Re: Flow label [not draft-han-6man-in-band-signaling-for-transport-qos-00.txt]

"Leddy, John" <John_Leddy@comcast.com> Fri, 20 October 2017 19:06 UTC

Return-Path: <John_Leddy@comcast.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB56E134317 for <ipv6@ietfa.amsl.com>; Fri, 20 Oct 2017 12:06:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7AAYjKf7EMNe for <ipv6@ietfa.amsl.com>; Fri, 20 Oct 2017 12:06:42 -0700 (PDT)
Received: from vaadcmhout02.cable.comcast.com (vaadcmhout02.cable.comcast.com [96.114.28.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81FD8134308 for <ipv6@ietf.org>; Fri, 20 Oct 2017 12:06:42 -0700 (PDT)
X-AuditID: 60721c4c-3f3ff7000000a121-32-59ea4940d8ad
Received: from VAADCEX45.cable.comcast.com (vaadcmhoutvip.cable.comcast.com [96.115.73.56]) (using TLS with cipher AES256-SHA256 (256/256 bits)) (Client did not present a certificate) by vaadcmhout02.cable.comcast.com (SMTP Gateway) with SMTP id A1.F3.41249.0494AE95; Fri, 20 Oct 2017 15:06:40 -0400 (EDT)
Received: from VAADCEX41.cable.comcast.com (147.191.103.218) by VAADCEX45.cable.comcast.com (147.191.103.222) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 20 Oct 2017 15:06:39 -0400
Received: from VAADCEX41.cable.comcast.com ([fe80::3aea:a7ff:fe12:e268]) by VAADCEX41.cable.comcast.com ([fe80::3aea:a7ff:fe12:e268%19]) with mapi id 15.00.1347.000; Fri, 20 Oct 2017 15:06:38 -0400
From: "Leddy, John" <John_Leddy@comcast.com>
To: Tom Herbert <tom@herbertland.com>, Ole Troan <otroan@employees.org>
CC: 6man WG <ipv6@ietf.org>
Subject: Re: Flow label [not draft-han-6man-in-band-signaling-for-transport-qos-00.txt]
Thread-Topic: Flow label [not draft-han-6man-in-band-signaling-for-transport-qos-00.txt]
Thread-Index: AQHTSdAXWVOfoYBB40q7LpdFIl/VpKLtViyAgAAGXgA=
Date: Fri, 20 Oct 2017 19:06:38 +0000
Message-ID: <2C4B0FD6-418E-441F-8B43-6C60451E3A51@cable.comcast.com>
References: <CALx6S341v1zd2Q9bts8-zrKxU59kieJTJJ=nHQ5w4oQZg=t_cA@mail.gmail.com> <17525287-DDA8-4930-B90B-F9228DF69A90@employees.org> <CALx6S37wLvuJ9tUGjYmzm63eq_bxq0jXSEgfCtH_2i74SvrbLA@mail.gmail.com> <20171017181646.GD31973@faui40p.informatik.uni-erlangen.de> <CALx6S34VRS4GumsFSqN8uDkv4TOLC8q+rOvyN=evUk83KPeHHg@mail.gmail.com> <20171019211637.GB878@faui40p.informatik.uni-erlangen.de> <296dd642b31741cc8ec4aa4b52913037@XCH15-06-11.nw.nos.boeing.com> <CALx6S36s_SoTqpPo=jXmrFC+pgUkEmF8UB_sx_0zGcK-G8JeTQ@mail.gmail.com> <20171019220935.GD878@faui40p.informatik.uni-erlangen.de> <33ff8930-d1af-ea54-7bb4-a6a9b289269e@gmail.com> <20171020144015.GA3093@faui40p.informatik.uni-erlangen.de> <8AE3421D-304B-42F9-B12A-361E21DFF069@employees.org> <CALx6S35nr8JapogAC5Gsi0iPxXhJa9NKOHhzUAnJtmqTwEGtgg@mail.gmail.com> <CDAEBFFD-3B70-41D3-BB41-FCF40ADA2115@employees.org> <CALx6S35Y7OVFFSiw4-ei84HEk0FjEXmS8TnNx8Uex9-0rAxdfg@mail.gmail.com>
In-Reply-To: <CALx6S35Y7OVFFSiw4-ei84HEk0FjEXmS8TnNx8Uex9-0rAxdfg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/f.26.0.170902
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [68.87.29.11]
Content-Type: multipart/alternative; boundary="_000_2C4B0FD6418E441F8B436C60451E3A51cablecomcastcom_"
MIME-Version: 1.0
X-CFilter-Loop: Forward
X-Brightmail-Tracker: H4sIAAAAAAAAA11UYUwTZxjmu7uWo/bbvh6WfpyAcoubWxzCQlglbiPKZkmImWZmKT8GFY62 oZSm1yrdNKKRNsMsDmVEiShkbBqmwRjNmNmIVrOMbkq2ictYjMqqCBgXzMzSyHD39a543Z/m ued53/d53reXY2nuoIFn3d6A6Pc6PILewNRJVdZXK6pm7MVHr2Hr9NW/KOuh8Em99ddfJukK 2nbp+zlg+6S3W2cbGEhQ79I1hnUNose9XfSvebPO4FqY2Op7KLb+ML++DXxc3wGyWIxK8f6f 5kEHMLAc+prCj/f06ZWHKMBt5+5SysMowHN7z1KkRY9W48PdN3QEL0Ub8Zftx/QE02gZnhiY StZkIzuOPJmklZoaPDzZzii4HA9emU1iBq3Ep0Z/TmKIKvH5yLhqdikTnz7wJDk0C23Gj8PX MwkGKAf/EztFKWYWPBE/Tik7IDzw7RitYDOe/nNBDseyZlSEI093KfRqfPW3OFBwMT7/xQhD SjBajud61YlOPDY+q1PimPDokTijlFvw5SvDuk9Bbo/GuEfT0qNp6ZGn0uhlPHRhjVJSiLv2 38lU8CrcfrRXxeV44o+YXlvTB9hBYFxbVlRSUlr0mrXo9bKzgPzl/rzqYfCo2xYFiAWCEc6t n7FzOsd2KdQcBU0sJZjh5tC0nXtuW0tDyOWQXLX+oEeUhKWwr1iuhIv0tqCnSeDhiY0ym73I esUdkkcMyO+YUAD5t+7bOcuiJgUln7ve3RKUaoN+j/xGsLQ8dt9aMrbBEfpQ9LcoZlGwjGUE C6xZuG7nkNMREJtE0Sf6U+oOlhUwXG6TG01+0Sm2Nro9gZQs9z0iOyGtkgybD6tIoBytoMlb CL+bumfneK38/8gUmxUFTtYo5+aIPZR8jmbJ7VSts6FnXr6dMcUmbXPhR+RGXIrUWObDrclE KSndLgY6AXvm95vzFDuS/I3fOPYvxTHeFq/IW+AomYpIqyvoXVyfz4EPCuQMz2sEEoPPg4ku mTdr+GdJ+BWw8r68fK5GTQ+T+l7MgHr5vcmG75P1jfLX5Nn2HIyQSEtUMrk8hmHCmVROs3se rCG7m1Ul3W1GPjIlHzmTlEAp4Ahoj/wGYY0pVj2yQEguRaYduUw5siqlO/Ft4L2LG4Zun9n5 2ciSob03fY228OcHn5bvGUG7XrrQ/3f8NNa3NvdP1WV0/biuM8zuqz+0qTY0ftl0q/b2zgzp gHswwh3/Rn9vw9AH18RYVydjvNVuSmT0Vr8Tm67O/+rhVKByheDjT5Z29M82vngkFHiQyK/o 37JlLJB4+84Ld3cX7C4UGMnlKHmF9kuO/wAgdUG0pQUAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/zQJmz-trQ77UWFTaBOs_qXslrPQ>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Oct 2017 19:06:45 -0000

