Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard

Peter Psenak <ppsenak@cisco.com> Wed, 12 May 2021 08:00 UTC

Return-Path: <ppsenak@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF5543A392A; Wed, 12 May 2021 01:00:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level:
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g-TRip7D4lUh; Wed, 12 May 2021 01:00:41 -0700 (PDT)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB5133A3925; Wed, 12 May 2021 01:00:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11108; q=dns/txt; s=iport; t=1620806441; x=1622016041; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=lL2i9n3rdlaklCCL6zjLYqjSdBG0OpPCaYbazBM5sbk=; b=WDkxU8cIwvWlGaCDYXm24ttNy1GUPjbWXtGQfrQukDPXwQ6qBoTNfit9 lU/gjshwt4ALwc+a4D/wWgI2B78I9rjmxsC03mjeEKdkWU4MJJtj/jDg9 M4KMa+fCcmzhoduS3SSAVIyI48sxEbkAp80ZLABhFaWNRE2KzBCubP2xt s=;
X-IronPort-AV: E=Sophos;i="5.82,293,1613433600"; d="scan'208";a="35880737"
Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 May 2021 08:00:39 +0000
Received: from [10.60.140.52] (ams-ppsenak-nitro3.cisco.com [10.60.140.52]) by aer-core-4.cisco.com (8.15.2/8.15.2) with ESMTP id 14C80cgS028978; Wed, 12 May 2021 08:00:38 GMT
To: bruno.decraene@orange.com, "Gengxuesong (Geng Xuesong)" <gengxuesong@huawei.com>
Cc: "chopps@chopps.org" <chopps@chopps.org>, "draft-ietf-lsr-isis-srv6-extensions@ietf.org" <draft-ietf-lsr-isis-srv6-extensions@ietf.org>, "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>, "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>, Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org>, Alvaro Retana <aretana.ietf@gmail.com>, "lsr@ietf.org" <lsr@ietf.org>
References: <161912242429.12485.17590245376033356793@ietfa.amsl.com> <AM0PR07MB638668F6AC767504D0534925E05B9@AM0PR07MB6386.eurprd07.prod.outlook.com> <98456c8b-42dc-a387-0a18-f7921a94aeb1@cisco.com> <CAMMESsyzYoS=rR4RV1exdA-5DTMv6j2muNqrgWJ6oNocVgT0ug@mail.gmail.com> <CY4PR05MB357658E33E3CE2AFAE611690D5539@CY4PR05MB3576.namprd05.prod.outlook.com> <BY5PR11MB4337DA9E433B99F14413EE4CC1539@BY5PR11MB4337.namprd11.prod.outlook.com> <4a20282686224d84a76a53361117793f@huawei.com> <4688_1620805916_609B891C_4688_3_1_53C29892C857584299CBF5D05346208A4CD9BCDA@OPEXCAUBM43.corporate.adroot.infra.ftgroup>
From: Peter Psenak <ppsenak@cisco.com>
Message-ID: <0cd83802-7a40-2350-708d-8f0d15811129@cisco.com>
Date: Wed, 12 May 2021 10:00:38 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <4688_1620805916_609B891C_4688_3_1_53C29892C857584299CBF5D05346208A4CD9BCDA@OPEXCAUBM43.corporate.adroot.infra.ftgroup>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-Outbound-SMTP-Client: 10.60.140.52, ams-ppsenak-nitro3.cisco.com
X-Outbound-Node: aer-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/ay-0m2mkbPEcUUGGNQWPjxpnmKg>
Subject: Re: [Lsr] Last Call: <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support Segment Routing over IPv6 Dataplane) to Proposed Standard
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 May 2021 08:00:47 -0000

Hi Bruno,


On 12/05/2021 09:51, bruno.decraene@orange.com wrote:
> Hi Xuesong,
> 
> Clarification question: are you talking about interoperability (between 
> two nodes) or compliancy (between an implementation and the RFC)?

I'm afraid the two are related. If we mandate the Prefix Attribute
Sub-TLV inside the Locator TLV, we would have to say that the Locator 
TLV without the Prefix Attribute Sub-TLV MUST be ignored. As a result, 
implementations that do not send the Prefix Attribute Sub-TLV would not 
just be not compliant, but would also not interoperate with the ones 
that follow the specification.

