Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-01.txt

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Wed, 08 July 2020 17:44 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94AA93A03F3 for <lsr@ietfa.amsl.com>; Wed, 8 Jul 2020 10:44:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=RbU4oMZ5; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ZdVod9ez
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qiAg8XVSwChp for <lsr@ietfa.amsl.com>; Wed, 8 Jul 2020 10:44:43 -0700 (PDT)
Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9A593A03FA for <lsr@ietf.org>; Wed, 8 Jul 2020 10:44:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23366; q=dns/txt; s=iport; t=1594230282; x=1595439882; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=AMa8kkHSqGz9NYHlu55by+JUTKtwuwkCmYSnk9zbss8=; b=RbU4oMZ5hPZlnbX2R5VO7O7UiztZvo42gLcuURNhZd765wKa090pdSDf hpFL8Fnf1SppwqQw0Gf45aD0dtCH3IE8GtWzUJfPTTTN8x7Y1ZZ/DPAbs 0I3Tj/Ifma2QYgoQ8keKfvcsRQ0ivOJ15394n+RWf9XOOS4XAL7ZATN/V k=;
IronPort-PHdr: 9a23:njI0/xahZE4JWmqP2Cbn88L/LSx94ef9IxIV55w7irlHbqWk+dH4MVfC4el21QaRD5nc7eMCj+uF+6zjWGlV55GHvThCdZFXTBYKhI0QmBBoG8+KD0D3bZuIJyw3FchPThlpqne8N0UGBMH4dhvWoy764TsbAB6qMw1zK6z8EZLTiMLi0ee09tXTbgxEiSD7b6l1KUC9rB7asY8dho4xJw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0B3AADTBAZf/4MNJK1gGwEBAQEBAQEBBQEBARIBAQEDAwEBAYF5AwEBAQsBgSIvUQdvWC8shDODRgONU4oBiW+Ea4JTA1UDCAEBAQwBASMKAgQBAYE1AYMXAheBfQIkNwYOAgMBAQsBAQUBAQECAQYEbYVbAQuFbwEBAQEDEhEKEwEBNQIBDwIBBgIRBAEBKwICAh8RHQgCBA4FCBqDBYF+TQMuAQ6PRJBoAoE5iGF2gTKDAQEBBYURDQuCDgMGgTgBgmmKAxqBQT+BVIJNPoIaQgSBXyuCaTOCLZI7hkOLO5ALTQqCXJRbhQ+fIpFbjHWRbQIEAgQFAg4BAQWBaSSBV3AVgyRQFwINjh4MF4NOg0aBToVCdAIBATMCAwMBBwEBAwl8jy4BAQ
X-IronPort-AV: E=Sophos;i="5.75,328,1589241600"; d="scan'208,217";a="780979171"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Jul 2020 17:44:40 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 068Hiewh018721 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 8 Jul 2020 17:44:40 GMT
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 8 Jul 2020 12:44:40 -0500
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 8 Jul 2020 13:44:39 -0400
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 8 Jul 2020 12:44:39 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CuDfcQ5sMdETecDsrYiBAo0sxhIHysCmVAT5TNlJRPjW5Tm9wSHALFUrjMfFbOCUKKNEK7UL0/wqe2R+5xrosOMl2tdwEl1WWRZRdKrpyFMebuVI8tOjdfuf5iUi6l3ksftnrRXKrMyzINiojSXio7lOtQtHLMVymopmy9S1jTfTm+fN5w0a/zaZfVIBVO6KoXLJTEoHDR5J4shKQdVf8zCOxOjGXzJhehCwieDZtOxzfx7WRAtQZn7k/+nrWaZpId3CWXKJG8DRwRTSsD3B2B0Ut8YV0O3kzyr/0Q5hH+5mEHTcTN0qRcJmoEb5Vs0WCbMVEtWCwXR0V0nwr2hNKg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AMa8kkHSqGz9NYHlu55by+JUTKtwuwkCmYSnk9zbss8=; b=YPJYb0oTcmwBm35MeuIZEXU4K4dExHuInQimXncMV5ZzVTyz29KDTLZbkKlerc/MSxwNA2bySZwMPXIykCTDL5clq/R4h0vA/lcW1Oqst+UIPIBt9asb8c/0VhIlX6h7fL4UNGoOjhziOD+P9QaKOkuG+MA99DlwOm5n3B43FQvP/JrXqazH14yZgA9n6Q9gTKZE6DA/hvVEU17VS1rVCL+AHNc4HQaPycjdN7/1DiUbRvoqa2n6B7iw1TEt+L/XOtoA2AgrSR4PNV6DGEhQ2qqbZgobAUDWIH6G68vmzxgZ6T3hlqbN4KvR3I5IL+kaq5oBYKungrqmRdwh+Deu4g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AMa8kkHSqGz9NYHlu55by+JUTKtwuwkCmYSnk9zbss8=; b=ZdVod9ezehqZVOzDSoJusElHcVKbD5MeZ0jm1I4zXtRw0XCEccEjDb3laUFX49LjamHSkoEjJK+8IpF2nYMI5WQKgfS+j53D0rC7R4brHIuQIq8PtiFVfYyU2D83ii5e2UPPjHy+wk1iqmE/JucZVInQaSYIRjmyuxd7lmeaZls=
Received: from BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) by BY5PR11MB4054.namprd11.prod.outlook.com (2603:10b6:a03:189::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.21; Wed, 8 Jul 2020 17:44:38 +0000
