Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Thu, 27 August 2020 15:35 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D3803A0EFC for <lsr@ietfa.amsl.com>; Thu, 27 Aug 2020 08:35:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level:
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=efC10jYx; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=z0f6EFMP
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D_-4bNbRdXNJ for <lsr@ietfa.amsl.com>; Thu, 27 Aug 2020 08:35:48 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E455E3A0EFB for <lsr@ietf.org>; Thu, 27 Aug 2020 08:35:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23480; q=dns/txt; s=iport; t=1598542547; x=1599752147; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=VRbruKSScfL7Z0d4SXovHkKZmBGc7QJ956Fhkm4ZE9o=; b=efC10jYx5ukvxgGYnUtYyoxZ+KRkhFA2FBh1ApafkmbdmRegG7OkceSb c8c3mKJ/5eyr2opz5WD7YdYENs54FWaO3BEyUSxjkG80Xqah/fSQFsSXQ pDsUpDrPheeJSI8nPxTWTP2mUygytqH7aUHHbNEotBImD9xKB7FDL562w M=;
IronPort-PHdr: 9a23:RyyoIRfmpDnxH/YhyNX2SVghlGMj4e+mNxMJ6pchl7NFe7ii+JKnJkHE+PFxlwaQBdfH7PRVze7X4OjsWm0FtJCGtn1KMJlBTAQMhshemQs8SNWEBkv2IL+PDWQ6Ec1OWUUj8yS9Nk5YS9r5YUyUpnzhpTIXEw/0YAxyIOm9E4XOjsOxgua1/ZCbYwhBiDenJ71oKxDjpgTKvc5Qioxneas=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C2AACG0kdf/4kNJK1gGgEBAQEBAQEBAQEDAQEBARIBAQEBAgIBAQEBggqBIy8jBigHcFgvLAqELYNGA41xgQKJCYl4hG6CUwNVCwEBAQwBAS0CBAEBhEwCF4IyAiQ4EwIDAQELAQEFAQEBAgEGBG2FXAELhXIBAQEEEhEKEwEBNwEPAgEIEQQBASsCAgIfER0IAgQOBQgagwWBfk0DLgECqDcCgTmIYXaBMoMBAQEFhTANC4IQCYE4gnGDZYUqgSUbgUE/gRFDghg1PoIagiWDFTOCLZAkgm2GaYsMXJApUQqCY5UqhSSDB4lok1aSTI0xkhoCBAIEBQIOAQEFgWsjgVdwFYMkUBcCDY4fDBeBAgEHgkSDRocQdDcCBgEJAQEDCXyOZAGBEAEB
X-IronPort-AV: E=Sophos;i="5.76,360,1592870400"; d="scan'208,217";a="565687718"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Aug 2020 15:35:43 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 07RFZh61023902 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2020 15:35:43 GMT
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 10:35:43 -0500
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 11:35:41 -0400
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 27 Aug 2020 10:35:41 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YIWi9bpMmSSpy/ewC+RHsDvVkGjzc0ltCmEmaq8xS+7HAZdcfwzs61VJZJbC4cCOZ2rtHhfE6wgXv6RFvJ1fBYCFSVSTdE3ZTxLkK8d4nMkNmyvUEaEjUxJ7+dHto9e1+9mjdzVvA0j+Q5m5vuZ29Z7lc6hh9bp3v0rCulbv8e2n+IiU3zukFDJ40ThcD49CGf325dmsIX58ZeI8mhHIlPPxrQG6Hg6NHKBN6ZEbuu4AVROoIy4udqtFXXFGF23CxCQnymZnVZCUL22mXrvIynROm7jmFcs/f/6oAOcSA8QGJBiKPHQrVZ7FN/6fzZ9DXFL4i0V9MtkHJo7hJ1SldA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VRbruKSScfL7Z0d4SXovHkKZmBGc7QJ956Fhkm4ZE9o=; b=Krrhgx40Rho+TGL98GID/WEDGleP+aBnFKqpb6StKfmVn5ijmGw/dp9O0utWc56YJNQN+I9FVxrk/+RjwxFKqiSL0atpoZE1ssGa+h7vXJn3C41i/WUQdZHffCJGSXVAzBz/sj8y9jNwAYy/cxcRKgfe2pa1NJ6RLIhcIkQwJ8ZHyW72+I89B67butjbM6rqWIkcCBtHxNsCcZf9hmb5RcxpmymsXBuYiv+Me6PmkOQ3+sCtbqu4p7eVIdAOAInsg6YbieaCqGmXWjUoq6va0zmGETTGft26D6agH2hKbfyM9eyIqKt31ff8Q5dnZzl2p/xV4gSaLxvEm0kACr3F6A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VRbruKSScfL7Z0d4SXovHkKZmBGc7QJ956Fhkm4ZE9o=; b=z0f6EFMPOgujKHZlWFxEBa6uifhBlxFI1uOepaYEWc6LXX+CYS/fRvQS6D0fY/M9fEol9a9INMDN6bLwDnbe7nWEkPV0J+twpUPmI6WCgRKuVEGB74FmomjcLrz4OoMaXm5GStbhRt9lfth0OW3D1wnFWwAOXJiFRk3+O93v4Cw=
