Re: [Lsr] [Technical Errata Reported] RFC5838 (7644)

Robert Raszuk <robert@raszuk.net> Mon, 18 September 2023 16:08 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B58D4C1519A6 for <lsr@ietfa.amsl.com>; Mon, 18 Sep 2023 09:08:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.105
X-Spam-Level:
X-Spam-Status: No, score=-2.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7glAc9_3rv5y for <lsr@ietfa.amsl.com>; Mon, 18 Sep 2023 09:08:04 -0700 (PDT)
Received: from mail-ed1-x535.google.com (mail-ed1-x535.google.com [IPv6:2a00:1450:4864:20::535]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5871CC15199F for <lsr@ietf.org>; Mon, 18 Sep 2023 09:08:04 -0700 (PDT)
Received: by mail-ed1-x535.google.com with SMTP id 4fb4d7f45d1cf-52a4737a08fso5667303a12.3 for <lsr@ietf.org>; Mon, 18 Sep 2023 09:08:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; t=1695053282; x=1695658082; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Ep3FcPAQynLHUj73O9ysd6cHZ7eTe3SCSXxtwvMCp3s=; b=OulvsqrzQw370coVuvsg7zV/VmzF+GKNUeHS1u8IV/YQ8s/Wit2N7Bl4Vzu2JAY3Ka vCOKYfbU6Nh/ZPAMxwc3YU8g9jcl/pWSJh+A8eaLSOxinyM/C/6Rl1keKqT1NM0LRkVP ZSrwIlBezy8RQkJSOEYXt4FY8qLSQz2IwfeKJyU/d7q1/QL+3xRWBshFs+hD/MirHh0N yRY+B+JOMMNFKk+OLYyrK0WNvknGOt2hSVxCIsn0YbXWxYTM816EJtXgLDydmcZPhCaB 2HGJH2Wg/o6nn0h3xq79tfYPEe09X58moZ/TaSDguceMkN52JG70bVhc+t/bIP8W0BEV FQmw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1695053282; x=1695658082; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Ep3FcPAQynLHUj73O9ysd6cHZ7eTe3SCSXxtwvMCp3s=; b=fv2BBD+OhX4YY4ifkHuFL/5RF17PPmmzbhUrYMXcR94djh8jccGhvW5bYCt4T0eCNu 0T9RaXB96nec145CL8eJnkB+nV6gVUsS1GesYoc5xMt+agwZox8gq/BUNfmnaMOV5qKi dvg8jWnyYWp/ffevUeLKg/Mh7zzktmXZl4bzoo3433mNunoJLpjQGU0r1ipTXexe/VQo 9OoHtseQIKjVwjyRH90cmr+1HOAr48UDwhBrC/hchbscDKqbNTmHArLdkmLeLC9K/qYs Bv5JNRg47En/Dxac0a9bCovmJVo4iBIwBDOtX+7J7y1q4N4IzGUutilcjEUL1ui6JGtS 4z1Q==
X-Gm-Message-State: AOJu0Yx/Y42x7FAJeclttSvFcZOmYiKFQo5UL2DyILZCNS2GtJciaVlB BYnqb/QPfVJr+3oFPR0/7rOQXVTJiefdeXWw6M5IoA==
X-Google-Smtp-Source: AGHT+IFMwXwmaoqCt5Bl2JHjLFeV29sj2O4nKj9pu1hoA+phS/1vk8hF6De4ZGIff3xy9DzAvrC/Lj44rkNfY0+DAKI=
X-Received: by 2002:a05:6402:40e:b0:52f:4c92:69ee with SMTP id q14-20020a056402040e00b0052f4c9269eemr7673888edv.36.1695053282442; Mon, 18 Sep 2023 09:08:02 -0700 (PDT)
MIME-Version: 1.0
References: <F1B6EBA5-31EE-4715-B641-E3C51CB36596@gmail.com> <D8507928-D59B-4932-A3E0-E7FFDD3AFB19@delong.com>
In-Reply-To: <D8507928-D59B-4932-A3E0-E7FFDD3AFB19@delong.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Mon, 18 Sep 2023 18:07:51 +0200
Message-ID: <CAOj+MMFW+WFHG3nGD_8JByjFLQMa-k+nzCTbsaAVSHAFCf+pYA@mail.gmail.com>
To: Owen DeLong <owen@delong.com>
Cc: Yingzhen Qu <yingzhen.qu@futurewei.com>, RFC Errata System <rfc-editor@rfc-editor.org>, smirtora@cisco.com, akr@cisco.com, mjbarnes@cisco.com, rahul@juniper.net, Alvaro Retana <aretana.ietf@gmail.com>, John Scudder <jgs@juniper.net>, Andrew Alston - IETF <andrew-ietf@liquid.tech>, lsr <lsr@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000c696e70605a458d1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/08Pn8fdVVLzC6oewfP7DrrM7Ft0>
Subject: Re: [Lsr] [Technical Errata Reported] RFC5838 (7644)
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Sep 2023 16:08:08 -0000