thanks,
Peter

> 
> If the former, could you please spell out the interop issue?
> 
> Thanks,
> 
> Best regards,
> 
> --Bruno
> 
> *From:*Lsr [mailto:lsr-bounces@ietf.org] *On Behalf Of *Gengxuesong 
> (Geng Xuesong)
> *Sent:* Wednesday, May 12, 2021 9:16 AM
> *To:* Les Ginsberg (ginsberg) <ginsberg@cisco.com>; Shraddha Hegde 
> <shraddha=40juniper.net@dmarc.ietf.org>; Alvaro Retana 
> <aretana.ietf@gmail.com>; Peter Psenak (ppsenak) <ppsenak@cisco.com>; 
> lsr@ietf.org
> *Cc:* chopps@chopps.org; draft-ietf-lsr-isis-srv6-extensions@ietf.org; 
> Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com>
> *Subject:* Re: [Lsr] Last Call: 
> <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support 
> Segment Routing over IPv6 Dataplane) to Proposed Standard
> 
> Hi Les,
> 
> Prefix Attributes sub-TLV is necessary when locator is leaked.
> 
> So we are not against Prefix Attribute sub-TLV implementation. We just 
> propose to keep it optional (“should” rather than “must”) for 
> interoperability.
> 
> Best
> 
> Xuesong
> 
> *From:*Les Ginsberg (ginsberg) [mailto:ginsberg@cisco.com]
> *Sent:* Wednesday, May 12, 2021 6:29 AM
> *To:* Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org 
> <mailto:shraddha=40juniper.net@dmarc.ietf.org>>; Alvaro Retana 
> <aretana.ietf@gmail.com <mailto:aretana.ietf@gmail.com>>; Peter Psenak 
> (ppsenak) <ppsenak@cisco.com <mailto:ppsenak@cisco.com>>; lsr@ietf.org 
> <mailto:lsr@ietf.org>; Gengxuesong (Geng Xuesong) 
> <gengxuesong@huawei.com <mailto:gengxuesong@huawei.com>>
> *Cc:* chopps@chopps.org <mailto:chopps@chopps.org>; 
> draft-ietf-lsr-isis-srv6-extensions@ietf.org 
> <mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, 
> Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com 
> <mailto:gunter.van_de_velde@nokia.com>>
> *Subject:* RE: [Lsr] Last Call: 
> <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support 
> Segment Routing over IPv6 Dataplane) to Proposed Standard
> 
> Shraddha/ Xuesong –
> 
> Since Prefix Attributes sub-TLV is required for correct operation when a 
> Locator is leaked, would it be safe to assume that your implementations 
> either do not leak Locators or you advise your customers not to deploy 
> this feature with multiple levels?
> 
> The problem with allowing the sub-TLV to be optional is that if the 
> sub-TLV is omitted you cannot tell whether the Locator has been leaked – 
> so you don’t know whether you have a problem or not.
> 
> The safest thing to do is require prefix-attributes sub-TLV always – 
> then you can guarantee that if the prefix is leaked the necessary 
> information will be present.
> 
> Anything else leaves us vulnerable.
> 
> We all appreciate interoperability considerations, but frankly this is a 
> gap that needs to be closed to support correct operation.
> 
>     Les
> 
> *From:*Lsr <lsr-bounces@ietf.org <mailto:lsr-bounces@ietf.org>> *On 
> Behalf Of *Shraddha Hegde
> *Sent:* Tuesday, May 11, 2021 8:21 AM
> *To:* Alvaro Retana <aretana.ietf@gmail.com 
> <mailto:aretana.ietf@gmail.com>>; Peter Psenak (ppsenak) 
> <ppsenak@cisco.com <mailto:ppsenak@cisco.com>>; lsr@ietf.org 
> <mailto:lsr@ietf.org>
> *Cc:* chopps@chopps.org <mailto:chopps@chopps.org>; 
> draft-ietf-lsr-isis-srv6-extensions@ietf.org 
> <mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, 
> Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com 
> <mailto:gunter.van_de_velde@nokia.com>>
> *Subject:* Re: [Lsr] Last Call: 
> <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support 
> Segment Routing over IPv6 Dataplane) to Proposed Standard
> 
> Juniper has an  implementation of SRv6 that does not support Prefix 
> attributes sub-tlv in locator TLV.
> 
> We would prefer not to change the optional sub-TLV to MUST.
> 
> Rgds
> 
> Shraddha
> 
> Juniper Business Use Only
> 
> *From:*Lsr <lsr-bounces@ietf.org <mailto:lsr-bounces@ietf.org>> *On 
> Behalf Of *Alvaro Retana
> *Sent:* Friday, May 7, 2021 7:23 PM
> *To:* Peter Psenak <ppsenak@cisco.com <mailto:ppsenak@cisco.com>>; 
> lsr@ietf.org <mailto:lsr@ietf.org>
> *Cc:* chopps@chopps.org <mailto:chopps@chopps.org>; 
> draft-ietf-lsr-isis-srv6-extensions@ietf.org 
> <mailto:draft-ietf-lsr-isis-srv6-extensions@ietf.org>; Van De Velde, 
> Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com 
> <mailto:gunter.van_de_velde@nokia.com>>
> *Subject:* Re: [Lsr] Last Call: 
> <draft-ietf-lsr-isis-srv6-extensions-14.txt> (IS-IS Extension to Support 
> Segment Routing over IPv6 Dataplane) to Proposed Standard
> 
