Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

bruno.decraene@orange.com Wed, 12 May 2021 07:52 UTC

Return-Path: <bruno.decraene@orange.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 981833A38E0; Wed, 12 May 2021 00:52:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u3PL7Otzc3px; Wed, 12 May 2021 00:52:00 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6E173A38DB; Wed, 12 May 2021 00:51:59 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 4Fg6SX6MCFz5w1V; Wed, 12 May 2021 09:51:56 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1620805916; bh=03J5AW6iAsd6oQ4QCApJC5QyyctJpOeKNAjEA0Ao3kE=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=vPEHFEGLWVoim38qale7t1bvs65OJlwZre/CsRSo1A6pIV3imPtpaYG4sQr+uXAuV SuoI+gLrEReCojbeUuCSWt6LePY0UJHP7YIFY8C/TQRhPrOleFX6JzAWM9Q/XuhTMl XgwvnpYTPTjGmuT/iT2mMDwG8Wrsxvx56o58b5M/9OTa0bWvwvOPbdPKv8mQHluB81 FclyCpj6P9dBLR6YSWPQWwZZOcDTLpt2khjB01myJ3TyB36frUBWYh1BNf7tsFvTzb m2lgI9Yf0JfPB1X85KHqUGXRAF27GMrEgEbGRpwwZ45Yre/myeVTUglHgZQf9hlALY rL6TfnJvlTLTQ==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.20]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 4Fg6SX5HPjz8sYf; Wed, 12 May 2021 09:51:56 +0200 (CEST)
From: bruno.decraene@orange.com
To: "Gengxuesong (Geng Xuesong)" <gengxuesong@huawei.com>
CC: "chopps@chopps.org" <chopps@chopps.org>, "draft-ietf-lsr-isis-srv6-extensions@ietf.org" <draft-ietf-lsr-isis-srv6-extensions@ietf.org>, "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>, "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>, Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org>, Alvaro Retana <aretana.ietf@gmail.com>, "Peter Psenak (ppsenak)" <ppsenak@cisco.com>, "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard
Thread-Index: AQHXN7ROclxer8I2XUmrVwGhB/K93qrQ++CAgAAJAgCABpYVgIAGYg4AgAB3qoCAARhpcIAAB34w
Date: Wed, 12 May 2021 07:51:55 +0000
Message-ID: <4688_1620805916_609B891C_4688_3_1_53C29892C857584299CBF5D05346208A4CD9BCDA@OPEXCAUBM43.corporate.adroot.infra.ftgroup>
References: <161912242429.12485.17590245376033356793@ietfa.amsl.com> <AM0PR07MB638668F6AC767504D0534925E05B9@AM0PR07MB6386.eurprd07.prod.outlook.com> <98456c8b-42dc-a387-0a18-f7921a94aeb1@cisco.com> <CAMMESsyzYoS=rR4RV1exdA-5DTMv6j2muNqrgWJ6oNocVgT0ug@mail.gmail.com> <CY4PR05MB357658E33E3CE2AFAE611690D5539@CY4PR05MB3576.namprd05.prod.outlook.com> <BY5PR11MB4337DA9E433B99F14413EE4CC1539@BY5PR11MB4337.namprd11.prod.outlook.com> <4a20282686224d84a76a53361117793f@huawei.com>
In-Reply-To: <4a20282686224d84a76a53361117793f@huawei.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: multipart/alternative; boundary="_000_53C29892C857584299CBF5D05346208A4CD9BCDAOPEXCAUBM43corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/Z8qQF8_gg-eSUlUt1ToSqBgV_rU>
Subject: Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 May 2021 07:52:07 -0000

Hi Xuesong,

Clarification question: are you talking about interoperability (between two nodes) or compliancy (between an implementation and the RFC)?
If the former, could you please spell out the interop issue?

Thanks,
Best regards,
--Bruno

From: Lsr [mailto:lsr-bounces@ietf.org] On Behalf Of Gengxuesong (Geng Xuesong)
Sent: Wednesday, May 12, 2021 9:16 AM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>; Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org>; Alvaro Retana <aretana.ietf@gmail.com>; Peter Psenak (ppsenak) <ppsenak@cisco.com>; lsr@ietf.org
Cc: chopps@chopps.org; draft-ietf-lsr-isis-srv6-extensions@ietf.org; Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com>
Subject: Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

Hi Les,

Prefix Attributes sub-TLV is necessary when locator is leaked.
So we are not against Prefix Attribute sub-TLV implementation. We just propose to keep it optional ("should" rather than "must") for interoperability.

Best
Xuesong

From: Les Ginsberg (ginsberg) [mailto:ginsberg@cisco.com]
Sent: Wednesday, May 12, 2021 6:29 AM
To: Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org<mailto:shraddha=40juniper.net@dmarc.ietf.org>>; Alvaro Retana <aretana.ietf@gmail.com<mailto:aretana.ietf@gmail.com>>; Peter Psenak (ppsenak) <ppsenak@cisco.com<mailto:ppsenak@cisco.com>>; lsr@ietf.org<mailto:lsr@ietf.org>; Gengxuesong (Geng Xuesong) <gengxuesong@huawei.com<mailto:gengxuesong@huawei.com>>
Cc: chopps@chopps.org<mailto:chopps@chopps.org>; draft-ietf-lsr-isis-srv6-extensions@ietf.org<mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com<mailto:gunter.van_de_velde@nokia.com>>
Subject: RE: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

Shraddha/ Xuesong -

Since Prefix Attributes sub-TLV is required for correct operation when a Locator is leaked, would it be safe to assume that your implementations either do not leak Locators or you advise your customers not to deploy this feature with multiple levels?

