Re: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS source/destination routing project)

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Tue, 29 July 2014 03:16 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: isis-wg@ietfa.amsl.com
Delivered-To: isis-wg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B58BE1A0294 for <isis-wg@ietfa.amsl.com>; Mon, 28 Jul 2014 20:16:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.502
X-Spam-Level:
X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYqi8e-j1AH4 for <isis-wg@ietfa.amsl.com>; Mon, 28 Jul 2014 20:15:57 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 570D81A0242 for <isis-wg@ietf.org>; Mon, 28 Jul 2014 20:15:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13602; q=dns/txt; s=iport; t=1406603757; x=1407813357; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=sVmVB1y38JN4oITSLIWlBcDFTa9kYqfiORe466OywDU=; b=C2mxRcZsQjCbSzBwrS5bWloDgs7vt9o0PSivW220uxf6o6F3g9T6NVPl ZrAy+krd2D4RQxXjy1H6CFSt81TtvfJmfZWYdwx8OaflCYdHwDhCL3Ho4 R2sc12wbato3dLMEAmY1nIeFjA57VRWZsEshoWbEMsDGQSFqZsD1+mg/w c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhoFAIYR11OtJA2J/2dsb2JhbABZgw5SVwS7NJBKCodLAYEUFneEAwEBAQQBAQE3NAsMBAIBCBEEAQEBChQJBycLFAkIAgQBDQUIAYg5DaYWmGcXjnsBAR4xBwaDKYEbBZcqkBoEiFCCA4FGbIEDCRcEHg
X-IronPort-AV: E=Sophos;i="5.01,754,1400025600"; d="scan'208";a="64750932"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-6.cisco.com with ESMTP; 29 Jul 2014 03:15:56 +0000
Received: from xhc-rcd-x14.cisco.com (xhc-rcd-x14.cisco.com [173.37.183.88]) by alln-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id s6T3Fuv0014372 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 29 Jul 2014 03:15:56 GMT
Received: from xmb-aln-x02.cisco.com ([169.254.5.120]) by xhc-rcd-x14.cisco.com ([173.37.183.88]) with mapi id 14.03.0123.003; Mon, 28 Jul 2014 22:15:55 -0500
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: Uma Chunduri <uma.chunduri@ericsson.com>, David Lamparter <equinox@diac24.net>
Thread-Topic: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS source/destination routing project)
Thread-Index: AQHPqoo56KcbcZsyzUKnNYZgargt2Zu173YggABgFoCAAAe8AP//yLGwgAB+WAD//780cA==
Date: Tue, 29 Jul 2014 03:15:55 +0000
Message-ID: <F3ADE4747C9E124B89F0ED2180CC814F23E85A2E@xmb-aln-x02.cisco.com>
References: <94217864-2004-4F82-8602-B9BAB4639BCE@cisco.com> <alpine.DEB.2.02.1407231253240.7929@uplift.swm.pp.se> <20140723114049.GH801478@jupiter.n2.diac24.net> <A7EEA4F6-686B-4B96-89DB-35D923994179@cisco.com> <20140724152101.GU801478@jupiter.n2.diac24.net> <20140728162207.GB18387@juniper.net> <F3ADE4747C9E124B89F0ED2180CC814F23E851B1@xmb-aln-x02.cisco.com> <20140728173421.GF801478@jupiter.n2.diac24.net> <F3ADE4747C9E124B89F0ED2180CC814F23E854D5@xmb-aln-x02.cisco.com> <1B502206DFA0C544B7A60469152008633F317504@eusaamb105.ericsson.se> <20140728213830.GG801478@jupiter.n2.diac24.net> <F3ADE4747C9E124B89F0ED2180CC814F23E85788@xmb-aln-x02.cisco.com> <1B502206DFA0C544B7A60469152008633F3176E1@eusaamb105.ericsson.se>
In-Reply-To: <1B502206DFA0C544B7A60469152008633F3176E1@eusaamb105.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.21.144.117]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/isis-wg/mn0mx6WKMeWuTWKOZagSC-GPAdk
Cc: Hannes Gredler <hannes@juniper.net>, "isis-wg@ietf.org" <isis-wg@ietf.org>
Subject: Re: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS source/destination routing project)
X-BeenThere: isis-wg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF IS-IS working group <isis-wg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/isis-wg/>
List-Post: <mailto:isis-wg@ietf.org>
List-Help: <mailto:isis-wg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Jul 2014 03:16:00 -0000

Uma -

You are not talking about the deployment requirements which this thread is about. We are not discussing how to transition an existing network which is in non-MT mode to MT mode - nor even how to introduce IPv6 to an IPv4 only network. What is being discussed is what are the possible deployments for bringing up a brand new IPv6 only network. My understanding of David's concern was that he thought if he chose to use MTID #2 for IPv6 that the use or non-use of MTID #0 might be relevant. I am only pointing out that is not the case. 

