Re: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec

Deepti Rathi <deeptir@juniper.net> Thu, 17 June 2021 13:37 UTC

Return-Path: <deeptir@juniper.net>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B62923A1FFD; Thu, 17 Jun 2021 06:37:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.496
X-Spam-Level:
X-Spam-Status: No, score=-3.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.698, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=Ce293LFU; dkim=pass (1024-bit key) header.d=juniper.net header.b=Q5I8PlFB
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hqa62iF4CAJz; Thu, 17 Jun 2021 06:37:51 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C5583A1FFA; Thu, 17 Jun 2021 06:37:50 -0700 (PDT)
Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 15HDbb9u007980; Thu, 17 Jun 2021 06:37:39 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=wxfRMdDyCYEZGIYb/IIjnloP+XyVRKezssyQI/BMmMk=; b=Ce293LFUFKUR+yFZY0P7a8T61TXWPphs9hqrwO3x8bZ71cKKbN409eXeP2phXE3wrmUw 3toLugoXfqe59a+BHkCg3eyqcCtvUV0FJcE8QwEi34a27BqjkojBqrQRIrvemKoG39TO M7RaKjowLj4h/+mRwDaJy5Alg/o43cROA4cva/Po3czjuffm/2/fiouapdP8tlXU/iwq 3uXDHdNjS7giHT2i74tD1zCjb8KwSO5O0gprqfuAitlCyjnPo1rb2RWPM7Z7+VodOjki SyAo5TDuUG3bboIwtlbqyr8TspOM7pfv5SIyULbDXtm1WkzhQKsdLWl70U4SWFsoqzKM oA==
Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2173.outbound.protection.outlook.com [104.47.58.173]) by mx0b-00273201.pphosted.com with ESMTP id 397uuphnka-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 17 Jun 2021 06:37:39 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YlhF2iObApeOkDr2PBif85hBTrEJnasaCrWLS8ZCnt1WcMxB7XqNAF7jZrj68YF8hBXelLV0UYsabbEU3bePSDNc1ZkHmG83NIUtefpnIEJev7pCrjSf30cgvZye0GXseHyQiqYP687a9/XTL8uTgG0c743NWS8IP0BRdSbzj+3D2qPiONOZUuFfySHcpN9KPusHNU4TnNrKOO6+g+CQb6LJKJHdQy7Oi5KOQWr2qcbV7rr8YlwEsDgmPpQo32c/lzMC39V+yDDXMOwRlzZoLKTelHyJTU/UILU1htArAmXpxRyD34RvFZHBRha9P3ygOJIHXlD6r3ioHkm+6B5IWg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wxfRMdDyCYEZGIYb/IIjnloP+XyVRKezssyQI/BMmMk=; b=J5YLG9/B/kCvD2DC0ES7G1O52SQ7P9j/ncbWDPnyOZSqvZ4wxccaGMlaYDCxt19GZR7V/UcRuMXLe9o4fg4g7/oTWn4U9Cou8SoMPMGTqrcDpTy+QS/aPkXfH3RZE2nzeNFPIKpfetOZiA9GUhYM4OH3aUWBEMMJjEc4RcCqCm6nJ/P43Ry7UL85jUJrRHSVh1+iCLqRnJSNgdT3zRIJ1TyFFNunjTG2c6qfg/TjC/52zFNx66O9ASiyekZFU4xHnMLEWHbxKO6hoNRQXf48JWie+R4T2GTF+qWTQPU4+vL/FhtbL6berM9/NQtA+4zBr0vMKYg6//LBccrQtCrcEg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wxfRMdDyCYEZGIYb/IIjnloP+XyVRKezssyQI/BMmMk=; b=Q5I8PlFBq1K0syYw+XNahN7aMGVuQ8Y4WK/s0snTjQ8seUXyLZPg5Nmn/XfgA7jH8KPuCAUQB0I1ye+CEziabtlbaSWffsfXouASycRYzz20yTlqT/KYKOUzh229NXompGz9C0Fzbr5NwpF0xHQB7mSGoPFEjbw7E3/c2Ufxi/I=
