Re: [lisp] Comments to draft-ietf-lisp-te-12

"Huanghongyi(Hongyi)" <hongyi.huang@huawei.com> Thu, 20 April 2023 06:55 UTC

Return-Path: <hongyi.huang@huawei.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97B27C151B32; Wed, 19 Apr 2023 23:55:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rcVXW_mjNVbv; Wed, 19 Apr 2023 23:55:54 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 271BEC151B21; Wed, 19 Apr 2023 23:55:54 -0700 (PDT)
Received: from lhrpeml100005.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Q27gk2VrWz67m0K; Thu, 20 Apr 2023 14:54:42 +0800 (CST)
Received: from kwepemi100003.china.huawei.com (7.221.188.122) by lhrpeml100005.china.huawei.com (7.191.160.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.23; Thu, 20 Apr 2023 07:55:50 +0100
Received: from kwepemi500002.china.huawei.com (7.221.188.171) by kwepemi100003.china.huawei.com (7.221.188.122) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.23; Thu, 20 Apr 2023 14:55:49 +0800
Received: from kwepemi500002.china.huawei.com ([7.221.188.171]) by kwepemi500002.china.huawei.com ([7.221.188.171]) with mapi id 15.01.2507.023; Thu, 20 Apr 2023 14:55:49 +0800
From: "Huanghongyi(Hongyi)" <hongyi.huang@huawei.com>
To: Dino Farinacci <farinacci@gmail.com>
CC: "draft-ietf-lisp-te@ietf.org" <draft-ietf-lisp-te@ietf.org>, "lisp@ietf.org" <lisp@ietf.org>
Thread-Topic: [lisp] Comments to draft-ietf-lisp-te-12
Thread-Index: AdlzLgjD2m2SHdohROuCuzY15ES49P//i1UA//9FOwA=
Date: Thu, 20 Apr 2023 06:55:49 +0000
Message-ID: <7c77c1b3e7124854bdaa3853691a9cda@huawei.com>
References: <460afe713db54299a56c8519349f54ac@huawei.com> <0A480805-FA49-44BE-87F8-FDFD4C6F0A21@gmail.com>
In-Reply-To: <0A480805-FA49-44BE-87F8-FDFD4C6F0A21@gmail.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.112.41.112]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/Yjx62jMHosJ6pcDJCaya5D_PF78>
Subject: Re: [lisp] Comments to draft-ietf-lisp-te-12
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Apr 2023 06:55:55 -0000

Hi Dino,

I further have some questions. See below.

Hongyi

> -----Original Message-----
> From: Dino Farinacci <farinacci@gmail.com>
> Sent: Thursday, April 20, 2023 11:18 AM
> To: Huanghongyi(Hongyi) <hongyi.huang@huawei.com>
> Cc: draft-ietf-lisp-te@ietf.org; lisp@ietf.org list <lisp@ietf.org>
> Subject: Re: [lisp] Comments to draft-ietf-lisp-te-12
> 
> > On the other hand, the draft proposes the recursive approach that
> *prepend*s more than one header. I'm confused of the
> 
> Only when you need to perserve an outer RLOC based header. Just like
> MPLS uses service-in-service through an ISP with stacked headers. But
> I think it would be rarely used in the LISP overlay case.
> 
> > *header*. Is the header consisted of outer IP header and LISP header,
> or just IP header (assuming the IP underlay network)? I want to make it
> clear whether the writing of 'recursive' means utilizing the TE
> capabilities of underlay network. (referring to the second example of
> recursion in 5.2)
> 
> The recursive header means this:
> 
> (1) First inner header with EIDs is constructed by the host.
> (2) Outer header with RLOCs is constructed by the first ITR/RTR/PITR
> that gets the EID packet.
> (3) A second outer header with RLOCs is constructed by any
> ITR/RTR/PITR that is on path of the RLOC packet.
> 
> And (3) is only performed, if that xTR is configured to add a header.
> 

Can xTR in (2) and (3) be the same one? That is, when an ITR wants to apply overlay segment routing (for example, ITR->X(RTR)->Y(RTR)->ETR), it will add outer headers containing ETR, Y, X respectively, one by one, and only one LISP header exists in each packet. Right? 

I have suggestion that these terms and the process need more clarification in the document.

> >     • If yes, I would argue that Section 5.2 in RFC 9300 describes the
> IPv6-in-IPv6 header format but it didn’t include the extensions of IPv6
> header. Consequently, underlay TE is not available in this case since
> segment routing header(RFC 8754) requires the use of extension header.
> (Unless another IP header that involves extension header is prepended)
> 
> Extension headers are not used in general. If, for instance, an
> ITR/RTR/PITR wanted to add an SRH, a draft would need to be written
> to say exactly what they do when they want to use an underlay with such
> capability. But segment-route controls the path the ITR choose FOR
> THE underlay and not the encapsulation path (overlay path) which
> LISP-TE specs out.
> 

May I summarize that current encapsulation method in RFC 9300 doesn't support underlay segment routing, despite how rare SRH is used? And whenever the underlay TE with segment routing grows widely used, there may be a new document updating RFC 9300?

> >     • If no, it says that LISP has to prepend more headers (IP header or
> LISP header, or both of them). Obviously, it could be not efficient
> enough. In this case, why not make it a more elegant way, for example,
> enabling LISP header to carry the RLOC record.
> 
> I am not following your suggestion. The LISP header has specific
> features like lisp-crypto, nonce-echoing, map-versioning, vpn-
> identificaion which are relevant to handling the packet and not what
> header is prepended to the packet. That is a later step after LISP header
> is prepended.
> 

IMHO, TE could be another feature in addition to security and others, when we want to realize LISP TE in the overlay. The outer header with RLOC in it is for specifying a single destination. However, TE requires more RLOCs that are for specifying xTRs along the way. So where to accommodate these RLOCs?

> Note when you prepend an outer IPv4 or IPv6 header in front of a LISP
> header, it means that header has RLOC addresses in it.
> 
> Dino
> 
>