Re: Comments on draft-sd-l2vpn-evpn-overlay

"Ali Sajassi (sajassi)" <sajassi@cisco.com> Mon, 21 July 2014 04:55 UTC

Return-Path: <sajassi@cisco.com>
X-Original-To: l2vpn@ietfa.amsl.com
Delivered-To: l2vpn@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7493F1B2D73 for <l2vpn@ietfa.amsl.com>; Sun, 20 Jul 2014 21:55:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.502
X-Spam-Level:
X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oh1LzIt9Qlp9 for <l2vpn@ietfa.amsl.com>; Sun, 20 Jul 2014 21:55:04 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C22531B2D6A for <l2vpn@ietf.org>; Sun, 20 Jul 2014 21:55:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5464; q=dns/txt; s=iport; t=1405918503; x=1407128103; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=8IGS10fj5yziapRlDAKpSdmD54dgKXM+gj1p9Tn1pHc=; b=DvLdOHkSl1f+1XbGhXCMkvFzDP44AAZC2x8s0iBQDxTX82SWNRpAUsAz ptlbpnfAYIithl+99kE2xHgLdjJjpPp5xMkSY1MROeyyZoO5Sm/wi+so7 ZIR9QvBprf8fUzpW4Ag48pS/UBYZgJakJQb03E3kHNx+xHmhz9ehvFe3+ s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AlsFAAOczFOtJV2Y/2dsb2JhbABPCoJqJIEpBMxhAYEQFnaEBAEBAwEnEz8FDQEINkIlAgQBDQUUiCYIAb8KF4l+hGoHXAeERgEEjkOMYpQvg0RsgUU
X-IronPort-AV: E=Sophos;i="5.01,698,1400025600"; d="scan'208";a="341506047"
Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-2.cisco.com with ESMTP; 21 Jul 2014 04:55:02 +0000
Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id s6L4t2xc021097 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 21 Jul 2014 04:55:02 GMT
Received: from xmb-aln-x13.cisco.com ([fe80::5404:b599:9f57:834b]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.03.0123.003; Sun, 20 Jul 2014 23:55:02 -0500
From: "Ali Sajassi (sajassi)" <sajassi@cisco.com>
To: Thomas Morin <thomas.morin@orange.com>, "l2vpn@ietf.org" <l2vpn@ietf.org>
Subject: Re: Comments on draft-sd-l2vpn-evpn-overlay
Thread-Topic: Comments on draft-sd-l2vpn-evpn-overlay
Thread-Index: AQHPpEksfYCGruyRp0CjCzr1+HOO8pupmV6A
Date: Mon, 21 Jul 2014 04:55:02 +0000
Message-ID: <CFF1A017.E307F%sajassi@cisco.com>
In-Reply-To: <53CC0B6D.8040603@orange.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.3.4.130416
x-originating-ip: [10.82.237.202]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <34335E10B4399649B49B2DACB09726C0@emea.cisco.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/l2vpn/0LWmJIjZXJ4-mbDzsoi2vTxO6bE
Cc: "Ali Sajassi (sajassi)" <sajassi@cisco.com>
X-BeenThere: l2vpn@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Layer 2 Virtual Private Networks <l2vpn.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/l2vpn>, <mailto:l2vpn-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/l2vpn/>
List-Post: <mailto:l2vpn@ietf.org>
List-Help: <mailto:l2vpn-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/l2vpn>, <mailto:l2vpn-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jul 2014 04:55:10 -0000

Thomas,

Thanks very much for you review. Please refer to my comments in line.

On 7/20/14 11:33 AM, "Thomas Morin" <thomas.morin@orange.com> wrote:

>Hi,
>
>This is an overall good and useful document.
>Here are a few comments.
>
>In some places the document says "VNI/VSID" to designate both the VXLAN
>and the NVGRE id, while in some other places simply "VNI" is used.
>I would suggest using "VNI" everywhere for brevity, and indicate in
>section 5.1 that "VNI" designates the VXLAN VNI or the NVGRE VSID,
>depending on which is used.

Agreed.

>
>The text in Section 5.1.2 remains partly obscure to me:
>* First of all, I believe that it should say upfront that it does not
>apply when locally significant VNIs are used.
>* I don't really get why Option 1 and Option 2 are presented, since it
>really seems like Option 1 with auto-derivation of RD and RT has all the
>advantages and no drawback.

