Re: [Lsr] Thoughts about PUAs - are we not over-engineering?

"Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com> Wed, 15 June 2022 08:54 UTC

Return-Path: <gunter.van_de_velde@nokia.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1E26C14F74C; Wed, 15 Jun 2022 01:54:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.651
X-Spam-Level:
X-Spam-Status: No, score=-2.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.745, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZpE0p0dpDuI8; Wed, 15 Jun 2022 01:54:20 -0700 (PDT)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on0724.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0e::724]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0764FC14F718; Wed, 15 Jun 2022 01:54:18 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PdqxvR2wfpcEv3Bz7ovT7VnVWXkyzGIkuXXquNZLPzfOL6tt2xPT5uBRCikzHKQCCERlcgspWLktxoDmyo+cnEmPhKs+7ayf/uTp4h397nJTIXEXjMisynCqmCwq9MOA5DQb6phEHgpdyu4HnN9TPEaZziequwSlPnsyb68Wjgb5EQOnlBai1tLn8RHbg1It1RNMTfI3x2iyEoJoYhiXU4N7wvZr3XjI/bOyuNHREqiyxm3bd0yLe1NkH8+Rh4SF4R9ku2gfp7GU4Q/X4hrPW3uGBiHSy1a2GdjjlwjemWQarqRiU4yDwS7zu3/dW59RgtS0/3PECqY08zP7XzgNWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xg+MnWNXIXFHSKu3Y4xdgyqNkWbZmOw9IXxLnlkXPF4=; b=Xq7F+jb0OHOZf5/tFxp8zhHyRuYP2UrMBP5+YHZFhtFkbQj69JswpH57jQRV5qhDL7WfdnQkfl9ccgUbDf+8vvaMiGmuXBfQRvpgllxSbX+WneG8cTPIst7k24tXLuLYpCdwaWrZd7lbjt50b2syUPVTdo26QNd79eGkEqXvcF1Gq+u6riCdHcqRhICI1s6smZspFTM+aRMEETQS4k5zOLgKL0uCs/StWErcNIz1xOwMVtWSFIGIRQFh8DUTH3EU8+b1dpoeWTaI9Tbbzc+N7kO14T/jF8jlTkSVup2MKxgxSPnxNXUmhwu4y2P2KmHqqc8I1GaKuDdqFKOv+b2YLg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xg+MnWNXIXFHSKu3Y4xdgyqNkWbZmOw9IXxLnlkXPF4=; b=BQJoxRKZ6jLB5duP41XcR3a9C1Jq3CS83Elgj7xKgJrY2YMPx1K+tJspOEgY7CsVi2qnvklPtbOIgN5PWLZie/WGPKBLBpCMaIfq5K5oImPMbbowBnJgmb3oyDKubN+kj6QNulFFGmZChGW+ejNrcsfrkNNZ81r1j0vWfgxvoOY=
Received: from AM0PR07MB6386.eurprd07.prod.outlook.com (2603:10a6:20b:144::23) by VI1PR07MB4799.eurprd07.prod.outlook.com (2603:10a6:803:6f::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5353.14; Wed, 15 Jun 2022 08:54:13 +0000
Received: from AM0PR07MB6386.eurprd07.prod.outlook.com ([fe80::8d52:6c9e:86f2:d305]) by AM0PR07MB6386.eurprd07.prod.outlook.com ([fe80::8d52:6c9e:86f2:d305%6]) with mapi id 15.20.5353.014; Wed, 15 Jun 2022 08:54:13 +0000
From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>
To: Aijun Wang <wangaijun@tsinghua.org.cn>
CC: lsr <lsr@ietf.org>, "draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org" <draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org>, "draft-wang-lsr-prefix-unreachable@ietf.org" <draft-wang-lsr-prefix-unreachable@ietf.org>
Thread-Topic: [Lsr] Thoughts about PUAs - are we not over-engineering?
Thread-Index: AQHYf9k+ywX/2/05w0eb36S5z+xeDq1QJy1A
Date: Wed, 15 Jun 2022 08:54:13 +0000
Message-ID: <AM0PR07MB63867C21BACD150E79902447E0AD9@AM0PR07MB6386.eurprd07.prod.outlook.com>
References: <8850AB94-C2B9-4883-A796-2AE90BB4FB93@tsinghua.org.cn>
In-Reply-To: <8850AB94-C2B9-4883-A796-2AE90BB4FB93@tsinghua.org.cn>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nokia.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 79e9af10-8196-4bae-384a-08da4eac9f1b
x-ms-traffictypediagnostic: VI1PR07MB4799:EE_