Looks like this problem is known for over 13 years - Looks like a day one
implementation bug:

https://juniper-nsp.puck.nether.narkive.com/2DmYT8s6/j-nsp-ospfv3-junos-sends-zero-mtu-in-dbd-stuck-in-exstart

Do you think fixing a few RFCs which are pretty obvious what the behaviour
should be will really help ?

Cheers,
R.




On Mon, Sep 18, 2023 at 5:46 PM Owen DeLong <owen@delong.com> wrote:

> Happy to achieve the desired result (clarification) through whatever is
> the best mechanism, whether that be reattached, addition of a terminology
> section, or some other process not yet expressed.
>
> The vendor I referred to as getting this wrong is a very large router
> vendor. Multiple parties that have reported this issue through their TAC
> have been told “working as designed” with reference to this section and to
> section A.3.3 of RFC 5343 (for which I have submitted a similar errata
> report (7645).
>
> I’m trying to do this without public shaming of the vendor in question,
> but they are one of the domains in the CC list of this message.
>
> As such, I don’t think this mistake is limited to casual readers.
>
> Owen
>
>
> On Sep 18, 2023, at 05:13, Acee Lindem <acee.ietf@gmail.com> wrote:
>
> Hi Robert,
>
>
>
> On Sep 18, 2023, at 07:50, Robert Raszuk <robert@raszuk.net> wrote:
>
> Acee,
>
> I agree with your assessment.
>
> But looking at the RFC I would say it is missing a Terminology section. If
> such section would clearly define meaning of virtual link in the context of
> this RFC there would be no ambiguity.
>
> Otherwise those not skilled in OSPF art may take a document and apply
> casual meaning to virtual link (which does indeed include a tunnel of any
> sort :).
>
> Of course this entire RFC is about OSPFv3 so this should be very intuitive
> to read it in such context not as casual IETF issued paper.
>
>
> Right.
>
>
> If any errara is needed here IMHO is just to add terminology section
> unless there is some formal definition that in all IETF RFCs terms
> apply only to the context of given subject doc. I am honestly not sure if
> there is one.
>
>
> I believe you could take almost any Routing RFC and improve it with
> editing and the addition of more context. This was clearly the case for
> https://datatracker.ietf.org/doc/draft-ietf-rtgwg-vrrp-rfc5798bis/
>
> This started out as a respin of the document for inclusive language but I
> also made significant edits to improve the readability (as well as address
> errata and other minor errors). After that, I received some really good
> input from reviewers (e.g., Quentin Arimitage provided around 70 comments
> and suggestions, most of which were incorporated).
>
> However, improvements such as these are usually not done with an Errata.
>
> Thanks,
> Acee
>
>
>
>
> Thx,
> R.
>
> On Mon, Sep 18, 2023 at 1:27 PM Acee Lindem <acee.ietf@gmail.com> wrote:
>
>>
>>
>> > On Sep 17, 2023, at 22:07, Owen DeLong <owen@delong.com> wrote:
>> >
>> > You say they are unnecessary, then why do we have vendors doing this
>> wrong and pointing to this requirement of the RFC as their reason for doing
>> so?
>> >
>> > While there may be a valid argument that they shouldn’t be necessary, I
>> would argue that real world implementation experience suggests that they are
>> > most definitely necessary and are a minor edit to provide additional
>> clarity.
>>
>> An OSPF virtual link and a tunnel (e.g., GRE tunnel) are totally
>> different constructs. The vendor is incorrect in arguing that this text
>> specifics operation over a GRE tunnel. Rather, they should be arguing that
>> OSPF doesn’t have any path MTU capabilities and since a tunnel can be
>> multi-hop, OSPF doesn’t know the MTU.
>>
>> Thanks,
>> Acee
>>
>>
>> >
>> > Are you really arguing to preserve ambiguous language when the problem
>> is so easy to solve?
>> >
>> > Owen
>> >
>> >
>> >
