Re: [lisp] 6833bis - NMR with locator count !=0

"Victor Moreno (vimoreno)" <vimoreno@cisco.com> Tue, 22 August 2017 19:03 UTC

Return-Path: <vimoreno@cisco.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1685F1329DB for <lisp@ietfa.amsl.com>; Tue, 22 Aug 2017 12:03:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.52
X-Spam-Level:
X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IrJglpT-0iao for <lisp@ietfa.amsl.com>; Tue, 22 Aug 2017 12:03:38 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF1D11329D6 for <lisp@ietf.org>; Tue, 22 Aug 2017 12:03:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5720; q=dns/txt; s=iport; t=1503428617; x=1504638217; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=sZLvbSi+sOjwsd8eVzwMMpH+tr/wyIWQalmSz4a020g=; b=V8T9R5mzwtp3qzGWZkTZaDqcIUpjrnItvIxrOtVqqON7U+zdvLrM12hQ nWl/QZTQHN5Dp0DSi77Ir+TnpMRNjEuaDkJi1OiaWvFWoEbsMPAKj0ZF3 Mr5kUuiTS9vdGDA5lfG12/sXqPHEAoajy3ollbt1ydDgJY2Zlr8N6uHEK k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CmAAAjf5xZ/5xdJa1cGQEBAQEBAQEBAQEBBwEBAQEBg1pkgRUHjgyQG4FuiDiNZw6CBCELhRsCGoQXPxgBAgEBAQEBAQFrKIUYAQEBAQIBAQEhEToLBQsCAQgYAgImAgICHwYLFRACBA4FihkDDQgQrVCCJoc3DYQdAQEBAQEBAQEBAQEBAQEBAQEBAQEBGAWBDYIdggKBTIFjK4J8gleBZiAWgxMwgjEFoBk8AosohCOEdpJgjD6JagEfOFkxdxVJEgGFBAUXgWd2igaBDwEBAQ
X-IronPort-AV: E=Sophos;i="5.41,413,1498521600"; d="scan'208";a="286053749"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Aug 2017 19:03:36 +0000
Received: from XCH-ALN-014.cisco.com (xch-aln-014.cisco.com [173.36.7.24]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id v7MJ3a11004552 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 22 Aug 2017 19:03:36 GMT
Received: from xch-rcd-015.cisco.com (173.37.102.25) by XCH-ALN-014.cisco.com (173.36.7.24) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 22 Aug 2017 14:03:36 -0500
Received: from xch-rcd-015.cisco.com ([173.37.102.25]) by XCH-RCD-015.cisco.com ([173.37.102.25]) with mapi id 15.00.1210.000; Tue, 22 Aug 2017 14:03:36 -0500
From: "Victor Moreno (vimoreno)" <vimoreno@cisco.com>
To: Dino Farinacci <farinacci@gmail.com>
CC: "Joel M. Halpern" <jmh@joelhalpern.com>, LISP mailing list list <lisp@ietf.org>
Thread-Topic: [lisp] 6833bis - NMR with locator count !=0
Thread-Index: AQHTGwzqsqFWeSwYqUmzA1VIigsqYqKQOQEAgAAFmoCAALVyAIAAHFcA
Date: Tue, 22 Aug 2017 19:03:36 +0000
Message-ID: <96D856EE-E92E-44A4-83D7-1F676B1D1195@cisco.com>
References: <6467BB43-AB19-48C4-A3FD-34D5C2E092E8@cisco.com> <d6318116-0157-302d-abe3-4181c7859e19@joelhalpern.com> <CE2B6A47-99E2-4CA9-B28F-A55A24ADBF24@cisco.com> <0CC75AA9-1008-465D-8EAC-7BE9AFD2030F@gmail.com>
In-Reply-To: <0CC75AA9-1008-465D-8EAC-7BE9AFD2030F@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.19.157.244]
Content-Type: text/plain; charset="utf-8"
Content-ID: <DFFFB3DCC839CC4592032406DAC98BE5@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/sSWvabTflm09QAXtFNSIBEDYCTY>
Subject: Re: [lisp] 6833bis - NMR with locator count !=0
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Aug 2017 19:03:40 -0000

> On Aug 22, 2017, at 10:22 AM, Dino Farinacci <farinacci@gmail.com> wrote:
> 
> Here are some of my comments Victor.
> 
>> Would be mainly conveying the RLOCs of the feasible PETRs dynamically.
> 
> Anything or anyone can register mapping entries to the mapping database as long as they are authenticated with the map-server. So I believe you can achieve what you want with NO spec changes or additions to the protocol.