Received: from BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) by BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3326.21; Thu, 27 Aug 2020 15:35:40 +0000
Received: from BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf]) by BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf%3]) with mapi id 15.20.3305.031; Thu, 27 Aug 2020 15:35:39 +0000
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: "tony.li@tony.li" <tony.li@tony.li>
CC: "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
Thread-Index: AQHWe/0FCwnzlVRuSU+4CLy77/UAXKlLC2JggAAR5wCAACkygIAADWsAgACqReCAABS9gIAAAu2w
Date: Thu, 27 Aug 2020 15:35:39 +0000
Message-ID: <BY5PR11MB43379A3F8A7CFDFF8CE779B3C1550@BY5PR11MB4337.namprd11.prod.outlook.com>
References: <159665865921.15026.2581762617571023706@ietfa.amsl.com> <476BCC1F-0C33-4DEA-84DF-365FB5CBA377@tony.li> <BY5PR11MB4337679B3A5C99836E982202C1540@BY5PR11MB4337.namprd11.prod.outlook.com> <F7F4FFC1-2134-475E-AC3A-C3FD750F7EED@tony.li> <BY5PR11MB4337AE29FC4C8EF69C7972AEC1550@BY5PR11MB4337.namprd11.prod.outlook.com> <9C4E178A-42CA-476F-A49B-828C9AED3673@tony.li> <BY5PR11MB43377671040639C343027959C1550@BY5PR11MB4337.namprd11.prod.outlook.com> <3EB8F4C6-9CC0-452E-9E64-D836225F156A@tony.li> <BY5PR11MB43372CDD83944BF0D8B76230C1550@BY5PR11MB4337.namprd11.prod.outlook.com> <186D218D-79A6-4CFF-89EB-315199E7E9E0@tony.li>
In-Reply-To: <186D218D-79A6-4CFF-89EB-315199E7E9E0@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tony.li; dkim=none (message not signed) header.d=none;tony.li; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [12.156.66.3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c2f03075-7df4-4121-2882-08d84a9eda15
x-ms-traffictypediagnostic: BY5PR11MB4070:
x-microsoft-antispam-prvs: <BY5PR11MB407059FA167BFAC0C02BAB82C1550@BY5PR11MB4070.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: z8Us2i4vnpTKU3aAoUQ4J6G9yGP0BDoxL3XFfQp5/sacEU6htq7MgjCjoABycsTNeiBuB+q+09chvjtB27jK5KQNZxJgXAO7aDSvbiXROLuBTjBLcJv77VaWM+eM4rMrwgyt0KkV6N5hzw29VmSK3r/ZovEm6eo6HktZvYuo57Ke9RdeK8yaomR700KqvNNhJGNzcViRKH0DrFms5+dMgvcIzdTbTpBgcQN2aSTbBla1occOrhDcONBjFTB04LVHsD3yGyQ3icnMg0ncI4KB7k50eV0yNvZHb35vPejzbR5HAmP6mxO3mdiZFiU5fl2Q+XBW0UgAULDEqHGVasqwYw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4337.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(376002)(136003)(396003)(346002)(39860400002)(6506007)(5660300002)(8676002)(76116006)(83380400001)(9686003)(4326008)(55016002)(478600001)(6916009)(7696005)(8936002)(66476007)(26005)(186003)(53546011)(71200400001)(64756008)(66446008)(66946007)(86362001)(316002)(66556008)(2906002)(33656002)(52536014); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR11MB43379A3F8A7CFDFF8CE779B3C1550BY5PR11MB4337namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4337.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c2f03075-7df4-4121-2882-08d84a9eda15
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2020 15:35:39.5583 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: HZvz8WKm6Y8EqyyC2QSmRLeqLEZTHmRPtYBXlYujn0qUEuGmMnOk+w9iStdNZtLmzL/ORTlsQyV/ZL8YdMXHVg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4070
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.12, xch-rcd-002.cisco.com
X-Outbound-Node: alln-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/NMBy3dRTci_nlsCPA05HGevLkCw>
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2020 15:35:50 -0000