Received: from SA1PR05MB8439.namprd05.prod.outlook.com (2603:10b6:806:1d6::8) by SN6PR05MB4480.namprd05.prod.outlook.com (2603:10b6:805:36::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.14; Thu, 17 Jun 2021 13:37:36 +0000
Received: from SA1PR05MB8439.namprd05.prod.outlook.com ([fe80::d5bc:8dd1:6351:66b4]) by SA1PR05MB8439.namprd05.prod.outlook.com ([fe80::d5bc:8dd1:6351:66b4%5]) with mapi id 15.20.4242.014; Thu, 17 Jun 2021 13:37:36 +0000
From: Deepti Rathi <deeptir@juniper.net>
To: Italo Busi <Italo.Busi@huawei.com>
CC: "draft-rathi-mpls-egress-tlv-for-nil-fec@ietf.org" <draft-rathi-mpls-egress-tlv-for-nil-fec@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, "mpls@ietf.org" <mpls@ietf.org>
Thread-Topic: MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec
Thread-Index: AddhI9L1yOOS4MxaRt24LmA/Qqe0iAAl+X+wAGq/JjAABL76EA==
Date: Thu, 17 Jun 2021 13:37:36 +0000
Message-ID: <SA1PR05MB843989D62791B28BFFF80B52AF0E9@SA1PR05MB8439.namprd05.prod.outlook.com>
References: <fa5f1e295e0946c5928613f49e24bddf@huawei.com> <SA1PR05MB8439C398FBD5807756038B8DAF0E9@SA1PR05MB8439.namprd05.prod.outlook.com> <CY4PR05MB357687AE89CB6A0842D1D315D50E9@CY4PR05MB3576.namprd05.prod.outlook.com>
In-Reply-To: <CY4PR05MB357687AE89CB6A0842D1D315D50E9@CY4PR05MB3576.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.6.100.41
dlp-reaction: no-action
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2021-06-17T13:37:32Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=f623eea7-b725-4ef7-9040-83772a96e254; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2
authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [116.197.184.14]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4e9e7fe1-90ab-4956-8093-08d931951173
x-ms-traffictypediagnostic: SN6PR05MB4480:
x-microsoft-antispam-prvs: <SN6PR05MB4480CE73BB07B6E0AD28C38CAF0E9@SN6PR05MB4480.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA1PR05MB8439.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(366004)(39860400002)(396003)(136003)(346002)(6916009)(2906002)(86362001)(33656002)(8676002)(52536014)(5660300002)(66574015)(478600001)(4326008)(54906003)(9326002)(71200400001)(38100700002)(26005)(8936002)(66446008)(186003)(316002)(53546011)(66476007)(66946007)(7696005)(9686003)(6506007)(76116006)(55016002)(122000001)(64756008)(66556008)(83380400001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?yqxTSiCGkR7PIX5Y5yGfMug1nNxayrX+RXRNeV432GzWoX8kw/9zoGVNaZ66?= =?us-ascii?Q?2NlnnAl8+SXz3VMIjTkpaVGUafnbaxDCTEGe3pQfZBIpOL7geVdwxVwp0vhc?= =?us-ascii?Q?wHUZB/dPPMiPyRkSZdl4RtsUtVOX1bj46TdvyW0nk5awaGs0UvVo/P3pXFmi?= =?us-ascii?Q?v6vpe2iP+uQAKsq9elgIH0ZV2CSn/XPS1KWzsTPWm/tzpLcsymIm6Lv3pcVN?