Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Thu, 27 August 2020 03:41 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: lsr@ietfa.amsl.com
Delivered-To: lsr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E4CD3A0CC9 for <lsr@ietfa.amsl.com>; Wed, 26 Aug 2020 20:41:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.597
X-Spam-Level:
X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Aa4VIeJ4; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=saHAuR5z
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dhoYNIvXYASY for <lsr@ietfa.amsl.com>; Wed, 26 Aug 2020 20:40:59 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E6223A0CC6 for <lsr@ietf.org>; Wed, 26 Aug 2020 20:40:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=28012; q=dns/txt; s=iport; t=1598499659; x=1599709259; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=aABlFfWbF/I07us/IZ87Rha3p0DV+oFbm1F0u2eYqy8=; b=Aa4VIeJ4bYMsg8rWFz5bBtnM/CRSYJJA0SlqLsc+2fbwKLl8hwbtSZEe GevsOq73ulbfxonC5/OeeyQcFVEjQjtrH2wgKUYBJ1Xso8w5AsP+wySAO Izgd3Mxq+wFRkWW+84nt64ty5H0Dwsy1/+Qa1vRRZJQZUMUIh5iUCnSPU A=;
IronPort-PHdr: 9a23:6eJYRhwFOxkZNjvXCy+N+z0EezQntrPoPwUc9psgjfdUf7+++4j5ZRWHt+lqik6PWYSIo/5Hiu+DtafmVCRA5Juaq3kNfdRKUANNksQZmQEsQavnQU32JfLndWo2ScJFUlI243a9IA5RGZW2a1jbuHbn6zkUF132PhZ0IeKgHInUgoy32um+9oeVbR9PgW+2YKh5K1O9qgCCuw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0B2AABoKkdf/4MNJK1fGwEBAQEBAQEBBQEBARIBAQEDAwEBAYF5AwEBAQsBgSIvIy4HcFgvLAqELYNGA41piguOZoJTA1ULAQEBDAEBLQIEAQGETAIXgiECJDcGDgIDAQELAQEFAQEBAgEGBG2FLwglAQuFcgEBAQQSEQoTAQE3AQ8CAQgRBAEBIQoCAgIfER0IAgQOBQgagwWBfk0DLgECp0ACgTmIYXaBMoMBAQEFhTcNC4IOCYE4AYJwg2SGTxuBQT+BVIJNPoIagiWDFTOCLY94gxaGaYtkkChRCoJjlSmFJIMGiWeTUpJJjTCSGgIEAgQFAg4BAQWBaiSBV3AVgyRQFwINgyyKcwwXg06DRocQdDcCBgEJAQEDCXyOeQGBEAEB
X-IronPort-AV: E=Sophos;i="5.76,358,1592870400"; d="scan'208,217";a="532428508"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Aug 2020 03:40:57 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 07R3evSZ003353 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2020 03:40:57 GMT
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 26 Aug 2020 22:40:57 -0500
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 26 Aug 2020 23:40:55 -0400
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 26 Aug 2020 22:40:55 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ekEXbyrSf9X+1N/e9KSGbluYwJk8rnCY8lzA6B1X65G4FaWgnzK8WizHnvc03L3LMpaGmmBKTPEpaIpPyp7KO1c+xVyOYWlWJU+8xTpseSJ3t0azRESCQD4WFQvanvAAn/wBB+trdXqzrYcCVDy6VnMfuAd6QbItxIeYGGE07DSFx/MpioMF9X9lF4sdGv609qQF4JAomY8Bvd9xBP+VuEB0vaCBfT2asADp7IT9TPk2QvcRmFuIdbL+QXKQN5eh8SEDgRg4iI186yg9uw+l5zR/WIy4TjqXcjpwPG6ui6c84550RFaIHZ/pOdBAWZACjx4cztXV3fiYF25lb8M4Yw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aABlFfWbF/I07us/IZ87Rha3p0DV+oFbm1F0u2eYqy8=; b=F6UdJowHcqaN/eLiomc2P6Kh1yqV24euhOd6l0uUCUO15CBKzE9cUyXltjtV/ULF3hqWzLRY2rvB8y/cxbbxuVP/zDHzYOAcvKGWSEO/4IbiPC2lCjXqFjF9MX0xsiZRwecFp4zVFyqDthv/jtj2GvG9EpiWAfqkmaKFfW7+K0gv/DQugrUlbqbIKwBoKJgFOEslb550UmOcPT99yTF11Cnpjrg0pONvqEU2Aguc+w1Nv5+1khAjT27D5H77ObukIFfE/7XPDMP4NaO9fxSDvWHrQT+xhx3m6EHIU0HEFIb91HJTPjp8LLJKgPl0fA5DvJvNgElZKfUrzmQFYJCR1w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aABlFfWbF/I07us/IZ87Rha3p0DV+oFbm1F0u2eYqy8=; b=saHAuR5zzAtCpkAyZAjm+nEs78kVi0aOxtwCQ7YxzENhssQMK6P7IaS1nNdyDd+7OU3baY1CA557A+Pzsct5bQeGqDxQQlBQHJvIvX02aKamLliquju73fgdadFHFLvTvL/1GOiOVXsQhmsPeGpMJufWlHWerRqVbTO9HjV37do=
Received: from BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) by BYAPR11MB3830.namprd11.prod.outlook.com (2603:10b6:a03:fc::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3326.19; Thu, 27 Aug 2020 03:40:55 +0000
Received: from BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf]) by BY5PR11MB4337.namprd11.prod.outlook.com ([fe80::418a:3b0a:d7e1:a3cf%3]) with mapi id 15.20.3305.031; Thu, 27 Aug 2020 03:40:54 +0000
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: "tony.li@tony.li" <tony.li@tony.li>