>> >> On Sep 17, 2023, at 15:25, Acee Lindem <acee.ietf@gmail.com> wrote:
>> >>
>> >> Given that the context of the “Interface MTU” is specifically the
>> “interface MTU” field in OSPFv3 Database Description packets and OSPF
>> virtual links (RFC 2328), the additions recommended in this Errata are
>> unnecessary. The Errata should be rejected.
>> >>
>> >> Thanks,
>> >> Acee
>> >>> On Sep 17, 2023, at 15:58, RFC Errata System <
>> rfc-editor@rfc-editor.org> wrote:
>> >>>
>> >>> The following errata report has been submitted for RFC5838,
>> >>> "Support of Address Families in OSPFv3".
>> >>>
>> >>> --------------------------------------
>> >>> You may review the report below and at:
>> >>> https://www.rfc-editor.org/errata/eid7644
>> >>>
>> >>> --------------------------------------
>> >>> Type: Technical
>> >>> Reported by: Owen DeLong <owen@delong.com>
>> >>>
>> >>> Section: 2.7
>> >>>
>> >>> Original Text
>> >>> -------------
>> >>> Interface MTU
>> >>>    The size in octets of the largest address family specific datagram
>> >>>    that can be sent on the associated interface without
>> >>>    fragmentation.  The MTUs of common Internet link types can be
>> >>>    found in Table 7-1 of [MTUDISC].  The Interface MTU SHOULD be set
>> >>>    to 0 in Database Description packets sent over virtual links.
>> >>>
>> >>>
>> >>> Corrected Text
>> >>> --------------
>> >>> Interface MTU
>> >>>    The size in octets of the largest address family specific datagram
>> >>>    that can be sent on the associated interface without
>> >>>    fragmentation.  The MTUs of common Internet link types can be
>> >>>    found in Table 7-1 of [MTUDISC].  The Interface MTU SHOULD be set
>> >>>    to 0 in Database Description packets sent over (OSPF3) virtual
>> links.
>> >>>    This recommendation MUST NOT be applied to tunnel and other virtual
>> >>>    or software interfaces which carry traffic other than OSPF
>> protocol packets.
>> >>>
>> >>> Notes
>> >>> -----
>> >>> Currently, the language is ambiguous and at least one vendor has
>> implemented OSPF3 sending an MTU of zero on GRE interfaces (and possibly
>> others such as IPIP, IPSEC, etc., as I have not tested these). I believe
>> that the intent of the RFC is to refer strictly to OSPF virtual-links which
>> carry only OSPF protocol data and therefore have no meaningful MTU. When
>> this is mistakenly applied to other forms of "virtual" interfaces such as
>> tunnels, the results can be quite harmful.
>> >>>
>> >>> As such, I think that clarification is in order, since the vendor in
>> question is unrepentant and claims their current implementation to be
>> compliant with the RFC.
>> >>>
>> >>> Instructions:
>> >>> -------------
>> >>> This erratum is currently posted as "Reported". If necessary, please
>> >>> use "Reply All" to discuss whether it should be verified or
>> >>> rejected. When a decision is reached, the verifying party
>> >>> can log in to change the status and edit the report, if necessary.
>> >>>
>> >>> --------------------------------------
>> >>> RFC5838 (draft-ietf-ospf-af-alt-10)
>> >>> --------------------------------------
>> >>> Title               : Support of Address Families in OSPFv3
>> >>> Publication Date    : April 2010
>> >>> Author(s)           : A. Lindem, Ed., S. Mirtorabi, A. Roy, M.
>> Barnes, R. Aggarwal
>> >>> Category            : PROPOSED STANDARD
>> >>> Source              : Open Shortest Path First IGP
>> >>> Area                : Routing
>> >>> Stream              : IETF
>> >>> Verifying Party     : IESG
>> >>>
>> >>> _______________________________________________
>> >>> Lsr mailing list
>> >>> Lsr@ietf.org
>> >>> https://www.ietf.org/mailman/listinfo/lsr
>> >>
>> >
>>
>> _______________________________________________
>> Lsr mailing list
>> Lsr@ietf.org
>> https://www.ietf.org/mailman/listinfo/lsr
>>
>
>