Re: [lisp] Comments to draft-ietf-lisp-te-12

Dino Farinacci <farinacci@gmail.com> Thu, 20 April 2023 03:18 UTC

Return-Path: <farinacci@gmail.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BC1DC151B29; Wed, 19 Apr 2023 20:18:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LF8yaeqdq2c7; Wed, 19 Apr 2023 20:18:37 -0700 (PDT)
Received: from mail-pl1-x634.google.com (mail-pl1-x634.google.com [IPv6:2607:f8b0:4864:20::634]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4903BC151B14; Wed, 19 Apr 2023 20:18:34 -0700 (PDT)
Received: by mail-pl1-x634.google.com with SMTP id d9443c01a7336-1a6ebc66ca4so5542655ad.3; Wed, 19 Apr 2023 20:18:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1681960714; x=1684552714; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=FKo3NWpuCyjYQ68FbFAcCy10q0xMNw2jmpYeyV1GtnA=; b=g34sjrlwk0bbxEdbkA0UcD5ofP4OumqBbe/gzrxcr4LRNTWYCKYKXwsoduoIkiMJjP 9GORjeL0xmVNnmXPo5tmGJgI7cmDN75teLgNOekZh/MmIjLCjHkVIAwLupT+kLPqelql fzzAKDuiAdLP+UMS2E09JundB70LFTv/OteQmsocQjmAIycZUyqFdw50IxQ4jscdQVkY hphErd278JDuXMRTtWYKqX6kEIOQwpGIJ7HCYU56VJkc6O6xSOZrS6NqUvpHQLNW2d0i 75A1iUF8S8MbSbYDzVsqQRhvFfi1v17QgyuMxFAXdbFBollPd2FqeBv6eNBHQy0GquiB tlGg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1681960714; x=1684552714; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=FKo3NWpuCyjYQ68FbFAcCy10q0xMNw2jmpYeyV1GtnA=; b=NEk2Q/ovKxV0GTWRIXTDBLsNo7dPmY/nBH4Zikitp4aj1okNPUXtrvjz4j+NAE+3nB 9zecpepsEekgWeeXUtz39XVdW37P92uV7V1cSxCZXCIikunRkKD8tpCGfe8Xw8wePUl1 iTqKQfXZ1y4WtPOE0P5jK2v1QmDwSxZUBJ21S4L7J0MiK1bq+NOMqjsSnG6i/pBDXhZ5 aWJQ5bCUQDcOggZ9KkIlotFKX0bUiY2ZSuVLsq8fe0DnzIVSB1qujAxwzvVD8oazys96 7LYaIhQlMO4ARaGDwZeX4rY1tpnlSfLN6iYlRVinuLl6wX4oB+aZ+P1g07Q0FrqZPnu8 Fv8g==
X-Gm-Message-State: AAQBX9fcIU1WwAefgtQd5nykQrdhl2v/tOtaORYrl4Jd5EHxytTuKE8j 9DtZfmz7B/XP4WJOC9P8hFMEffvG+1E=
X-Google-Smtp-Source: AKy350a5kuj1k8FQ4QoNwiSGRzla4mfURlI+yxOmDKFmi7vjDSutk7yZBIP/PkiP/5m2szRYngo9yg==
X-Received: by 2002:a17:902:d203:b0:1a6:abac:9cc with SMTP id t3-20020a170902d20300b001a6abac09ccmr6664892ply.66.1681960713649; Wed, 19 Apr 2023 20:18:33 -0700 (PDT)
Received: from smtpclient.apple ([2605:59c8:315e:b410:8d47:69f8:7e89:4216]) by smtp.gmail.com with ESMTPSA id n14-20020a170902968e00b001a6b308fcaesm162347plp.153.2023.04.19.20.18.32 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Apr 2023 20:18:33 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
From: Dino Farinacci <farinacci@gmail.com>
In-Reply-To: <460afe713db54299a56c8519349f54ac@huawei.com>
Date: Wed, 19 Apr 2023 20:18:20 -0700
Cc: "draft-ietf-lisp-te@ietf.org" <draft-ietf-lisp-te@ietf.org>, "lisp@ietf.org list" <lisp@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <0A480805-FA49-44BE-87F8-FDFD4C6F0A21@gmail.com>
References: <460afe713db54299a56c8519349f54ac@huawei.com>
To: "Huanghongyi(Hongyi)" <hongyi.huang=40huawei.com@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3731.400.51.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/JiyVzWSAk8jwi4nMgpkdhwdcJHY>
Subject: Re: [lisp] Comments to draft-ietf-lisp-te-12
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2023 03:18:39 -0000

> On the other hand, the draft proposes the recursive approach that *prepend*s more than one header. I'm confused of the

Only when you need to perserve an outer RLOC based header. Just like MPLS uses service-in-service through an ISP with stacked headers. But I think it would be rarely used in the LISP overlay case.

> *header*. Is the header consisted of outer IP header and LISP header, or just IP header (assuming the IP underlay network)? I want to make it clear whether the writing of 'recursive' means utilizing the TE capabilities of underlay network. (referring to the second example of recursion in 5.2)

The recursive header means this:

(1) First inner header with EIDs is constructed by the host.
(2) Outer header with RLOCs is constructed by the first ITR/RTR/PITR that gets the EID packet.
(3) A second outer header with RLOCs is constructed by any ITR/RTR/PITR that is on path of the RLOC packet.

And (3) is only performed, if that xTR is configured to add a header.

>     • If yes, I would argue that Section 5.2 in RFC 9300 describes the IPv6-in-IPv6 header format but it didn’t include the extensions of IPv6 header. Consequently, underlay TE is not available in this case since segment routing header(RFC 8754) requires the use of extension header. (Unless another IP header that involves extension header is prepended)

Extension headers are not used in general. If, for instance, an ITR/RTR/PITR wanted to add an SRH, a draft would need to be written to say exactly what they do when they want to use an underlay with such capability. But segment-route controls the path the ITR choose FOR THE underlay and not the encapsulation path (overlay path) which LISP-TE specs out.

>     • If no, it says that LISP has to prepend more headers (IP header or LISP header, or both of them). Obviously, it could be not efficient enough. In this case, why not make it a more elegant way, for example, enabling LISP header to carry the RLOC record.  

I am not following your suggestion. The LISP header has specific features like lisp-crypto, nonce-echoing, map-versioning, vpn-identificaion which are relevant to handling the packet and not what header is prepended to the packet. That is a later step after LISP header is prepended.

Note when you prepend an outer IPv4 or IPv6 header in front of a LISP header, it means that header has RLOC addresses in it.

Dino