[Lsr] Protection between flex-algo topologies

Robert Raszuk <robert@raszuk.net> Wed, 18 May 2022 20:26 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAF08C180A96 for <lsr@ietfa.amsl.com>; Wed, 18 May 2022 13:26:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vAHVl0RCm-_v for <lsr@ietfa.amsl.com>; Wed, 18 May 2022 13:26:29 -0700 (PDT)
Received: from mail-ua1-x92f.google.com (mail-ua1-x92f.google.com [IPv6:2607:f8b0:4864:20::92f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24513C180A98 for <lsr@ietf.org>; Wed, 18 May 2022 13:26:28 -0700 (PDT)
Received: by mail-ua1-x92f.google.com with SMTP id m18so1257539uao.9 for <lsr@ietf.org>; Wed, 18 May 2022 13:26:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ahb34D0vPSWBsAnio/QWrQQG0q5nl1waLE/FJK1J/C0=; b=Ch93p4aw2p5XKz2KnbMzgylGht5a6faK/H1daO+FGO+eRWGuRT/XyQNhQ2+yK2p+ws Df0ZVK4r5dTze7JgOIUWU1iBRpgxPt9UoNSTB37MCXzpcpWUZV6e5hGei+cNtH7GFuZo hhzTJvKdao4UtuNtRISW59Q63SNfkZ6PQKxAhruKLGEvlmJ+ptODJou175UV73+U0hSl 4GApKIIlcnGEiAKaSQ4wiSZ4UAN16NiFaVYH3VKUjt0cUjs1uyVnBzjelLA+SaqkTAfJ SMbKSpuBwc8vhewVT/4hy+d0bDtwhx4q86ljhsH8vbUdx/0SgfjVZ1tXC+7d7mUiGkpq jnaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ahb34D0vPSWBsAnio/QWrQQG0q5nl1waLE/FJK1J/C0=; b=m4/6f5Hmrhv0NRGonJza/Sx+yPIRZvJgEA06lP7vnlQckNs4j92pN/Cx4N+qYEWtXm +9F8vQbdjAStWCQbh6Xsiz/lGECnlILxi3A9foyzb21cM6mGH4MLKxR4KuiLD0qlQ+iP JS7B0Ex2eiCmlZjmeq0/au5UqprlfdRLxDTVpfkpbz8OmfAlu1shTAKumV7wR0M1w9OC +eyjggh0gKLptrW8nSe5IqKYTN6EtMQ/ofc8zc8xfWUZ1ulQJr9JWLWn2sZo9iBPumn6 HC9cicgc6BjofQ1R/JCGFioqM+a7rHaQFpgDpbPrYY+LZ4CJsY5ETrU+PYE42yo/A77U Oo3g==
X-Gm-Message-State: AOAM531jQaOCuJ3jdctbJbOUohlQYopL6ziLI1tvkl5ZPIPHr2Dn2/fI 8O2cT2x45mJVfq5GLaIcp0m2wLhUY68uWHY5U9Sv5vZ25Vs=
X-Google-Smtp-Source: ABdhPJxgypC0eeDhIPv443NgdQrQFKpqTx9QUizNiyMEnfwzLRslRMwEZap0AmoLvmuv93RkqEcAPYXcl/Fxctu35SY=
X-Received: by 2002:ab0:7609:0:b0:368:c31b:e1ac with SMTP id o9-20020ab07609000000b00368c31be1acmr782648uap.74.1652905587936; Wed, 18 May 2022 13:26:27 -0700 (PDT)
MIME-Version: 1.0
References: <165270816129.62374.13329927223902426661@ietfa.amsl.com> <CAOj+MMGoNOLMW0r3-JpMxyGQFv6ehKR5o4w4eqWQT8VmT=MO5A@mail.gmail.com> <CAOj+MMGhe27QynC7JB2vxkiKeXxtKXJxeKzd5SeP6nHs8JL0zg@mail.gmail.com> <67113aea-3555-ce40-d0bb-05dd3d3e1ae9@cisco.com> <CAOj+MMHDT8XNmyYdYEJjT0_N9v6zHSFLTFbx=ssokim6i4w1qQ@mail.gmail.com> <1aa46d51-b8c1-2e43-16f6-16063ef41b50@cisco.com> <CAOj+MMG_cLN2DE6Q4RBQ310XjFVkUCTWWD--K_xxnBADRcVcQQ@mail.gmail.com> <BY5PR11MB4337664B8EEF8C4F66918730C1D19@BY5PR11MB4337.namprd11.prod.outlook.com>
In-Reply-To: <BY5PR11MB4337664B8EEF8C4F66918730C1D19@BY5PR11MB4337.namprd11.prod.outlook.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Wed, 18 May 2022 22:26:51 +0200
Message-ID: <CAOj+MMEn6-pXtiES9d4rKZu0HHO0Bd-FGQciZtemEH1qXKzTjw@mail.gmail.com>
To: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
Cc: "Peter Psenak (ppsenak)" <ppsenak@cisco.com>, lsr <lsr@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006aa8f005df4f1221"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/H_zQ_zaGsTu0gH-tK4c7GpAhEXo>
Subject: [Lsr] Protection between flex-algo topologies
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 May 2022 20:26:32 -0000

/* As this departs from ip-flexalgo topic adjusting the subject line */

Hi Les,

I am not so much focusing on fallback just making sure I did not miss any
paragraph or draft which already would describe how to provide protection
in other then on a per topology basis.