= =?us-ascii?Q?SN310zfN2Amkv44QN/WzkHcJq6qozICpFBvjN+ou2NRsPxRgJPWNH4MqaKud?= =?us-ascii?Q?faWT+C6o9t5TTQSgNzCe7/Z0SXxWE+P8GTwR4aZk11O91AGdz9jtf+56Y7Op?= =?us-ascii?Q?f3fApzen68AN5aFUXCiJ7NwWnp8D+hXikGVPIZsCWcQfApwdRP2fTgPPqvuv?= =?us-ascii?Q?kZQYf7RhmSf5jyOtIu6C4r4iobSv6ho5+RO82hggNY283seLt9GNJx+AbpS6?= =?us-ascii?Q?A7SUJ8rL1kTdO2UZgxA2MRMJyayWJM1lCn/D5Ru9ixTP11sacAzc1HMDNWoA?= =?us-ascii?Q?U8Lgt+atClpMxUQ6B+K+G3CO5w270wDvgMALbL7S47S53wBG78021+rQBLlZ?= =?us-ascii?Q?jjh3Qcqvub5kuQY+qfrhnDCj1uOBPtdCHG0rrANHQPY2yxav86p+5BlKtwZg?= =?us-ascii?Q?1OySXW8CeveMUbbRsGBLKWKa67W8Up3NPW/m8GBQ2TgSgCainR3cgpSNHXEI?= =?us-ascii?Q?CWxxacK4dj3y3zZtTzfK+SHhcSbhq15puNSpGA8Gtn3E8HOgALyRhx4fRHZ3?= =?us-ascii?Q?BfGy6YDgVF0xd+NUuwv9s9yEnthLxEyXAEKzOVT0roGqqAMTOADUDtfAF0xa?= =?us-ascii?Q?q6TKt9yVniA3udVspelxXWbB1DJx9knaHCPKdt8ymC7Bsl/s/oQsSVWWH7z+?= =?us-ascii?Q?3r8DuvaVz+789SxfUymCspfXJsplFLOUR/MtjZ4KPS870ljQd4ZEznBkztsE?= =?us-ascii?Q?zIiEUp88EDmLANg5QrFEZn0M7owJF4bx0CPH2R+OWmLGZ58SmGTE1lG8WNd2?= =?us-ascii?Q?TgLEY/Etct5qzV4/DKz1YNlnX7Kk1jvsJgHkNZK3alqQ2C65U6EU7yCDymbc?= =?us-ascii?Q?2M+dZ1ciDmiB413RD7Z7rswk+jJTNLHH7zh24H63RZ2YLW19N89NbHfRUyfN?= =?us-ascii?Q?6AWMG7roclCagThEodOV1wzE5XwY3wUX+BVm5r4F8C84evflJz5cfKK2PZ41?= =?us-ascii?Q?Z6iZykkyDi2qmZe1qw8yto8linjX/XPljk4o48UNG69fjUXr5ZfnXRHuxfQc?= =?us-ascii?Q?3YsY/MEzyFtENeXxJ9IKJqyV4MiDXWieJdKdCpNKkow8f8tGaZyus/uIrABA?= =?us-ascii?Q?vk5W7ojVc00GOomjbtsS4t6x?=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_SA1PR05MB843989D62791B28BFFF80B52AF0E9SA1PR05MB8439namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR05MB8439.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4e9e7fe1-90ab-4956-8093-08d931951173
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2021 13:37:36.1360 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 652pdM5fYT3qMxPrqOsepWuEfFOVLCo3+DP9/QiXM1eay0Dsi6ItwXL2RUSlQKkZtpo/EUlNt4WK5vmCSwZM7A==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB4480
X-Proofpoint-ORIG-GUID: uLXHdp3C67dX5AHaAow9dKUmJx9UGdwp
X-Proofpoint-GUID: uLXHdp3C67dX5AHaAow9dKUmJx9UGdwp
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-06-17_10:2021-06-15, 2021-06-17 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 clxscore=1011 spamscore=0 phishscore=0 mlxscore=0 lowpriorityscore=0 mlxlogscore=999 bulkscore=0 adultscore=0 suspectscore=0 impostorscore=0 priorityscore=1501 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2104190000 definitions=main-2106170087
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/2Ix9aUk3D-2rmrWuryX4Xwpy_MA>
Subject: Re: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jun 2021 13:37:59 -0000

