Re: [Lsr] bunch comments on https://datatracker.ietf.org/doc/draft-ietf-lsr-ospf-admin-tags

Tony Przygienda <tonysietf@gmail.com> Thu, 29 February 2024 19:06 UTC

Return-Path: <tonysietf@gmail.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE823C1C4DBC for <lsr@ietfa.amsl.com>; Thu, 29 Feb 2024 11:06:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RpoDLFAZtELq for <lsr@ietfa.amsl.com>; Thu, 29 Feb 2024 11:06:35 -0800 (PST)
Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10B3FC1C4D95 for <lsr@ietf.org>; Thu, 29 Feb 2024 11:06:35 -0800 (PST)
Received: by mail-ot1-x32d.google.com with SMTP id 46e09a7af769-6e4a0e80d14so947781a34.1 for <lsr@ietf.org>; Thu, 29 Feb 2024 11:06:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1709233594; x=1709838394; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=8QtUjLDLA3Ts4y0WyvnTVKS0eg9SUsyAVQZvy8X6Vso=; b=chpRnW0ghOkkw7YEQ0mB+t3reSS7i8J4ImeFMQgvAiVf7w9TFMZRUxOf959sBbpYhD urKHUSrtVELopcb4Ybv3adkKZ5+q5IvRkk4CwGlURSBg0ZuZ9kkjO/K37Elc6SoFFUrx thBUYe7xOh8xk0fasel+yuhIXrkgRDlVBD9TjRxyW02VkP9TaZjR85CrY/G0uKBBiY7N vtONxFs5HKi0pSs357oxKm+OQb7X2cWN9MAR+g4GwdctLjkTJGBucfLkOL2sWiBm4ds4 65ypvh143fJU7vddfTq+PlqLbV/d4WR0i1GB8TRQ0L6loyx6hhrIxb2OK51rKc2KKday TZug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1709233594; x=1709838394; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=8QtUjLDLA3Ts4y0WyvnTVKS0eg9SUsyAVQZvy8X6Vso=; b=WhUQgtIQ51yW1ks6/rawZ2GoL7A1encDCpIkaDnrnZ3wssXHKI8BdjZzIFTcb3gV+u ukti7EdJsFnHt8Hzv/Dlhif03bptxaNMgAUFm2LNqZbtpYsshbqBGUaHzZzPCB/WHWMa ChQT4vroiUO6VKKX42qFFpgJyqt0VmwfxR/6cg+CbOXzvroB1Q7ZcgEUsJmiVcsXuLOl c4gCKB+BSuyqvXHEp4KOJn/MYuGJI4ZRF6MGaV/pewp7uqwg0W+VPtbbswJvSys7n4Au 9P78U7pXl5TTWNUiETBw/Rye+OQgV9QBvhCfaH2pLQZnUlis5iM237F7tQX87ByJUINX IbEw==
X-Forwarded-Encrypted: i=1; AJvYcCUox3m9hedzrh3Ih3bei+Ph1MEvU6yoG/ALuOQBAJzOa72dl3kHtQzWJG/SmodUeJdf2CBCszIsIeCni3E=
X-Gm-Message-State: AOJu0YxfCzfyglD+xJ9Adc5WcCLfzzIwA0tHGwzFutTlSdiItUes259u HKsvmJEwOwDcRHr1HtSNAg4DaYf/afawyaPTp+yGOYsuV0AyuCb16tPBU932Bz4pHWAlGMxwtXq ylsKqgsjIHVjLvBM7smpJKKkKlos=
X-Google-Smtp-Source: AGHT+IH5bI8lPddimrosrIso0Y/5J7RLq1TL1VDN7v6junoJGc29pRJ/8o5v4vwK7wiGXXrf1tgH7x56nHT2LHELW+8=
X-Received: by 2002:a9d:6945:0:b0:6e1:13a2:3948 with SMTP id p5-20020a9d6945000000b006e113a23948mr3029725oto.5.1709233593960; Thu, 29 Feb 2024 11:06:33 -0800 (PST)
MIME-Version: 1.0
References: <CA+wi2hMYEN9D3E-BjzX8E8FtEPjgkbN0Yc9F95h42CqLz=u2Rw@mail.gmail.com> <AF6DD69E-AAF2-4CF0-A3B4-774FE72AC58C@gmail.com> <CA+wi2hP6iFWJGvq28O+tKV1fBJuT73hxLA3B=E9B8cKiYYkWtg@mail.gmail.com> <44AD407F-2E1E-4289-8E2A-61AA55C7D8D4@gmail.com> <CA+wi2hM7rCczoBo=PoOYHKMY5REXTj+=KnXDwdYUmAE+j8DQbw@mail.gmail.com> <BY5PR11MB4337FB8169721C96686C7A1FC15F2@BY5PR11MB4337.namprd11.prod.outlook.com>
In-Reply-To: <BY5PR11MB4337FB8169721C96686C7A1FC15F2@BY5PR11MB4337.namprd11.prod.outlook.com>
From: Tony Przygienda <tonysietf@gmail.com>
Date: Thu, 29 Feb 2024 20:05:57 +0100
Message-ID: <CA+wi2hMF+m6J0hCUOviPi0U_ivY4pYvrhJoJ3cdc3n5pMm2vQw@mail.gmail.com>
To: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
Cc: Acee Lindem <acee.ietf@gmail.com>, lsr <lsr@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000034ce53061289f51e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/QwvIRp6BTk2FVYg6UgeXJ35uhu8>
Subject: Re: [Lsr] bunch comments on https://datatracker.ietf.org/doc/draft-ietf-lsr-ospf-admin-tags
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Feb 2024 19:06:39 -0000

