Re: [MBONED] mboned/pim: "SSM (in)capable" IGMP snooping switches - and PIM-WG zeroconf work...

Leonard Giuliano <lenny@juniper.net> Fri, 10 November 2023 22:08 UTC

Return-Path: <lenny@juniper.net>
X-Original-To: mboned@ietfa.amsl.com
Delivered-To: mboned@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A1AFC18E525; Fri, 10 Nov 2023 14:08:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.105
X-Spam-Level:
X-Spam-Status: No, score=-2.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b="SA/S+0KE"; dkim=pass (1024-bit key) header.d=juniper.net header.b="BbWDudzS"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SX1ip9KJMGQQ; Fri, 10 Nov 2023 14:08:22 -0800 (PST)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 819A5C18E522; Fri, 10 Nov 2023 14:08:22 -0800 (PST)
Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 3AAKHMYA009690; Fri, 10 Nov 2023 14:08:11 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=date : from : to : cc : subject : in-reply-to : message-id : references : mime-version : content-type; s=PPS1017; bh=gtGNr1uhtGylqOabu0x+6zpSfa/FUYnAzTM157Bg0K4=; b=SA/S+0KEL16B5mk8mdCUjTjSRAGrzyaZCJ3dcmHchMlhM+5WUmUclWccbBpJ/iFxi4BF 5n1Ov64peQbDeMO2TDO/GcKF3q9rx9Lnfqvj5hNmK7mhSTmII1aJRRTI3271Ri9tfLLg m/rNoXQmdzGBvJB26uvIkyDruFrqGVkTnC49tORq0ljnveC31PBZH1/6lVCGOoDZyuoL EbfmO2JxTZrLQxXM4vUABRD97/N5JMYDiQ2YA2g8cksPJ40BpK5u2QezIOE5W/mn3GLd v1iKXgxl4xsIFaJDvksDJNT9zj5bJXu50K4B2SwbjxwOOAapfcEc0Ytl1mzojT815/EY 5w==
Received: from cy4pr02cu007.outbound.protection.outlook.com (mail-westcentralusazlp17011013.outbound.protection.outlook.com [40.93.6.13]) by mx0b-00273201.pphosted.com (PPS) with ESMTPS id 3u9hgfj5eh-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 10 Nov 2023 14:08:11 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YqMz+p1YgZtqJVCvvGBnnyetgQhQtJJ2KwN0jtKpCJbHI/ai8MLysMHf8fHBGy3rGunsQzHbzC735wUusjP4qH1q63nCehZWvZKFlJBbfzZlRS4/pppDgqR1SqBa7bHkqc6G5xWFFSK5XpqdPt7pt2uMvOU3O4l2gIFP3Y2PiFPFunngFOzUL90/cMI4elXWh99JTM4sl7W5YeQAMjKViKdX6OL1JCJQqc7CHsFLS46b3CyMYwfg299TxxlAAP0AhLEGRwJS5coBAQiASOIcUNYc4lnvkzDGwYy8fI2Sz4jjhwPV9YUKkG8M7jneES1Jfi8YB3wHRUru2Vc97C66Jw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gtGNr1uhtGylqOabu0x+6zpSfa/FUYnAzTM157Bg0K4=; b=klv6pXoEkD/tGybWLTNTxlw0Za7DMInT0qE8Ujy3Sop20TJtGTibeVLmNwoq7dXzDP/5jZ2yHUzVVE65dutdKTkJ2HJG2GuYtGdEaGY7OlsQcxizusAF/72u+46BYKhqV5aW5wfFEYiyU2N+DYWZgTqFsTEixR2vNi361+C0wgDHBmmquyeYfuvs+xIgzXzIqCUnzgNiRYxuRP2d+X1jLZWnmJehbEWsVZWk/2S2pw8N6qeH0Yl/XUAeecQsDbW16LEhxIXmMY6ixitX7+rxrvk7s6pxKgNznBpNV05cyOz8EG/8X/BgzYfYzMXBFXIzTAmP6/BSgsNYIfBYHSlHMg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip is 66.129.242.15) smtp.rcpttodomain=ietf.org smtp.mailfrom=juniper.net; dmarc=fail (p=reject sp=reject pct=100) action=oreject header.from=juniper.net; dkim=none (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gtGNr1uhtGylqOabu0x+6zpSfa/FUYnAzTM157Bg0K4=; b=BbWDudzSi4tOHVL/avi+3MY5D+Wwd2kXAUEvBxS6e204jayNQUPh5ZL7SGk4Oqhm08Ya2VVfEr6sM2W0EzJqwQIpw8icfXgl6VGEphuBFgQ+w0KMZdogDlmC7ji5tpzeQGCBr0BsQ79/BYrbBFMAIpexCld7KjzNdZMMNEtUew0=
Received: from BN9P220CA0028.NAMP220.PROD.OUTLOOK.COM (2603:10b6:408:13e::33) by MN0PR05MB9007.namprd05.prod.outlook.com (2603:10b6:208:3cd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6954.29; Fri, 10 Nov 2023 22:08:08 +0000
Received: from BN8NAM12FT102.eop-nam12.prod.protection.outlook.com (2603:10b6:408:13e:cafe::d0) by BN9P220CA0028.outlook.office365.com (2603:10b6:408:13e::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6977.19 via Frontend Transport; Fri, 10 Nov 2023 22:08:08 +0000
X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 66.129.242.15) smtp.mailfrom=juniper.net; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=juniper.net;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.242.15 as permitted sender)
Received: from p-exchfe-eqx-02.jnpr.net (66.129.242.15) by BN8NAM12FT102.mail.protection.outlook.com (10.13.182.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7002.12 via Frontend Transport; Fri, 10 Nov 2023 22:08:08 +0000