Hi Italo,
Please find my comments inline.
I will update draft for:

  1.  why "NIL FEC + EGRESS TLV" and not Generic IPV4/IPV6 FEC.
  2.  Backward compatibility.

Regards,
Deepti



Juniper Business Use Only
From: mpls <mpls-bounces@ietf.org<mailto:mpls-bounces@ietf.org>> On Behalf Of Italo Busi
Sent: Monday, June 14, 2021 7:26 PM
To: 'mpls@ietf.org' <mpls@ietf.org<mailto:mpls@ietf.org>>
Subject: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec

[External Email. Be cautious of content]

Hi all,

I have been selected as one of the  MPLS-RT reviewers of draft-rathi-mpls-egress-tlv-for-nil-fec-04

>>IMHO, being able to use LSP Ping/Traceroute perform to validate only the data path and not the control plane state makes sense but I think that the draft requires more information about the problem that >>it is trying to address and why existing solutions are not suitable
[Deepti]:
NIL FEC is used to traverse the path without validation for cases where the FEC is not defined or routers are not upgraded to support the new FECs (like newer features, explicit-null, router-alert etc).
But it is a very powerful tool to check any combination of segments on any data path.
Since it does not carry any information to identify the intended egress/destination,

  *   Mis-forwarding of the packet is possible
  *   Not possible to figure out mis-configuration of label stack
But in any case it will always return success even though egress/destination is not the intended one which is not desired.
To overcome this and to provide minimal validation, EGRESS TLV is added in the packet. This will help to do egress/destination validation.
NIL FEC processing will be same as defined in RFC 8029. This draft is for addition of EGRESS TLV as extension to NIL FEC for path egress/destination validation.

>Let me try to clarify my confusion after having read the draft

>Unless I am missing something, section 4.4.1 of RFC8029 already provides support for checking only the data path and not the control plane state:

>  If the outermost FEC of the Target FEC stack is the Nil FEC, then the
> node MUST skip the Target FEC validation completely.

>The draft mention some challenges with the current definition, but it seems describing only one potential issue:

>   ... When router in the label-stack path
>   receives MPLS ping/traceroute packets, there is no definite way to
>   decide on whether its egress or transit since Nil FEC does not carry
>   any information.

>However, I am not sure about this issue: looking at the example in the draft, my understanding is that R7 will reply with code 3 while, in traceroute, the intermediate nodes will reply with code 8.

>Reading the procedure in section 4.2, I am wondering whether the real intention is to be able to validate the prefix X in R7, rather than the SR path toward R7.

>However, in this case, it is not clear why using a FEC for the prefix X instead of the Nil FEC is not suitable.

[Deepti]: The real intention is to reach the correct egress/destination node.
The details of generic FEC and validation procedures are not very detailed in the RFC 8029.
The use-case mostly specifies inter-AS VPNs as the motivation.

Certain aspects of Segment Routing such as anycast SIDs required clear guideline on how the validation procedure should work.
Also Generic FEC may not be widely supported and if transit routers are not upgraded to support validation of generic FEC, traceroute may fail.
So instead of adding such clarifications to generic FEC, we went with new EGRESS TLV in Nil FEC.
Its an optional TLV so the procedures will work fine even if transit routers are not upgraded.
While we clearly specify the processing of egress tlv so that all SR cases are well specified.

Since explicit path can be created using node-sid, adj-sid, binding-sid, anycast-sids etc. EGRESS TLV prefix will be derived from path egress/destination and not based on labels used in the path to reach the destination.

I will update introduction section of draft with this comparison.

>>I also think that section 5 requires more details about how backward compatibility is achieved. What is the behavior of a node that does not support this solution when it receives the EGRESS TLV?

[Deepti]:
Backward compatibility on egress-node:
On egress/destination, it will ignore EGRESS TLV and use current NIL-FEC procedure with return code 3 but egress validation will not be done (same as RFC 8029). So we wont know for sure if packet has reached the correct path egress.

Backward compatibility on transit-node:
If the transit node doesn't support, it will use current NIL-FEC procedure and send return code of 8.

I will add section in draft for backward compatibility.

Italo