Re: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec

Deepti Rathi <deeptir@juniper.net> Mon, 05 July 2021 02:21 UTC

Return-Path: <deeptir@juniper.net>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DADD3A161B; Sun, 4 Jul 2021 19:21:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.296
X-Spam-Level:
X-Spam-Status: No, score=-2.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.198, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=0aplBKXF; dkim=pass (1024-bit key) header.d=juniper.net header.b=i2z23GHv
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9DXeuGBeLDS; Sun, 4 Jul 2021 19:21:14 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AF823A16C2; Sun, 4 Jul 2021 19:21:14 -0700 (PDT)
Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 1652FNLQ029666; Sun, 4 Jul 2021 19:21:07 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=RJLTh/YlM65bWu5ao5Sp2k1tYeesXGNQ23bxJMwa5GA=; b=0aplBKXFIBzE9/wViJLqixE5BpJCkFpvhTxMjkDEWIbXNaONY9/e0J1+pFj9VGBefVwW 1lyAvYN71h8KSPxMqStNbXebmMibQ1InuTtKRotPk8kpDW6SjVPTX2UKwxm9x6sdz1xw PjP0KwT2q1iZD+Sm30rjjs9jvBk8mGe1GCx2o4j+zDjqhxS5spOYq3qsyKNqmhD7dW1T xqiiddDabcLFft/Pdo/1WN7ZGGV2dGNJcBz7SK37b984TNoi8HBoJjBPbz55ZDR3Nt4G vA1trw+1Ws3Po/DISwR/CfgU/C45inw1naHwYBaU7aITMk7JFSEP197rw2ZoOM98p8xT Zw==
Received: from nam12-dm6-obe.outbound.protection.outlook.com (mail-dm6nam12lp2169.outbound.protection.outlook.com [104.47.59.169]) by mx0b-00273201.pphosted.com with ESMTP id 39k7um915t-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 04 Jul 2021 19:21:06 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mYoQrmypCOL7eTwDbgUSbcgHY2mrGe3N9ala+sxJz6xxO73pj/t7gFdXrtKzsQyy18+n7JIShLi2sBKernBrDxBbmRAmIO29wPVmuPwytGnnL5PYn26I+8MkoUdjACDGkcAeVhr0DM2jGxBxRSmZg4eBqSnYoSe23/Tjaa+kG+a14yVLT9gpRQSqkBHIB4AwcOSRqBuZTTBWFSCIAbYrEKPZEwDMM/9U2LX+Ptuny1QlD49+ggoB2x86tcwrc4oPjEXC9Gj9+N9bFAt8LGeu6hhIpqNSdZyKxMUYf68A0II//5ndrWPEzdXbqKGTGMo6w6QluUDmhGBMaVmRvJQxdA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RJLTh/YlM65bWu5ao5Sp2k1tYeesXGNQ23bxJMwa5GA=; b=JULIYw2N/obt1ljOgYbRN3G9Nd5nm1s24qw/6y/+JBIV6CLZWBAn6cPNn1Shj5yW92SDgZOR1aEOrao15N4m+T8iz8LOf6fjfgvniS5yw+yof8q9H4e9zowMO0z89j9Vqza/TkwSeBA20M3MgSEUrv42EwXjRQpQ/urNud9qJBPRQe4N43grN6QDBoLh+NLsCaD7RxamOUXSrlxzLN3UTV2f8+xJS05QbgtERV3v9zAN0TovPZhrXUIfx5qj0HbZ3T75me97hkjg2NrM/dTaSLUhokoQJN6YJCeEC5l7nrLbY3TO8W+Ae7qB7/1vvKhgMeNp4A7gHHnywoK+1XgrGA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RJLTh/YlM65bWu5ao5Sp2k1tYeesXGNQ23bxJMwa5GA=; b=i2z23GHv8mtjbpe+MLmhvbV3cEOYZMbZFV5QAE6p99vpD4KtYN4kRZC7RmE7JvSigv30LWYR2PIu73IrdVUd1DbnSN7day+6hrtIPEHG4EN6GBDkpgYp+uBCphYW9p7SxyVVVfsH5xl4lypIvXcKkPFGU/fhCwkJoEwkvjYANRM=
