Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-02.txt

tony.li@tony.li Fri, 31 July 2020 17:49 UTC

Return-Path: <tony1athome@gmail.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C54B3A0D58 for <lsr@ietfa.amsl.com>; Fri, 31 Jul 2020 10:49:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.994
X-Spam-Level:
X-Spam-Status: No, score=-1.994 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2bhn9rFeCoDR for <lsr@ietfa.amsl.com>; Fri, 31 Jul 2020 10:49:46 -0700 (PDT)
Received: from mail-pf1-x430.google.com (mail-pf1-x430.google.com [IPv6:2607:f8b0:4864:20::430]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 168513A0C53 for <lsr@ietf.org>; Fri, 31 Jul 2020 10:49:38 -0700 (PDT)
Received: by mail-pf1-x430.google.com with SMTP id y206so4540473pfb.10 for <lsr@ietf.org>; Fri, 31 Jul 2020 10:49:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=NXgjMkqmfuM75PH0Mqy1TjMdKsCENaOJmCs+gLbM4Qc=; b=i4Nf3M82xFSHMMnKYqVAaYOQ6xeHVSEFABYPvQbHhp2pkfCYj+a+qwaLfU01FtRlOI xyAupVGtYe8MtQI71iqDhA0dh6afh/Wx+WMuDqIxVNJsfB1B6nQ3RsR0w3gyYfzwgAg4 s9LlCM5qMlQZwvbJ+IVFUqIW3Dl5nyhtGFy0GcacvoWa08K+KFfPpHFsbccCbaqnuQDr KlkTZTVufKFjUVbw3npkD5EQLc+/LUPq2Ej0MIxo3dq4m/LaicDwf3umxINzlRPBfXcN ooCgHQTSwGr3zVYHv+QMBzyH/MZVfhpJ2stEQFXGBoR1gqVBR4S0Pxh+to7niBIYetkX pZGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=NXgjMkqmfuM75PH0Mqy1TjMdKsCENaOJmCs+gLbM4Qc=; b=CL0Lokg29HLSg+l7u1WvOQ4Dke7rr/9bha+A7mk1IfDb2GuHoJdwI36ieFCkUtfVag 78yEg5l3huwdMcu6eJ+6OCHtndbBa3yhXDhyuc+LDcx8hgSkWasbvwpiF2GlCgW0yL7p +RP3beKj0u8rQUDoUqQqsiEBbOjEfQLaWBDN18mzoQ/f3r7n16qKznnF4fYAMfCylkPN B8zyxcOU0L7+Kp0Tih65UjgBiF17+B7UefT7Cmxv8fA/vnStlxF8efF/SvDXusd+HT+o OagIUopMpTsDIoTNfbZhySEQj5FnyBbffQ5YWhcjsMNk5ddCw24Xgp1SrdeLVqTv7tkx OrOA==
X-Gm-Message-State: AOAM532cgEZ7MnTKOlyg/BBD8wmQsVuVrT9d4S32DiXOtrNpoBZ7CY2L wQPoBsZYNbUCbUawVao5Wqg=
X-Google-Smtp-Source: ABdhPJyX4ueYjTZTW10yJO4pmd8Cn9HhXPC6r/mZ+7NGO0CL6vbmT8Q9ZA0JjtUeoXVyvswY6A5itw==
X-Received: by 2002:a65:5682:: with SMTP id v2mr4642057pgs.231.1596217777148; Fri, 31 Jul 2020 10:49:37 -0700 (PDT)
Received: from [10.95.81.7] ([162.210.129.5]) by smtp.gmail.com with ESMTPSA id 137sm12205747pgg.72.2020.07.31.10.49.35 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 31 Jul 2020 10:49:35 -0700 (PDT)
Sender: Tony Li <tony1athome@gmail.com>
From: tony.li@tony.li
Message-Id: <F5A06FBF-8AD7-4DFC-BE08-4B25BA5E6422@tony.li>
Content-Type: multipart/alternative; boundary="Apple-Mail=_F7BB1128-E71B-4A8C-8205-CDB31CB8702F"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\))
Date: Fri, 31 Jul 2020 10:49:34 -0700
In-Reply-To: <8689_1596187448_5F23E338_8689_312_1_53C29892C857584299CBF5D05346208A48F05036@OPEXCAUBM43.corporate.adroot.infra.ftgroup>
Cc: "lsr@ietf.org" <lsr@ietf.org>
To: Bruno Decraene <bruno.decraene@orange.com>
References: <159572796513.12445.6949559311624487038@ietfa.amsl.com> <5527A777-4FBC-4EA6-8284-E7771DE2E733@tony.li> <23641_1596126124_5F22F3AC_23641_95_1_53C29892C857584299CBF5D05346208A48F03814@OPEXCAUBM43.corporate.adroot.infra.ftgroup> <DE06DEED-B9DE-405C-B074-F79D8D56D2A6@tony.li> <8689_1596187448_5F23E338_8689_312_1_53C29892C857584299CBF5D05346208A48F05036@OPEXCAUBM43.corporate.adroot.infra.ftgroup>
X-Mailer: Apple Mail (2.3608.120.23.2.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/b6mvDi8EGCFW1Mfpa8H1BoyE_Q0>
Subject: Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-02.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 31 Jul 2020 17:49:56 -0000

