Re: [Pals] [Int-area] L2TP sequencing: Commonly disabled for IP data? Or always?

"Andrew G. Malis" <agmalis@gmail.com> Thu, 10 June 2021 11:49 UTC

Return-Path: <agmalis@gmail.com>
X-Original-To: pals@ietfa.amsl.com
Delivered-To: pals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 814A43A3F50; Thu, 10 Jun 2021 04:49:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4on8wT7D56Wy; Thu, 10 Jun 2021 04:49:39 -0700 (PDT)
Received: from mail-qv1-xf2a.google.com (mail-qv1-xf2a.google.com [IPv6:2607:f8b0:4864:20::f2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5E8F3A3F4D; Thu, 10 Jun 2021 04:49:38 -0700 (PDT)
Received: by mail-qv1-xf2a.google.com with SMTP id u13so14501449qvt.7; Thu, 10 Jun 2021 04:49:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xNXfcWPqr4Ai1wHPNe7TqF+hAz+XQW3dq16UhXIvnFI=; b=XydSEbOQH3Q5s88AHXrV0S+xsXfsQuE7q/1rgKydTYTNmnOUioXN/iUv4GYBnc6epI hraBlGpXqjcBCMbvedKvjZ1fDdq5wnUYgoGsUjY5+E1GiL3wJRKUpAg7/ldm3UbIFRYh yT/uvcWeGjBh6qQXPIdnrPkMKkB5ezMGGDGvFASEbReBxf8b3wSj15XrVCsZcYkV+G+t YElwIZxyPcT4ZFWWv7m0+KPOCQBX/kQRbCP/lGLJHIYB6Ju9dot28CVq4KLVG+szx2EZ 27wi+7nmjPdkUDP0VD7hr/tiGXBLXdn4oDzen+tfOBorPrwbrd9N5oCK14OzOov+mIQX LUIg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xNXfcWPqr4Ai1wHPNe7TqF+hAz+XQW3dq16UhXIvnFI=; b=qeA6UzVWcvBEo6njovjXvg7NCsiSY9BjZgXRwPi54hlDNRZ/iBV815DKnZVkQDljVq DCSknQxyoaonZDYAGHoLMy+RR0aAa++H56SYO7uHJhzgt7sRliX7DjO8OmzmqrvekBeJ v0wyEmeWUfk1N/jR5VvEnWero/wZvizLlXCeZqU7sDLKmP7e90uiGXRaJt525UGkV9FT X5lQoZbNwJTn87wq5pXKSLlHkg4u7razUoGzITm6RvsL84tp07gbq0OaGw6gvll74S4/ IidsHZhVrtha9MTM9G1uQYvfhu1e3FCjIsmz3lBAqvF0cwcv+mge4onpTfLhRsqj90bT mo/A==
X-Gm-Message-State: AOAM53394MO7qlfnLfbmKxg3ebflUhhQCUU4f5D2MzH9kVL3DOU9lKfI s/mNhIFKLyEXzQJpOeMrNaZ1sgR6E2dCf/Mf1C07wRSjYr8=
X-Google-Smtp-Source: ABdhPJwAf7LcYV2jDubHdsY1Yq+2iMrpDQvW1+j65gaVld765ZcvE7ngDu9JRbJO0p9DJ9KFlE0+3ZX0rKLsMBv6+9c=
X-Received: by 2002:a05:6214:80a:: with SMTP id df10mr4632946qvb.8.1623325777156; Thu, 10 Jun 2021 04:49:37 -0700 (PDT)
MIME-Version: 1.0
References: <5c60cc79-1552-3f52-641f-e508780227ae@bobbriscoe.net> <YLuFLq7k9akVVHWS@clarinet.employees.org> <CAA=duU2o9YKF5Sfu6VTr5+bUr1JVgaGZh=X4+BQRbMu63FqVsg@mail.gmail.com> <5E252602-F635-4DF0-8FAE-C80CF88293D9@gmail.com> <aea7a88e-cca8-b3d5-ecf4-d162471e971d@joelhalpern.com> <58F4227E-4F55-4618-9A56-E067BD31FA95@gmail.com> <190d8248-1b0a-15ad-88a1-fe6b551de640@joelhalpern.com> <50ADB293-A7EC-4574-9430-43E68073A6D1@townsley.net>
In-Reply-To: <50ADB293-A7EC-4574-9430-43E68073A6D1@townsley.net>
From: "Andrew G. Malis" <agmalis@gmail.com>
Date: Thu, 10 Jun 2021 07:49:21 -0400
Message-ID: <CAA=duU2g4L2ckiOjhcv8vOB1Ng6o8SnbQofVtU0JNk738eGzmg@mail.gmail.com>
To: Mark Townsley <mark@townsley.net>
Cc: Carlos Pignataro <cpignata@cisco.com>, intarea IETF list <int-area@ietf.org>, pals@ietf.org, Bob Briscoe <ietf@bobbriscoe.net>
Content-Type: multipart/alternative; boundary="0000000000004d5e0805c467fcf2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/pals/4HLqe-3UbNP8zZJo6nh7k288f2o>
Subject: Re: [Pals] [Int-area] L2TP sequencing: Commonly disabled for IP data? Or always?
X-BeenThere: pals@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Pseudowire And LDP-enabled Services dicussion list." <pals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pals>, <mailto:pals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pals/>
List-Post: <mailto:pals@ietf.org>
List-Help: <mailto:pals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pals>, <mailto:pals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jun 2021 11:49:44 -0000