CC: "lsr@ietf.org" <lsr@ietf.org>
Thread-Topic: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
Thread-Index: AQHWe/0FCwnzlVRuSU+4CLy77/UAXKlLC2JggAAR5wCAACkygA==
Date: Thu, 27 Aug 2020 03:40:54 +0000
Message-ID: <BY5PR11MB43377671040639C343027959C1550@BY5PR11MB4337.namprd11.prod.outlook.com>
References: <159665865921.15026.2581762617571023706@ietfa.amsl.com> <476BCC1F-0C33-4DEA-84DF-365FB5CBA377@tony.li> <BY5PR11MB4337679B3A5C99836E982202C1540@BY5PR11MB4337.namprd11.prod.outlook.com> <F7F4FFC1-2134-475E-AC3A-C3FD750F7EED@tony.li> <BY5PR11MB4337AE29FC4C8EF69C7972AEC1550@BY5PR11MB4337.namprd11.prod.outlook.com> <9C4E178A-42CA-476F-A49B-828C9AED3673@tony.li>
In-Reply-To: <9C4E178A-42CA-476F-A49B-828C9AED3673@tony.li>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tony.li; dkim=none (message not signed) header.d=none;tony.li; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [12.156.66.3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 73fc78a5-0d47-4a02-5588-08d84a3b00c6
x-ms-traffictypediagnostic: BYAPR11MB3830:
x-microsoft-antispam-prvs: <BYAPR11MB383093E52E5CE26486FD15FDC1550@BYAPR11MB3830.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: BGluuQrA8cbexCJY3GXxL1woO1pbhnrDCa7mLsyW+1dxqJIQPzUjaMl23NQvD88g8BhIKI4khtTU9/03yhLlPoTLtTiuorR7yHb3ZWsxnHimAiQ0hwip9+1VLJG2HRkthcPhib0vcsRTxwcJ0aCjDxFt1Z7QbSRbIIqvrMUDBVp+asOua8J22HCYlorplkRpBrbjeQLIbSXCO5MSMkXyzNmsMUiYEqdatEG0wUcMbl+4r3UCMMscsB7vQCE8x8lEGula12AHQa0O0RdUmkDevX1nEArJ8+xtpgSINHcOegFtvRopmMc8/s4WFC2wdJsQQC5nPghb4Cwg3cvURrxpPw==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4337.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(396003)(346002)(136003)(39860400002)(376002)(33656002)(55016002)(8676002)(8936002)(6916009)(9686003)(66556008)(86362001)(52536014)(66946007)(316002)(66446008)(64756008)(76116006)(66476007)(478600001)(5660300002)(71200400001)(2906002)(4326008)(53546011)(7696005)(186003)(26005)(6506007); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 3GGTfQEVHJDOPUuNaQcgFb2Lg+sxzK9uqOV5MsJML5TAftwFu6wqa4cdpAIne0CeL5kf2YZL9ybXMEO+FZo3FFM/2jcsgZW9m+WOvoNblgNNMp/ip1bIEmjUO31lpvkq7XNRxjjr2T44L304nfAxGTsb/01NKRMYlOfmM+vJowq32RX78h88g+qkbB25pQi9TuS3z8ivWdHRKJBW4T3gzVL9ukcF7R7sQhLhBnA0iI+YPsLCBJUJOLH8QPKybOaaGOT7H8UMQ1WAV9u1zcL3HFmrUwxHT2vZiQEAg7GWecwerlwTAu8AYPhQ2ngUoyUilVo8OQG/YyREubz3KEZEUJ99dFGD7EvgVZJeIhtnpvnMzdtLHhrP/IcMbjY2IgorGjlOUt27l9OtcGmQfBZHypjPykwrMuQJKyM0SA/mhrMQ+UlWmHjZmhfHU1kBzdw/A8S27lBysgMuWntUVzFK4CzTl5rJcQDQezCteYimCTOjYo9kUeH5Kiw0p75Up03sM/S/3lkQrbFpbsr+UrweEo8QqeXYS8rxIUXy5s8oLZ3t0jvO5dIIl5xYbezWMiSLqcn/mWuEfFKdjce8Tx8Y8sohu12J1FOpg0550APvGcToCWO36bTb2P6QVuhu2gqVwWGx1+jQ+W7rAR2vYH2IQA==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BY5PR11MB43377671040639C343027959C1550BY5PR11MB4337namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4337.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 73fc78a5-0d47-4a02-5588-08d84a3b00c6
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2020 03:40:54.8439 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 0WWgRS7cnshPhqgdw7FJ7NwlPqVjJVUAbziz2BeJ0KuGQ61GwVObaU/6ir0fa6roU471A7cI0kDoz/wYt8N3dA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3830
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.12, xch-rcd-002.cisco.com
X-Outbound-Node: alln-core-1.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/lsr/zAXs23ISlawvOYv7zTV3ehO4jc0>
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt
X-BeenThere: lsr@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Link State Routing Working Group <lsr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lsr>, <mailto:lsr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lsr/>
List-Post: <mailto:lsr@ietf.org>
List-Help: <mailto:lsr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lsr>, <mailto:lsr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2020 03:41:01 -0000

