Re: [lisp] Comments on draft-fuller-lisp-alt-04

Vince Fuller <vaf@cisco.com> Wed, 18 February 2009 01:09 UTC

Return-Path: <vaf@cisco.com>
X-Original-To: lisp@core3.amsl.com
Delivered-To: lisp@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2B5213A68D1 for <lisp@core3.amsl.com>; Tue, 17 Feb 2009 17:09:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.999
X-Spam-Level:
X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AqTMX8Mfr+5j for <lisp@core3.amsl.com>; Tue, 17 Feb 2009 17:09:46 -0800 (PST)
Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 54E353A6816 for <lisp@ietf.org>; Tue, 17 Feb 2009 17:09:43 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,225,1233532800"; d="scan'208";a="143738717"
Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-1.cisco.com with ESMTP; 18 Feb 2009 01:09:51 +0000
Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n1I19pJ3022366; Tue, 17 Feb 2009 17:09:51 -0800
Received: from vaf-lnx1.cisco.com (vaf-lnx1.cisco.com [171.71.118.48]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id n1I19pVH026724; Wed, 18 Feb 2009 01:09:51 GMT
Received: by vaf-lnx1.cisco.com (Postfix, from userid 113818) id 779A15CC033; Tue, 17 Feb 2009 17:20:17 -0800 (PST)
Date: Tue, 17 Feb 2009 17:20:17 -0800
From: Vince Fuller <vaf@cisco.com>
To: Olivier Bonaventure <Olivier.Bonaventure@uclouvain.be>
Message-ID: <20090218012017.GA6179@cisco.com>
References: <498C8B55.4010807@uclouvain.be>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <498C8B55.4010807@uclouvain.be>
User-Agent: Mutt/1.5.17+20080114 (2008-01-14)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3391; t=1234919391; x=1235783391; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=vaf@cisco.com; z=From:=20Vince=20Fuller=20<vaf@cisco.com> |Subject:=20Re=3A=20[lisp]=20Comments=20on=20draft-fuller-l isp-alt-04 |Sender:=20; bh=EzNVwyrlOYwH8fnyBx2+4r3ZwBzBhLCZ/pj8/nV9Evc=; b=Y6KjzfpLDgYyDhxXYQLXNnni/2PbgYl7QiZr5IeMpyNktKi9wEQjH4Ey2O 0oKjjS4VuhxzZyOwJgWVNJ9OcVnI4twXRzLlQkeFQVDy5YLbp/AK40uit8iE 62QTQ1wqKyScKWMqTMT78yIR73/Yg1LBh0FmFlLQ3BHrLm/BTFS2E=;
Authentication-Results: sj-dkim-1; header.From=vaf@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; );
Cc: lisp@ietf.org
Subject: Re: [lisp] Comments on draft-fuller-lisp-alt-04
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/lisp>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Feb 2009 01:09:47 -0000

> 1. I think that it would be useful to add in the document an example
> deployment scenario with a few xTR and a few ALT-routers. This would
> allow the reader to better understand how the ALT topology operates.

This is a good suggestion but I question whether I could do a good job of
describing such an example using text and ASCII art. I will consult with my
co-authors to see what they think.

> 2. The types of messages that are transmitted on the ALT-topology are
> unclear. From my reading of the text, it seems that the ALT-topology
> (i.e. the tunnels between ALT routers) is only used to forward two types
> of messages :
> - Data Probes
> - Map Requests

You are correct. The references to routing Map-Replies over the ALT were
relics of earlier thinking. The -05 draft will eliminate all such references
with the caveat that there may be future experiments involving routing of
Map-Replies over the ALT.

> 3. Map Requests and Data Probes that are sent on the ALT topology should
> be rate limited. This is mentionned in draft-lisp-11, but I think that
> it would be worthwhile to mention this again here.

This is mentioned briefly in the security section under "Scaling of LISP+ALT
router Resources". I will add additional text to strengthen this.

Note also that the -05 draft will discourage the use of Data Probes as there
are a number of open issues that make prove them infeasible.

> 4. Section 5.2 on EID assignment - Hierarchy and topology
> This is a key section of the document that needs to be expanded and
> detailed.
> 
> A first approach would be to define a tree-shaped ALT network, with the
> RIR reponsible for each aggregated EID block at the root. These RIRs
> should have ALT routers and be interconnected by a full mesh of ALT-BGP
> sessions.
> 
> A more detailed example would be useful in this section. You might
> consider RIR1 which is responsible for the allocation of 1.0.0.0/8 and
> RIR2 which is responsible for the allocation of 2.0.0.0/8

Another good suggestion. Again, I will discuss with my co-authors whether
we should add more example configuraation scenarios to the document.

> 5. What should an ALT router do when it receives a packet whose
> destination EID is unreachable (either because of the failure of an ALT
> session or because the corresponding EID block has not been allocated) ?
>  Should it drop the packet or send back an ICMP destination unreachable
> over the normal topology towards the source RLOC ?

There are actually multiple cases here.

If an ALT router receives a Map-Request or Data Probe that matches an EID
Prefix that it knows does not exist (e.g. if it is the aggregator for
10.1.0.0/16, the prefix 10.1.254.0/24 is not assigned, and it receives
a Map-Request or Data Probe destined to 10.1.254.1), it returns a Negative
Map-Reply for the shortest covering prefix that is not a LISP EID. A
Negative Map-Reply is a Map-Reply with zero RLOCs. In this example, the
EID prefix in the Map-Reply could be anything from 10.1.254.1/32 to
10.1.0.0/16 and would depend on what, if any, assignments had been made from
10.1.0.0/16.

The case where an EID prefix does exist in the LISP database but has no
reachable RLOCs is, in some sense, more interesting. Dino - what do is the
correct behavior for an aggregating ALT router in this case?

	--Vince