Received: from MWHPR05MB3247.namprd05.prod.outlook.com (2603:10b6:300:b3::9) by CO1PR05MB8055.namprd05.prod.outlook.com (2603:10b6:303:f8::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4308.14; Mon, 5 Jul 2021 02:21:04 +0000
Received: from MWHPR05MB3247.namprd05.prod.outlook.com ([fe80::1c36:92c4:4589:3217]) by MWHPR05MB3247.namprd05.prod.outlook.com ([fe80::1c36:92c4:4589:3217%9]) with mapi id 15.20.4308.019; Mon, 5 Jul 2021 02:21:04 +0000
From: Deepti Rathi <deeptir@juniper.net>
To: Deepti Rathi <deeptir@juniper.net>, Italo Busi <Italo.Busi@huawei.com>
CC: "draft-rathi-mpls-egress-tlv-for-nil-fec@ietf.org" <draft-rathi-mpls-egress-tlv-for-nil-fec@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>, "mpls@ietf.org" <mpls@ietf.org>
Thread-Topic: MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec
Thread-Index: AddhI9L1yOOS4MxaRt24LmA/Qqe0iAAl+X+wAGq/JjAABL76EANyqPmg
Date: Mon, 05 Jul 2021 02:21:04 +0000
Message-ID: <MWHPR05MB3247BF6F1FF241F8BD013D8CAF1C9@MWHPR05MB3247.namprd05.prod.outlook.com>
References: <fa5f1e295e0946c5928613f49e24bddf@huawei.com> <SA1PR05MB8439C398FBD5807756038B8DAF0E9@SA1PR05MB8439.namprd05.prod.outlook.com> <CY4PR05MB357687AE89CB6A0842D1D315D50E9@CY4PR05MB3576.namprd05.prod.outlook.com> <SA1PR05MB843989D62791B28BFFF80B52AF0E9@SA1PR05MB8439.namprd05.prod.outlook.com>
In-Reply-To: <SA1PR05MB843989D62791B28BFFF80B52AF0E9@SA1PR05MB8439.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.6.100.41
dlp-reaction: no-action
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2021-07-05T02:21:01Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=f623eea7-b725-4ef7-9040-83772a96e254; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2
authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=juniper.net;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 053091dc-1ed5-4b1e-d4fb-08d93f5b8a3c
x-ms-traffictypediagnostic: CO1PR05MB8055:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <CO1PR05MB80553A34735241EDA0D26E38AF1C9@CO1PR05MB8055.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR05MB3247.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(136003)(366004)(346002)(39860400002)(396003)(33656002)(71200400001)(38100700002)(122000001)(7696005)(5660300002)(478600001)(54906003)(66946007)(316002)(110136005)(52536014)(4326008)(66446008)(64756008)(66556008)(66476007)(76116006)(2906002)(186003)(66574015)(8936002)(26005)(9686003)(55016002)(86362001)(8676002)(6506007)(83380400001)(55236004)(53546011); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 