sure, on the tags given how some people start to abuse4 those in
interesting ways now ;-) I'm piping in here since I'm obviously talking
through some real OSPF designs where the issue of which ones will make it
may matter given for practical reasons we have to limit how many we carry
... ;-)

on the second point, don't write "this sub-TLV should carry at least one
tag" if you don't specify what it means it doesn't carry one. No biggie, I
just edged onto this when reading it ...

if authors are not interested in making the spec tighter, closing possible
holes then I just pipe out of course ...

-- tony

On Thu, Feb 29, 2024 at 8:01 PM Les Ginsberg (ginsberg) <ginsberg@cisco.com>
wrote:

> Tony –
>
>
>
> In the spirit of a friendly discussion…
>
>
>
> *From:* Lsr <lsr-bounces@ietf.org> *On Behalf Of * Tony Przygienda
> *Sent:* Thursday, February 29, 2024 10:33 AM
> *To:* Acee Lindem <acee.ietf@gmail.com>
> *Cc:* lsr <lsr@ietf.org>
> *Subject:* Re: [Lsr] bunch comments on
> https://datatracker.ietf.org/doc/draft-ietf-lsr-ospf-admin-tags
>
>
>
> 1. you can easily rectify by saying, if you have  tags for same prefix
> from multiple nodes you prefere lowest router ID or maybe "sort on router
> id and then interleave" or something. depending how much of fully fledged
> specification you want here
>
>
>
> *[LES:] As Acee has pointed out, the IS-IS RFC (written many years ago)
> explicitly stayed away from this sort of thing.*
>
> *Are you saying that your experience with IS-IS has been unsatisfactory?
> If so, why aren’t you lobbying for changes to IS-IS? (Not that I am
> encouraging you to do so… **😊** )*
>
>
>
> 2. we miss each other. I just say this sub-TLV being empty is NOT
> specified (i.e. behavior is undefined) if anyone sends such a thing
>
> *[LES:] From the POV of parsing, if you send a TLV with 0 length, it does
> no harm. Your parsing logic will just move on to the next TLV. I don’t see
> the need to specify any behavior.*
>
> *Of course, it is useless to send this TLV with no content – so if your
> implementation wants to report that as an encoding error that seems
> reasonable to me.*
>
> *If you send a length of 0 but actually have content, that is a serious
> encoding error – but that is a generic issue that seems outside the scope
> of this draft.*
>
>
>
> *   Les*
>
>
>
>
>
> -- tony
>
>
>
> On Wed, Feb 28, 2024 at 7:13 PM Acee Lindem <acee.ietf@gmail.com> wrote:
>
> Hi Tony,
>
> > On Feb 28, 2024, at 2:01 AM, Tony Przygienda <tonysietf@gmail.com>
> wrote:
> >
> > hey Acee, inline
> >
> >
> > On Wed, Feb 28, 2024 at 3:30 AM Acee Lindem <acee.ietf@gmail.com> wrote:
> > Hi Tony,
> >
> > Thanks for the review.
> >
> >> On Feb 27, 2024, at 04:51, Tony Przygienda <tonysietf@gmail.com> wrote:
> >>
> >> Reading the draft quickly, here's bunch of observations
> >>
> >> "
> >>
> >> An OSPF router supporting this specification MUST be able to
> >> advertise and interpret at least one 32-bit tag for all type of
> >> prefixes. An OSPF router supporting this specification MAY be able
> >> to advertise and propagate multiple 32-bit tags. The maximum tags
> >> that an implementation supports is a local matter depending upon
> >> supported applications using prefix tags.
> >> "
> >>
> >>
> >> Since different implementations may support different amount of tags I
> see that the draft says
> >>
> >> "
> >> When propagating multiple tags, the order
> >> of the the tags SHOULD be preserved.
> >>
> >> "
> >>
> >>
> >> this is IMO not good enough in case where two nodes advertise same
