Re: [Lsr] Thoughts about PUAs - are we not over-engineering?

"Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com> Thu, 16 June 2022 10:38 UTC

Return-Path: <gunter.van_de_velde@nokia.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C9EC14CF05; Thu, 16 Jun 2022 03:38:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.654
X-Spam-Level:
X-Spam-Status: No, score=-2.654 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.745, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bftaFYtlMB-a; Thu, 16 Jun 2022 03:38:49 -0700 (PDT)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60118.outbound.protection.outlook.com [40.107.6.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19DE9C14F726; Thu, 16 Jun 2022 03:38:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MO4yRh25dK5fPCp0gx33xL4CnLclNPufOYb0VFNdBEYXqiZuc+SKbDq5l4ZHqhmJVICjNDBzZwT3B4Sgd3YBT00AYuGE3umMJLwbO49XRTUH0VTWqTK0CN+XC55D7iXPyoJoPlDnoNBkbBh1tld9HNZpYxthTRDsIeEwApZqHsDz2816yh43O9yBLcxx2oykE0HHtnc4Qq4j2OBEeu8qh4WCX2rjUU5rPxWEmTofVG+b6zjz1FyzOJMi/GuPGd3gRRmu3Tw9MR9lExuIS5yrBY6dbLTGauNjZNdi+dCU+vE3mJWIveKRXyOgLDD371bJFv8udmd9y2wNRsMXOP1jkQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UCb3e9zQJ+vpbqXHUHtl3mPDtd54QtP/sLKI04B2l+E=; b=HeqOBe1/bjMBfM9RpLPCPSSArrvdsW3zJyMJ7F3C4kNC6Wq9LmfSYFg1aGdPx6b2w7iaODcoPZcQJ1ofv68tjfGP39zXvqbdd2v5qJbloNSkwc5JwzZdgFyARhmaoKkARMd+2pPGFVDjn8dyienZEUgbH4cfbeHPD5r5zFxyabhH9LBD7/4ZBPGD56E5tS8Dc1yI3iwTeGSUjh3CSXtK+kHjBbQ5cN39/u/L4i1MCd2HtcZKTSPKOL3N+OR/rZ0ZSsJ+yDDT8cwftxud1xrDWcgvU+Kq6dIu6T9yYBzqXv6RP1tI6U9vP4mHRPMc+RF8lhU0+AmO8rdClQWxRxD6hw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UCb3e9zQJ+vpbqXHUHtl3mPDtd54QtP/sLKI04B2l+E=; b=LajYiHWQGIVAMsAG+93hx+RGbh2SgFPWHtOgxcTQwyNjQ1j1AGuMmO1+L9FgzA5kVfnfz1aeA+0WG2egNojez4pgKTCmKiiy+Mn/uYGRtD6AuXjP1YLW/5yhHRYBlC3gR+ysDeOit4/ucD7HQjNvrbUHp4rBYbe05B+0Y5VeZeY=
Received: from AM0PR07MB6386.eurprd07.prod.outlook.com (2603:10a6:20b:144::23) by AM0PR0702MB3603.eurprd07.prod.outlook.com (2603:10a6:208:22::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5353.5; Thu, 16 Jun 2022 10:38:43 +0000
Received: from AM0PR07MB6386.eurprd07.prod.outlook.com ([fe80::8d52:6c9e:86f2:d305]) by AM0PR07MB6386.eurprd07.prod.outlook.com ([fe80::8d52:6c9e:86f2:d305%5]) with mapi id 15.20.5373.009; Thu, 16 Jun 2022 10:38:43 +0000
From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>
To: Robert Raszuk <robert@raszuk.net>
CC: Gyan Mishra <hayabusagsm@gmail.com>, "Voyer, Daniel" <daniel.voyer=40bell.ca@dmarc.ietf.org>, "draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org" <draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org>, draft-wang-lsr-prefix-unreachable-annoucement <draft-wang-lsr-prefix-unreachable-annoucement@ietf.org>, "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] Thoughts about PUAs - are we not over-engineering?
Thread-Index: AQHYgPhfU46Hgc7/fE+Vajh8o2e0zK1RbHOAgAA0reCAACsLgIAAAV3Q
Date: Thu, 16 Jun 2022 10:38:43 +0000
Message-ID: <AM0PR07MB6386B6BCFE9F983163C0D289E0AC9@AM0PR07MB6386.eurprd07.prod.outlook.com>
References: <027146C0-7FC4-4990-B326-D766E0071957@bell.ca> <CABNhwV3pKCVRMuDeYE-MPow5_DXt9VJ4bz1kiC54oadBbmTuhQ@mail.gmail.com> <AM0PR07MB6386AB1E60D3F5EF11B453C8E0AC9@AM0PR07MB6386.eurprd07.prod.outlook.com> <CAOj+MMF_NVHacm=v1ws6vNUt2tDSsX72pTKMghNmKKnTr2yg1w@mail.gmail.com>
