Re: [L2tpext] [nvo3] New Version Notification for draft-fan-l2tp-vp-01.txt

Tom Herbert <therbert@google.com> Thu, 10 April 2014 18:23 UTC

Return-Path: <therbert@google.com>
X-Original-To: l2tpext@ietfa.amsl.com
Delivered-To: l2tpext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF5F71A02BE for <l2tpext@ietfa.amsl.com>; Thu, 10 Apr 2014 11:23:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.651
X-Spam-Level:
X-Spam-Status: No, score=-1.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0zxf-SpbmtUh for <l2tpext@ietfa.amsl.com>; Thu, 10 Apr 2014 11:23:21 -0700 (PDT)
Received: from mail-ie0-x232.google.com (mail-ie0-x232.google.com [IPv6:2607:f8b0:4001:c03::232]) by ietfa.amsl.com (Postfix) with ESMTP id 4A7C81A02BC for <l2tpext@ietf.org>; Thu, 10 Apr 2014 11:23:21 -0700 (PDT)
Received: by mail-ie0-f178.google.com with SMTP id lx4so4162817iec.23 for <l2tpext@ietf.org>; Thu, 10 Apr 2014 11:23:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=MaVrkqOdUawXk4QQ0Zi8mVTR9PhsBowOwg0N+LD+5qM=; b=Tu8us2r9YllrtG70x4kkPStmhG1aLTzkGbgmR/jYGnNP7xh66bHXJEaowtLCAvz3qX JHB/DQ4UmhKc1esu4Ud8eE3DEG14gV/DN5BF0OWQ7JFJGeM2t0Uv0bTpukNEr7D+9KDm QC6x1zDn+2M4fH07jg8mJMmWv4OnGR4L0BXEk8iTVA+hjw0n/b4SCpriqkbIPShiaGsB mJfmAQ7ZnMafcxa/a0oiKTQcmd6yS0qL5TJacNea+1QKHhzzktKcRXgwFOhrzE5IA9KA YQR1Es1+PwZqOaSzrCDARGyJNHeQKNQ+nxHxmWE8PWOn5UNzUGv0RsJM4/ooN3ithkhW euXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=MaVrkqOdUawXk4QQ0Zi8mVTR9PhsBowOwg0N+LD+5qM=; b=ALMe2R2QYjt1Xx1eFQF/cAxomi77I9VAeUvU2gESF589aS2cTZkWtnuSlq4q3MrUf3 ATgsVl8V8CvDJxfkcSHoWgLv0ApRP3e2xcocbAF5UPhpV/8yRYTLLJ38BwaReGysV+Tk fPV+skHd5Z91+xRrSM7pj7S29M8CG08xele+OB2oQZ2n2UQhc1eCesRFUlEmLh043xJ8 X8mXKYgR7rwfu+dpiBmUAZQvAkNhCYUbdU+Te9eBaFIr9IPw2zlAI5B0oMYrTEmcXrWE 9KRhbo5nUma5YSJwfGRUd9sY6DEWQdsiun28d1HN4lMzDbCQaU77R7yeKSpX5b+2qFTN eXEg==
X-Gm-Message-State: ALoCoQnRTYxGWJa6HH3ZHKjIxduKRCM1QWou2T55RPA9LHnt7n2wEplYtx/TDezS9ZFvWE6mBAXf2vQhkY5h4m019z/fmceyIQqF4DKMAqZoEdAYq0reA7KSH3D2a5bxYFw+bwoSRo18ow1ogYuGqjaiTqwQhLNnYJR84gFCxHFPft37VoU/1OB3t1c3cm8FnkHRzKQIvpCm
MIME-Version: 1.0
X-Received: by 10.43.151.7 with SMTP id kq7mr2723246icc.78.1397154200155; Thu, 10 Apr 2014 11:23:20 -0700 (PDT)
Received: by 10.64.148.98 with HTTP; Thu, 10 Apr 2014 11:23:20 -0700 (PDT)
In-Reply-To: <1045434E-F6BE-444E-8E28-B2DCCE1B0A35@cisco.com>
References: <20140410032205.30725.83163.idtracker@ietfa.amsl.com> <C02846B1344F344EB4FAA6FA7AF481F10F3E29D0@SZXEMA502-MBS.china.huawei.com> <CA+mtBx9r75d3bkk4FeHWXjPMwfetr97rBuxWoubDsx=_Y_RZ0g@mail.gmail.com> <1045434E-F6BE-444E-8E28-B2DCCE1B0A35@cisco.com>
Date: Thu, 10 Apr 2014 11:23:20 -0700
Message-ID: <CA+mtBx9480QZV-+FByVi2yF9dnGQDAFau8-Xak-vD+wuZjmTOQ@mail.gmail.com>
From: Tom Herbert <therbert@google.com>
To: "Carlos Pignataro (cpignata)" <cpignata@cisco.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/l2tpext/syN0fdTwsu2qTdUa-QoXrotQbf4
Cc: "l2tpext@ietf.org" <l2tpext@ietf.org>, Namgon Kim <ng.kim@kt.com>, Fanduoliang <fanduoliang@huawei.com>, "nvo3@ietf.org" <nvo3@ietf.org>, Zehn Cao <zehn.cao@gmail.com>
Subject: Re: [L2tpext] [nvo3] New Version Notification for draft-fan-l2tp-vp-01.txt
X-BeenThere: l2tpext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Layer Two Tunneling Protocol Extensions <l2tpext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/l2tpext>, <mailto:l2tpext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/l2tpext/>
List-Post: <mailto:l2tpext@ietf.org>
List-Help: <mailto:l2tpext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/l2tpext>, <mailto:l2tpext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Apr 2014 18:23:23 -0000