Hi Bruno,

Thank you for the clarification.  I understand completely what you’re trying to do and I agree that it’s valuable.

The downside of your approach is that the Area Leader will now need configuration of a new prefix to advertise as the Node SID. Not unthinkable.
What do the Inside Nodes do with this prefix, if anything?  

I am open to this approach, either in addition to, or instead of the approach currently in the draft.  I await feedback from the WG.

Regards,
Tony

<IS-IS bigotry>

p.s. The fact that the node SID requires a prefix is just a side effect of the IP address space excluding hosts from addressing. The one, true
way within IS-IS is the system ID, a separate, independent namespace for nodes that simply avoids ALL of these problems.  If RFC 8667 
encoded node SIDs as their own TLV without the unnecessary prefix that OSPF’s style mandates, this would be trivial.

</IS-IS bigotry>

> On Jul 31, 2020, at 2:24 AM, bruno.decraene@orange.com wrote:
> 
> Hi Tony,
>  
> Thank you for your reply.
> Top posting the description of the use case that I have in mind.
>  
> Ø  First off, the Area SID is 100% optional. If you choose not to use it, then the Proxy LSP should be 100% compatible with a standard L2 node.
> Good. But I think that the idea of the Area SID is a good one, and I choose to use it. Then I’d like to get it for free ;-)
>  
>  
> Please fine below a network topology:
> <image003.jpg>
>  
>  
> My understanding is that the L2 topology seen by node S is the following
> <image004.jpg>
>  
> P been the Proxy LSP.
>  
> S wants to protect from the failure of link S-C by using TI-LFA. For the destination C, it would push 2 (*) node SIDs: P, C 
> So S needs a Node SID for P:
> a)      If P does not redistribute the Node SIDs from its area members, P does not seem to advertise any node SID currently. There is a chance that C’s TI-LFA implementation would not like it and hence would not install protection for this (link, destination)
> b)      If P redistributes the Node SIDs from its area members, P advertises 3 node SIDs (1,2, 3). S could pick any one at random. If it picks 3, the forwarding path would be S, A,B, 1, 2, 3, 2 , 1, C,  which is suboptimal.
>  
> Two solutions I could think of:
> - when redistributing the node SID, P changes the SIDs values and replace them with the value of the Area SID. This works for this use case, but it is borderline. (e.g. if some a L2 node learn both the original and ‘NATed’ SID, we have some SID conflict. Let’s try to avoid this subject).
> - P could advertise its own Node-SID with the Area SID value. This is what I’m proposing. Both the IP loopback and the Area SID of this Node SID  are likely configured by the network operator so this does not seem like a significant effort from the implementation.
>  
> As you say, this does not involve any protocol extension. But the goal is to improve interop with existing/legacy L2 nodes so this may be valuable in the draft. This point could be pushed to a deployment consideration section if you don’t want any impact on the protocol extension.
>  
> Thanks,
> --Bruno
>  
> (*) Assuming the right metrics on the links. This is not the subject of this thread.
>  
>  
> From: Tony Li [mailto:tony1athome@gmail.com] On Behalf Of tony.li@tony.li
> Sent: Thursday, July 30, 2020 7:39 PM
> To: DECRAENE Bruno TGI/OLN <bruno.decraene@orange.com>
> Cc: lsr@ietf.org