I agree that if there is the possibility of supporting IPv4 and IPv6 someday that MT provides more flexibility because if you do that from day one you don't have to worry if the two topologies are not fully congruent - even temporarily.

David - if my understanding of your requirements is incorrect please set me straight. The point of this thread is to address your questions and concerns - hopefully we are doing that.

   Les


> -----Original Message-----
> From: Uma Chunduri [mailto:uma.chunduri@ericsson.com]
> Sent: Monday, July 28, 2014 6:53 PM
> To: Les Ginsberg (ginsberg); David Lamparter
> Cc: Hannes Gredler; isis-wg@ietf.org
> Subject: RE: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS
> source/destination routing project)
> 
> 	>- but there is no reason to have angst about MTID #0. Some context:
>               > .....
> 	>In the case of MTID #0 (legacy), it is quite possible to support IPv4
> only, IPv6 only, or IPv4 and IPv6 on MTID #0.
> 	>All are legal deployments though (to repeat) all routers
> participating in the topology have to behave consistently.
> 
> The key word which is laying low is the "consistency" ... it's also can be
> called congruency..
> 
> 1. You can use MTID = 0 in MT mode advertising prefixes 235s (for V4), 237s(
> for V6)..
> 2. You can use NO MT and just use 236 (for V6)
> 3. Or MT transition i.e., both 237 and 236 (for say V6)
> 4. You can have MTID= 2 and use 237 (V6)
> 
> In #1, #2 #3 (when partial deployments are there with MT non-MT)  make
> *sure* your topology is indeed congruent for V4 and V6 AFs else you can
> potentially  black hole the traffic.
> Our customers (at least few guys had enough and switched to #4).
> --
> Uma C.
> 
> 
> -----Original Message-----
> From: Les Ginsberg (ginsberg) [mailto:ginsberg@cisco.com]
> Sent: Monday, July 28, 2014 4:31 PM
> To: David Lamparter; Uma Chunduri
> Cc: Hannes Gredler; isis-wg@ietf.org
> Subject: RE: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS
> source/destination routing project)
> 
> David -
> 
> I think you are considering the right issues - but there is no reason to have
> angst about MTID #0. Some context:
> 
> Conceptually, the association of AFI(s) with a given topology is arbitrary.
> There can be one or many AFIs supported on a given topology - though all
> routers participating in that topology need to be consistent in their AFI
> support. RFC 5120 reserved a small number of MTIDs for specific purposes -
> MTID #2 for IPv6 only is one of them.
> 
> In the case of MTID #0 (legacy), it is quite possible to support IPv4 only, IPv6
> only, or IPv4 and IPv6 on MTID #0. All are legal deployments though (to
> repeat) all routers participating in the topology have to behave consistently.
> It is also possible to support/deploy MTID #2 without supporting MTID #0 at
> all.
> 
>    Les
> 
> > -----Original Message-----
> > From: Isis-wg [mailto:isis-wg-bounces@ietf.org] On Behalf Of David
> > Lamparter
> > Sent: Monday, July 28, 2014 2:39 PM
> > To: Uma Chunduri
> > Cc: Les Ginsberg (ginsberg); Hannes Gredler; isis-wg@ietf.org
> > Subject: Re: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS
> > source/destination routing project)
> >
> > On Mon, Jul 28, 2014 at 09:10:49PM +0000, Uma Chunduri wrote:
> > > > If TLV 144 semantics are a fit you could use that TLV and thereby
> > > > avoid
> > the worry about not having a router-id
> > >
> > > I would See 144 is the right choice.
> > >
> > > Quick thoughts on why -
> > >
> > >      - as it is rightly identified below there may not be 4 byte
> > > unique router-
> > ID  required by 242
> > >                - auto-configuration is to uniquely assign system ID
> > > and need not
> > extend this to create router-ID  (as meaning of this is different for
> > ISIS)
> > >     - No need to scope this capability across domain (what 242 gives)
> > >     - it could be *critical* to have MT  semantics as deployment can
> > > be only
> > specific to one topology (and may not have V4 at all)
> >
> > Indeed I'm currently trying to find out if there are any problems with
> > doing MT, but I believe there aren't, and we should indeed move all of
> > this to MT ID #2.  (And then use TLV 144 for the capability.)
