Re: [lisp] Comments to draft-ietf-lisp-te-12

Dino Farinacci <farinacci@gmail.com> Fri, 21 April 2023 02:06 UTC

Return-Path: <farinacci@gmail.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9D23C15155E; Thu, 20 Apr 2023 19:06:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LJCmC33kgQjK; Thu, 20 Apr 2023 19:06:44 -0700 (PDT)
Received: from mail-pl1-x630.google.com (mail-pl1-x630.google.com [IPv6:2607:f8b0:4864:20::630]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7706C151527; Thu, 20 Apr 2023 19:06:44 -0700 (PDT)
Received: by mail-pl1-x630.google.com with SMTP id d9443c01a7336-1a66b9bd893so16271405ad.1; Thu, 20 Apr 2023 19:06:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682042804; x=1684634804; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=kWUe3iy8FX11P3ElMPVy7EOSpvJ2+euE1qWZRGmqOGE=; b=pxysseFhtM/dmXI+XAIdIca/b19SmEO3D8bnh7VDUKFeEqITtXjx3sywugVripC3vF mN3gEZmdy7+EkG3nQAAr3BLQ+RQfiRJxffRqc3PBH785eHvmFYFfU6K5WIl4nAfGwryq kChYE7sqe1rMn+eN464o+gZBelviYMzWoXxTlAZunj2+h/lKQHiQITbkoZEhoaHN567F wQXGKvWPxugbl4E7YoI/cCza3JPHnNyfWjmsgHzDHIfJSEcFiREJalCZc4m3FjFviv19 xyu0jQ3nmyA/P8NTRmIUSYz2j+9l/vtY36hV4joJxbirQLi12dk6ZJfMReas7bKPG0Ey zd4g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682042804; x=1684634804; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=kWUe3iy8FX11P3ElMPVy7EOSpvJ2+euE1qWZRGmqOGE=; b=mHxCpwLVgs9iWzbt4WqGp8RcrIy55wVy6LlQ6adofL0htGcfgkHKMYzdy+Nq51xPRC dZTB/0xFE/A41A1x/BCkh3pEacLlMY3+QGi6XlL2QgPntcZTsQTlOVtxcqI0YH55anJq jk4kbg4oQQygYVGBlYPuzPXowdmhMpwwEbyTlrT1K0LPsigGUtfWjILNsnuAglJS9A2L 9JDt8TJDzWJAvYy6KtOj0QOD+8XznLZtCzrUx2VHt3L1aIObmdjEZGCSMxaHAqxGnnDq +wKUA7DUBtpfZfGW/0glhxLy0tkPY98x3ErpGN3AklagA2KCV9SilRt5PNSqbeOyzp/z DF9w==
X-Gm-Message-State: AAQBX9cqHOgpgDz3yAEvZD6oDCeGTwWuIGBZyLrNXanRX5J+f2/c5d1T Mj52UfceE96g1QV+tl5+qLk=
X-Google-Smtp-Source: AKy350buqiE5dunUuYhXVnclUXt2PfXoqdlNoGJgazhMtQuUtGRkTx4JNYk1fGWvErWUBu+Y3CxFAQ==
X-Received: by 2002:a17:902:ebc6:b0:19c:f476:4793 with SMTP id p6-20020a170902ebc600b0019cf4764793mr3909638plg.51.1682042803707; Thu, 20 Apr 2023 19:06:43 -0700 (PDT)
Received: from smtpclient.apple ([2605:59c8:315e:b410:8d33:fc63:330a:60d6]) by smtp.gmail.com with ESMTPSA id a8-20020a170902900800b0019e88453492sm1722212plp.4.2023.04.20.19.06.36 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Apr 2023 19:06:42 -0700 (PDT)
From: Dino Farinacci <farinacci@gmail.com>
Message-Id: <077966CD-3932-421F-8AFD-2FC4BE3CD97E@gmail.com>
Content-Type: multipart/mixed; boundary="Apple-Mail=_1BB748A6-4848-4E7F-8AC9-B2A6867A6832"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
Date: Thu, 20 Apr 2023 19:06:24 -0700
In-Reply-To: <7c77c1b3e7124854bdaa3853691a9cda@huawei.com>
Cc: "draft-ietf-lisp-te@ietf.org" <draft-ietf-lisp-te@ietf.org>, "lisp@ietf.org" <lisp@ietf.org>
To: "Huanghongyi(Hongyi)" <hongyi.huang@huawei.com>
References: <460afe713db54299a56c8519349f54ac@huawei.com> <0A480805-FA49-44BE-87F8-FDFD4C6F0A21@gmail.com> <7c77c1b3e7124854bdaa3853691a9cda@huawei.com>
X-Mailer: Apple Mail (2.3731.400.51.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/8xbB02Ts-8IigoN50V1gXAyq1uk>
Subject: Re: [lisp] Comments to draft-ietf-lisp-te-12
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Apr 2023 02:06:45 -0000