> prefix with multiple tags, possibly differing or in different order. Some
> kind of ordering is necessary then as well AFAIS.
> >>
> >
> > I guess I don’t see the problem. A policy would look for a specific tag
> and take a specific action.
> >
> > Note that for IS-IS tags so require ordering, see section 4 of
> https://datatracker.ietf.org/doc/rfc5130/.
> > I could possibly appropriate some of this text as it applies to OSPF.
> >
> >
> > my point is that if you have multiple nodes advertising some prefix with
> different 3 tag combinations and you choose to only support 3 tags the
> result is undefined by this draft as to which tags propagate at the end, so
> the "order should be preserved" doesn't help
>
> I agree this could be a problem if you have this situation but I don’t see
> how advertising the tags in any particular order rectifies it. Also, since
> an OSPF domain is under a single administrative domain, I also don’t
> understand why anyone would configure such a situation. You could also have
> a problem if you have different nodes supporting different policies for the
> same prefix. Unless you can convince me, I’m going to stick with the IS-IS
> semantics for multiple tags. From RFC  5130.
>
>
>       The semantics of the tag order are implementation-dependent. That
>        is, there is no implied meaning to the ordering of the tags that
>        indicates a certain operation or set of operations need be performed
>        based on the order of the tags. Each tag SHOULD be treated as an
>        autonomous identifier that MAY be used in policy to perform a policy
>        action. Whether or not tag A precedes or succeeds tag B SHOULD not
>        change the meaning of the tag set. However, when propagating TLVs
>        that contain multiple tags between levels, an implementation SHOULD
>        preserve the ordering such that the first tag remains the first tag,
>        so that implementations that only recognize a single tag will have a
>        consistent view across levels.
>
>
>
> >
> >
> >
> >
> >>
> >>
> >> "
> >> This sub-TLV will carry one or more 32-bit unsigned integer values
> >> that will be used as administrative tags.
> >> "
> >>
> >>
> >> IMO behavior when none are carried nees to be specified if this is
> mandated. is that a MUST in fact?
> >>
> >
> >  The sub-TLV is optional so if it isn’t specified than there are no tags
> to match. What am I missing here?
> >
> > it says "one or more" so the sub=-tlv without anything has no semantics.
> is that an operational error, is that normal (then why does the draft say
> one or more). it's a nit but those nits can be ugly in interops
>
> I clearly state that the sub-TLV is optional.
>
> Thanks,
> Acee
>
>
> >
> >
> >>
> >>
> >>
> >> Moreover we already have a tag in OSPFv2 on type-5 and type-7 and
> opaque can advertise more tags. How do those interact ?
> >>
> >
> >
> > I have this text in section 4 to provide backward compatibility:
> >
> >    When tags are advertised for AS External or NSSA LSA prefixes, the
> > existing tag in the OSPFv2 and OSPFv3 AS-External-LSA and NSSA-LSA
> > encodings SHOULD be utilized for the first tag. This will facilitate
> > backward compatibility with implementations that do not support this
> > specification.
> >
> > oh, I missed that. sorry.
> >
> >
> > Thanks,
> > Acee
> >
> >
> >
> >>
> >>
> >> that's it for the first
> >>
> >>
> >> thanks
> >>
> >>
> >> -- tony
> >>
> >>
> >>
> >> _______________________________________________
> >> Lsr mailing list
> >> Lsr@ietf.org
> >> https://www.ietf.org/mailman/listinfo/lsr
> >
>
>