> *[External Email. Be cautious of content]*
> 
> On May 3, 2021 at 5:17:58 AM, Peter Psenak wrote:
> 
>> Technically I agree with you and if everybody agrees, I'm fine to
> 
>> enforce the presence of the Prefix Attribute Flags TLV in the Locator TLV.
> 
> So...what does everyone else think?
> 
> We need to close on this point before the IESG evaluates the document.  
> I'm requesting it to be put on the May/20 telechat, which means that we 
> should have a resolution and updated draft by the end of next week.
> 
> Thanks!
> 
> Alvaro.
> 
> On May 3, 2021 at 5:17:58 AM, Peter Psenak (ppsenak@cisco.com 
> <mailto:ppsenak@cisco.com>) wrote:
> 
>     Hi Gunter,
> 
>     Prefix Attribute Flags Sub-TLV has been defined as an optional Sub-TLV.
>     The problem you describe is not specific to Locator TLV, same
>     applies to
>     regular IPv4/v6 prefixes (forget SR MPLS for a while) - if the Prefix
>     Attribute Flags TLV is not included, one can not tell whether the
>     prefix
>     has been propagated (L1->L2) or generated as a result of the local
>     interface attached on the originator. Same applies to redistribution
>     and
>     R-flag for IPv4 prefix TLVs.
> 
>     SRv6 Locator TLV has been defined a while back and the Prefix Attribute
>     Flags Sub-TLV has always been an optional Sub-TLV of it. I'm not
>     sure we
>     can start to mandate the Prefix Attribute Flags TLV at this point.
> 
>     Technically I agree with you and if everybody agrees, I'm fine to
>     enforce the presence of the Prefix Attribute Flags TLV in the
>     Locator TLV.
> 
>     thanks,
>     Peter
> 
> 
>     On 03/05/2021 10:45, Van De Velde, Gunter (Nokia - BE/Antwerp) wrote:
>     > Hi Peter, All, 
>     > 
>     > Could we update to "draft-ietf-lsr-isis-srv6-extensions" that the prefix-attribute tlv is mandatory when a locator is redistributed? 
>     > 
>     > Why? 
>     > *When calculating a LFA for an SRv6 End.SID we better know if the locator has been redistributed or not for a correct operation. 
>     > 
>     > Reasoning: 
>     > * A locator has the D bit. This one is set when we redistribute from L2 to L1. 
>     > ** So this end-sid will not be used as we know that it is redistributed. 
>     > 
>     > * In the other direction (L1-L2), we only know that a locator is redistributed from L1 to L2 if the prefix-attribute sub-tlv is advertised. 
>     > ** This means if the operator does not configure advertisement of the prefix-attribute tlv, ISIS could potentially use an end-sid which does not terminate on the expected node. 
>     > 
>     > * Compared to sr-mpls, a prefix-sid has the R flag indicating it is redistributed. 
>     > * We don't have that for locator end-sids. 
>     > 
>     > Relevant snip from " draft-ietf-lsr-isis-srv6-extensions" 
>     > 
>     > 7.1. SRv6 Locator TLV Format 
>     > 
>     > The SRv6 Locator TLV has the following format: 
>     > 
>     > 0 1 2 3 
>     > 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > | Type | Length |R|R|R|R| MT ID | 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > 
>     > Type: 27 
>     > 
>     > Length: variable. 
>     > 
>     > R bits: reserved for future use. They MUST be 
>     > set to zero on transmission and MUST be ignored on receipt. 
>     > 
>     > MT ID: Multitopology Identifier as defined in [RFC5120]. 
>     > Note that the value 0 is legal. 
>     > 
>     > Followed by one or more locator entries of the form: 
>     > 
>     > 0 1 2 3 
>     > 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > | Metric | 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > | Flags | Algorithm | 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > | Loc Size | Locator (variable)... 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > | Sub-TLV-len | Sub-TLVs (variable) . . . | 
>     > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
>     > 
>     > 
>     > Metric: 4 octets. As described in [RFC5305]. 
>     > 
>     > Flags: 1 octet. The following flags are defined 
>     > 
>     > 0 
>     > 0 1 2 3 4 5 6 7 
>     > +-+-+-+-+-+-+-+-+ 
>     > |D| Reserved | 
>     > +-+-+-+-+-+-+-+-+ 
>     > 
>     > where: 
>     > D-flag: Same as described in section 4.1. of [RFC5305]. 
>     > 
>     > 
>     > G/ 
>     > 
> 
> _________________________________________________________________________________________________________________________
> 
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
> 
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
>