6ICm+2683ESeKEfr2VOniJK0abnWDFq89IHuj4X/wa/NVk+8wrbVU7gTGyWvNC2735Sdgold1WMUF3bw3rjcIazrW2aYJ5k1UQqbsFtNk2qG4IhAlPjcZUkV4q02tl6N3FZ+6Ospc/TnoOD9GiH23XpbISpLjiXPJ35mIj80y7hvaXmfRWLiUg6sGEwZXmLt6RVA3/yEuy0bvif8MHzsvMjmBT7RQ/lM9AAXZXyiowUW+V9+XM7oQZsXYgmpt9DMYmIcGz4ImC7umwwxT6mrHvgOwjxFZ/3YfifMZs/ZYF0/3SJ2hS9bJJe+g67I/3/2BNoTi66DqbtDhFGRVQWiOvhKth2vrIgqc7nsh1IHO4/X0sps0ZOIvqzmhKPmMi4UYsHg/QddYnCCmjArJdcgbS/Jh6wRYf213g+Pds6Im09o/eprxpFxLPqkYQnAfCgtWUPMWqq9JR9wRmYbCUFjv3Y53dtS8WNgOqS4+4WLcOzqMrr4MvFRWkPsA8uvQbAYL8HkvFjkG0BOfLPBk6YyG9yNa6GuGg3tooGlSl7xZ+oxXuIt0L5UpW1ryB+wLVb/em+amwz+UiUqT5UtL5s0NzC9rcI9mQ4PT8QI3LiDSSx8Tj4Cz51EWcP0kErSkPCrgzQxb2Tw7lX/jPhSQbeX64NKTcTcAYDizSoAm+mG6aP/Z87YUrTubI+WjMgk0M2cwBMNT8oTuBVpeXSFs5S31RoHGqy3x5XXYm6k0foVJwDAD6ELUl6TA46ssFEi3CENuy9cKcodyOrRhVDMrES1D3CnT0vQBLESGMH7tsZYUmcb4TyzzezEJyGgwaXdIYZHZTLggBhZG7Nt1/xuVJlEUIF4Tg8PWNXyEaPDhWVp9G3C/zZKkusjoWmKYDvhuAdM5KJ+g/OV4sAtNNojnjHW55Sq2DRnEdKpOMedrMKvfLi7MoCESPeFqWfKnoXqv3knxte1/Eqi6ou4amMVX1NR881Dkveglt7ltpa76HLvP08/GXsZTK4X5KDVb5rK3ZO2cZtxEJMilCnpG4YSbBV3iV+T2kvoioQgKlXBYjHEO7/fdKGD6ugwKDtTwgdtaDDSuz8H7XkqILE1Z3PXaDKWp2/phfjcTIT/BJQmZul79xJgRh1MZGyHAf9Qo7NMgtR15cwG6Kk/GIZ8wwscDPw182zI5i07di8kFQzaMBAu+jYf6QUkgXDZkjHCI77Bk3stFuZrD+3h2WKmzwCspU8846FpV8GACY6Z4Mp8OiMRHosq6ocebH1FNFM+MkOgXIWTIPYQVKazkTKm+C0d6af/v6htioqRPLGCRSYzDvSCpyMMcRf/hdsyVQM7OEPQkhqt
Content-Type: multipart/alternative; boundary="_000_MWHPR05MB3247BF6F1FF241F8BD013D8CAF1C9MWHPR05MB3247namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MWHPR05MB3247.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 053091dc-1ed5-4b1e-d4fb-08d93f5b8a3c
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jul 2021 02:21:04.2522 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: kanyn7RTK+BAp32BefvFkVl7hDl3L6hbLG5aoemj3wV7tvAYxcPZks6LIQEN+GlNPrdturv1coezDjWnlPmVfA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB8055
X-Proofpoint-ORIG-GUID: WswV6X699D9x2H5fhO5FDAVHPmnTlM5n
X-Proofpoint-GUID: WswV6X699D9x2H5fhO5FDAVHPmnTlM5n
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-07-04_17:2021-07-02, 2021-07-04 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 impostorscore=0 lowpriorityscore=0 phishscore=0 priorityscore=1501 mlxlogscore=999 mlxscore=0 malwarescore=0 spamscore=0 clxscore=1015 suspectscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2104190000 definitions=main-2107050012
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/71Rh1SHtypb3rFhRjGhWrUzenjc>
Subject: Re: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Jul 2021 02:21:21 -0000