Received: from p-exchbe-eqx-02.jnpr.net (10.104.9.15) by p-exchfe-eqx-02.jnpr.net (10.104.9.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.39; Fri, 10 Nov 2023 16:08:08 -0600
Received: from p-exchbe-eqx-01.jnpr.net (10.104.9.14) by p-exchbe-eqx-02.jnpr.net (10.104.9.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.39; Fri, 10 Nov 2023 16:08:07 -0600
Received: from p-mailhub01.juniper.net (10.104.20.6) by p-exchbe-eqx-01.jnpr.net (10.104.9.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.39 via Frontend Transport; Fri, 10 Nov 2023 16:08:07 -0600
Received: from eng-mail03.juniper.net (eng-mail03.juniper.net [10.108.22.11]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id 3AAM87q1004721; Fri, 10 Nov 2023 14:08:07 -0800 (envelope-from lenny@juniper.net)
Received: from eng-mail03.juniper.net (localhost [127.0.0.1]) by eng-mail03.juniper.net (8.16.1/8.14.9) with ESMTPS id 3AAM7NrK090969 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO); Fri, 10 Nov 2023 14:07:23 -0800 (PST) (envelope-from lenny@juniper.net)
Received: from localhost (lenny@localhost) by eng-mail03.juniper.net (8.16.1/8.16.1/Submit) with ESMTP id 3AAM7I3l090966; Fri, 10 Nov 2023 14:07:18 -0800 (PST) (envelope-from lenny@juniper.net)
X-Authentication-Warning: eng-mail03.juniper.net: lenny owned process doing -bs
Date: Fri, 10 Nov 2023 14:07:18 -0800
From: Leonard Giuliano <lenny@juniper.net>
To: Toerless Eckert <tte@cs.fau.de>
CC: mboned@ietf.org, pim@ietf.org
In-Reply-To: <ZUyG-t5rl_X1oxLH@faui48e.informatik.uni-erlangen.de>
Message-ID: <c0d6dc4f-71d0-f9ac-cd67-90dd93e0e9af@juniper.net>
References: <ZUyG-t5rl_X1oxLH@faui48e.informatik.uni-erlangen.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM12FT102:EE_|MN0PR05MB9007:EE_
X-MS-Office365-Filtering-Correlation-Id: ddbc0659-34b4-4d3a-1363-08dbe23985b3
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:66.129.242.15; CTRY:US; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:p-exchfe-eqx-02.jnpr.net; PTR:InfoDomainNonexistent; CAT:NONE; SFS:(13230031)(4636009)(136003)(39860400002)(346002)(396003)(376002)(230922051799003)(451199024)(82310400011)(186009)(64100799003)(1800799009)(36840700001)(40470700004)(46966006)(966005)(2616005)(36860700001)(478600001)(336012)(83380400001)(26005)(2906002)(41300700001)(5660300002)(70586007)(70206006)(4326008)(316002)(8676002)(47076005)(8936002)(54906003)(6916009)(86362001)(36756003)(356005)(82740400003)(81166007)(31696002)(426003)(40480700001)(40460700003)(31686004)(36900700001); DIR:OUT; SFP:1102;
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Nov 2023 22:08:08.5926 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: ddbc0659-34b4-4d3a-1363-08dbe23985b3
X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.242.15]; Helo=[p-exchfe-eqx-02.jnpr.net]
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM12FT102.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR05MB9007
X-Proofpoint-GUID: saGmluW-NdbhnorcY3x-H7KlsIy2rxC1
X-Proofpoint-ORIG-GUID: saGmluW-NdbhnorcY3x-H7KlsIy2rxC1
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.987,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2023-11-10_20,2023-11-09_01,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 mlxscore=0 malwarescore=0 mlxlogscore=999 lowpriorityscore=0 adultscore=0 clxscore=1011 spamscore=0 impostorscore=0 bulkscore=0 phishscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2311060000 definitions=main-2311100185
Archived-At: <https://mailarchive.ietf.org/arch/msg/mboned/wNc4txzpJB424FF-ki8QuXlhFNk>
Subject: Re: [MBONED] mboned/pim: "SSM (in)capable" IGMP snooping switches - and PIM-WG zeroconf work...
X-BeenThere: mboned@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Mail List for the Mboned Working Group <mboned.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mboned>, <mailto:mboned-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mboned/>
List-Post: <mailto:mboned@ietf.org>
List-Help: <mailto:mboned-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mboned>, <mailto:mboned-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Nov 2023 22:08:26 -0000

