Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Thu, 27 August 2020 14:29 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A363A0C18 for <lsr@ietfa.amsl.com>; Thu, 27 Aug 2020 07:29:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=SnwI83xB; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=PlyEzP1I
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D1PZdopuKN0F for <lsr@ietfa.amsl.com>; Thu, 27 Aug 2020 07:29:33 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4B3E3A0C16 for <lsr@ietf.org>; Thu, 27 Aug 2020 07:29:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=27246; q=dns/txt; s=iport; t=1598538573; x=1599748173; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=nj9AMzL/TXeyPjOnWPuOuiAU5Agmfn6g10YplViAzZU=; b=SnwI83xBR7J0w8FnR1Em6lW3u3A7FjGuT4YT5WSh5J9zDO66hHHTDocD 3RTQnO5L9OLdWuXfV2voU1D04j2gDcmM4mF97YZo+bDJK7Copfy7KIgoF kpeXoagw5ZP2b4YYc3sbwxBecTGq83Zcr3ybkvAu9Ipa/loeKBY/DwrOR 4=;
IronPort-PHdr: 9a23:XmiH1RIl0GMZdIAHbtmcpTVXNCE6p7X5OBIU4ZM7irVIN76u5InmIFeGvK0/kFjPTMPf6qEMh+nXtvXmXmoNqdaEvWsZeZNBHxkClY0NngMmDcLEbC+zLPPjYyEgWsgXUlhj8iKnNk5EXsL/NBXep3So5msUHRPyfQN+OuXyHNvUiMK6n+C/8pHeeUNGnj24NLhzNx6x6w7Ws5ob
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C2AAAUwkdf/5JdJa1gGgEBAQEBAQEBAQEDAQEBARIBAQEBAgIBAQEBggqBIy8jBigHcFgvLAqELYNGA41ziguOZoJTA1ULAQEBDAEBLQIEAQGETAIXgjICJDgTAgMBAQsBAQUBAQECAQYEbYVcAQuFcgEBAQQSEQoTAQE3AQ8CAQgRBAEBKwICAh8RHQgCBA4FCBqDBYF+TQMuAQKoGQKBOYhhdoEygwEBAQWFOQ0LghAJgTiCcYNlhk8bgUE/gVSCTT6CGoIlgxUzgi2PeiqCbYZpiwxckClRCoJjlSqFJIMHiWiTVpJMjTGSGgIEAgQFAg4BAQWBayOBV3AVgyRQFwINjh8MF4ECAQeCRINGhxB0NwIGAQkBAQMJfI5UAYEQAQE
X-IronPort-AV: E=Sophos;i="5.76,359,1592870400"; d="scan'208,217";a="545116312"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Aug 2020 14:29:32 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 07RETW77029546 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2020 14:29:32 GMT
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 09:29:32 -0500
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 10:29:31 -0400
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 27 Aug 2020 10:29:31 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cD1dF11qlr/SPjwvP9iW0w9baDfWHTCd2SxlGfSvnUNZ8r17RYiAT7KEgxmT8vRtqWGKetlmkh0t6ZtVQv6ZObtuXsu8jWX7fIstNHCObEZVWea1GksfXYZZLvTo/LmV4dyc3Elxk4qvTfXmGynjHgbSdNrcEgKQolqQYNIXb00VwbiKNp7CJowjWDnkSnSKvBibQgRfAkpW6fnx4yRe2TereQA3148WMfctRD84xroqQznp66Gh45NCMCnEHcbdtM4Z1aiiLbMt62g8jzurs4StFBqYPF71voKmXVqa0HaybY+d04yNP4dh+kNhqa2ow9hF0vHWWzq+hLJo2AT+oQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nj9AMzL/TXeyPjOnWPuOuiAU5Agmfn6g10YplViAzZU=; b=MeAzBxo6/lS6Rw9Yn4kawdbnKi+gkmjMCn/HOAVxm+YOMQmc9kvFWn2WratGJinmUFRO7mxBav0Myrd8DQPVRya13bMckfwvw54vCVOJP1sfoS6SKLQDuLCqx9Js1RNIqJIJg1fUmrK/nrwpfa6DBI8IjDw1B0IwikFXsI7a/0pzP2FP+XLF8VDgm9W/6JyROzngZf3mnxq3vN+x3PqB1cY+vEbikJkltCNpQHD+FMbt1GgSufpGLP8QPq//CbWarxUrmTaIHGu16bhX0ttderJIUOc28LCQ0hWe9oneIESXOYChFWxVxmung/ioqZ0Fv9ws+DslF1RNYkphu9388A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nj9AMzL/TXeyPjOnWPuOuiAU5Agmfn6g10YplViAzZU=; b=PlyEzP1IfBz1E2IddXiK/mhmWU728sUjn4vge52dnjY3MYRgSltsmsvEBrRcwH4AUrN71OiCgHgbdipWv5XhNmDSwbrfO+TYDgPdbr3h9I3Domoh/uNhE3HLb/PsbcJNDVqftr9WyV8iJ0WL2vGYcjT9Nob+6sOI6m4vjFCP3Gw=