In-Reply-To: <CAOj+MMF_NVHacm=v1ws6vNUt2tDSsX72pTKMghNmKKnTr2yg1w@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nokia.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 655df907-ed99-4d90-1a3c-08da4f846292
x-ms-traffictypediagnostic: AM0PR0702MB3603:EE_
x-microsoft-antispam-prvs: <AM0PR0702MB3603B4EC45DA227905CE0995E0AC9@AM0PR0702MB3603.eurprd07.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR07MB6386.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(366004)(38100700002)(122000001)(9686003)(66574015)(82960400001)(38070700005)(86362001)(186003)(316002)(66946007)(64756008)(4326008)(66446008)(76116006)(66476007)(66556008)(6916009)(54906003)(2906002)(8936002)(5660300002)(52536014)(55016003)(53546011)(6506007)(508600001)(33656002)(7696005)(8676002)(71200400001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: IvXpSpY3uXnrYQnh35YUumobWTzHIpKOk6mfc2vIjdPIeSjLJBRJJbuJg907UqsCdNBiUOJhTi7zSmEHicsrSKU+INQ+EOyjXfj5mhCqpjUwb3ETgvZSp3kAdKyI40QlxD4RfLHn1SH7Nt5Zv9OxcnYNR7XCvc93AcOm01/r6a/J0rgw5X4BtHofuDPn50wME1VybJ0C811tniQawzCXuNz+NjMTOLuSwCwZ76NV5V1RyMuirAvZg5g13JJxRKjhsEg/FiS2M5/rdtfRGGuXGw0E7lP++TYdJKbr8C9M4RpHPN5fjfTFIXkwmYk9akzzBF3f5F4cwgYVll06EJ5MXI3yF3klS29yYfbdJ2E7hRQDjvDqcWxFbqXRUu7SAKcMUtyGwu84S88CIMIa8UYIQG3x76NPdZzC4gS20WA8TZjDpV0xApR6gzdNDhATKl8SFtnDopauFjJeR6SVE+A+Pk7jSRt0VktU/tV2ZNuzFbXXfeRZ916xm3zXKEgtOlO5/U49SFTZZI1p2Nh5Y1byPh7y/RuHc05hb315fel0PRuhtEhQTK2dSFGNSEhWAJjo/qv+FVsoaRdXcB1wj9VYQWwhfT+hIn35/PTTKtGepeh33fHh7dPURlUv2K8GtMwNqYtSZJUBDBSE93giUyIG4Pu3LdrTiiyt3urfybe2HDDBqAO2Hu8oWQa/LXzIPCIgJdhyzsxB0KR4bVu4aUuoELQP8CCemTHw3ycwKLVGhEY7RBEdHpjElYVl5+SWBIfEKAqw/bajXkwdzMOwKRGU7edGwFT2iMQQjJo/kqWPKeuV8f8qNosGru+QOPiBozHgKdDtijSWmdGYgJL7oEPi7j+L6h4ki525srO17+95Qlcn2f7oMfe5VGCwJsMkgIcJUCjA2vjpqfwioKHmPyCRF3RtmBiJb7tMN49kOCpWg2b9VmFIL2ml9of9Hx2Ho0YV1JYhTISEeXmp/dUvyegfCt11LSTHeROrd+dOvVxhN7IqY4I6dEqvwzDBfKMpsmxIl4rM3tJff2yVovKbsf6FoEsi7U5u6+kcEnvlApR9pkjFrCT9s9WC643vTwBXVUkY/zZxUV2dePB12yq81ihneIpV9UJOHs2+mK64+Xt7cbMBJ8ZlsAQM9rO8gJdD0mngbpiIxCsEtqVb5CiCH0L3bbQMi94snibFMJftmlN3FihpctlFRvLcxoZKOa97tPqFt3SUW7xIv7FKxIUb6oljFtKgP+iVfuV04tAlVkTDsXwd8wZqtPnWUUXKGpMg3wNm+05XuNiuodMEDJR5fOMgJ2zM+fwzoroZUci9Mj71I5+dTMZ4ks2VsnjXb61444K/mug5wTrd83TlylZyadJzgxI+dHrV3ES1g31HIJyJu8AFvd932/5MlFi3Hm15/gZiF66yZtG/qeKyNilSP/lfy49RTmkVq64g8yRj1WDGYJYGJdkorkwrtEEBdBUk7JmWzwJF2+6EOD4Mob4QLhrCdL57njumyr08u+DRQEDAEm1W9H9C/6g4nPgYTDeNHzo78WpKAmKhYf3dzmn4Vmi+svKxOFXWobH0NicBgwBZGRsWMoEE2fFVVzn6+SUnkLQo7JTtLKXp6UlWRy2hIZ+tOhKSnRlaxgIaS53owd0ZTIclRN2svYBQAjntybeYN/VtPyFmLBYbf5B1pcZC2cnI50N+8LLa1jHFQxWIPLtXFRjXHsNvnf58yu/V+2UaIQMoxHCIH9mmfUE5DQil6vZbUlFSux1E3h+asOx8Iokzir47ibTrjmukECpo4KJBeV44N9Yfp0Xi
x-ms-exchange-antispam-messagedata-1: XsG/nXc8nnnJz06YmFiRK1Ose1w/jLUOe+w=
Content-Type: multipart/alternative; boundary="_000_AM0PR07MB6386B6BCFE9F983163C0D289E0AC9AM0PR07MB6386eurp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR07MB6386.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 655df907-ed99-4d90-1a3c-08da4f846292
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2022 10:38:43.4053 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: KiC8pgTnkG1d+Q9lm8Yovx2aNzbbhPTdAawZB019kOoigC6Hwz4FeqINVAAW4io5ALgZyh+PNqb5qADjALeQT9tFkuZam2vjaDwtRQO3XT8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0702MB3603
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/EcKNmSbkV_jeTWXpo16MAunOsOo>
Subject: Re: [Lsr] Thoughts about PUAs - are we not over-engineering?
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Jun 2022 10:38:54 -0000