Tony –

Inline.

From: Tony Li <tony1athome@gmail.com> On Behalf Of tony.li@tony.li
Sent: Wednesday, August 26, 2020 5:40 PM
To: Les Ginsberg (ginsberg) <ginsberg@cisco.com>
Cc: lsr@ietf.org
Subject: Re: [Lsr] I-D Action: draft-ietf-lsr-isis-area-proxy-03.txt


Les,

As per the draft:

Area Proxy TLV is advertised by IERs in their L2 LSP.
Area Proxy TLV is NOT advertised in the Proxy LSP.
So how do the OERs become aware of the

“prefix and  SID that represents the entirety of the Inside Area to the Outside  Area”

???

I assume that they learn this because the Proxy LSP (at least) contains a Prefix Reachability TLV with the same prefix/SID that was advertised in the Area Proxy TLV.
Is this correct? If not, please correct me.


That’s correct.  If this isn’t crystal clear from the draft, please work with me to get it clarified to your satisfaction.



Also explain why it is necessary for something other than a prefix reachability advertisement to cause an entry to be created in forwarding for a prefix – and ONLY when received in an L2 LSP?
This is unprecedented.



It is unprecedented because there we are proposing something unprecedented.  I repeat: "There is no other mechanism whereby system A can advertise a prefix SID to a number of other systems and have them install receive/POP forwarding entries.”

It is NOT creating forwarding TO a prefix.  It’s reception.


[Les:] Any one of the IERs can be elected Area Leader, therefore all of them have to be configured with the Area Prefix and associated SID.
Perhaps you are allowing that each IER could choose a different Area Prefix/SID. Not sure why you would want to do that – but even if you did, the behavior of the winning prefix/SID is analogous to an anycast address.
The difference here is that the advertisement of the Prefix Reachability associated with the area prefix is within the Proxy LSP – which appears to OERs as if it was originated by all of the IERs i.e., the set of IERs appears as a single node to the OERs. Still, all IERs are aware of the winning prefix reachability advertisement and will do what is required in forwarding based on that content.


If I am right, you then have  multiple TLVs which advertise duplicate advertisements – even if not in the same LSP - which exposes you to the problems I mentioned.
My goal is to have one – and only one – advertisement which creates forwarding state.


Well, I’m sorry, but your goal is unachievable.  The Proxy LSP is only relevant outside of the area.  The Inner Node LSPs aren’t circulated outside of the area.

[Les:] Agreed. Nothing I have asserted suggests otherwise.


My second goal is not to invent a new SID type/advertisement when the object associated with it (a prefix) already has a defined SID type.


Which is why we’re using the Prefix SID.

[Les:] You are using the prefix-SID, but the advertisement is not associated with a prefix reachability  advertisement, yet you want nodes to install forwarding entries based on this advertisement. This is what seems inappropriate.
The only current case where a prefix-SID is advertised and is NOT associated with prefix reachability is in the Binding TLVs. This has two use cases:

  *   Advertising SIDs for prefixes associated with nodes which are NOT SR capable
  *   As an alternative to per prefix advertisement if the operator prefers to use a centralized SID assignment service

In both of these cases if a SID were to be advertised in prefix reachability TLV for the same prefix the SID in the prefix reachability advertisement would be preferred.
You don’t discuss this at all in the draft i.e., what happens if the SID in the prefix reachability advertisement for the Area Prefix differs from that advertised in the Area Proxy TLV. What I am pushing for is eliminating the need to do so by relying on the existing prefix SID advertisements and not introducing a new one in the Area Proxy TLV.

What I object to – and am concerned about – is that you seem to invent your version of SR for Area Proxy even when you use the same object (a prefix) that SR already supports.


Again, SR does not support the semantics that we require.


[Les:] The semantics you require are functionally equivalent to anycast behavior – which is supported already.

   Les


As you know, I was prepared to support a new type of SID when you actually were defining a new object type. The fact that you decided NOT to invent a new object type is fine with me – but please do not claim that you need a new SID type when you don’t.


I’m sorry that you still don’t understand.  We do need something different.

Tony