Yes, fallbacks are tricky if you relax constraints. To put it in better
perspective fallbacks are easy for overlays. For underlays they may work
(as mentioned to Peter under unidirectional single protect constraint). But
"may work" perhaps is too weak.

Your suggestion to add fallback links to topologies with higher metric is
actually pretty cool. I did not think about it so having this little thread
seems already fruitful :)

But that still requires you to run computations for your favourite LFA type
multiple times (topo by topo) even if those algorithms only different in
some additional non forwarding related processing functions (different
function per slice basis). Speaking of which it seems that the ability to
specify per flex-algo additional processing on packets could have valid use
cases. But forwarding wise the topologies can be identical.

In such cases it seems that it could be very useful to still recognize in a
control plane the uniqueness while a data plane would be common. It looks
to me like we have all pieces of the puzzle here and all what is needed is
to rearrange it a bit.

What do you think ?

Thx,
Robert


On Wed, May 18, 2022 at 9:39 PM Les Ginsberg (ginsberg) <ginsberg@cisco.com>
wrote:

> Robert –
>
>
>
> It isn’t clear to me why you are focused on “fallback” as a solution here.
>
> If you are willing to allow traffic that prefers the “Algo-X topology” to
> use other paths in the event of link/node failures, it seems
> straightforward – using the new metrics being defined in
> https://datatracker.ietf.org/doc/draft-ietf-lsr-flex-algo-bw-con/ - to
> include other links in the Algo-X topology and apply a high cost to them so
> they won’t be used unless the more preferred links are  unavailable.
>
>
>
> I think you and I both have some experience with “fallback”. It is complex
> to implement – especially in the forwarding plane – and would not be my
> first choice as a solution.
>
>
>
> ??
>
>
>
>     Les
>
>
>
>
>
> *From:* Lsr <lsr-bounces@ietf.org> *On Behalf Of * Robert Raszuk
> *Sent:* Tuesday, May 17, 2022 10:58 AM
> *To:* Peter Psenak (ppsenak) <ppsenak@cisco.com>
> *Cc:* lsr <lsr@ietf.org>
> *Subject:* Re: [Lsr] Publication has been requested for
> draft-ietf-lsr-ip-flexalgo-06
>
>
>
> Hi Peter,
>
>
>
> Enabling local protection on all nodes in all topologies may also not be
> the best thing to do (for various reasons).
>
>
>
> While I agree that general fallback may be fragile, how about limited
> fallback and only to one special "protection topology" which would have few
> constraints allowing us to do such fallback safely ?
>
>
>
> I guess for ip flex-algo which is a subject of this thread this would not
> be possible, but for SR flex-algo I think this may work pretty well
> allowing N:1 fast connectivity restoration.
>
>
>
> Thx,
>
> Robert
>
>
>
> On Tue, May 17, 2022 at 2:19 PM Peter Psenak <ppsenak@cisco.com> wrote:
>
> Robert,
>
> On 17/05/2022 14:14, Robert Raszuk wrote:
> > Ok cool - thx Peter !
> >
> > More general question - for any FlexAlgo model (incl. SR):
> >
> > Is fallback between topologies - say during failure of primary one -
> > only allowed on the ingress to the network ?
>
> no. Fallback between flex-algos has never been a requirement and is not
> part of the flex-algo specification.
>
> I consider it a dangerous thing to do. It may work under certain
> conditions, but may cause loops under different ones.
>
> thanks,
> Peter
>
>
> >
> > If so the repair must be setup on each topology, otherwise repair will
> > be long as it would need to wait for igp flooding and ingress switchover
> > trigger ?
> >
> > Obviously for IP flex algo it would be much much longer as given prefix
> > needs to be completely reflooded network wide and purged from original
> > topo. Ouch considering time to trigger such action.
> >
> > Many thanks,
> > R.
> >
> > On Tue, May 17, 2022, 13:35 Peter Psenak <ppsenak@cisco.com
> > <mailto:ppsenak@cisco.com>> wrote:
> >
> >     Hi Robert,
> >
> >
> >     On 17/05/2022 12:11, Robert Raszuk wrote:
> >      >
> >      > Actually I would like to further clarify if workaround 1 is even
> >     doable ...
> >      >
> >      > It seems to me that the IP flexalgo paradigm does not have a way
> for
> >      > more granular then destination prefix forwarding.
> >
> >     that is correct. In IP flex-algo the prefix itself is bound to the
> >     algorithm.
> >
> >      >
