Re: [mpls] Working Group Last Call on draft-ietf-mpls-summary-frr-rsvpte

Alexander Okonnikov <alexander.okonnikov@gmail.com> Thu, 16 May 2019 11:43 UTC

Return-Path: <alexander.okonnikov@gmail.com>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C9CC1200DE; Thu, 16 May 2019 04:43:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.009
X-Spam-Level:
X-Spam-Status: No, score=-0.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06TNkE5owAYj; Thu, 16 May 2019 04:43:51 -0700 (PDT)
Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68C7012002E; Thu, 16 May 2019 04:43:50 -0700 (PDT)
Received: by mail-wm1-x32a.google.com with SMTP id f204so3304992wme.0; Thu, 16 May 2019 04:43:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=3nj8iYgq4l00eNJRuE5srQJSFg0i8JDFYTUa3npC3Ts=; b=VH2vJFY/phdj+/KsWCQHiNIQCMjvvmFuKic2r9X/eC8jKyZscIpQRoHb0NZIk0AmJV 1SHS3hAgC/Iwj1eisi5ahjKjRoMT7NIF26T+d2uaIq+g+1AP3wZWtN8g9BBbN2Kp9A/G x+jvgReNsczb85aketJoCqZzUPKLWBGuNRXr5zaMezsS5MNTnfz1x2n4eJwo6TqODvso E+gy7veD+619ZvjjghNjPhNODq22cTMub8Dh3LZJp2EQdAYWfJ00ApbJykl+/mng4+FN 7hQIJX33aiDGUYsT7jMkWDtXAulm6Dg3UJv07T+MDK1aV1PLyfBi7z0mGWw7M0G9o0hn qIsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=3nj8iYgq4l00eNJRuE5srQJSFg0i8JDFYTUa3npC3Ts=; b=W6EaSOZi+60fx2N6k2KMErScTQDyrfkCj27ODTAASjw+5tYUBC456NA7uEuTG88MuE HXpRswFYzifktrbgjU4bdg3+4Yp4znjFqgvW9fbnMW7/0PcocV9FN1NKRjzu0jcXy6SH Va/PqYG+s9TPf9aZtsmlB5NuggjorzYEDMpudeVDiyThnyJMoplbChf9S1YHx93jAJDB sgQwM0IJf0eiXmuWbKCAlmXSZvYDjCiLc+KLSr8qN72Rw/HBLW5jJn5nPJwg+524p3Vw n0jDqi4yVYd/XPRiSaktJyKvhK+WmEMeSePP+tpGLinos1CuIc6ZISgqiU9YGKWspY8a rP0A==
X-Gm-Message-State: APjAAAVHVWp8md0fWM6P/iNS1HLhgt6Uzfd8nL0OjpfL07Rcs/fgDn6v /MSPMvp+yNPbWFYXuIwOr0Q=
X-Google-Smtp-Source: APXvYqwXlV5AerA5KdDACbdNaa01/8Q9dHd8u0Dr8n5N9/5MWHRFeoVPYizr2rP6byE6ro4oWlJE2g==
X-Received: by 2002:a1c:ca0b:: with SMTP id a11mr27702712wmg.52.1558007028653; Thu, 16 May 2019 04:43:48 -0700 (PDT)
Received: from [10.161.106.54] ([212.65.85.100]) by smtp.gmail.com with ESMTPSA id j9sm5957456wrr.90.2019.05.16.04.43.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 16 May 2019 04:43:47 -0700 (PDT)
From: Alexander Okonnikov <alexander.okonnikov@gmail.com>
Message-Id: <50F9124B-0C50-4BAC-AE9C-B714B13B92A7@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_50D98545-9932-47DA-9048-F50E4620B9F1"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Date: Thu, 16 May 2019 14:43:44 +0300
In-Reply-To: <0A6682E1-9712-47DA-9ED5-AD8808C536FA@juniper.net>
Cc: "Mike Taillon (mtaillon)" <mtaillon@cisco.com>, Markus Jork <mjork=40128technology.com@dmarc.ietf.org>, "mpls@ietf.org" <mpls@ietf.org>, "draft-ietf-mpls-summary-frr-rsvpte@ietf.org" <draft-ietf-mpls-summary-frr-rsvpte@ietf.org>, "mpls-chairs@ietf.org" <mpls-chairs@ietf.org>
To: Tarek Saad <tsaad@juniper.net>
References: <LEJPR01MB0377540FAEC1EE9448740E78983A0@LEJPR01MB0377.DEUPRD01.PROD.OUTLOOK.DE> <56FE0A66-AD1F-4572-BABF-2B0605B40B06@cisco.com> <CAKe-zUoumWmOrk6EeW7RM1+L7N=vU_6f9k0f+gTbeFmR5gFc7g@mail.gmail.com> <1BFCFD3C-0D3B-425D-AEE4-91ED20F91A93@gmail.com> <D1E9A036-A86B-4C63-BED2-7ADFFA0F6A64@cisco.com> <381C70E4-6A12-4E27-8ABB-D71491F97F87@gmail.com> <C35BDE94-BA4E-42B7-A78B-CC35CAD50748@cisco.com> <FCAB153D-273D-400C-9960-3AD0A7B2C4B8@gmail.com> <0A6682E1-9712-47DA-9ED5-AD8808C536FA@juniper.net>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/mpls/D3KgeYTrZqL70AiSHZFAcs3dtM8>
Subject: Re: [mpls] Working Group Last Call on draft-ietf-mpls-summary-frr-rsvpte
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 May 2019 11:43:56 -0000

