noticed that 9.2 says "The range of the registry is 0-65535 (0x0000 - 0xFFFF)”. That places at least a minimum size limit on the length of F that should be reflected in 3.1. What I am missing completely are guidelines on the size of A that can be reasonably expected.

[KT] Seems like you might have the same misconception as few others had between “behavior code points” (in 9.2) and the “function bits” in the SIDs. Please check

https://tools.ietf.org/html/draft-ietf-spring-srv6-network-programming-13#section-9.2


   This
   sub-registry maintains 16-bit identifiers for the SRv6 Endpoint
   behaviors.  This registry is established to provide consistency for
   control plane protocols which need to refer to these behaviors.
   These values are not encoded in the function bits within a SID.





Concretely:

- Section 3.1 needs guidelines on the expected sizes of F and A, which will give operators guidance on the L they should assign to network programming

- Explicit guidance on the size of L would be greatly appreciated

- The guideline on the size of F should state that at least 16 bits are required (considering section 9.1). Whether the authors want to specify F==16 or F>=16 is up to them.

[KT] I think you are suggesting for the specification to be prescriptive when clearly it needs to be flexible as reflected in the draft text to allow operators the flexibility in managing allocations and assignments based on their use-cases and requirements (one of these factors would be what they have/get from their RIR). We can obviously continue discussions on this topic in the Spring WG (and possibly others related) and get feedback from operators and their deployments – that would lead to more meaningful guidance. I don’t think this standards track document is the right place for such a discussion.



Thanks,

Ketan



Cheers,

Sander