You're right. We need to do a better job in describing the advantages of
option-2 or else removing it.

>* the use of the notion of "subnet" should I think be avoided, given
>that this is an IP notion, and given that nothing prevents the use of
>multiple IP subnets on a same Ethernet broadcast domain  (section 5.1.3
>uses "bridge domain" which is possibly the choice to make here also)

OK

>* (and assuming that Option 2 is worth documenting), the last sentence
>of the last paragraph describing Option 2 may need to be clarified:
>     " In this option, the VNI/VSID in the data-plane is sufficient to
>identify a specific bridge domain - e.g., no need to do a lookup based
>on VNI/VSID field and Ethernet Tag ID fields to identify a bridge domain."
>   -> Since " VNI/VSID field" and "Ethernet Tag ID" are names of fields
>in a MAC advertisement route, it is not obvious what it means to base a
>dataplane lookup on these fields

Option-2 basically maps to vlan-aware bundle service in EVPN baseline
draft where multiple VLANs (bridge domains) map to a single EVI. In this
mode, in the date-plane, a BD is identified by MPLS label + VLAN-id.
However, in here, we are saying that BD can be identified by just the VNI
(and not VNI + VLAN-id).

>   -> The sentence may implicitly mean that in the other option (option
>1) looking up the VNI in the dataplane would *not* be sufficient ; is
>this the intent ? if yes, why wouldn't such a lookup be sufficient to
>map a dataplane packet to the right EVI ?
>
>On Section 5.1.2.1 on auto-derivation of RT:
>First, I think the document should state explicitly that using
>auto-derived RTs is OPTIONAL.

I think the text should recommend auto-derivaiton for globally-assigned
VNI but not for locally-assigned VNI.

>When auto-derivation is used, then the proposed text makes sense.
>My question is: if auto-derivation is *not* used, is the operator free
>of choosing any RT (including an RT with the bit corresponding to the
>"A" bit of an auto-derived RT set to zero), or should the operator avoid
>any value with the A bit set to one ?

If auto-derivation is not used at all for a given AS, then the operator is
free to choose whatever he wants, but if both auto-derivation and manual
mode are expected to co-exist in a given AS, then the two spaces needs to
be non-overlapping.

>
>On section 5.1.3:
>* The three parts starting by "For the VNI based mode..." and "For the
>VNI-aware bundle mode...." (x2) seem to echo Option 1 "Single Subnet per
>EVI" and Option 2 "Multiple Subnets per EVI" of section 5.1.2.  If this
>is the intent, then using consistent naming would be best.

It is the case, I will change it to make it consistent.

> If not, then 
>I believe there would need to be text describing what these modes are.
>* The section should state clearly that in the case where locally
>significant VNIs are used, then the Ethernet Tag field should be set to
>zero.
>* I believe that the text on the new values for the BGP Encapsulation
>extended community should have a value for MPLS-over-UDP

OK. We can accommodate it if needed but does it make sense to have both
locally-assigned VNI (for VxLAN) and MPLS-over UDP?

>* I believe that the text on the new values for the BGP Encapsulation
>extended community should be moved to the "IANA Considerations section"
>* What is the intent behind there "MPLS encapsulation value", given that
>an absence of BGP Encap ext comm has the same semantic ? Reading, in
>section 6, that "if the BGP Encapsulation extended community is not
>present, then the default MPLS encapsulation ___or a statically
>configured encapsulation___ is assumed" (emphasis mine), increases the
>confusion.

This is for the case when a PE wants to indicate multiple encapsulations
including MPLS. I will add a sentence or two to clarify it.

>
>On section 6:
>* "However, if this attribute is present, then an ingress PE can send a
>frame to an egress PE only if the set of encapsulations advertised by
>the egress PE..." => to clearly formulate how multiple encaps can be
>advertized, I would propose the following rewording: "If this BGP
>Encapsulation extended community is present at least once, an ingress PE
>can send a frame to an egress PE using one of the encapsulations
>specified in this/these extended communit(y/ties). This requires that
>the set of encapsulations advertised by the egress PE..."

OK.

Thanks again,
Ali

>
>Best,
>
>-Thomas
>