Hi Tarek,

Thank you for answer. Yes, I'm fine with proposed update.

I have some comments regarding choosing address for RSVP_HOP and SENDER_TEMPLATE on PLR and MP.

1) The draft doesn't say that PLR should choose the same Sender address for SENDER_TEMPLATE of backup LSPs as chosen one for corresponding bypass tunnel. Hence it could be that two will be different. It will cause to use different sender address for SENDER_TEMPLATE by PLR and MP.

2) The draft doesn't say that address in RSVP_HOP for backup LSPs and address in SENDER_TEMPLATE for corresponding bypass tunnel should be different. Hence, it could be that addresses in RSVP_HOP of SFRR-Active and in SENDER_TEMPLATE of bypass tunnel are the same. In case when PLR is head-end, it could pose problem for MP in part of choosing sender address for SENDER_TEMPLATE of backup LSP. It could be presumed that address for RSVP_HOP in SFRR-Active is taken from egress transit interface for originated bypass tunnel, and address for SENDER_TEMPLATE of bypass tunnel is loopback address of PLR, and thus they will be different. But in case of unnumbered interface on PLR, that is used as egress by bypass tunnel, election of address for RSVP_HOP is not so straightforward. It could be well possible that for RSVP_HOP of backup LSPs the same loopback address of PLR will be chosen as for SENDER_TEMPLATE of bypass tunnel. Also, RFC 4090 doesn't prescribe how PLR chooses address for RSVP_HOP.

3) The draft says that all protected LSPs, that share the same egress link and are protected by the same bypass tunnel, are assigned to the same bypass group. It is not a problem, if mentioned above inconsitencies will be addressed. Otherwise, there could be problem, because, based on current text, all backup LSPs of the same group should share SENDER_TEMPLATE (i.e. Sender Address in SENDER_TEMPLATE). Though on MP there will be two groups of backup LSPs in the same bypass group: that take address for SENDER_TEMPLATE from SENDER_TEMPLATE of bypass tunnel (transit protected LSP), and that take address for SENDER_TEMPLATE from RSVP_HOP of SFRR-Active (for protected LSPs originated on PLR). For the latter SENDER_TEMPLATE on PLR and MP will be different.

4) The draft says that RSVP_HOP and SENDER_TEMPLATE for backup LSPs of the same bypass group should be the same. I guess that it should say that Sender Address in SENDER_TEMPLATE should be common, rather than SENDER_TEMPLATE itself. SENDER_TEMPLATE will be different for each backup LSP due to different LSP_IDs.

Hence, I would like to see details of choosing addresses for RSVP_HOP and SENDER_TEMPLATE of backup LSPs to be cleaned. Also, I think that it would be better to signal Sender Address for backup LSPs in SFRR-Active explicitly, rather than derive it by MP indirectly from SENDER_TEMPLATE of bypass tunnel.

Thank you.