Thanks Italo for the comments.

I have posted the new version of draft taking care of all the review comments.



Regards,

Deepti




Juniper Business Use Only
From: Deepti Rathi <deeptir@juniper.net>
Sent: Thursday, June 17, 2021 7:08 PM
To: Italo Busi <Italo.Busi@huawei.com>
Cc: draft-rathi-mpls-egress-tlv-for-nil-fec@ietf.org; mpls-chairs@ietf.org; mpls@ietf.org
Subject: Re: MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec


Hi Italo,
Please find my comments inline.
I will update draft for:

  1.  why "NIL FEC + EGRESS TLV" and not Generic IPV4/IPV6 FEC.
  2.  Backward compatibility.

Regards,
Deepti



Juniper Business Use Only
From: mpls <mpls-bounces@ietf.org<mailto:mpls-bounces@ietf.org>> On Behalf Of Italo Busi
Sent: Monday, June 14, 2021 7:26 PM
To: 'mpls@ietf.org' <mpls@ietf.org<mailto:mpls@ietf.org>>
Subject: [mpls] MPLS-RT review for draft-rathi-mpls-egress-tlv-for-nil-fec

[External Email. Be cautious of content]

Hi all,

I have been selected as one of the  MPLS-RT reviewers of draft-rathi-mpls-egress-tlv-for-nil-fec-04

>>IMHO, being able to use LSP Ping/Traceroute perform to validate only the data path and not the control plane state makes sense but I think that the draft requires more information about the problem that >>it is trying to address and why existing solutions are not suitable
[Deepti]:
NIL FEC is used to traverse the path without validation for cases where the FEC is not defined or routers are not upgraded to support the new FECs (like newer features, explicit-null, router-alert etc).
But it is a very powerful tool to check any combination of segments on any data path.
Since it does not carry any information to identify the intended egress/destination,

  *   Mis-forwarding of the packet is possible
  *   Not possible to figure out mis-configuration of label stack
But in any case it will always return success even though egress/destination is not the intended one which is not desired.
To overcome this and to provide minimal validation, EGRESS TLV is added in the packet. This will help to do egress/destination validation.
NIL FEC processing will be same as defined in RFC 8029. This draft is for addition of EGRESS TLV as extension to NIL FEC for path egress/destination validation.

>Let me try to clarify my confusion after having read the draft

>Unless I am missing something, section 4.4.1 of RFC8029 already provides support for checking only the data path and not the control plane state:

>  If the outermost FEC of the Target FEC stack is the Nil FEC, then the
> node MUST skip the Target FEC validation completely.

>The draft mention some challenges with the current definition, but it seems describing only one potential issue:

>   ... When router in the label-stack path
>   receives MPLS ping/traceroute packets, there is no definite way to
>   decide on whether its egress or transit since Nil FEC does not carry
>   any information.

>However, I am not sure about this issue: looking at the example in the draft, my understanding is that R7 will reply with code 3 while, in traceroute, the intermediate nodes will reply with code 8.

>Reading the procedure in section 4.2, I am wondering whether the real intention is to be able to validate the prefix X in R7, rather than the SR path toward R7.

>However, in this case, it is not clear why using a FEC for the prefix X instead of the Nil FEC is not suitable.

[Deepti]: The real intention is to reach the correct egress/destination node.
The details of generic FEC and validation procedures are not very detailed in the RFC 8029.
The use-case mostly specifies inter-AS VPNs as the motivation.

Certain aspects of Segment Routing such as anycast SIDs required clear guideline on how the validation procedure should work.
Also Generic FEC may not be widely supported and if transit routers are not upgraded to support validation of generic FEC, traceroute may fail.
So instead of adding such clarifications to generic FEC, we went with new EGRESS TLV in Nil FEC.
Its an optional TLV so the procedures will work fine even if transit routers are not upgraded.
While we clearly specify the processing of egress tlv so that all SR cases are well specified.

Since explicit path can be created using node-sid, adj-sid, binding-sid, anycast-sids etc. EGRESS TLV prefix will be derived from path egress/destination and not based on labels used in the path to reach the destination.

I will update introduction section of draft with this comparison.

>>I also think that section 5 requires more details about how backward compatibility is achieved. What is the behavior of a node that does not support this solution when it receives the EGRESS TLV?

[Deepti]:
Backward compatibility on egress-node:
On egress/destination, it will ignore EGRESS TLV and use current NIL-FEC procedure with return code 3 but egress validation will not be done (same as RFC 8029). So we wont know for sure if packet has reached the correct path egress.

Backward compatibility on transit-node:
If the transit node doesn't support, it will use current NIL-FEC procedure and send return code of 8.

I will add section in draft for backward compatibility.

Italo