Re: [Pals] Review of draft-ietf-pals-endpoint-fast-protection-04

Yimin Shen <yshen@juniper.net> Tue, 06 December 2016 16:38 UTC

Return-Path: <yshen@juniper.net>
X-Original-To: pals@ietfa.amsl.com
Delivered-To: pals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33C1B12984F; Tue, 6 Dec 2016 08:38:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level:
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11BQ8PhB91nv; Tue, 6 Dec 2016 08:38:50 -0800 (PST)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0130.outbound.protection.outlook.com [104.47.42.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0FFE1299D4; Tue, 6 Dec 2016 08:38:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=2g4aZn2hWP/vuf52TwDlGXxHw1BXpqiFe9AEe3AoZdk=; b=PD5v3V6q7aqi9fyxSCgcingp+rqzs58d70CJWOShWOG9kWn7KIgcFxK/uyVErFpizAWdlxHYGk+r1vQnYrYJfJSt89wpC2jO0e+SXTzyEkBI/x0UqedeW5elRX5he62pl/fhaKIvD+AEhf1BNvjjS5cviaKP2GC/CdzD8hElFZU=
Received: from BY1PR0501MB1560.namprd05.prod.outlook.com (10.160.203.146) by BY1PR0501MB1557.namprd05.prod.outlook.com (10.160.203.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.771.4; Tue, 6 Dec 2016 16:38:48 +0000
Received: from BY1PR0501MB1560.namprd05.prod.outlook.com ([10.160.203.146]) by BY1PR0501MB1560.namprd05.prod.outlook.com ([10.160.203.146]) with mapi id 15.01.0771.008; Tue, 6 Dec 2016 16:38:48 +0000
From: Yimin Shen <yshen@juniper.net>
To: "Andrew G. Malis" <agmalis@gmail.com>, "Black, David" <David.Black@dell.com>
Thread-Topic: Review of draft-ietf-pals-endpoint-fast-protection-04
Thread-Index: AQHST79toJhD4QeirE63hAFHYP/IxaD6yx2A
Date: Tue, 06 Dec 2016 16:38:47 +0000
Message-ID: <36C44433-486D-4CB5-B956-39FAA99A8C17@juniper.net>
References: <148098421561.9560.17840743269310006258.idtracker@ietfa.amsl.com> <CAA=duU1LG76yxhdhtMmC_dzkPiAp+0BjuTfRydJ=EWnYqKAzTA@mail.gmail.com>
In-Reply-To: <CAA=duU1LG76yxhdhtMmC_dzkPiAp+0BjuTfRydJ=EWnYqKAzTA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/f.18.0.160709
authentication-results: spf=none (sender IP is ) smtp.mailfrom=yshen@juniper.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [66.129.241.12]
x-ms-office365-filtering-correlation-id: b4411a30-9f47-434c-8b20-08d41df65a65
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:BY1PR0501MB1557;
x-microsoft-exchange-diagnostics: 1; BY1PR0501MB1557; 7:MbAiZE9sx2oeSTUe8FjAXrSsG8ZWMKlMeftgYN3DKvYKRgc0ACk99qQ1PEj+5kzVOT3OWX0u+cxtzqMPqywC4bs/zPog1L1FiXu2mor9TjQ5pCIueBYWvVsCevetRmCOQxu8XuSKVoidbL7BLNVq5u/ppQUx1zX8EASMBQWOVChBqYjbCvysbrg83PVDLwo6G6ta3p1dnWnsLaPRhbIPifiFzj1bPrZNdVs9nN2WKDEHFNDMILhUuqAHFpHIit4I9o3ex7USzhgD/BjAAUlGbbj6y7zIC4zuxvHJ4GXqpa8ASR1b1S2gzd2A9zXagvJxUMlFpYxi5lm9zCl+b1q0ZZTKUNkCFSEAn3tiozh1Y/Iqzeb7ILPcTsPvXGgM7D+FEWj4ZkjOPnwg7MwUeCIIq4fY9OuNhzPrjpQYsh7ha7UcMn2kB5n8dPz4yXopTn+ebYD7YElK3kzQYQxFGc4POw==
x-microsoft-antispam-prvs: <BY1PR0501MB1557CC68D22A11DA4B54D3FCBD820@BY1PR0501MB1557.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(192374486261705)(138986009662008)(97927398514766)(21748063052155)(56004941905204)(201166117486090)(50582790962513);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(6041248)(20161123555025)(20161123560025)(20161123564025)(20161123562025)(6072148); SRVR:BY1PR0501MB1557; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1557;
x-forefront-prvs: 01480965DA
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(377454003)(189002)(199003)(24454002)(2950100002)(92566002)(3280700002)(3660700001)(86362001)(5660300001)(189998001)(33656002)(8666005)(230783001)(8936002)(122556002)(99286002)(36756003)(7736002)(7846002)(81156014)(8676002)(81166006)(105586002)(106116001)(106356001)(5001770100001)(606004)(39860400001)(39850400001)(68736007)(2900100001)(229853002)(38730400001)(3846002)(6486002)(39840400001)(4001350100001)(6116002)(6512006)(83506001)(39060400001)(77096006)(101416001)(6506006)(4326007)(2906002)(102836003)(82746002)(66066001)(39450400002)(54356999)(76176999)(50986999)(39410400001)(83716003)(97736004)(7059030)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1557; H:BY1PR0501MB1560.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_36C44433486D4CB5B95639FAA99A8C17junipernet_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Dec 2016 16:38:47.9615 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1557
Archived-At: <https://mailarchive.ietf.org/arch/msg/pals/V5OLVwsmZu3HfHiAciiOltO2z2A>
Cc: "draft-ietf-pals-endpoint-fast-protection@ietf.org" <draft-ietf-pals-endpoint-fast-protection@ietf.org>, Transport Area Review Team <tsv-art@ietf.org>, "BRUNGARD, DEBORAH A (ATTLABS)" <db3546@att.com>, "pals@ietf.org" <pals@ietf.org>
Subject: Re: [Pals] Review of draft-ietf-pals-endpoint-fast-protection-04
X-BeenThere: pals@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Pseudowire And LDP-enabled Services dicussion list." <pals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pals>, <mailto:pals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pals/>
List-Post: <mailto:pals@ietf.org>
List-Help: <mailto:pals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pals>, <mailto:pals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Dec 2016 16:38:52 -0000