In order packet delivery requirements considered harmful to the Internet…

I’m assuming random per packet flow label assignments are within spec as long as they are set by the source.

John

From: ipv6 <ipv6-bounces@ietf.org> on behalf of Tom Herbert <tom@herbertland.com>
Date: Friday, October 20, 2017 at 2:44 PM
To: Ole Troan <otroan@employees.org>
Cc: 6man WG <ipv6@ietf.org>
Subject: Re: Flow label [not draft-han-6man-in-band-signaling-for-transport-qos-00.txt]



On Fri, Oct 20, 2017 at 11:20 AM, Ole Troan <otroan@employees.org<mailto:otroan@employees.org>> wrote:
Hi Tom,

> >>> Problem with flow label is same as with hop-by-hop option: burned because
> >>> nobody should dare use it for something useful with all the inconsistent
> >>> code out in the field.  Nothing against redefining it (with new encoding)
> >                                                          ^^^^^^^^^^^^^^^^^^^
> >> There is no encoding. It's 20 opaque bits (and always has been). Please
> >> read https://tools.ietf.org/html/rfc6437.
> >
> > Sorry, lame use of words. Meant to say "stronger definition of DO and DONTs
> > which may include new semantics". I never tried to analyze the state of
> > affairs on flow label as i did for router alert. Just taking it from what
> > i heard, last from Joel at the pechakucha.
>
> Right. If we take Joel's findings, then it appears the conclusion is that right now using a 4 tuple SA, DA, Prot, Flow for ECMP has a too high probability for failure. It would be very nice to have that fixed. Until then, we're forcing routers to parse transport headers.
>
> Ole,
>
> I cannot find this presentation. I did find a presentation to nanog about problems with flow labels, but that had more to do with the fact that the flow label does not have to be persistent for the life of a connection which breaks stateful firewalls that require consistent routing for a flow. I didn't see how this is a problem for ECMP itself. Is there a draft on this that details what the problems are?

I believe Joel's presentation was for a load balancer application.

Purely for ECMP it only has a consequence for reordering of packets. Which may be bad enough.
But sending packets of the same flow along different paths has problems with any network function that requires state. NAT64, virtual reassembly of fragments, ACLs and what not. Not that the network should do any of those of course.
Ole,

Right, but of course there's never been any requirement in IP that packets in a flow always follow the same path or are never received out of order. Even outside of using the flow label there are other ways that that for packets of a flow to take different paths or be OOO (fragmentation, UDP encapsulation, routing change, etc.). I don't see that there is a protocol problem with flow labels that would justify a general recommendation against their use. Maybe there should be a discussion in v6ops about this.

Tom