> - To get hashing (for ECMP, RSS, etc.) in the network we'd almost
> certainly use L2TP over UDP, so L2TP-VP should probably have a format
> defined for use with UDP.
>
>
> There's also hashing for L2TPv3 directly over IP (e.g., RFC 5640)
>
Unfortunately to use that I'd need to replace all my hardware to
support it, and even if we did that the second we start putting L2TP
in IPsec we're right back to not having the hash. Same thinking
applies to GRE and it's use of key field for hash. I suppose it's not
by design, but UDP encap will likely be the de facto standard in the
data center-- it's not really that bad just a few bytes of overhead
buys us compatibility with a lot of devices. There's some pesky issues
to resolve, like whether UDP checksum is worthwhile and how to
interact with NAT, but if we do this right we should be a able to
provide a solution for all IP protocols (e.g.
http://tools.ietf.org/html/draft-herbert-gue-01 :-) )

Tom

> Thanks,
>
> Carlos.
>
> - Even with Type field, this still suffers from the same problem L2TP
> has that network devices won't be able to parse the packet beyond the
> L2TP header (the cookie field makes the header variable length). This
> eliminates the ability to implement the protocol with LRO for
> instance. I suggest you take four or five bits from reserved section
> for header length to resolve this (see example in GUE).
> - Cookie mechanism is an advantage over VXLAN and nvgre I believe, but
> why limit it to 32 bits? 64 bits is much stronger, and at some point
> we might even want 128 bits to do strong authentication.
>
> Some more general questions applicable to this and some other proposals.
>
> - "TNI field"-- this seems to use the same 24 bit left shifted format
> of nvgre and VXLAN. I still don't see the rationale for this! Why
> can't the full 32 bit field be allocated for vni? A large deployment
> will be using various levels of hierarchical allocation and possibly
> obfuscation of vni (TNI). The nvo3 requirements on this are vague
> ("100's of thousands of virtual networks"), but they clearly don't
> expect this the VNI to be a simple flat space either.
> - "Outer Ethernet Header"-- showing the outer Ethernet header in L3
> encapsulations examples is not necessary, use of Ethernet is not a
> requirement, and this is potentially very misleading. For instance,
> the outer Ethernet FCS does *not* protect the packet end to end in an
> L3 routed network. Personally, I think it would be more illustrative
> to show the IP packet in the inner Ethernet frame instead to see how
> its alignment is affected.
>
> Thanks,
> Tom
>
> B.R.
> Frank
>
> -----Original Message-----
> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> Sent: Thursday, April 10, 2014 11:22 AM
> To: Xialiang (Frank); Zhen Cao; Fanduoliang; Zehn Cao; Namgon Kim; Namgon
> Kim; Fanduoliang; Xialiang (Frank)
> Subject: New Version Notification for draft-fan-l2tp-vp-01.txt
>
>
> A new version of I-D, draft-fan-l2tp-vp-01.txt has been successfully
> submitted
> by Liang Xia and posted to the IETF repository.
>
> Name:         draft-fan-l2tp-vp
> Revision:     01
> Title:                L2TP-VP: Layer Two Tunneling Protocol - Virtualization
> Profile
> Document date:        2014-04-10
> Group:                Individual Submission
> Pages:                9
> URL:
> http://www.ietf.org/internet-drafts/draft-fan-l2tp-vp-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-fan-l2tp-vp/
> Htmlized:       http://tools.ietf.org/html/draft-fan-l2tp-vp-01
> Diff:           http://www.ietf.org/rfcdiff?url2=draft-fan-l2tp-vp-01
>
> Abstract:
>   This document describes Layer Two Tunneling Protocol (L2TP)'s
>   virtualization profile (L2TP-VP), which reuses session header of L2TP
>   data message to securely support overlay networks for multiple
>   tenants, and simplifies tunnel setup by disabling all kinds of L2TP
>   control messages.
>
>
>
>
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> _______________________________________________
> nvo3 mailing list
> nvo3@ietf.org
> https://www.ietf.org/mailman/listinfo/nvo3
>
>
> _______________________________________________
> nvo3 mailing list
> nvo3@ietf.org
> https://www.ietf.org/mailman/listinfo/nvo3
>
>