> 14 мая 2019 г., в 18:16, Tarek Saad <tsaad@juniper.net> написал(а):
> 
> Hi Alexander,
>  
> Thanks for your suggestions and comments. We discussed this further amongst authors. We think the PLR has to do a proactive check of the MTU on the bypass tunnel for proper FRR to work correctly at all times.
> We will introduce an addition in section 3.3.1 of the I-D to describe this:
>  
> “When using procedures defined in this document, the PLR MUST ensure bypass tunnel assignment can satisfy the protected LSP MTU requirements post FRR. This is to avoid any packets from getting dropped due to exceeding the MTU size of the bypass tunnel after FRR.”
>  
> Let us know if this addresses your concerns.
>  
> Regards,
> Tarek
>  
> From: Alexander Okonnikov <alexander.okonnikov@gmail.com <mailto:alexander.okonnikov@gmail.com>>
> Date: Tuesday, May 14, 2019 at 8:21 AM
> To: "Mike Taillon (mtaillon)" <mtaillon@cisco.com <mailto:mtaillon@cisco.com>>
> Cc: Markus Jork <mjork=40128technology.com@dmarc.ietf.org <mailto:mjork=40128technology.com@dmarc.ietf.org>>, "mpls@ietf.org <mailto:mpls@ietf.org>" <mpls@ietf.org <mailto:mpls@ietf.org>>, "draft-ietf-mpls-summary-frr-rsvpte@ietf.org <mailto:draft-ietf-mpls-summary-frr-rsvpte@ietf.org>" <draft-ietf-mpls-summary-frr-rsvpte@ietf.org <mailto:draft-ietf-mpls-summary-frr-rsvpte@ietf.org>>, "mpls-chairs@ietf.org <mailto:mpls-chairs@ietf.org>" <mpls-chairs@ietf.org <mailto:mpls-chairs@ietf.org>>
> Subject: Re: [mpls] Working Group Last Call on draft-ietf-mpls-summary-frr-rsvpte
> Resent-From: <alias-bounces@ietf.org <mailto:alias-bounces@ietf.org>>
> Resent-To: <mtaillon@cisco.com <mailto:mtaillon@cisco.com>>, Tarek Saad <tsaad@juniper.net <mailto:tsaad@juniper.net>>, Rakesh Gandhi <rgandhi@cisco.com <mailto:rgandhi@cisco.com>>, <adeshmukh@juniper.net <mailto:adeshmukh@juniper.net>>, <mjork@128technology.com <mailto:mjork@128technology.com>>, <vbeeram@juniper.net <mailto:vbeeram@juniper.net>>
> Resent-Date: Tuesday, May 14, 2019 at 8:21 AM
>  
> Hi Mike,
>  
> If we don't talk about gap in procedure of Path messages merging by MP, then I don't see other gaps in RFC 4090. But I see that gap with MTU adjusting appears with introduction of Summary FRR.
>  
> Current behavior is follow:
>  
> 1) PLR sends backup LSP Path to MP with actual MTU in ADSPEC;
> 2) MP sends backup LSP Resv to PLR with actual MTU in FLOWSPEC (derived from ADSPEC);
> 3) PLR merges FLOWSPECs of protected and backup Resv messages (according to RFC 2210) and sends Resv upstream with actual MTU in FLOWSPEC.
>  
> New behavior with Summary FRR:
>  
> 1) PLR sends SFRR-Active Path to MP;
> 2) MP does summary refresh for backup LSPs;
> 3) PLR sends Resv with unchanged MTU of protected LSP upstream, as before failure. This is because FLOWSPEC for backup LSP has not been updated, and resulting FLOWSPEC thus has not been updated.
>  
> I cannot agree that head-end not need to be aware about path MTU changes. If head-end is irrespective to actual path MTU, it could cause blackholing of packets that are larger than actual path MTU. Also, I'm not aware about implementations of PLR that take into account MTU in SENDER_TSPEC of protected LSPs and choose bypass tunnels accordingly. My knowledge that many of them agnostic to this.
>  
> Thank you.
> 
> 
>> 13 мая 2019 г., в 20:38, Mike Taillon (mtaillon) <mtaillon@cisco.com <mailto:mtaillon@cisco.com>> написал(а):
>>  
>> Hi Alexander 
>>  
>> By gap, I mean its not mentioned/covered at all.
>>  
>> To give alternate perspective, I disagree with trying to merge state of primary and backup LSP.
>> And would think it unncessary for either the MP or the headend to be aware, or make any MTU changes post FRR.
>>  
>> I do agree with your last statement where PLR should ensure the MTU of backup can accomdate the primary LSP MTU (plus any encap added to transport over the backup LSP).
>> And surely most implementations are already doing this, or FRR wouldn’t be that successful...
>>  
>> Do you not agree this issue/gap is out of scope of (ie. not specific to ) this document ? 
>>  
>> -mike
>>  
>> 
>> 
>>> On May 13, 2019, at 11:31 AM, Alexander Okonnikov <alexander.okonnikov@gmail.com <mailto:alexander.okonnikov@gmail.com>> wrote:
>>>  
>>> Hi Mike,
>>>  
>>> Do you mean the gap in merging of Path messages by MP in part of choosing ADSPEC of protected LSP rather than merging ADSPECs (choosing minimal MTU, particularly)? Oh, agree. Though if we would assume that MP did perform merging of ADSPEC (and probably other objects where applicable), there would be problem with signaling backup LSP MTU to MP after failure.