> Subject: Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-02.txt
>  
>  
> Hi Bruno,
>  
> Thank you for your comments.
>  
> 
> 
> On Jul 30, 2020, at 9:22 AM, bruno.decraene@orange.com <mailto:bruno.decraene@orange.com> wrote:
>  
> Hi Tony,
>  
> Thanks for the updated draft.
>  
> “ The Area SID Sub-TLV allows the Area Leader to advertise a SID that
>    represents the entirety of the Inside Area to the Outside Area.  This
>    sub-TLV is learned by all of the Inside Edge Nodes who should consume
>    this SID at forwarding time.”
>  
> Excellent, from my perspective.
>  
> Ø  - The Area Segment SID TLV has been replaced by extending the Binding SID TLV.
>  
> “When SR is enabled, it may be useful to advertise an Area SID which
>    will direct traffic to any of the Inside Edge Routers.  The Binding/
>    MT Binding TLVs described in RFC 8667 Section 2.4 <https://tools.ietf.org/html/rfc8667#section-2.4> are used to
>    advertise such a SID.
>  
>    The following extensions to the Binding TLV are defined in order to
>    support Area SID:
>  
>       A new flag is defined:
>  
>          T-flag: The SID directs traffic to an area.  (Bit 5) »
>  
>  
> This works.
>  
>  
> Excellent.
>  
> 
> 
> However I may have a different deployment environment than the one you have in mind. Even if those issues may be mine, allow me to share them with you.
> In many WAN networks than I’m used to, there are routers from different vendors, platforms, software, generations. Requiring all those routers to support the new Binding SID TLV T-Flag will take time. Some platform may even be end of engineering (evolutions) so would never support such new features.
> In my environment, ideally, I would prefer a solution which do not require any new feature on external L2 nodes, while all existing L2 features keep working, in particular SR, SR-TE, TI-LFA, SR uloop avoidance… This would require the Proxy LSP to be not (significantly) different than the LSP of a vanilla L2 node.
>  
>  
> First off, the Area SID is 100% optional. If you choose not to use it, then the Proxy LSP should be 100% compatible with a standard L2 node.
>  
>  
>  
> I cannot claim that we’ve exhaustively tested our implementation against all of the features that you cite, so there may still be corner cases, but our intent is to make that doable.  For exaple, the Proxy LSP can still contain a node SID, adjacency SID, and prefix SID as before. There’s no change there.
>  
> 
> 
> For SR, I think that this would require this Proxy LSP to advertise a Prefix/Node SID with the Area SID attached. One drawback is that a Node-SID is advertised with an IP address that would need to be provisioned.
>  
>  
> That’s certainly doable and requires no new protocol machinery. If the WG prefers this mode of operation, I’m not opposed.
> 
> 
>  
> Both approaches are not mutually exclusives. I’d be happy enough with an option for the Proxy LSP to advertise an Area Node SID with the Area SID attached.
>  
> Finally, there is no requirement to make me happy ;-) . The above could also be a local implementation knob not mentioned in the draft.
>  
>  
> Our goal is to make as many customers as happy as possible.  ;-)
>  
> Tony
>  
> _________________________________________________________________________________________________________________________
> 
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
> 
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.