(resending with cc: list trimmed to pass the too many recipients filter)
Mark,

The original question was, how many (if any) of these L2TPv2 and v3 use
cases use sequencing, especially when carrying IP?

Cheers,
Andy

On Wed, Jun 9, 2021 at 6:32 PM Mark Townsley <mark@townsley.net> wrote:

> Hi folks,
>
> In addition to the DSL arena, L2TP is still in use with host-based VPN
> clients as it is embedded in Apple, Android, and Windows based operating
> systems (new and old). Despite most VPN solutions preferring their own
> client software that must be installed on hosts to operate, there are still
> admins that appreciate not having to ask their employees to download an app
> for the VPN to work - in which case PPTP and L2TP with transport-mode IPsec
> are your most widely available options.
>
> Regarding L2TPv3 replacing L2TP: L2TPv2 (RFC 2661) was PPP only. L2TPv3
> generalized L2TP to support other L2 (including MPLS, but I don’t want to
> argue what layer MPLS operates within here). There was never a strong push
> to replace L2TPv2 used in DSL, Dialup and host VPN software with L2TPv3
> (there was one use case for an important L2TP operator that wanted to carry
> PPPoE over L2TPv3 in DSL, but that was overcome by RFC3817 which achieved
> the same goal without altering the dataplane). Ironically, I would expect
> to see very little PPP over L2TPv3 in the wild, though obviously it is
> possible.
>
> In the cable broadband world, the DOCSIS DEPI “Remote PHY” specification
> (similar I suppose to the split BNG spec Joel is referring to) standardized
> on L2TPv3 and is in active use.
>
> I also know of at least one vendor that uses Ethernet over L2TPv3 for some
> wifi backhaul use cases.
>
> There could be more, this is just what I am personally aware of off the
> top of my head. Even I am surprised to see how much L2TP is still out there
> once you start really looking around ;-)
>
> Best Regards,
>
> - Mark
>
>
>
>
> > On Jun 9, 2021, at 6:10 AM, Joel Halpern Direct <
> jmh.direct@joelhalpern.com> wrote:
> >
> > BNGs are still a big busienss.  And BNG resale /emote control uses L2TP
> in many cases.  The BBF has been working on (and published a first version
> of) protocol for control of split BNG.  L2TP is commonly used for these use
> cases.
> >
> > Yours,
> > Joel
> >
> > On 6/9/2021 7:50 AM, Stewart Bryant wrote:
> >> Which applications still use it Joel?
> >> Stewart
> >>> On 9 Jun 2021, at 12:42, Joel M. Halpern <jmh@joelhalpern.com> wrote:
> >>>
> >>> There is plenty of L2TP still in use.
> >>> Yours,
> >>> Joel
> >>>
> >>> On 6/9/2021 6:23 AM, Stewart Bryant wrote:
> >>>> Sequence number checking in the forwarder is always a problem because
> it is stateful so I doubt that many high-scale or high-speed forwarders
> ever did this.
> >>>> I think there is an undisclosed assumption that go up enough levels
> and its IP so sequence number checking in the transport network (as opposed
> to the transport layer) is not really needed.
> >>>> I doubt that there is much L2TP still out there. It was in its prime
> with dialup modems. L2TPv3 which was intended to replace it became niche
> with, as Andy says, operators who did not want MPLS. Much of what L2TPv3
> was intended for was actually done with PW over MPLS with some replacement
> with by Mac in Mac for cost reasons.
> >>>> If Carlos does not know the answer, Mark T would be my next port of
> call.
> >>>> Stewart
> >>>>> On 8 Jun 2021, at 22:41, Andrew G. Malis <agmalis@gmail.com <mailto:
> agmalis@gmail.com>> wrote:
> >>>>>
> >>>>> Bob,
> >>>>>
> >>>>> In addition to the cases listed by Derek, L2TPv3 can also carry
> non-IP pseudowire data, such as Ethernet frames (see RFC 4719 for example).
> Even though 4719 says that sequencing is optional, I would certainly
> recommend it :-).
> >>>>>
> >>>>> But I guess that's really not what you were asking about, since you
> specifically mentioned IP data. But it is a case where you would probably
> see sequencing in use.
> >>>>>
> >>>>> Back in the day, Sprint made good use of Ethernet over L2TPv3, as
> they were in the anti-MPLS camp at the time. But that's water over the
> bridge, and I really don't know if this solution continues to be in active
> use. Mark Townsley might know.
> >>>>>
> >>>>> Cheers,
> >>>>> Andy
> >>>>>
> >>>>>
> >>>>> On Sat, Jun 5, 2021 at 10:07 AM Derek Fawcus <
> dfawcus+lists-int-area@employees.org <mailto:
> dfawcus%2Blists-int-area@employees.org>> wrote:
> >>>>>
> >>>>>    On Fri, Jun 04, 2021 at 03:13:15PM +0100, Bob Briscoe wrote:
> >>>>>    > The L2TP RFC says sequencing /can/ be disabled for IP data, but
> it
> >>>>>    > doesn't say SHOULD or MUST. Is it possible that some operators
> >>>>>    enable
> >>>>>    > L2TP sequencing for IP data? And if so, do you know why they
> would?
> >>>>>    > Also, are you aware of any other types of tunnel that might try
> >>>>>    to keep
> >>>>>    > IP data packets in sequence?
> >>>>>
> >>>>>    How many intermediate headers are you considering between L2TP and
> >>>>>    where
> >>>>>    a carried IP header may exist?
> >>>>>
> >>>>>    Maybe I'm getting the wrong end of the stick, but surely this
> engages
> >>>>>    the text from section 5.4 of RFC 2661:
> >>>>>
> >>>>>      "For example, if the PPP session being tunneled is not
> >>>>>       utilizing any stateful compression or encryption protocols and
> is
> >>>>>       only carrying IP (as determined by the PPP NCPs that are
> >>>>>       established), then the LNS might decide to disable sequencing
> as IP
> >>>>>       is tolerant to datagram loss and reordering."
> >>>>>
> >>>>>    This would then suggest if L2TP is carrying PPP, the PPP session
> >>>>>    is not
> >>>>>    multi-link, and is making use of compression (including one of the
> >>>>>    versions of IP header compression) in some form for IP packets,
> then
> >>>>>    reordering will impact the ability to decompress.
> >>>>>
> >>>>>    So such an L2TP data session may well make use of sequence
> numbers to
> >>>>>    prevent reordering.
> >>>>>
> >>>>>    I guess similarly in L2TPv3 when the PW is for PPP, and possibly
> also
> >>>>>    the fragmentation scheme in RFC 4623 which requires sequence
> numbers;
> >>>>>    and such PWE3 links could ultimately be carrying IP packets.
> >>>>>
> >>>>>
> >>>>>    DF
> >>>>>
> >>>>>    (not an operator)
> >>>>>
> >>>>>    _______________________________________________
> >>>>>    Int-area mailing list
> >>>>>    Int-area@ietf.org <mailto:Int-area@ietf.org>
> >>>>>    https://www.ietf.org/mailman/listinfo/int-area
> >>>>>    <https://www.ietf.org/mailman/listinfo/int-area>
> >>>>>
> >>>>> _______________________________________________
> >>>>> Int-area mailing list
> >>>>> Int-area@ietf.org <mailto:Int-area@ietf.org>
> >>>>> https://www.ietf.org/mailman/listinfo/int-area
> >>>> _______________________________________________
> >>>> Int-area mailing list
> >>>> Int-area@ietf.org
> >>>> https://www.ietf.org/mailman/listinfo/int-area
>
>