Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Thu, 27 August 2020 00:16 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 753D83A0BC0 for <lsr@ietfa.amsl.com>; Wed, 26 Aug 2020 17:16:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=bXipwgHd; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=QTLuxcpQ
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZCXajhzI5yET for <lsr@ietfa.amsl.com>; Wed, 26 Aug 2020 17:16:56 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAE7C3A0BBE for <lsr@ietf.org>; Wed, 26 Aug 2020 17:16:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=32232; q=dns/txt; s=iport; t=1598487415; x=1599697015; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=kYWuaM/b1blyZvBjFzFjwhQ5XZzAo7fLltEu5YE4loo=; b=bXipwgHd+GQB+nnrD00oRfrfptMvDw7NA9komQtaoI232sxdLpqkI6nS UokZyunyXtZuc5xMSJpakonGQCC5dgO2BN8JJqWJoIY9HEdbWxsHj6Ph7 FGeLyCAE2CwPBAQ7uMJLu5O6bgXSTFgKV3txuSsOUQ/DLf+A/zQaibIAZ o=;
IronPort-PHdr: 9a23:EJOfOBzw2h5c3KrXCy+N+z0EezQntrPoPwUc9psgjfdUf7+++4j5ZRWHt+lqik6PWYSIo/5Hiu+DtafmVCRA5Juaq3kNfdRKUANNksQZmQEsQavnQU32JfLndWo2ScJFUlI243a9IA5RGZW2a1jbuHbn6zkUF132PhZ0IeKgHInUgoy32um+9oeVbR9PgW+2YKh5K1O9qgCCuw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DPBQDB+kZf/5tdJa1VChwBAQEBAQEHAQESAQEEBAEBggqBIy8jBigHcFgvLAqELYNGA41piguOZoJTA1ULAQEBDAEBIwoCBAEBhEwCF4IhAiQ4EwIDAQELAQEFAQEBAgEGBG2FXAELhXIBAQEEEhEKEwEBNwEPAgEIEQQBASEKAgICHxEdCAIEDgUIFwODBYF+TQMuAQIMpxECgTmIYXaBMoMBAQEFgTcCg3ENC4IOAwaBOIJxg2SGTxuBQT+BVIJNPoIaQgEBAgGBLy8rgmozgi2PTlOCbIZoi2SQKFEKgmOIZoZNhXWFJIMGiWeTUZJIikqCZpIaAgQCBAUCDgEBBYFrI4FXcBWDJFAXAg2OHwcFF4ECAQeCRINGgU6FQnQ3AgYBCQEBAwl8jnIBgRABAQ
X-IronPort-AV: E=Sophos;i="5.76,357,1592870400"; d="scan'208,217";a="806299485"
Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Aug 2020 00:16:54 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 07R0GsMv026795 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2020 00:16:54 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 26 Aug 2020 19:16:54 -0500
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 26 Aug 2020 19:16:53 -0500
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 26 Aug 2020 19:16:53 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fU0L+ncQE1R4W+w1rctBp3bQWmLbDxsXUdEuuWVIUp5HKvrOqNtriecwFw4tj9DqrK6T6VjiWjLla5iowjMzmoiPfECnm/xxNnVI2ep/6T0IH+Cy2h0idtIAQE45DSbSyQD/ciXJsZ/SICB6fYL2P21HtknQUBbVgms0N8nlh8xL76S0xUJzXEcuN+hxBKLlrA6rRnXOltuc5xJ6kk6+8m8wGNBm/OzWKWQuTY7aHrJJPrMxVjOJCuF2ePUfXAna2OY/6lnwwjBaKQ56zSR88+SLyhWJ5RBfsk9DuvoIgDZPLIVs87IJ6NwuA/f9VgGRTpQ37kYczQF1xfmYmoutAw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kYWuaM/b1blyZvBjFzFjwhQ5XZzAo7fLltEu5YE4loo=; b=RFAIXYdu8aAawwzb5u4n+PJ5yv7nP/hQf5RwTOeqx4kRCXvJ3Fs+wZU4ZHr++XFj/wFE3cC+ANChPow/bUv9FrRK7XxvQ1l3eCxwSL5DlxUExJzeNN3U1Rw8aTmLoaTxrbmDPInHgedsDwyTRauPdn3SYlFLGTY8ZnY2plcMDlCE4B1ZARlQrFi5Q61WBhi6ytAMmPH1rrRh26qDjEv7VaPjHn65QViS/uoB8PCcau1fx8z64x20N8EsBgYqlCVZaDI1Yz+zO0askwFbMJmsCbTcEyQQxTztKr9FKThHYbb0Zwj/gMnbu5AE9MqqCtIo6x8Gwrui5ooEyWYgH/uiLA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kYWuaM/b1blyZvBjFzFjwhQ5XZzAo7fLltEu5YE4loo=; b=QTLuxcpQBrKy0t/4Th0k2KoLlaMDDFmuaJjtb9IsueVwEZfvveKFBDG0V5CkrQr5fHS25MVIDLYX5cw5PYF+UjoPTIr630p0Jxkbky1Ci326SJdS8XI6zG7inIovAA0h3hruVO9oFrhLsErwz1+e6SZOgt6zFlI7dSmJ/fzun4A=