Received: from BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::744b:761f:b385:f1e2]) by BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::744b:761f:b385:f1e2%7]) with mapi id 15.20.3174.022; Wed, 8 Jul 2020 17:44:38 +0000
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: "tony.li@tony.li" <tony.li@tony.li>
CC: "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-01.txt
Thread-Index: AQHWVTybyhnhe138fEKen9zonOkhwqj98nEQ
Date: Wed, 08 Jul 2020 17:44:38 +0000
Message-ID: <BY5PR11MB433793CA15945C7DEE929D3CC1670@BY5PR11MB4337.namprd11.prod.outlook.com>
References: <159413489833.5281.16624960404974015532@ietfa.amsl.com> <BA0B8614-4F8C-46D0-B494-E0A8C7ED9E47@tony.li> <MN2PR11MB4352D858C40388E04A534C83C1670@MN2PR11MB4352.namprd11.prod.outlook.com> <2C44E16A-E7D1-4092-8454-5CE066A2F4B9@tony.li>
In-Reply-To: <2C44E16A-E7D1-4092-8454-5CE066A2F4B9@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tony.li; dkim=none (message not signed) header.d=none;tony.li; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [2001:420:c0cc:1001::7c]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 86f7a25f-a4d9-47ac-35c6-08d823669617
x-ms-traffictypediagnostic: BY5PR11MB4054:
x-microsoft-antispam-prvs: <BY5PR11MB40541E421AC83C4A123C5E7CC1670@BY5PR11MB4054.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 50lGP6q6T7zZpzB59c37cv8xxaXqNLKUKwAhuUh66D1u058quiqWcZAUGN+SQupu+uvPxk7jhaUWXszbd567/2HkN48k+raukYVXX4wpAFOWVuiqxPdgCtT8KNK1q1kB2sb8S0FGlYnPlJLxA7DUY5MgDuVNuBpk+gS1mHFhPzYQc4XaWaQIuzyfx2/QlcG4VsvPrHxOgWy1WbGmufgv4Sf5TSeu4BAoxU7q0kI1h3S1fsOpg7XDQpIjdMb73HhtDGi9Gi71UqdsggOGCyNxOgpRyfJ4iLS3xexwkHkMM/8cjbCfIR82+aKH85VBaFhx8Ylyi70trbg7aqVc3uJDx18dOOt6EyXkWEs3xbnpGT09fjCEa9LHI7Up0mTLnPVcOO0g8/7yp8KZujQRXztxZQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4337.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(376002)(136003)(366004)(346002)(396003)(86362001)(53546011)(316002)(83380400001)(8676002)(5660300002)(2906002)(8936002)(9686003)(478600001)(166002)(966005)(33656002)(52536014)(7696005)(4326008)(71200400001)(6506007)(6916009)(55016002)(76116006)(66946007)(66446008)(64756008)(66556008)(66476007)(186003)(15650500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: Gb0RTMtEH+VUVmdYiwageaHpa7i/DIvsBeNwrcuIxFrgqvfIil2C2K5Fa9fJHZUS1GaeOYF6QM8uOg2062UvdRZGctidC2nwYnjAki+hsdr2djWsQ9LBynIb1Hs9XC+fQhzavcgxx4OPdrdyywETAAMM77vzzEESLdUmNXTRNTTcw6JpbB/U0bXVU6GFZ81JHP4oj/AIq5fzoYqSktYVR5rbUSp6PMQlqGlHBMcdTsjGnQC4wdLNqRuuhqoKUkMc4XLzDQL2bWtIdAK40ExusBL+Ojt4NqEiS+2F9guCLdpocoX5Rg72OmOSR0OmPPLG5iGNmfr7Fygvqep/oEd0Fc61u5obRTNWVRD3HqZe4NzGCaUTkJiqhEjPdYGIKuYamlizqpqmDrxmYUdCspmUDdvDzsZwlVNNSvxxbWayk4xAMVXwwdJlM68nysQrE4wi0kRaLT6SKyXEz1hC/Dnsh07DoMI5UT+IBDeIkNmpFEOgS57z9PuBXPz5YlPw5qxtezRRmnRZ7LHJgtRG9xvgwA==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR11MB433793CA15945C7DEE929D3CC1670BY5PR11MB4337namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4337.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 86f7a25f-a4d9-47ac-35c6-08d823669617
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2020 17:44:38.3075 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Yf/a3BW3Rt2kO4j5McxBwzclGE24CfnYwQZzHogX/21TKcTmgyVvJgxtQReR/bRTcxnbwsF9T6W5SpAhYIT2VA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4054
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com
X-Outbound-Node: alln-core-1.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/kbeLpeDxVAHBY-9oQ1gHe3yucjQ>
Subject: Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-01.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jul 2020 17:44:46 -0000

Tony –

Inline.