Tony –

The statement “the … Prefix SID does NOT have the semantics that we want and causes deleterious side-effects” is FALSE.

Other than  that,  we understand each other and we disagree.
You have my input.

There is an alternative here:

Given that there isn’t any defined use case for the Area Prefix/SID, you could choose to defer its definition until such time as a use case arises.
I agree that the concept is appealing and is potentially useful – which is why I thought it worthwhile to invest time in defining it. But a conservative approach might be to wait until we actually need it before defining it. It is always possible that when the use case arises we will find that there are some other issues which have been overlooked which might alter how this would be advertised.

   Les


From: Tony Li <tony1athome@gmail.com> On Behalf Of tony.li@tony.li
Sent: Thursday, August 27, 2020 8:19 AM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>
Cc: lsr@ietf.org
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt


Les,


[Les:] Thanx for clarifying this. A careful reading of the draft supports what you say, but as this point could be easily overlooked it might be worth emphasizing this in the draft.


Noted and enhanced.

We do NOT require that the Area Leader candidates have identical configurations.  In fact, if there is a configuration change, it may be beneficial to configure one candidate differently and then raise its priority.  It’s a simple way of effecting an area-wide configuration change.

[Les:] Section 4.2 states:

“For consistency, all Area Leader candidates SHOULD be configured with
   the same Proxy System Id, Proxy Hostname, and any other information
   that may be inserted into the Proxy LSP.”

I would agree that the flexibility to easily propagate a config change to be reflected in the Proxy LSP content requires relaxation of this rule.


This is exactly why it says SHOULD and not MUST.



We want outside nodes to install forwarding entries on the Prefix SID.  This is entirely backward compatible.  How is that inappropriate?

[Les:] Installation of forwarding entries today is based on Prefix Reachability advertisements. You are proposing to extend that by requiring a forwarding entry to be installed based on the context of the Area Proxy TLV.
I would prefer that you not introduce this.


I am well aware of that.

Perhaps it would help if I tell you that I am 100% impervious to Persuasion by Repetition.  I understand what you want. I disagree with you on the tradeoffs.



In addition, since there will also be a Prefix Reachability Advertisement for the Area Prefix in the Proxy LSP, the IERs will have two sources of information for the SID associated with the Area prefix (Area SID sub-TLV from Area leader L2 LSP and Prefix Reachability advertisement in the Proxy LSP). Which introduces the possibility of inconsistency.


No, since the IERs are supposed to ignore the Proxy LSP for any purpose other than flooding. I’m adding an explicit statement to this effect. The only source of truth is the Area Proxy TLV generated by the Area Leader.


The existing ones do not have the required semantics.

[Les:] That’s wasn’t the point.



That is the entire point.  You insist that we advertise the Area SID as a Prefix SID in addition to the a prefix in the Area Proxy TLV.  The additional Prefix SID does NOT have the semantics that we want and causes deleterious side-effects.




The point was that when a SID is advertised in prefix reachability it is used in preference to advertisements in other TLVs.


Except when it is part of the Proxy LSP, in which case we want the Inside Routers to ignore it.  We do NOT want Inside Routers creating forwarding state or SPF state for every prefix and SID in the Proxy LSP.



[Les:] The semantics you require are functionally equivalent to anycast behavior – which is supported already.


Please point me to anycast semantics that will ONLY be selected by IERs.
[Les:] You have specified that only IERs and Outside Routers process Proxy LSP content.  So why do you ask this question?


You’re asking me to use another mechanism.  I don’t see how it applies.  I’m open to you educating me.

IERs do NOT process Proxy LSP content other than to flood it.

Tony