Received: from BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) by BYAPR11MB3573.namprd11.prod.outlook.com (2603:10b6:a03:fe::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3305.26; Thu, 27 Aug 2020 00:16:49 +0000
Received: from BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf]) by BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf%3]) with mapi id 15.20.3305.031; Thu, 27 Aug 2020 00:16:49 +0000
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: "tony.li@tony.li" <tony.li@tony.li>
CC: "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
Thread-Index: AQHWe/0FCwnzlVRuSU+4CLy77/UAXKlLC2Jg
Date: Thu, 27 Aug 2020 00:16:49 +0000
Message-ID: <BY5PR11MB4337AE29FC4C8EF69C7972AEC1550@BY5PR11MB4337.namprd11.prod.outlook.com>
References: <159665865921.15026.2581762617571023706@ietfa.amsl.com> <476BCC1F-0C33-4DEA-84DF-365FB5CBA377@tony.li> <BY5PR11MB4337679B3A5C99836E982202C1540@BY5PR11MB4337.namprd11.prod.outlook.com> <F7F4FFC1-2134-475E-AC3A-C3FD750F7EED@tony.li>
In-Reply-To: <F7F4FFC1-2134-475E-AC3A-C3FD750F7EED@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tony.li; dkim=none (message not signed) header.d=none;tony.li; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [12.156.66.3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4643ba4d-7fd1-4e82-7ab0-08d84a1e7ddf
x-ms-traffictypediagnostic: BYAPR11MB3573:
x-microsoft-antispam-prvs: <BYAPR11MB357346A78C633983FFFA1BE2C1550@BYAPR11MB3573.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: LRa1/9MX2CfVmI+7uTDzcKTWH+rSAoQzRkhflR3FHJeKF8F2gNpX5Mc68/mg0s2E+viB3nEttQrWmJH3tthlBHDqMQr6iB0HgPDI9naO77oGHzfXKCS+C4jo+9AjL1DalASvfrw3fRSLtnRFqyBhyZdmfJaQwVn3yXNIDV2P7qlnQFtWvOmlIY1HDeHh22cLd7cu69quptcYb99xyL21F2fdYDpPq3MFUDGzEu3Rlt20Mv/Dktziu7cdnKsiHUPw6qJ0OyC5oWsqPC4IAuykhbpUv00GR0W/HiV9QZHe9s9OTRs6+jI0eYuBIu1RRQ4nBlw+IP+G+o1FKOvOY+KxgjK24dsobUtwFHAkU7UOKiGAw3tr5KMsO7hb+5QsOSJhA/UYG5N+/2R7J1x5OyJALw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4337.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(366004)(39860400002)(346002)(376002)(71200400001)(8676002)(7696005)(316002)(66446008)(9686003)(55016002)(2906002)(166002)(33656002)(8936002)(83380400001)(478600001)(6916009)(86362001)(966005)(66476007)(66556008)(64756008)(76116006)(66946007)(53546011)(26005)(52536014)(186003)(5660300002)(4326008)(6506007)(66574015); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR11MB4337AE29FC4C8EF69C7972AEC1550BY5PR11MB4337namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4337.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4643ba4d-7fd1-4e82-7ab0-08d84a1e7ddf
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2020 00:16:49.3487 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: XACNgZRjWAEHIRTnDsCwq2x5ftB6jUGnUDASn/d7rxoEkocECSFVqZQN+eVh9se0TSlar5NUVCfrokBXTxJA2w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3573
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com
X-Outbound-Node: rcdn-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/CUTM9lG0-B-_NmzBeOuolYFrhjM>
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2020 00:16:58 -0000