Hi Robert, Peter, Bruno

You wrote:
“Aas there is no association between node_id (perhaps loopback) and SIDs (note that egress can use many SIDs) UPA really does not signal anything about SIDs reachability or liveness. “

Sure, but UPA signals that a locator is unreachable, would that not result for the SRv6 SID to become unreachable as well?

I understood that UPA have increased value add benefit when using with SRv6. If suddenly a locator becomes unreachable, then it I guess the associated 128 bit SIDs become unreachable too, causing an event for something to happen in the transport network to fix the problem.

That being said, Peter makes a good point stating that UPA is not solving the problem of partitioning areas, and hence, maybe my use-case is not overly relevant.

So progressing, an operator using ABR based summarization then there are few options:

  1.  No summarization at all at ABRs
  2.  Summarize on ABR all prefixes that can be summarized
  3.  Summarize all prefixes that are not associated with PEs and remain advertising individual PE addresses
  4.  Summarize all prefixes and use UPA’s to advertise unreachability of protected prefixes

We all know that option 1 -3 work well and has been working well for long time. Behavior is very well understood

With the new option 4, to add value, applications need to get what is being referenced as ‘vendor secret sauce’ … I can already see the fun caused by inconsistent behavior and interop issues due to under specification.

The question I remain to have is if the UPA provide higher benefit as the tax it introduces. I can see operators suffer due to under specification, causing interop and inconsistent behaviors.


I agree with Bruno’s statement “If you believe that all you need is RFC5305/RFC5308 I guess this means that we don't need draft-ppsenak-lsr-igp-ureach-prefix-announce”

G/


From: Robert Raszuk <robert@raszuk.net>
Sent: Thursday, June 16, 2022 11:54 AM
To: Van De Velde, Gunter (Nokia - BE/Antwerp) <gunter.van_de_velde@nokia.com>
Cc: Gyan Mishra <hayabusagsm@gmail.com>; Voyer, Daniel <daniel.voyer=40bell.ca@dmarc.ietf.org>; draft-ppsenak-lsr-igp-ureach-prefix-announce@ietf.org; draft-wang-lsr-prefix-unreachable-annoucement <draft-wang-lsr-prefix-unreachable-annoucement@ietf.org>; lsr@ietf.org
Subject: Re: [Lsr] Thoughts about PUAs - are we not over-engineering?

Gunter,

(1) Multiple-ABRs

I was wondering for example if a ingress router receives a PUA signaling that a given locator becomes unreachable, does that actually really signals that the SID ‘really’ is unreachable for a router?

Aas there is no association between node_id (perhaps loopback) and SIDs (note that egress can use many SIDs) UPA really does not signal anything about SIDs reachability or liveness.

 For example (simple design to illustrate the corner-case):

ingressPE#1---area#1---ABR#1---area---ABR#2---area#3---egressPE#2
     |                                                      |
     |                                                      |
     +--------area#1---ABR#3---area---ABR#4---area#3--------+

What if ABR#4 would loose connectivity to egressPE#2 and ABR#2 does not?
In that case ABR#4 will originate a UPA/PUA and ABR#2 does not originate a PUA/UPA.
How is ingressPE#1 supposed to handle this situation? The only thing ingressPE#1 see is that suddenly there is a PUA/UPA but reachability may not have changed at all and remains perfectly reacheable.

Valid case. But PE1 should only switch when alternative backup path exists. If there is a single path it should do nothing in any case of receiving UPA. We have discussed that case before and as you know the formal answer was "out of scope" or "vendor's secret sauce" :).

The justification here is that switching to healthy backup is better then continue using perhaps semi-sick path.

Best,
R.