Hmm, this does sound curious, since, generally speaking, SSM is basically 
a subset of ASM functionality.  So I'd also be curious about what 
specifically is meant by switches that do not support SSM.

-Lenny

On Thu, 9 Nov 2023, Toerless Eckert wrote:

| 
| Expanding to mboned, because there may be more operational experience.
| 
| draft-ietf-pim-zeroconf-mcast-addr-alloc-ps refers to L2 switches
| that do not support SSM - without defining what this means. And
| i do not think we have such a definition.
| 
| One possible interpretation is that such L2 switches do not support
| IGMPv3/MLDv2 at all, but just IGMPv2/MLDv1, but of course this would
| equally impact ASM, so i hope this is not what is being thought of.
| 
| The second possible interpretation is that the switch will do
| something wrong, such as ignoring IGMPv3/MLDv2 INCLUDE({S},G)
| membership reports while not ignoring IGMPv3/MLDv2 EXCLUDE({},G) membership
| reports.
| 
| I am not aware of such low-end L2 switches limitations, primarily because
| several IPTV providers have been running IGMPv3 with SSM for
| several years (intohomes withlow-end switches) and that has lead for
| such possible gaps in IGMPv3/MLDv2 snooping support to be fixed quite
| broadly in the industry. So if you are aware of switches that do have
| this problem, i would love to hear about the models. But i would not call
| them non-SSM capable, but non-IGMPv3/MLDv2 capable, because
| failure to support IGMPv3/MLD2 INCLUDE memberships is not specific
| to SSM.
| 
| The third possible interpretation is that the switch will
| establish per-port MAC(G) filtering for INCLUDE({S},G) membership
| reports in the same way as establishing MAC(G) filtering for
| EXCLUDE({},G) membership reports. I would hope this is what is
| being meant with "non-SSM capable" (but disagree on the term).
| 
| This is what i know from all but very high-end
| L2 switches. It is also what is recommended in RFC4541
| ("It is encouraged that snooping switches at least recognize and
|   process IGMPv3 Join Reports, even if this processing is limited to
|   the behavior for IGMPv2 Joins...")
| 
| So, i would recommend to not use non-defined terms such as
| "non SSM capable", but clearly specify what the switches are
| expected to do that are addressed by the work.
| 
| I am having this concern, because the PIM WG drafts written to
| address the problems described in this mcast-addr-alloc-ps
| do ignore (draft-ietf-pim-ipv6-zeroconf-assignment) or
| explicitly reject to consider SSM (draft-ietf-pim-updt-ipv6-dyn-mcast-addr-grp-id-01)
| because of this "non SSM capable L2 switch" denomination.
| 
| FOr example, i explicitly asked for draft-ietf-pim-updt-ipv6-dyn-mcast-addr-grp-id-01
| to support ASM and SSM address ranges and was rejected with that argument.
| I think it would be very sad if PIM-WG would go forward explicitly
| ignoring SSM in new work without good cause - which i think/hope does
| not exist here.
| 
| In other words: zeroconf G address allocation free of MAC(G)
| collisions in support of low-end L2 switches is as applicable to
| SSM address range as it is applicable to ASM address range, and
| IMHO really needs to be explicitly supported by these two zeroconf
| address allocation documents.
| 
| Thanks!
|     Toerless
| 
| _______________________________________________
| MBONED mailing list
| MBONED@ietf.org
| https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/mboned__;!!NEt6yMaO-gk!F6JI10CTeVp4GRbFhxior8YUX7KHFJ1WQ0dafDz8V1kBdsebBL5HprM0p3W5xAx-n9zfeQ-lJ_o$
|