> >
> > On the per-topology question - well, in a way it's the natural thing
> > to do, since the ability to process routes with a source attribute is
> > essentially a property of the underlying RIB.  In fact dst-src is
> > pretty much impossible with multicast RPF lookups - there's no src
> > prefix when doing that.  So for MT ID #4 it'd be invalid to list this capability.
> > (Also, the capability makes no sense for IPv4 topologies.  No dst-src
> > for IPv4.)
> >
> > But - I need a little time to go through the implications of this.
> > The argument for using MT-ID 2 is that we can have divergent IPv4/IPv6
> > topologies, but as far as I can currently see, even with MT we'll run
> > into problems sunsetting IPv4 (because it's the default topology.)
> >
> >
> > -David
> >
> >
> > P.S.: Uma, thanks for pointing out the need for MT in the first place!
> >
> > > -----Original Message-----
> > > From: Isis-wg [mailto:isis-wg-bounces@ietf.org] On Behalf Of Les
> > Ginsberg (ginsberg)
> > > Sent: Monday, July 28, 2014 1:37 PM
> > > To: David Lamparter
> > > Cc: Hannes Gredler; isis-wg@ietf.org
> > > Subject: Re: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS
> > source/destination routing project)
> > >
> > > David -
> > >
> > > The significant difference between TLV 242 and TLV 144 is that the
> > > former
> > has node semantics while the latter has topology semantics. Among
> > other things this means that TLV 242 supports both area scoped and
> > domain scoped flooding whereas TLV 144 is confined to a single area
> > (or potentially the L2 sub-domain). It isn't clear to me why dst-src
> > routing capability needs to be announced per topology - perhaps you can
> clarify that?
> > >
> > > If TLV 144 semantics are a fit you could use that TLV and thereby
> > > avoid the
> > worry about not having a router-id.
> > >
> > > Alternatively, you could employ router-id assignment semantics
> > equivalent to what is specified in
> > http://www.ietf.org/id/draft-ietf-ospf-
> > ospfv3-autoconfig-06.txt . This would allow you to conform to TLV 242
> > more strictly.
> > > The IS-IS autoconfig draft does not currently have this - presumably
> > because it was not thought of as necessary.
> > >
> > > I think you need define your requirements more clearly in order to
> > > make
> > the best choice.
> > >
> > >    Les
> > >
> > > > -----Original Message-----
> > > > From: David Lamparter [mailto:equinox@diac24.net]
> > > > Sent: Monday, July 28, 2014 10:34 AM
> > > > To: Les Ginsberg (ginsberg)
> > > > Cc: Hannes Gredler; isis-wg@ietf.org
> > > > Subject: Re: [Isis-wg] Capability TLV vs. Router ID (was: IS-IS
> > > > source/destination routing project)
> > > >
> > > > Les, Hannes, isis-wg,
> > > >
> > > >
> > > > TL;DR: 242 works, we simply have no unique 4-byte identifier.
> > > >
> > > >
> > > > [we have another ongoing discussion thread regarding dst-src
> > > > routing wrt MT-ISIS, there may be changes to what exactly is
> > > > needed as a result of that.  We didn't really take MT into
> > > > consideration so far - now TLV 144 is a candidate too.]
> > > >
> > > > the scope in this particular case is area wide, and I'd indeed
> > > > like to use TLV 242.  The problem is simply, in the homenet we
> > > > don't have a router ID.  (So, this isn't a dst-src problem, this
> > > > is a homenet
> > > > problem.)  There is no stable unique IPv4 address, in fact there
> > > > may not be IPv4 at all.
> > > >
> > > > We have the NET, which currently there is a collision resolution
> > > > algorithm for, but - that's a heap of complexity that is only
> > > > there because "$vendor could mess up again and produce routers
> > > > with the
> > same
> > > > MAC address."  It's really supposed to be the MAC addr.
> > > >
> > > > As a result, autoconfiguring a 4-byte ID, while possible, is way
> > > > down on the list of desirable things to do.  Hence, I would like
> > > > to specify TLV
> > > > 242 with router ID 0.0.0.0 and S=0 for application in area-wide
> > > > distribution, where the TLV<>Router association is clear from the
> > > > LSP's originating router.
> > > >
> > > > Then again, the result might be different when we've gotten a