x-microsoft-antispam-prvs: <VI1PR07MB4799903B041040F2ABD4589DE0AD9@VI1PR07MB4799.eurprd07.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR07MB6386.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(366004)(966005)(38070700005)(71200400001)(122000001)(82960400001)(66446008)(76116006)(8676002)(508600001)(66946007)(66556008)(64756008)(66476007)(4326008)(86362001)(6916009)(54906003)(316002)(38100700002)(66574015)(166002)(53546011)(83380400001)(6506007)(7696005)(186003)(9686003)(55016003)(8936002)(52536014)(5660300002)(2906002)(33656002); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: VMf29DuRBAqY0+eWhvfcnHFTUy6s8mKuDGkVJ5W++zaY7HRHNXQrhu41R5LVYc95c/DZwzPwL4kSc/E2kD3mYRnWqffDYs/+gAI+H2uK54bZEPF16gRqTcu79gFlkZd8nxor08r+F+mjQdvQv5Ykp1k11dl+m/y+90kvdrQU1RnVanfyO+sOf4Bu1M8ggApV5QfHOBnx+Q/ec9YgGHQLGYrQxlr94kk6ohW7K70SQDz4qYHasbNG8TJ1mMLho/YpmXxlGvBs7hZUvn+ElJcHzBa1JISJQaI65xOkt0y7mG13oNeH8RSiYtWjyGKbxZw7deJiOVHG4sNplwQQJW2OqYi/1WoNXMju0MC6AKgKxxouJ7NY/v+2cRuBxJbvC7hJ682dixJ3/A6kjYLy4t9XI/nH8A3ugM5YhFMBXZmCEteIxK1Rh5B9SXrB4NouI2hRAO5qh1IGpV8HH+SZtt32qyANYO19ZJL90SKnvQuFuKnCduSf4mX/RsIPfEBd+L6PKddsWel5ASJte6u7P+qwm8qseXmFy9djvTLx/9Y0TnB7h8qUPRZyjcu1RSPHFMLjdeVhFfLN0DbDVhqULXWjnfGB6gVn9taOwftq+eggkHn4iLjdBADA10eiSHAFqqEvA9kqzZ7TvNvm7l6eRd8BIpwuDOYSWuS3dn4Ke09z0Iiz8QpqN8LOl2I5lpgIcL9tGj65AoH3aQE3Uqz74h/dCFPUNihJ2Elv9sk0e10MB7ZTAOo2vB7/7L9fi6PJ+0ZCgREZ3pa038hAK3/COL1ix+oFS4LvjD/9UMQXSPAxDxNIUkJq2LaDGDLb4f4gSQTpmjPgVTtlKk7cfFxxAGhDe0Nav41h9EtVI8OZqXn4EDG1ewTWDvzWHTQwfB/dgrXm2gtHttd+Iqp1BpWr9VGGn94WnQZQh9vr3Btd91l3ldwVFkM2rm4mEAJ+g4ZiIqZ6su0+IkAvt02JtbxVeP8Bk1lFkUnTeMlwXiq5/sBOdqlLL9d42P4E4Omx8rnLfn52HjPUDEzOKbJqTjekQw4w9V3uWf0gMEoW1kWAefm0xSipCJFuUs7reLpikZKqahs219ZPzImMcarP1rR+KdUv7HxUmBoAO3RVL5NzM4KDBmrfC/kB7GF2QH8OYNABizpUqfJ08Gk8bIh9sYTh/VNZlpbFPlwpUC8H6Bx2EAjC02cLe0JO09/u98LfR2XY2FIwi4Q9lwhipCwWbd9Q/BKldj6J9N0wvFuowltDdM+2HoPdT556Vw+CadT4vYf4qXx2qE8Z0rzf4dkUQ9yOFyoSJtn/f+R2GaPtUMbPpgPbfvSanfxvjYYIXQUMAOAMvOpfANHENauHePRrHkwLPIPjFNBcNxZunqAYDfGbEQuojTAFIeyzKsZWyRJggCbj6uPsdSQP/Rfmyggkasqgxl7ewmb9Yw/aDGtveifrmIRiVsvlP2M9YS+vW4KDgfaYZMYbmIBrg9CAl/iBVFDideI7t3DR59VR6btfJgmRx03A9UODGQMN7dF31ws1mkLQKZHWwN7+LDKZAK4WG+0D0KWhTEORb9JaNZCFjrFiD62nGp2WQr+PJ7SQhErSbbtvUsSJp92ER6tFuSnmPBzln7DnfOvjAA3b/k4mhz8TL10cibMfRfPz1jCUF18nYSHXcacc6x2xl6GLA8dx7oDssV1fn44Q1C0t15H8OxHkwurqjhJnZQ7yeRsAf2SJsNR5X1fTSGs39tkVo73/CjH5aUzu3vgIIDVlPaHMRTYChFs0+9iiqH5oZ5JAvRFU70AXO8H5pZiABTL/
x-ms-exchange-antispam-messagedata-1: aL4WzqxevyK/Td+DlSrbZSiH+tCaJoST960=
Content-Type: multipart/alternative; boundary="_000_AM0PR07MB63867C21BACD150E79902447E0AD9AM0PR07MB6386eurp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR07MB6386.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 79e9af10-8196-4bae-384a-08da4eac9f1b
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2022 08:54:13.6892 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: YrlbRwueiEVQtuN7ExBZ8FbLIA1E1W2y8pUR6ktTWbdiEfs+G5FwkAGUWXiJh3eA4uRGNOKj+gFmY7BuGwCp/QmPQpUMCIX4iGTws61vIf8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB4799
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/FBDxhkmoTRO2pW_Yu3ic09fxbZ0>
Subject: Re: [Lsr] Thoughts about PUAs - are we not over-engineering?
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jun 2022 08:54:22 -0000