From: Tony Li <tony1athome@gmail.com> On Behalf Of tony.li@tony.li
Sent: Wednesday, July 08, 2020 8:29 AM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>
Cc: lsr@ietf.org
Subject: Re: [Lsr] New Version Notification for draft-ietf-lsr-isis-area-proxy-01.txt


Hi Les,



The new definitions in the latest version in the draft are very close to what we discussed in the earlier thread – so this looks pretty good to me.


Excellent, thanks.



I still have some concerns regarding the Area Segment SID.
You propose to advertise this in two places:

1)As a sub-TLV of the new Area Proxy TLV
2)As a new sub-TLV of the existing Binding TLVs (149, 150)

I am not sure why you need this in the Area Proxy TLV as you allow Binding TLVs to be advertised in the Proxy LSPs (Section 4.4.10).
???


Again, the subTLVs of the area proxy TLV are for the coordination of the Inside Area. The Area Proxy TLV appears in the Inside Node’s normal LSP.

The Proxy LSP is for informing the Outside Area.

It’s fairly important that we install the forwarding state for the Area Segment SID and distribute the Proxy System ID before we advertise the Proxy LSP.

[Les:] Understood – but I do not see why this requires you to advertise the SID in two different TLVs. As you allow the Binding SID TLVs to be advertised in both standard LSPs and Proxy LSPs, there seems to be no need for two different TLVs to include the advertisement.
??


If this is what is intended, it raises a number of concerns:

If both are present and inconsistent how are they used?


If both are present and inconsistent, then we have a major malfunction of the Area Leader, since it is the single system that is intentionally advertising both.

The Inside Nodes would follow the contents of the Area Proxy TLV and employ one SID value.

The Outsiide Nodes would follow the contents of the Proxy LSP and employ a different SID value.

Hilarity ensues.

Note that this is somewhat analogous to a system that wished to advertise a loopback interface and advertised one prefix into L1 and another prefix into L2.

[Les:] Yes – of course – this is pathological. (Probably not hilarious to the customer. 😊 )
I am just saying by having two sources for the advertisement you introduce the possibility of inconsistency – and the spec would have to speak to this – even if it should not happen.


As Area Proxy TLV does not support MT (not suggesting that it should) it isn’t clear how this relates to MT context – which exists for TLVs 149/150.

Encoding wise, if we are to support Area Segment SID in the Binding TLVs, I think more detail needs to be provided as to flag settings when the new sub-TLV is present.
The following flags are currently defined for the Binding TLVs:

0 1 2 3 4 5 6 7
+-+-+-+-+-+-+-+-+
|F|M|S|D|A|     |
+-+-+-+-+-+-+-+-+

F,S,D flags seem applicable w/o change.
However, M flag would need to be clear when Area Segment SID is present.
The A flag seems not applicable to Area Segment SID
And your encoding violates the current definition of Binding TLVs.
Specifically, https://www.rfc-editor.org/rfc/rfc8667.html#section-2.4.4 states:

“The Prefix-SID sub-TLV is defined in Section 2.1<https://www.rfc-editor.org/rfc/rfc8667.html#PREFIXSIDSUBTLV> and contains the SID/Index/Label value associated with the prefix and range.
 The Prefix-SID sub-TLV MUST be present in the SID/Label Binding TLV when the M-Flag is clear.
 The Prefix-SID sub-TLV MUST NOT be present when the M-Flag is set.”

While some changes to this definition are likely required to support Area Segment SID no matter what, it is hard for me to see a good way to do this w/o adding a new flag.


I’m open to suggestions here.

We are abusing the definition of the Binding TLV.  2.4 says: "The SID/Label Binding TLV may be used to advertise prefixes to SID/Label mappings.”  That’s not what we’re doing, so it’s not too surprising that there’s some conflicts.

[Les:] Yes – the Binding TLV has some issues being generalized. There is history here as to why the format is the way it is and why it isn’t more easily extensible – and that is open for discussion AFAIAC, but we cannot break backwards compatibility for SR.
But I am also responding (in part) to your desire to make the Area Segment SID a more general tool – usable outside of Area Proxy – which seems like a good goal.

   Les

Tony