Received: from BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) by BY5PR11MB4054.namprd11.prod.outlook.com (2603:10b6:a03:189::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3283.15; Thu, 27 Aug 2020 14:29:30 +0000
Received: from BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf]) by BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf%3]) with mapi id 15.20.3305.031; Thu, 27 Aug 2020 14:29:30 +0000
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: "tony.li@tony.li" <tony.li@tony.li>
CC: "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
Thread-Index: AQHWe/0FCwnzlVRuSU+4CLy77/UAXKlLC2JggAAR5wCAACkygIAADWsAgACqReA=
Date: Thu, 27 Aug 2020 14:29:30 +0000
Message-ID: <BY5PR11MB43372CDD83944BF0D8B76230C1550@BY5PR11MB4337.namprd11.prod.outlook.com>
References: <159665865921.15026.2581762617571023706@ietfa.amsl.com> <476BCC1F-0C33-4DEA-84DF-365FB5CBA377@tony.li> <BY5PR11MB4337679B3A5C99836E982202C1540@BY5PR11MB4337.namprd11.prod.outlook.com> <F7F4FFC1-2134-475E-AC3A-C3FD750F7EED@tony.li> <BY5PR11MB4337AE29FC4C8EF69C7972AEC1550@BY5PR11MB4337.namprd11.prod.outlook.com> <9C4E178A-42CA-476F-A49B-828C9AED3673@tony.li> <BY5PR11MB43377671040639C343027959C1550@BY5PR11MB4337.namprd11.prod.outlook.com> <3EB8F4C6-9CC0-452E-9E64-D836225F156A@tony.li>
In-Reply-To: <3EB8F4C6-9CC0-452E-9E64-D836225F156A@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tony.li; dkim=none (message not signed) header.d=none;tony.li; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [12.156.66.3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: bbcbb06e-e568-47ff-9a74-08d84a959c1e
x-ms-traffictypediagnostic: BY5PR11MB4054:
x-microsoft-antispam-prvs: <BY5PR11MB4054ECC0D587271679AE7E44C1550@BY5PR11MB4054.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: buqk5FDbh/NllUE2IuM1V4srD3ph3qNl/ylFub/zogwddMpmGW9kEgDTy/+/Gr2/3/CTRJHOlKv5Ww9S6HkFXEHiqxGuZz36+870kYLloa1zzmz4E80I8E/5sWCmrVmsv9CV0FAd2lgMSAMrxHd82RO/5paU6Tlya1ryJYgJ2l66Z9XmmDvGuaglyj4vzvnnVB/CwHajKQuqmCPEc7efRGTRxLGkd/XugfOpD2ADwwUz7nT9v1sZyjVD8M8R4krTeszTMP1kaeBi8CDDVe2U+0j0gf0XrqE1Fbi+FLsi/RiHl9NT59FeRuATCnBU6WraUhVLW8Dsowab9drr5iBLCA==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4337.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(366004)(376002)(136003)(396003)(39860400002)(4326008)(7696005)(6916009)(64756008)(9686003)(66946007)(71200400001)(6506007)(66446008)(316002)(33656002)(86362001)(8936002)(8676002)(52536014)(5660300002)(26005)(186003)(83380400001)(478600001)(66476007)(2906002)(55016002)(53546011)(66556008)(76116006); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR11MB43372CDD83944BF0D8B76230C1550BY5PR11MB4337namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4337.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: bbcbb06e-e568-47ff-9a74-08d84a959c1e
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2020 14:29:30.1649 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: bCOY5amD/RoT1eAmzwFlrtKCCxz+R89vp2BZCU8hKChwN1X+8I3U9eRa3nebhwbI/vJJbtuc1KInVKRDPTwz2A==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4054
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com
X-Outbound-Node: rcdn-core-10.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/tqczTlfDGS9y3HzLpp1r7zZEJoU>
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2020 14:29:36 -0000