Hi Aijun,

Thanks for sharing your thoughts.
I agree that the observed problem is valid and is service impacting for operators.

It is wise to be conservative about using the IGP as an API to advertise opaque properties. The PUA/UPA have nothing to do with calculating SPF/cSPF.

Maybe we should first try to understand and agree on the full problem space before we directly jump into IGP encodings and risk over-engineering a solution?

G/




From: Aijun Wang <wangaijun@tsinghua.org.cn>
Sent: Tuesday, June 14, 2022 12:27 PM
To: Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com>
Cc: lsr <lsr@ietf.org>; draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org; draft-wang-lsr-prefix-unreachable-annoucement <draft-wang-lsr-prefix-unreachable-annoucement@ietf.org>
Subject: Re: [Lsr] Thoughts about PUAs - are we not over-engineering?

Hi, Gunter:

Let me try to answer some of your concerns.

The reason that we prefer to the Summary+PUA/UPA solution is that the node failure(which is the main scenario that we focus now) is one rarely thing in the network. Then the unreachable event triggered mechanism is more efficient than advertising all of the node’s reachable address. This point has been discussed in the mail list in past.

In the https://datatracker.ietf.org/doc/html/draft-wang-lsr-prefix-unreachable-annoucement-09#section-8, we have illustrated how to control the advertisement of PUA message on the ABR. If this can’t settle your concerns, we can consider more policy on the ABR.

Regarding to the tracking and representation of PUA in RTM, we have proposed in the earlier version of this draft, that is to install one black hole route to the specified detailed prefix.

The reason that PUA requires routers within one area to be upgraded is that it want to avoid the situations when the router doesn’t recognize PUA message and misbehave. We are considering the convergence of PUA/UPA solutions, which may relax such requirements during deployment.


Aijun Wang
China Telecom


On Jun 14, 2022, at 16:59, Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com<mailto:gunter.van_de_velde@nokia.com>> wrote:
Hi All,

When reading both proposals about PUA's:
* draft-ppsenak-lsr-igp-ureach-prefix-announce-00
* draft-wang-lsr-prefix-unreachable-annoucement-09

The identified problem space seems a correct observation, and indeed summaries hide remote area network instabilities. It is one of the perceived benefits of using summaries. The place in the network where this hiding takes the most impact upon convergence is at service nodes (PE's for L3/L2/transport) where due to the summarization its difficult to detect that the transport tunnel end-point suddenly becomes unreachable. My concern however is if it really is a problem that is worthy for LSR WG to solve.

To me the "draft draft-wang-lsr-prefix-unreachable-annoucement-09" is not a preferred solution due to the expectation that all nodes in an area must be upgraded to support the IGP capability. From this operational perspective the draft "draft-ppsenak-lsr-igp-ureach-prefix-announce-00" is more elegant, as only the A(S)BR's and particular PEs must be upgraded to support PUA's. I do have concerns about the number of PUA advertisements in hierarchically summarized networks (/24 (site) -> /20 (region) -> /16 (core)). More specific, in the /16 backbone area, how many of these PUAs will be floating around creating LSP LSDB update churns? How to control the potentially exponential number of observed PUAs from floating everywhere? (will this lead to OSPF type NSSA areas where areas will be purged from these PUAs for scaling stability?)

Long story short, should we not take a step back and re-think this identified problem space? Is the proposed solution space not more evil as the problem space? We do summarization because it brings stability and reduce the number of link state updates within an area. And now with PUA we re-introduce additional link state updates (PUAs), we blow up the LSDB with information opaque to SPF best-path calculation. In addition there is suggestion of new state-machinery to track the igp reachability of 'protected' prefixes and there is maybe desire to contain or filter updates cross inter-area boundaries. And finally, how will we represent and track PUA in the RTM?

What is wrong with simply not doing summaries and forget about these PUAs to pinch holes in the summary prefixes? this worked very well during last two decennia. Are we not over-engineering with PUAs?

G/

_______________________________________________
Lsr mailing list
Lsr@ietf.org<mailto:Lsr@ietf.org>
https://www.ietf.org/mailman/listinfo/lsr