[mpls] Re: Potential MNA technical issue

Greg Mirsky <gregimirsky@gmail.com> Fri, 21 February 2025 17:04 UTC

Return-Path: <gregimirsky@gmail.com>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5ABDC14F74A for <mpls@ietfa.amsl.com>; Fri, 21 Feb 2025 09:04:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Msmib6cn3qh for <mpls@ietfa.amsl.com>; Fri, 21 Feb 2025 09:04:35 -0800 (PST)
Received: from mail-pj1-x1035.google.com (mail-pj1-x1035.google.com [IPv6:2607:f8b0:4864:20::1035]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E101FC14F6BA for <mpls@ietf.org>; Fri, 21 Feb 2025 09:04:35 -0800 (PST)
Received: by mail-pj1-x1035.google.com with SMTP id 98e67ed59e1d1-2fcff77ff9bso122692a91.0 for <mpls@ietf.org>; Fri, 21 Feb 2025 09:04:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1740157475; x=1740762275; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=jL/lP/hKs4SxdyDxbWz3a9PshnBs9vX5ZluIu157ZTU=; b=UKb8FvyrpWBL0ssXVsyFhB8EgDTABiULttC6i+Mn10eDR2tU0v4PtXBxtwSw50w3qH dF7oft1YBAAAmcQWAJ2VB0N54Rtl/C+MEUJrEu9tTjTfdfODpNc9bqqU5+99pX9dpO88 DUgDp29F2Tjqod4Dt9mpu80mYHkf2P5GK7OBo+curhUE+Iyvt8nXCA3os/aqzj60EUYE XDuT0PnLr5FTrJboL88RRgGm7/D20mrajnrr3HeF09Vdu4eSNwKwld+jOqJmRDQ9CBW5 nDtaW3jzEzRf69JyX+I1jJzzh2uGLQwv2NvFjXFx+0uCwIdbCHHFGWDRZWm3UZOqcHQ6 KUgg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1740157475; x=1740762275; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=jL/lP/hKs4SxdyDxbWz3a9PshnBs9vX5ZluIu157ZTU=; b=hNSFJ6m5HWZ/s1WUVo27Ohr4iSgNHF3yppKglCBzcCJmzt9vwzoq5+uT0QvHtDMYVt nBj6ZRx/psrxL/Ne9ei5fLK2yhyQQEND54hyNF0enJxyo/47T144ZTC/HpUwFgblrBk4 ic6ZrxkHuX+qimB77bhfkNFdEqUQhGuoPCvTQb3tOIbX5zVTq5zdetMKv/NnhODgLU4r a2MAKpuV3WDDBTtPO9HSKwn3EdK4Bgi5Bq4xxhtXikXffGW/kcFKNgTdbkkg+QsngbHb MMfTaVJugSyTR+HcjBn5QTaOT+NgO9St4AzhiQR3V4xg5zHbK1YZXobXj/sL2FmfsVKb v4NA==
X-Forwarded-Encrypted: i=1; AJvYcCXG8vfzhOdhNZQksQAZVGBkSKGVQW0oDsL817g/zH/i5R1WqpidIrxPwho6CN8JJyk96HIu@ietf.org
X-Gm-Message-State: AOJu0YyxevyGZDsEZq8LmSzVTHQrQrvE/wdyR8GZVeBCV2cckp1GSsuk ZdIyzibirA+maMcKrb+OgKvUUPSwyYvdO+Ekf72LVPa5BCI1m+VyxUbWx4Zs+bDZgSWWLpwx/1b 5zUo8/KlQiegggatWQ6CnaQX0Jfc=
X-Gm-Gg: ASbGncteR/bZHX10FbgsS7xMk/6+r8tVM2DASKeu1RS+auXJspVFlzf/rOY+gSMfNWw X9S2WzDQIK8OQSNgWQXTgHB1fg0e0PqJtHE7ueye9FgU6y51VGp9BUMGQUYNMnSW9sEqOLovVCt JY0ZOkDZTO
X-Google-Smtp-Source: AGHT+IFXqbuSoLoL874QkyeCAWH0KG57mrIjewmRTAy1ueRzNyEjQUJ3EhRAmFxJaloMml1aAz2lX103i36S0RRcWNs=
X-Received: by 2002:a17:90b:17cd:b0:2f9:cf97:56a6 with SMTP id 98e67ed59e1d1-2fce78a8a95mr7782449a91.14.1740157475174; Fri, 21 Feb 2025 09:04:35 -0800 (PST)
MIME-Version: 1.0
References: <026801db83da$30a3ec40$91ebc4c0$@olddog.co.uk> <9D3BA859-A778-4DE6-9839-401ACA913861@tony.li> <027901db83e1$104f6300$30ee2900$@olddog.co.uk> <db7fc5cb1f4544f6a03014274351e515@huawei.com>
In-Reply-To: <db7fc5cb1f4544f6a03014274351e515@huawei.com>
From: Greg Mirsky <gregimirsky@gmail.com>
Date: Fri, 21 Feb 2025 09:04:24 -0800
X-Gm-Features: AWEUYZnW5ABcuruvwmysvIvqGVaw_TKHkZ9Ooc1xMrSORGShoxQBzJqdZxRqJiw
Message-ID: <CA+RyBmXLtNPe5hfTswXtnEF7sk8YifZ7GpMv8+QH5yz+hqJEgA@mail.gmail.com>
To: "Dongjie (Jimmy)" <jie.dong=40huawei.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002942d1062ea9fc06"
Message-ID-Hash: QDUL7UTHG6HKUY7F6YDB5PE74Z7UOS75
X-Message-ID-Hash: QDUL7UTHG6HKUY7F6YDB5PE74Z7UOS75
X-MailFrom: gregimirsky@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-mpls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: mpls <mpls@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [mpls] Re: Potential MNA technical issue
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/A8zMl_JVx9abbqn2nx_bH3PknwQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Owner: <mailto:mpls-owner@ietf.org>
List-Post: <mailto:mpls@ietf.org>
List-Subscribe: <mailto:mpls-join@ietf.org>
List-Unsubscribe: <mailto:mpls-leave@ietf.org>