> >      > So if I have http traffic vs streaming vs voice going to the same
> >     load
> >      > balancer (same dst IP address) there seems to be no way to map
> some
> >      > traffic (based on say port number) to take specific topology.
> >
> >     no, you can not do that with IP flex-algo.
> >
> >
> >      >
> >      > That's pretty coarse and frankly very limiting for applicability
> >     of IP
> >      > flex-algo. If I am correct the draft should be very
> >     explicit about this
> >      > before publication.
> >
> >     please look at the latest version of the draft, section 3:
> >
> >
> >
> https://datatracker.ietf.org/doc/html/draft-ietf-lsr-ip-flexalgo#section-3
> >     <
> https://datatracker.ietf.org/doc/html/draft-ietf-lsr-ip-flexalgo#section-3
> >
> >
> >     thanks,
> >     Peter
> >
> >      >
> >      > Kind regards
> >      > R.
> >      >
> >      > On Tue, May 17, 2022 at 12:01 PM Robert Raszuk <robert@raszuk.net
> >     <mailto:robert@raszuk.net>
> >      > <mailto:robert@raszuk.net <mailto:robert@raszuk.net>>> wrote:
> >      >
> >      >     Folks,
> >      >
> >      >     A bit related to Aijun's point but I have question to
> >     the text from
> >      >     the draft he quoted:
> >      >
> >      >         In cases where a prefix advertisement is received in both
> >     a IPv4
> >      >         Prefix Reachability TLV and an IPv4 Algorithm Prefix
> >     Reachability
> >      >         TLV, the IPv4 Prefix Reachability advertisement MUST be
> >     preferred
> >      >         when installing entries in the forwarding plane.
> >      >
> >      >     Does this really mean that I can not for a given prefix say
> >     /24 use
> >      >     default topology for best effort traffic and new flex-algo
> >     topology
> >      >     for specific application ?
> >      >
> >      >     Is the "workaround 1" to always build two new topologies for
> such
> >      >     /24 prefix (one following base topo and one new) and never
> >     advertise
> >      >     it in base topology ?
> >      >
> >      >     Is the "workaround 2" to forget about native forwarding and
> >     use for
> >      >     example SR and mark the packets such that SID pool
> >     corresponding to
> >      >     base topology forwarding will be separate from SID pool
> >      >     corresponding to new flex-algo topology ?
> >      >
> >      >     Many thx,
> >      >     Robert
> >      >
> >      >
> >      >     ---------- Forwarded message ---------
> >      >     From: *Acee Lindem via Datatracker* <noreply@ietf.org
> >     <mailto:noreply@ietf.org>
> >      >     <mailto:noreply@ietf.org <mailto:noreply@ietf.org>>>
> >      >     Date: Mon, May 16, 2022 at 3:36 PM
> >      >     Subject: [Lsr] Publication has been requested for
> >      >     draft-ietf-lsr-ip-flexalgo-06
> >      >     To: <jgs@juniper.net <mailto:jgs@juniper.net>
> >     <mailto:jgs@juniper.net <mailto:jgs@juniper.net>>>
> >      >     Cc: <acee@cisco.com <mailto:acee@cisco.com>
> >     <mailto:acee@cisco.com <mailto:acee@cisco.com>>>,
> >      >     <iesg-secretary@ietf.org <mailto:iesg-secretary@ietf.org>
> >     <mailto:iesg-secretary@ietf.org <mailto:iesg-secretary@ietf.org>>>,
> >      >     <lsr-chairs@ietf.org <mailto:lsr-chairs@ietf.org>
> >     <mailto:lsr-chairs@ietf.org <mailto:lsr-chairs@ietf.org>>>,
> >     <lsr@ietf.org <mailto:lsr@ietf.org>
> >      >     <mailto:lsr@ietf.org <mailto:lsr@ietf.org>>>
> >      >
> >      >
> >      >     Acee Lindem has requested publication of
> >      >     draft-ietf-lsr-ip-flexalgo-06 as Proposed Standard on behalf
> >     of the
> >      >     LSR working group.
> >      >
> >      >     Please verify the document's state at
> >      > https://datatracker.ietf.org/doc/draft-ietf-lsr-ip-flexalgo/
> >     <https://datatracker.ietf.org/doc/draft-ietf-lsr-ip-flexalgo/>
> >      >     <https://datatracker.ietf.org/doc/draft-ietf-lsr-ip-flexalgo/
> >     <https://datatracker.ietf.org/doc/draft-ietf-lsr-ip-flexalgo/>>
> >      >
> >      >
> >      >     _______________________________________________
> >      >     Lsr mailing list
> >      > Lsr@ietf.org <mailto:Lsr@ietf.org> <mailto:Lsr@ietf.org
> >     <mailto:Lsr@ietf.org>>
> >      > https://www.ietf.org/mailman/listinfo/lsr
> >     <https://www.ietf.org/mailman/listinfo/lsr>
> >      >     <https://www.ietf.org/mailman/listinfo/lsr
> >     <https://www.ietf.org/mailman/listinfo/lsr>>
> >      >
> >
>
>