Hi, Dave,

Thanks very much for your review! I will address these comments in the next revision.

Regards,

-- Yimin


From: "Andrew G. Malis" <agmalis@gmail.com>
Date: Tuesday, December 6, 2016 at 7:50 AM
To: "Black, David" <David.Black@dell.com>
Cc: Transport Area Review Team <tsv-art@ietf.org>, "pals@ietf.org" <pals@ietf.org>, "BRUNGARD, DEBORAH A (ATTLABS)" <db3546@att.com>, "draft-ietf-pals-endpoint-fast-protection@ietf.org" <draft-ietf-pals-endpoint-fast-protection@ietf.org>
Subject: Re: Review of draft-ietf-pals-endpoint-fast-protection-04
Resent-From: <alias-bounces@ietf.org>
Resent-To: Yimin Shen <yshen@juniper.net>, <raggarwa_1@yahoo.com>, <wim.henderickx@alcatel-lucent.be>, <jiangyuanlong@huawei.com>
Resent-Date: Tuesday, December 6, 2016 at 7:51 AM

David,

Thanks for your review!

Cheers,
Andy

On Mon, Dec 5, 2016 at 7:30 PM, IETF Secretariat <ietf-secretariat-reply@ietf.org<mailto:ietf-secretariat-reply@ietf.org>> wrote:
Reviewer: David Black
Review result: Ready with Issues

I've reviewed this document as part of TSV-ART's ongoing effort to
review key IETF documents. These comments were written primarily for
the transport area directors, but are copied to the document's authors
for their information and to allow them to address any issues raised.
When done at the time of IETF Last Call, the authors should consider
this review together with any other last-call comments they receive.
Please always CC tsv-art@ietf.org<mailto:tsv-art@ietf.org> if you reply to or forward this
review.

This draft specifies local pseudowire (PW) repair mechanisms to
quickly react to PW egress failures by rerouting traffic around the
failure until slower-to-react repair mechanisms at larger scope are
able to effect longer term repairs, e.g., via network topology
changes.

-- TSV-ART review comments:

I found a couple of minor transport-related issues, both of which
should be resolvable with modest amounts of additional explanation:

* ECMP: The ECMP discussion in Section 4.1 on Applicability takes a
conservative approach to avoiding packet reordering by recommending
(SHOULD) that the entire ECMP set be rerouted as part of local repair.
 It's not clear what sort of ECMP is involved, as that acronym is used
without a reference (or even expansion), so I'd suggest citing a
reference.   If the ECMP used is flow-aware so that reordering across
ECMP branches within an ECMP set does not cause reordering within any
of the flows involved, then it ought to be safe from a reordering
perspective to reroute an ECMP branch or set of branches that are less
than the full ECMP set, although such partial rerouting could cause
potentially undesirable forwarding latency differences within the ECMP
set.  This ought to be discussed, as situations in which rerouting the
entire ECMP bundle is overly conservative seem likely to arise in
practice.

* Traffic Engineering: Considering the intended speed of local repair,
"order of tens of milliseconds" in the abstract, the bandwidth used by
the repair paths has to be provisioned in advance of any failure that
causes repair path usage - traffic engineering is a likely means of
provisioning that bandwidth.  I see "TE domain," "TE metric" and "TE
path," which I assume refer to Traffic Engineering, but that TE
acronym is not expanded, and I did not find text requiring traffic
engineering and/or advance (bandwidth) provisioning of repair paths.
I assume that this advance bandwidth provisioning of repair paths is
intended as part of local repair, as not doing that invites immediate
repair path failure due to lack of forwarding resources, which is
definitely not desired.  A sentence or two ought to be added to point
this bandwidth provisioning requirement out, possibly in Section 4.1
(Applicability).  Adding that text would also reinforce the conclusion
in the Security Considerations section that local repair reroutes are
not a security threat, as the new text would add the rationale that
local repair reroutes are anticipated and planned for by the network
operator's traffic engineering.

--  Other comments:

* Having found two acronyms that were not expanded, I'd suggest a
general look for such acronyms.   OTOH, this is an area of network
technology where many acronyms are in common use, and hence expansion
of every acronym on first use may be excessive - among the ways of
avoiding this could be citation of a reference at the start of Section
3 where commonly used PW terms and acronyms are defined.