Hi Jie,
AFAICS, PSD is an optional mechanism to realize MNA functions. Furthermore,
it was sufficiently demonstrated that the proposed P-flag in MNA Header is
not sufficient to signal the presence of PSD in the packet. Considering
that, I believe that a note to optional use of PSD in
draft-ietf-mpls-mna-hdr and that detailed discussion of the mechanism to
signal its presence and format of a PSD are outside of the scope of
draft-ietf-mpls-mna-hdr would suffice.

Regards,
Greg

On Thu, Feb 20, 2025 at 10:49 PM Dongjie (Jimmy) <jie.dong=
40huawei.com@dmarc.ietf.org> wrote:

> Hi Adrian and Tony,
>
> Since PSD has been acknowledged as needed for some types of MNA data and
> use cases, I'd agree with Adrian on making this explicit in section 5.2 of
> the MNA header draft.
>
> Another open issue is where should the PSD indication mechanism be
> specified. To my understanding PSD indication is part of the general MNA
> solution and is orthogonal to the encoding of Post-stack data, thus it is
> more suitable to be covered in the MNA header draft.
>
> During the interim this week we didn't get chance to discuss the possible
> PSD indication mechanisms. This may be considered as a remaining open
> technical issue for further discussion.
>
> Best regards,
> Jie
>
> > -----Original Message-----
> > From: Adrian Farrel <adrian@olddog.co.uk>
> > Sent: Friday, February 21, 2025 5:48 AM
> > To: 'Tony Li' <tony.li@tony.li>
> > Cc: 'mpls' <mpls@ietf.org>
> > Subject: [mpls] Re: Potential MNA technical issue
> >
> > No, I personally don't have a problem with that solution.
> > Others may have, I don't know.
> >
> > The text could, perhaps, be a little clearer in 5.2 to direct
> applications to use
> > PSD. Yeah, I know one could possibly work out that having a lot of LSEs
> is not
> > very wise (especially as we have a limit to the number of LSEs we can
> support
> > because of the size of the NASL). Just a few words of advice: nothing
> heavy.
> >
> > And the fixes for points 1 and 2.
> >
> > A
> >
> > -----Original Message-----
> > From: Tony Li <tony1athome@gmail.com> On Behalf Of Tony Li
> > Sent: 20 February 2025 21:27
> > To: Adrian Farrel <adrian@olddog.co.uk>
> > Cc: mpls <mpls@ietf.org>
> > Subject: Re: [mpls] Potential MNA technical issue
> >
> > [WG chair hat: off]
> >
> > Hi Adrian,
> >
> > I recall that we discussed this before and we reached the conclusion that
> > actions that needed more variable data should go the post-stack route.
> Do you
> > have a problem with that?
> >
> > Regards,
> > Tony
> >
> >
> > > On Feb 20, 2025, at 12:58 PM, Adrian Farrel - adrian at olddog.co.uk
> > <mailforwards@cloudmails.net> wrote:
> > >
> > > Hi all,
> > >
> > > I thought the virtual interim was useful in airing some opinions.
> > >
> > > I exchanged a few emails with Jie to try to better understand his
> > > concerns, and then Stewart and I sat down for a couple of hours to
> > > work through all of the possibilities.
> > >
> > > This is mainly thinking aloud.
> > >
> > > A big question surrounds how the NAS might be parsed by a non-MNA node.
> > >
> > > The first part of the question is "What happens if a non-MNA node
> > > encounters the MNA label?" Well, it shouldn't! The MNA label should
> > > only rise to the top of stack at nodes known to be MNA capable. But,
> > > if it does, the MNA label is an SPL, and processing unknown SPLs at
> > > the top of stack is well defined.
> > >
> > > The next part of this question is "What if part of the NSA looks like
> > > an SPL?" The most concerning case we have at the moment is if it looks
> > > like an ELI to a non-MNA node that searches ahead for an entropy label.
> > > This question is covered in the draft in two places:
> > > 6.1 tells us that Opcode 0 is not to be used. That means that LSE
> > > formats B and C can never be mistaken for bSPLs because they don't
> > > start with eight 0 bits.
> > > 4.4 tells us that format D LSEs must always start with a 1 so they can
> > > never be mistaken for bSPLs.
> > > So all good here.
> > >
> > > The last part of the question is "Suppose a (legacy) node does ECMP
> > > hashing by reading the first n labels on the stack?"
> > > Since it doesn't know about MNA, it will find Opcodes and ISD and
> > > treat them as labels.
> > > This is not a problem in itself, but if the ISD can vary from packet
> > > to packet in a flow, it can lead to packets taking different paths.
> > > This question is covered in section 5.2 which tells us to be careful
> > > which ISD bits are allowed to vary.
> > >
> > > But it was in re-reading 5.2 that Stewart and I had some worries.
> > >
> > > 1. The text says:
> > >       if a network action encodes data
> > >       that will change during packet forwarding
> > >    While this may be interesting for OAM, what is more interesting is
> > > when the
> > >    data is different on different packets in the same flow. So
> > > probably change
> > >    this to:
> > >       if a network action encodes data
> > >       that may be different on different packets in the same flow
> > >
> > > 2. s/Indicators those need/Indicators that need/
> > >
> > > 3. There are not many bits that are allowed to contain variable data.
> > >     This is a bit grim. We reckon that:
> > >     - No bits in a type B LSE can be variable
> > >     - Only 7 bits in a type C LSE can be variable
> > >     - Just 11 bits in a type D LSE can be variable
> > >     If you wanted to carry something like a time stamp (RFC 8877) you
> > > need
> > > 32 bits
> > >     or even 64 bits. That would need 4 or 7 LSEs (BDDD or
> > BDDDDDD/BCDDDDD)
> > >     instead of 2 or 3 (BD or BDD/BCD).
> > >     There are some possible mitigations:
> > >     - Use an entropy label. This allows any implementation that
> > > supports entropy
> > >        labels to not hash. But:
> > >         * it costs two additional LSEs
> > >         * it doesn't help with implementations that don't support
> > > entropy labels
> > >     - Stop hashing when you reach an SPL.
> > >       This advice would work for new implementations, but it doesn't
> > > help with
> > >       existing implementations which will hash their way through into
> > > the NAS.
> > >     - Follow the draft and restrict where variable data is placed.
> > >         * Use lots of LSEs. Not a very good answer.
> > >         * Don't send much variable data. A bit of an unfortunate
> > > limitation.
> > >         * Put variable data post-stack.
> > >     - Decide that we don't care about legacy nodes. This is not ideal,
> > > but an
> > >       operator might know about the nodes in their network. If this is
> the
> > >       choice, then the document would need to be clear.
> > >     - Choose a behaviour based on knowledge of the nodes in the network
> > >       and the (potential) path of the LSP. This approach would require
> > >       capabilities to be advertised (perhaps alongside the RLD ).
> > >
> > > Cheers,
> > > Adrian
> > >
> > > _______________________________________________
> > > mpls mailing list -- mpls@ietf.org
> > > To unsubscribe send an email to mpls-leave@ietf.org
> >
> > _______________________________________________
> > mpls mailing list -- mpls@ietf.org
> > To unsubscribe send an email to mpls-leave@ietf.org
> _______________________________________________
> mpls mailing list -- mpls@ietf.org
> To unsubscribe send an email to mpls-leave@ietf.org
>