That would be great, we’ve been trying and haven’t had luck.

> 
>> As PETRs are brought on-line in the network, they can be configured/added in the Mapping System, rather than touching a multitude of ITRs.
> 
> Meaning you do not want ITRs to have to configure PETRs. That makes a ton of sense for scale and management reasons.

Correct, we are looking at 1000s of ITRs in some of these networks.
> 
>> This would also allow a more elegant definition for the support of a default exit to the Internet in the Extranet case defined in the lisp-vpn draft. In this scenario, the RLOC record would convey the RLOC of the PETR plus the IID to which the Internet connects at the PETR.
> 
> An ITR has no idea where a packet really ends up. So if its encapsulating to an ETR at the destination site or a PETR that decaps and sends the packet many “native” hops to a non-EID destination, then so be it.

Correct, what is of interest is to have some sense of the likelihood of the mapping received changing and allow the ITR to check again. We are looking at the NMR as one way to indicate back to the ITR the nature of the mapping. Because the ITR can differentiate clearly between an NMR and a Positive MR, it can choose to treat the mappings differently. For example (maybe this is implementation specific) the cache-TTL assigned to the mapping received in an NMR may be in the order of minutes, vs. a mapping from a positive MR having a TTL in the order of hours..

> 
> I would not call these negative map-replies though. By definition, from the spec, a negative map-reply is a map-reply with an RLOC-count of 0. 

What I am after is a map reply with the characteristics of an NMR (short TTL, dynamically calculated covering prefix for non-EID destination), but an RLOC-count > 0. If there is a way to encode this with a Positive MR, then we are covered. 

> 
> What many implemenationsn do is when they get a map-reply with an RLOC set of 0, they then decide, via configuration to encapsulate to a list of xTRs. Those xTRs are PETRs (by definition of the implementation).

We are trying to avoid the “decide, via configuration, to encapsulate to a list of xTRs”, but still have the ITR give the map-cache a short TTL. 

> 
> It could be useful to write up a very short draft indicating a “dynamic use-case for PETRs”. But check the Interworking RFC to make sure we didn’t cover this, in some form (even brief) in that spec.

I can do that if it helps. It would be very very brief.

-v

> 
> Cheers,
> Dino
> 
>> 
>> -v
>> 
>>> On Aug 21, 2017, at 11:12 PM, Joel M. Halpern <jmh@joelhalpern.com> wrote:
>>> 
>>> Can you explain what information you are conveying with the RLOCs?  I think we would need a clear use case before changing the spec.
>>> 
>>> Yours,
>>> Joel
>>> 
>>> On 8/22/17 2:07 AM, Victor Moreno (vimoreno) wrote:
>>>> Dear WG,
>>>> As we put some of our specifications to the test in deployments, we have found the ability to return RLOCs dynamically in an NMR to be compelling in a variety of deployment scenarios. Particularly in Networks with multiple Internet exit points.
>>>> What are the thoughts of the group on allowing NMRs with a locator count !=0?
>>>> One option to indicate that a map-reply is an NMR could be to assign one of the reserved bits as an NMR flag.
>>>> Would like to gauge the inclination of the WG before proposing text/edits.
>>>> -v
>>>> _______________________________________________
>>>> lisp mailing list
>>>> lisp@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/lisp
>> 
>> _______________________________________________
>> lisp mailing list
>> lisp@ietf.org
>> https://www.ietf.org/mailman/listinfo/lisp
>