Tony –

Sigh…

I introduced the term “Area Destination” only as a means of demonstrating that this could have been something other than a prefix – as had been proposed in earlier versions of the draft. I am not asking you to introduce the term in the draft and as it seemed to confuse you I won’t use it any more in this thread.

As per the draft:

Area Proxy TLV is advertised by IERs in their L2 LSP.
Area Proxy TLV is NOT advertised in the Proxy LSP.
So how do the OERs become aware of the

“prefix and  SID that represents the entirety of the Inside Area to the Outside  Area”

???

I assume that they learn this because the Proxy LSP (at least) contains a Prefix Reachability TLV with the same prefix/SID that was advertised in the Area Proxy TLV.
Is this correct? If not, please correct me.  Also explain why it is necessary for something other than a prefix reachability advertisement to cause an entry to be created in forwarding for a prefix – and ONLY when received in an L2 LSP?
This is unprecedented.

If I am right, you then have  multiple TLVs which advertise duplicate advertisements – even if not in the same LSP - which exposes you to the problems I mentioned.
My goal is to have one – and only one – advertisement which creates forwarding state.
My second goal is not to invent a new SID type/advertisement when the object associated with it (a prefix) already has a defined SID type.

What I object to – and am concerned about – is that you seem to invent your version of SR for Area Proxy even when you use the same object (a prefix) that SR already supports.

As you know, I was prepared to support a new type of SID when you actually were defining a new object type. The fact that you decided NOT to invent a new object type is fine with me – but please do not claim that you need a new SID type when you don’t.

   Les

From: Tony Li <tony1athome@gmail.com> On Behalf Of tony.li@tony.li
Sent: Wednesday, August 26, 2020 4:02 PM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>
Cc: lsr@ietf.org
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt



Hi Les,


You have chosen to assign a prefix as the “Area Destination”.


Are you sure you have the right document?  The word “Destination” does not appear anywhere within https://tools.ietf.org/html/draft-ietf-lsr-isis-area-proxy-03



This is fine with me. But having done that, forwarding should be based on the existing mechanisms for advertising a prefix and the associated prefix SID.


Which is exactly what we’re doing: we’re advertising a prefix SID in the Proxy LSP.


If you’re referring to the Area SID advertisement, then there is no existing mechanism for advertising that today, that’s why we’re having to create an additional subTLV.
There is no other mechanism whereby system A can advertise a prefix SID to a number of other systems and have them install receive/POP forwarding entries.



By doing that you avoid a number of problems:


  *   Duplicate SID advertisements for the same prefix and the possibility of inconsistency
  *   Differing forwarding behavior for routers (IERs) who understand the Area Proxy TLV and those routers which don’t (everyone else)

You can still include a sub-TLV in the Area Proxy TLV to identify the Area Prefix, but there is no need to also advertise the SID there. This makes the “Area Prefix” advertisement functionally equivalent to the “Router-ID” advertisement. It’s a convenient way to identify the prefix associated with the area, but it does not eliminate the need to also advertise prefix reachability information for that prefix in order to enable forwarding.


You seem to be asking that the Area Leader also advertise a Prefix SID in its own LSP, as well as a prefix in the Area Proxy TLV.  This is not just duplication of advertisement, it’s duplication plus a prefix.  By your own criteria, this suggestion is worse than what we’ve proposed.

All Inside Nodes need to understand the Area Proxy TLV and respond accordingly.  Only the Inside Edge Nodes need to install forwarding state for the Area SID.  Advertising a separate Prefix SID to the Inside Nodes forces them to create additional forwarding state that may not be desired by the network administrator.



I have also suggested that an additional bit could be assigned in the Prefix-Attributes sub-TLV (RFC 7794) to mark a prefix as an Area Prefix if you wish.


Thank you, but no thanks. As you’ve seen, a large driver for doing it this way is backward compatibility. Adding a bit would not be helpful in that regard.



But advertising a prefix-SID in two different places is a bad idea.


Advertising it in 2.5 places is worse.



In an unrelated matter, https://tools.ietf.org/html/draft-ietf-lsr-isis-area-proxy-03#section-2 states:

“An Inside Edge Router may be elected the DIS for a Boundary
   LAN.  In this case using the Area Proxy System Id as the basis for
   the LAN pseudonode identifier could create a collision, so the
   Insider Edge Router SHOULD compose the pseudonode identifier using
   its native system identifier.”

I understand the potential collision that could arise if the Area Proxy System-Id were to be used in the pseudonode-id. However, what you propose is incompatible with a strict interpretation of ISO 10589 Section 8.4.5:

“If this system, as a result of the Designated Intermediate System election process, considers itself to be designated Intermediate System, the LAN ID field shall be set to the concatenation of this system’s own system ID and the locally assigned one octet Local Circuit ID.”

This raises the possibility that some of the non-DIS neighbors might not honor the pseudo-node ID since it does not match the system-id associated with their adjacency to the pseudo-node.
At a minimum this possibility should be mentioned in the text.


This is fair and I will add a mention.  I should also point out that we have tested this against other implementations and not found a problem.


One way to mitigate this is to have the IERs advertise a LAN Priority of 0 in their IIHs so as to avoid this case.


True, or avoiding edge LANs entirely.  As you’ve previously remarked elsewhere, true multi-access LANs are on the decline.

Tony