> Hi Dino,
> 
> I further have some questions. See below.

Trimmed some extra text but keeping your respones.

> 
>> The recursive header means this:
>> 
>> (1) First inner header with EIDs is constructed by the host.
>> (2) Outer header with RLOCs is constructed by the first ITR/RTR/PITR
>> that gets the EID packet.
>> (3) A second outer header with RLOCs is constructed by any
>> ITR/RTR/PITR that is on path of the RLOC packet.
>> 
>> And (3) is only performed, if that xTR is configured to add a header.
>> 
> 
> Can xTR in (2) and (3) be the same one? That is, when an ITR wants to apply overlay segment routing (for example, ITR->X(RTR)->Y(RTR)->ETR), it will add outer headers containing ETR, Y, X respectively, one by one, and only one LISP header exists in each packet. Right? 

Yes, you can segment route between overlay routers/nodes. Like, for instance, if supported in a satellite network, an ITR could decide what orbits a packet takes to reach an RTR on the ground. This is just a very rough example.

> I have suggestion that these terms and the process need more clarification in the document.

Sure, please send specific comments.

> 
>> Extension headers are not used in general. If, for instance, an
>> ITR/RTR/PITR wanted to add an SRH, a draft would need to be written
>> to say exactly what they do when they want to use an underlay with such
>> capability. But segment-route controls the path the ITR choose FOR
>> THE underlay and not the encapsulation path (overlay path) which
>> LISP-TE specs out.
>> 
> 
> May I summarize that current encapsulation method in RFC 9300 doesn't support underlay segment routing, despite how rare SRH is used? And whenever the underlay TE with segment routing grows widely used, there may be a new document updating RFC 9300?

That is right because it is specific to an underlay feature. But if LISP puts either an IPv4 or IPv6 outer header on, the packet will get delivered further downstream on a MPLS or SR network. Designing the architecture this way makes the functionality general for more use-cases.

>>>   • If no, it says that LISP has to prepend more headers (IP header or
>> LISP header, or both of them). Obviously, it could be not efficient
>> enough. In this case, why not make it a more elegant way, for example,
>> enabling LISP header to carry the RLOC record.
>> 
>> I am not following your suggestion. The LISP header has specific
>> features like lisp-crypto, nonce-echoing, map-versioning, vpn-
>> identificaion which are relevant to handling the packet and not what
>> header is prepended to the packet. That is a later step after LISP header
>> is prepended.
>> 
> 
> IMHO, TE could be another feature in addition to security and others, when we want to realize LISP TE in the overlay. The

We do. See enclosed service chaining slide as an example.

> outer header with RLOC in it is for specifying a single destination. However, TE requires more RLOCs that are for specifying xTRs along the way. So where to accommodate these RLOCs?

If you want to describe an encapsulation path, you need to describe/identify the path somewhere. Either in the data-plane with various source-routing ideas over the decades or in the control-plane as the LISP mapping system supports with ELP encodings (LISP-TE Explicit Locator Path).

For a given EID, the ELP RLOC-record is registered and the mapping system holds the state so each xTR along the path caches the state, when they need it and know which is the next RLOC after itself to encap to.

Dino