Tony –

Inline.

From: Tony Li <tony1athome@gmail.com> On Behalf Of tony.li@tony.li
Sent: Wednesday, August 26, 2020 8:56 PM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>
Cc: lsr@ietf.org
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt


Hi Les,

[Les:] Any one of the IERs can be elected Area Leader, therefore all of them have to be configured with the Area Prefix and associated SID.


The Area Leader may not be an IER.  In fact, in an important use case for us, the area is a leaf-spine topology.  The Area Leader is one of the spines.  The leaves are the edge routers.  For resource reasons, we do NOT want the Area Leader to be a leaf.

[Les:] Thanx for clarifying this. A careful reading of the draft supports what you say, but as this point could be easily overlooked it might be worth emphasizing this in the draft.
In any case this isn’t significant for the points we are debating here.

We do NOT require that the Area Leader candidates have identical configurations.  In fact, if there is a configuration change, it may be beneficial to configure one candidate differently and then raise its priority.  It’s a simple way of effecting an area-wide configuration change.

[Les:] Section 4.2 states:

“For consistency, all Area Leader candidates SHOULD be configured with
   the same Proxy System Id, Proxy Hostname, and any other information
   that may be inserted into the Proxy LSP.”

I would agree that the flexibility to easily propagate a config change to be reflected in the Proxy LSP content requires relaxation of this rule.
But again, not significant for the points we are debating here.


Perhaps you are allowing that each IER could choose a different Area Prefix/SID. Not sure why you would want to do that – but even if you did, the behavior of the winning prefix/SID is analogous to an anycast address.
The difference here is that the advertisement of the Prefix Reachability associated with the area prefix is within the Proxy LSP – which appears to OERs as if it was originated by all of the IERs i.e., the set of IERs appears as a single node to the OERs. Still, all IERs are aware of the winning prefix reachability advertisement and will do what is required in forwarding based on that content.


They will not be aware of it unless we tell them via the Area Proxy TLV.  For obvious reasons, the Inside Nodes do NOT do anything with the Proxy LSP other than flood it.


Which is why we’re using the Prefix SID.

[Les:] You are using the prefix-SID, but the advertisement is not associated with a prefix reachability  advertisement, yet you want nodes to install forwarding entries based on this advertisement. This is what seems inappropriate.


We want outside nodes to install forwarding entries on the Prefix SID.  This is entirely backward compatible.  How is that inappropriate?

[Les:] Installation of forwarding entries today is based on Prefix Reachability advertisements. You are proposing to extend that by requiring a forwarding entry to be installed based on the context of the Area Proxy TLV.
I would prefer that you not introduce this.
In addition, since there will also be a Prefix Reachability Advertisement for the Area Prefix in the Proxy LSP, the IERs will have two sources of information for the SID associated with the Area prefix (Area SID sub-TLV from Area leader L2 LSP and Prefix Reachability advertisement in the Proxy LSP). Which introduces the possibility of inconsistency.
If you do NOT advertise the SID in the Area Proxy TLV then you both eliminate the introduction of installing forwarding entries based on non-reachability advertisements and you eliminate the possibility of inconsistency.
That is what I am asking you to do.


The only current case where a prefix-SID is advertised and is NOT associated with prefix reachability is in the Binding TLVs. This has two use cases:

  *   Advertising SIDs for prefixes associated with nodes which are NOT SR capable
  *   As an alternative to per prefix advertisement if the operator prefers to use a centralized SID assignment service

In both of these cases if a SID were to be advertised in prefix reachability TLV for the same prefix the SID in the prefix reachability advertisement would be preferred.
You don’t discuss this at all in the draft i.e., what happens if the SID in the prefix reachability advertisement for the Area Prefix differs from that advertised in the Area Proxy TLV. What I am pushing for is eliminating the need to do so by relying on the existing prefix SID advertisements and not introducing a new one in the Area Proxy TLV.


The existing ones do not have the required semantics.

[Les:] That’s wasn’t the point. The point was that when a SID is advertised in prefix reachability it is used in preference to advertisements in other TLVs.


[Les:] The semantics you require are functionally equivalent to anycast behavior – which is supported already.


Please point me to anycast semantics that will ONLY be selected by IERs.
[Les:] You have specified that only IERs and Outside Routers process Proxy LSP content.  So why do you ask this question?

   Les


Tony