Re: [mpls] Last Call: <draft-ietf-mpls-in-udp-04.txt> (Encapsulating MPLS in UDP) to Proposed Standard

Curtis Villamizar <curtis@ipv6.occnc.com> Fri, 17 January 2014 18:16 UTC

Return-Path: <curtis@ipv6.occnc.com>
X-Original-To: mpls@ietfa.amsl.com
Delivered-To: mpls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EF7A1A1F64; Fri, 17 Jan 2014 10:16:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.44
X-Spam-Level:
X-Spam-Status: No, score=-2.44 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.538, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 59XwkD_sYlYW; Fri, 17 Jan 2014 10:16:26 -0800 (PST)
Received: from maildrop2.v6ds.occnc.com (maildrop2.v6ds.occnc.com [IPv6:2001:470:88e6:3::232]) by ietfa.amsl.com (Postfix) with ESMTP id 8D37F1A1F4A; Fri, 17 Jan 2014 10:16:26 -0800 (PST)
Received: from harbor3.ipv6.occnc.com (harbor3.v6ds.occnc.com [IPv6:2001:470:88e6:3::239]) (authenticated bits=128) by maildrop2.v6ds.occnc.com (8.14.7/8.14.7) with ESMTP id s0HIGBJa063724; Fri, 17 Jan 2014 13:16:12 -0500 (EST) (envelope-from curtis@ipv6.occnc.com)
Message-Id: <201401171816.s0HIGBJa063724@maildrop2.v6ds.occnc.com>
To: joel jaeggli <joelja@bogus.com>
From: Curtis Villamizar <curtis@ipv6.occnc.com>
In-reply-to: Your message of "Thu, 16 Jan 2014 23:38:12 -0800." <52D8DDE4.4020508@bogus.com>
Date: Fri, 17 Jan 2014 13:16:11 -0500
Cc: "mpls@ietf.org" <mpls@ietf.org>, "Eggert, Lars" <lars@netapp.com>, IETF discussion list <ietf@ietf.org>
Subject: Re: [mpls] Last Call: <draft-ietf-mpls-in-udp-04.txt> (Encapsulating MPLS in UDP) to Proposed Standard
X-BeenThere: mpls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: curtis@ipv6.occnc.com
List-Id: Multi-Protocol Label Switching WG <mpls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mpls>, <mailto:mpls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mpls/>
List-Post: <mailto:mpls@ietf.org>
List-Help: <mailto:mpls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mpls>, <mailto:mpls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Jan 2014 18:16:28 -0000

In message <52D8DDE4.4020508@bogus.com>
joel jaeggli writes:
 
> On 1/16/14, 9:19 AM, Eggert, Lars wrote:
> > Hi,
> > 
> > On 2014-1-16, at 18:06, joel jaeggli <joelja@bogus.com> wrote:
> >> These tunnels are stateless
> > 
> > yep. (But they don't have to be.)
>  
> They do in-fact have to be stateless with respect to the contents. They
> will no doubt be created in a same distributed forwarding  engines that
> currently do IP-MPLS encapsulation and L2-MPLS encapsulation. likewise
> their decapsulation will occur in such devices.
>  
> > Look at it the other way: if transport area folks would want to send
> > MPLS packets into the network in some problematic way, I'm sure the
> > routing and ops folks would not be amused.

They would never notice since MPLS packets are only passed around
internally and in some cases among peer providers.  If you did try to
do that and succeeded in getting even one packet through there are
some security holes to worry about.  Point is that you can't get MPLS
packets into provider networks unless something is very seriously
wrong and the already persistant attackers would have a picnic.

> Today congestion occurs on MPLS networks. intermediate hops that are
> congested have no choice but to drop packets.

And nothing bad happens because providers that allow any congestion to
occur by provisioning so that it can happen (usually occasionally or
very rarely) carry two kinds of traffic in that network.  One is IP in
MPLS or IP native.  The other is high margin VPN services and emulated
legacy L2 services that are given a different TC value.  What the
providers want to happen on light congestion happens.  Slight drop
gets IP (mostly TCP still to this date) to reduce load.  The high
paying VPN and emulated legacy L2 services are completely unaffected
(as the provider wants given they are paying a lot for that).

So I'm agreeing with you (Joel).

> > Lars

Curtis