RE: Resetting the sequence number in an authenticated BFD session
Alexander Vainshtein <Alexander.Vainshtein@ecitele.com> Fri, 11 January 2008 10:11 UTC
Return-path: <rtg-bfd-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1JDGrY-0002cz-Fq; Fri, 11 Jan 2008 05:11:44 -0500
Received: from rtg-bfd by megatron.ietf.org with local (Exim 4.43) id 1JDGrW-0002cq-MN for rtg-bfd-confirm+ok@megatron.ietf.org; Fri, 11 Jan 2008 05:11:42 -0500
Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1JDGrW-0002cd-9p for rtg-bfd@ietf.org; Fri, 11 Jan 2008 05:11:42 -0500
Received: from eci-iron1.ecitele.com ([147.234.242.117]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1JDGrU-00031h-NB for rtg-bfd@ietf.org; Fri, 11 Jan 2008 05:11:42 -0500
Received: from unknown (HELO ILPTAM01.ecitele.com) ([147.234.244.44]) by eci-iron1.ecitele.com with ESMTP; 11 Jan 2008 12:29:22 +0200
Received: from ILPTEXCH02.ecitele.com ([147.234.245.181]) by ILPTAM01.ecitele.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 11 Jan 2008 12:11:39 +0200
Received: from ILPTMAIL01.ecitele.com (147.234.245.211) by ILPTEXCH02.ecitele.com (147.234.245.181) with Microsoft SMTP Server id 8.1.240.5; Fri, 11 Jan 2008 12:11:39 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C8543A.5AD970FE"
Date: Fri, 11 Jan 2008 12:11:38 +0200
Message-ID: <64122293A6365B4A9794DC5636F9ACFD0252D70B@ILPTEX02.ecitele.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Resetting the sequence number in an authenticated BFD session
Thread-Index: AchT0v9dDEpg7rxcR+mJTDeR3cNbCwAZjNoE
References: <64122293A6365B4A9794DC5636F9ACFD0252D70A@ILPTEX02.ecitele.com> <7FA0C743C38E5340BFC2873488FA1E8E8B22F9@emailcorp3.jnpr.net> <A1C094AD-3891-4660-AE2C-DADE1FF7DD96@cisco.com>
From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
To: David Ward <dward@cisco.com>, Nitin Bahadur <nitinb@juniper.net>
X-OriginalArrivalTime: 11 Jan 2008 10:11:39.0598 (UTC) FILETIME=[5B427EE0:01C8543A]
X-Spam-Score: 1.8 (+)
X-Scan-Signature: 2b3349545af520ba354ccdc9e1a03fc1
Cc: BFD WG <rtg-bfd@ietf.org>, Ronen Sommer <Ronen.Sommer@ecitele.com>, Igor Danilovich <Igor.Danilovich@ecitele.com>, Dave Katz <dkatz@juniper.net>
Subject: RE: Resetting the sequence number in an authenticated BFD session
X-BeenThere: rtg-bfd@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "RTG Area: Bidirectional Forwarding Detection DT" <rtg-bfd.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/rtg-bfd>, <mailto:rtg-bfd-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:rtg-bfd@ietf.org>
List-Help: <mailto:rtg-bfd-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/rtg-bfd>, <mailto:rtg-bfd-request@ietf.org?subject=subscribe>
Errors-To: rtg-bfd-bounces@ietf.org
David, Nitin and all, Please see inline below (blue italics)..Unfortunately it seems that none of the options explicitly proposed by David resolve the issue. Regards, Sasha ________________________________ From: David Ward [mailto:dward@cisco.com] Sent: Thu 1/10/2008 11:51 PM To: Nitin Bahadur Cc: David Ward; Alexander Vainshtein; Dave Katz; Ronen Sommer; BFD WG; Igor Danilovich Subject: Re: Resetting the sequence number in an authenticated BFD session Solutions include (and are alluded to in the drafts): run BFD on bundled interfaces (any flavor) centrally [Sasha] This rasies the issue of the central component failover (as mentioned in my oriinal message). run BFD on all component links independently [Sasha] IMHO this is not a viable option. E.g., consider a L3 1-hop situation where the bundled interfaces run between one of the routers and a L2 switch, while the L3 adjacency is unaware of bundling. This is easily achieved with LAG. run BFD on a master component link [Sasha] The failure of the LC that carries the "master componet link" is the original scenario described in my original email, and the issue remains unsloved IMO. There are other variants as well. -DWard On Jan 10, 2008, at 3:41 PM, Nitin Bahadur wrote: Alexander, I agree that keeping the sequence number consistent between line cards is not practical. We need a way for a system to indicate that it wants to restart the sequence. Nitin ________________________________ From: Alexander Vainshtein [mailto:Alexander.Vainshtein@ecitele.com] Sent: Thursday, January 10, 2008 12:42 PM To: David Ward; Dave Katz Cc: Ronen Sommer; BFD WG; Igor Danilovich Subject: Resetting the sequence number in an authenticated BFD session Importance: High Hi all, I have a question related to the expected behavior of sequence numbers in an aythenticated (MD5 or SHA1) BFD session. The corresdponding sections of draft-ietf-bfd-base-06 state that, once the packet has been authenticated by the receiver, its sequence number MUST be checked; if its value is out of range defined by the last received sequence number and the Detect Multiplexor, the packet MUST be discarded. This may result in the a BFD session going down in the situation when the transceiver "loses" the information about its last transmitted sequence number. A suitable use case is a multilink interface (LAG, ML-PPP, etc.) with the links residing in different line cards, and e BFD implemented in one of these cards: if this card fails, the BFD would could be re-started in one of the remaining cards. Such a restart would not affect the local session because the BFD machine would be restarted with bfd.AuthSeqKnown = 0, but keeping bfd.XmitAuthSeq consistent between different line cards seems problematic. (Implemeting BFD in some common card would resolve the situation with the multilink interfaces but would raise similar issues when the common card fails). Note that this problem would not occur for a non-authenticated BFD session. IMHO this problem is real, and I do not see a simple solution for it. I would highly appreciate any feedback from the draft authors and/or from the WG. Regards, Sasha
- Resetting the sequence number in an authenticated… Alexander Vainshtein
- RE: Resetting the sequence number in an authentic… Nitin Bahadur
- RE: Resetting the sequence number in an authentic… Nitin Bahadur
- Re: Resetting the sequence number in an authentic… David Ward
- Re: Resetting the sequence number in an authentic… David Ward
- RE: Resetting the sequence number in an authentic… Nitin Bahadur
- Re: Resetting the sequence number in an authentic… David Ward
- RE: Resetting the sequence number in an authentic… Alexander Vainshtein
- RE: Resetting the sequence number in an authentic… Alexander Vainshtein
- Re: Resetting the sequence number in an authentic… David Ward
- Re: Resetting the sequence number in an authentic… David Ward
- RE: Resetting the sequence number in an authentic… Peter Arberg
- Re: Resetting the sequence number in an authentic… Dave Katz
- RE: Resetting the sequence number in an authentic… Alexander Vainshtein
- RE: Resetting the sequence number in an authentic… Alexander Vainshtein
- Re: Resetting the sequence number in an authentic… David Ward
- RE: Resetting the sequence number in an authentic… Alexander Vainshtein