> > > > proper look at the multitopology interactions.
> > > >
> > > > Cheers,
> > > >
> > > > -David
> > > >
> > > > On Mon, Jul 28, 2014 at 05:00:33PM +0000, Les Ginsberg (ginsberg)
> wrote:
> > > > > Hannes/David -
> > > > >
> > > > > Advertising a capability whose scope is area wide (or domain
> > > > > wide) in
> > > > hellos is inappropriate. TLV 242 was created precisely for this purpose.
> > > > >
> > > > > TLV 242 is NOT TE specific - you can see that by the fact that
> > > > > there are
> > > > already existing uses which are NOT TE related.
> > > > >
> > > > > In regards to Router-Id, again this is NOT TE specific. The
> > > > > requirement in
> > > > RFC 5305 is
> > > > >
> > > > > " a single
> > > > >       stable address that can always be referenced in a path that will
> > > > >       be reachable from multiple hops away, regardless of the state of
> > > > >       the node's interfaces."
> > > > >
> > > > > RFC 5305 also explicitly states that a router id can be used for
> > > > > purposes
> > > > other than TE - so I do not see why TLV 242 is insufficient in this case.
> > > > >
> > > > >    Les
> > > > >
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Isis-wg [mailto:isis-wg-bounces@ietf.org] On Behalf Of
> > > > > > Hannes Gredler
> > > > > > Sent: Monday, July 28, 2014 9:22 AM
> > > > > > To: David Lamparter
> > > > > > Cc: isis-wg@ietf.org
> > > > > > Subject: Re: [Isis-wg] Who did you have do an IS-IS
> > > > > > source/destination routing project?
> > > > > >
> > > > > > hi david,
> > > > > >
> > > > > > i'd be in favour of a CAP registry for IIH (long-term we need
> > > > > > that
> > > > > > anyway) - do not care much wether we open-up 242 to IIHs or
> > > > > > use a new top-level code-point.
> > > > > >
> > > > > > @les - opinions ?
> > > > > >
> > > > > > /hannes
> > > > > >
> > > > > > On Thu, Jul 24, 2014 at 05:21:01PM +0200, David Lamparter wrote:
> > > > > > | (IS-IS parts in this mail, match behaviour in separate mail)
> > > > > > |
> > > > > > | Fred, WG Chairs:
> > > > > > |
> > > > > > | Regarding the IS-IS part, we didn't find major issues while
> > > > implementing
> > > > > > | draft-baker-ipv6-isis-dst-src-routing-01, though there is
> > > > > > | one issue that needs broader concern.  We need to signal a
> > > > > > | router's capability to do dst-src routing, in order to
> > > > > > | prevent loops when a reachability with source prefix is
> > > > > > | behind a router that does not
> > have this capability.
> > > > > > | (The latter router may send the packets back by matching
> > > > > > | another, shorter non-specific route for the same destination
> > > > > > | prefix, since it doesn't consider the source match more
> > > > > > | specific.  Loop example
> > > > included
> > > > > > | below.)
> > > > > > |
> > > > > > | Now there is a small issue with this capability indication -
> > > > > > | there is no generic IS-IS capability TLV, only the
> > > > > > | TE-targeted
> > > > > > | RFC4971 (TLV 242) which uses a quad-octet Router ID.  We
> > > > > > | have no such router ID and
> > > > would
> > > > > > | prefer to not elect/autoconfigure one.  This leaves us with
> > > > > > | these
> > > > > > | possibilities:
> > > > > > | - create a "dst-src capable" TLV, wasting a top codepoint
> > > > > > | - create a "generic" capability TLV without router ID (maybe
> > including
> > > > > > |   NET instead, for inter-level flooding)
> > > > > > | - adjust the 242 capability TLV to permit router-id 0.0.0.0 (or some
> > > > > > |   other reserved value), while forbidding cross-level
> > > > > > | flooding when
> > this
> > > > > > |   value is used. (S=0)
> > > > > > |
> > > > > > | I don't have useful arguments in this regard and would
> > > > > > | appreciate input (can resend this to WG mailing list if you
> > > > > > | believe that to be more
> > > > > > | appropriate)
> > > > [cut]
> > >
> > > _______________________________________________
> > > Isis-wg mailing list
> > > Isis-wg@ietf.org
> > > https://www.ietf.org/mailman/listinfo/isis-wg
> >
> > _______________________________________________
> > Isis-wg mailing list
> > Isis-wg@ietf.org
> > https://www.ietf.org/mailman/listinfo/isis-wg