The problem with allowing the sub-TLV to be optional is that if the sub-TLV is omitted you cannot tell whether the Locator has been leaked - so you don't know whether you have a problem or not.

The safest thing to do is require prefix-attributes sub-TLV always - then you can guarantee that if the prefix is leaked the necessary information will be present.
Anything else leaves us vulnerable.

We all appreciate interoperability considerations, but frankly this is a gap that needs to be closed to support correct operation.

   Les

From: Lsr <lsr-bounces@ietf.org<mailto:lsr-bounces@ietf.org>> On Behalf Of Shraddha Hegde
Sent: Tuesday, May 11, 2021 8:21 AM
To: Alvaro Retana <aretana.ietf@gmail.com<mailto:aretana.ietf@gmail.com>>; Peter Psenak (ppsenak) <ppsenak@cisco.com<mailto:ppsenak@cisco.com>>; lsr@ietf.org<mailto:lsr@ietf.org>
Cc: chopps@chopps.org<mailto:chopps@chopps.org>; draft-ietf-lsr-isis-srv6-extensions@ietf.org<mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com<mailto:gunter.van_de_velde@nokia.com>>
Subject: Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

Juniper has an  implementation of SRv6 that does not support Prefix attributes sub-tlv in locator TLV.
We would prefer not to change the optional sub-TLV to MUST.

Rgds
Shraddha




Juniper Business Use Only
From: Lsr <lsr-bounces@ietf.org<mailto:lsr-bounces@ietf.org>> On Behalf Of Alvaro Retana
Sent: Friday, May 7, 2021 7:23 PM
To: Peter Psenak <ppsenak@cisco.com<mailto:ppsenak@cisco.com>>; lsr@ietf.org<mailto:lsr@ietf.org>
Cc: chopps@chopps.org<mailto:chopps@chopps.org>; draft-ietf-lsr-isis-srv6-extensions@ietf.org<mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com<mailto:gunter.van_de_velde@nokia.com>>
Subject: Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

[External Email. Be cautious of content]

On May 3, 2021 at 5:17:58 AM, Peter Psenak wrote:

> Technically I agree with you and if everybody agrees, I'm fine to
> enforce the presence of the Prefix Attribute Flags TLV in the Locator TLV.

So...what does everyone else think?

We need to close on this point before the IESG evaluates the document.  I'm requesting it to be put on the May/20 telechat, which means that we should have a resolution and updated draft by the end of next week.


Thanks!

Alvaro.



On May 3, 2021 at 5:17:58 AM, Peter Psenak (ppsenak@cisco.com<mailto:ppsenak@cisco.com>) wrote:
Hi Gunter,

Prefix Attribute Flags Sub-TLV has been defined as an optional Sub-TLV.
The problem you describe is not specific to Locator TLV, same applies to
regular IPv4/v6 prefixes (forget SR MPLS for a while) - if the Prefix
Attribute Flags TLV is not included, one can not tell whether the prefix
has been propagated (L1->L2) or generated as a result of the local
interface attached on the originator. Same applies to redistribution and
R-flag for IPv4 prefix TLVs.

SRv6 Locator TLV has been defined a while back and the Prefix Attribute
Flags Sub-TLV has always been an optional Sub-TLV of it. I'm not sure we
can start to mandate the Prefix Attribute Flags TLV at this point.

Technically I agree with you and if everybody agrees, I'm fine to
enforce the presence of the Prefix Attribute Flags TLV in the Locator TLV.

thanks,
Peter


On 03/05/2021 10:45, Van De Velde, Gunter (Nokia - BE/Antwerp) wrote:
> Hi Peter, All,
>
> Could we update to "draft-ietf-lsr-isis-srv6-extensions" that the prefix-attribute tlv is mandatory when a locator is redistributed?
>
> Why?
> *When calculating a LFA for an SRv6 End.SID we better know if the locator has been redistributed or not for a correct operation.
>
> Reasoning:
> * A locator has the D bit. This one is set when we redistribute from L2 to L1.
> ** So this end-sid will not be used as we know that it is redistributed.
>
> * In the other direction (L1-L2), we only know that a locator is redistributed from L1 to L2 if the prefix-attribute sub-tlv is advertised.
> ** This means if the operator does not configure advertisement of the prefix-attribute tlv, ISIS could potentially use an end-sid which does not terminate on the expected node.
>
> * Compared to sr-mpls, a prefix-sid has the R flag indicating it is redistributed.
> * We don't have that for locator end-sids.
>
> Relevant snip from " draft-ietf-lsr-isis-srv6-extensions"
>
> 7.1. SRv6 Locator TLV Format
>
> The SRv6 Locator TLV has the following format:
>
> 0 1 2 3
> 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> | Type | Length |R|R|R|R| MT ID |
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>
> Type: 27
>
> Length: variable.
>
> R bits: reserved for future use. They MUST be
> set to zero on transmission and MUST be ignored on receipt.
>
> MT ID: Multitopology Identifier as defined in [RFC5120].
> Note that the value 0 is legal.
>
> Followed by one or more locator entries of the form:
>
> 0 1 2 3
> 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> | Metric |
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> | Flags | Algorithm |
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> | Loc Size | Locator (variable)...
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> | Sub-TLV-len | Sub-TLVs (variable) . . . |
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>
>
> Metric: 4 octets. As described in [RFC5305].
>
> Flags: 1 octet. The following flags are defined
>
> 0
> 0 1 2 3 4 5 6 7
> +-+-+-+-+-+-+-+-+
> |D| Reserved |
> +-+-+-+-+-+-+-+-+
>
> where:
> D-flag: Same as described in section 4.1. of [RFC5305].
>
>
> G/
>

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.