>>>  
>>> I agree that guaranting enough MTU size on all links in the network is good practice, but in reality it not always could be provided, or could be provided with significant penalty on manageability.
>>>  
>>> Per my understanding, reliable solution would be for head-end:
>>>  
>>> 1) to specify minimum LSP MTU as a constraint (like resource affinities, BW, etc.) for CSPF and take link MTUs from TEDB into consideration, and
>>>  
>>> 2) to signal to downstream LSRs minimum LSP MTU (by virtue of SENDER_TSPEC, like BW), such that PLRs would be able to make decision about availability of bypass tunnels, which can accomodate requested MTU.
>>>  
>>> Thank you!
>>> 
>>> 
>>>> 9 мая 2019 г., в 15:28, Mike Taillon (mtaillon) <mtaillon@cisco.com <mailto:mtaillon@cisco.com>> написал(а):
>>>>  
>>>>  
>>>> Hi Alexander, 
>>>>  
>>>> I beleive MTU handling post FRR is not covered in base RFC4090 and is therefore an existing gap.
>>>> It kinda defeats the purpose if headend needs to adjust MTU after FRR to prevent drops… and would presume most deployments assume that backup MTU can accomandate MTU of primary LSP (plus any added MP labels). 
>>>>  
>>>> Issue deserves discussion, but think its out of scope from this document.
>>>>  
>>>>  
>>>> -mike
>>>> 
>>>> 
>>>>> On May 7, 2019, at 4:54 PM, Alexander Okonnikov <alexander.okonnikov@gmail.com <mailto:alexander.okonnikov@gmail.com>> wrote:
>>>>>  
>>>>> Hi authors,
>>>>>  
>>>>> As far as Summary FRR LSPs are not being signaled via Path messages over bypass tunnel after failure, information on head-ends about actual path MTU of protected LSPs can be corrupted. For example, path MTU of protected LSP is 1500 bytes (provided that ADSPEC is used), and path MTU of bypass tunnel is, for example, 1500 bytes. As far as Path messages for protected LSPs are not being sent over bypass tunnel, MP will use ADSPEC received in Path messages of those protected LSPs previoulsy (before they have been rerouted onto bypass tunnel), i.e. 1500 bytes in place of 1496 bytes. To avoid this problem PLR would have to signal path MTU of its bypass tunnel in B-SFRR-Active object (alternatively, MP could inherit this value from ADSPEC of PSB of the bypass tunnel), and 2) MP would have to choose minimal of MTU values from ADSPEC objects while merging Summary FRR protected LSP. But, even in this case MP will have to generate trigger Path messages (with updated ADSPEC) for protected LSPs and then, after receiving Resv messages with updated FLOWSPEC, send them to PLR. I.e. summary refresh in MP->PLR direction with high probability will be inapplicable, due to trigger messages.
>>>>>  
>>>>> Thanks.
>>>>> 
>>>>> 
>>>>>> 7 мая 2019 г., в 23:46, Markus Jork <mjork=40128technology.com@dmarc.ietf.org <mailto:mjork=40128technology.com@dmarc.ietf.org>> написал(а):
>>>>>>  
>>>>>> As a co-author,  I believe this document is ready for publication.
>>>>>> -Markus
>>>>>>  
>>>>>>  
>>>>>>>  
>>>>>>>> On Apr 30, 2019, at 4:33 AM, N.Leymann@telekom.de <mailto:N.Leymann@telekom.de> wrote:
>>>>>>>>  
>>>>>>>> Working Group,
>>>>>>>>  
>>>>>>>> This mail initiates the two weeks working group last call on draft-ietf-mpls-summary-frr-rsvpte which is considered mature and ready for a final working group review.
>>>>>>>>  
>>>>>>>> Please read this document if you haven't read the most recent version yet, and send your comments to the mpls wg mailing list (mpls@ietf.org <mailto:mpls@ietf.org>), not later than 17th of May.
>>>>>>>>  
>>>>>>>> There is one IPR disclosure against draft-ietf-mpls-summary-frr-rsvpte
>>>>>>>>  
>>>>>>>> This working group last call ends May 17th, 2019 (there is at least in some countries a public holiday this week, therefore the call is a bit longer than usual).
>>>>>>>>  
>>>>>>>> Best regards
>>>>>>>>  
>>>>>>>> Nic
>>>>>>> 
>>>>>>>  
>>>>>> 
>>>>>> _______________________________________________
>>>>>> mpls mailing list
>>>>>> mpls@ietf.org <mailto:mpls@ietf.org>
>>>>>> https://www.ietf.org/mailman/listinfo/mpls <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_mpls&d=DwMFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=Kd6NW5ctLWr7GB646PVmMByvi8wQxPILpKhHvGQeRHY&m=8ugk0fj6GyOtsYCkrvM6x1jpwt7T7bGkBhQ9Le-SI6k&s=0zgSQxWhO9k94N9On89so_wtqNQ0mXruYDy6Dka6-Lc&e=>