Re: IETF OSPF YANG and BFD Configuration

[Jeffrey Haas <[e-mail]>]

On Tue, Jun 20, 2017 at 02:48:51PM -0500, Greg Mirsky wrote:
> Hi Jeff,
> thank you for the great summary of the discussion, helps me to catch the
> wave.
> I'm skeptical that there's realistic scenario where two BFD systems will be
> requested to run multiple BFD single-hop session between them over the same
> interfaces (logical or physical). I believe that we should try to make
> models future proof but to the level that is reasonable, practical.
> Approach "if we can think of it, then we need to support it" may not be the
> one.
> RE: RFC 5881. I've referred to the following:
> ... any BFD packet from the remote machine with a zero value of Your
> Discriminator MUST be associated with the session bound to the remote
> system, interface, and protocol.
> Unless we add out-band bootstrapping of BFD sessions like with LSP Ping, I
> don't see how received BFD control packet with zero value in Your
> Discriminator may be bound to not just any one of several protocols that
> are trying to run BFD session on the same interface to the same remote
> system but to the right one, the one that corresponds to the protocol on
> whose behalf remote BFD peer sent the control packet. Hence my question Do
> we have implementation(s) that use this and are asking for BFD data model
> to accommodate them? Or we are just doing interesting intellectual exercise?

The constant iteration regarding "intellectual exercise" is getting
irritating.  See prior comments.

This distribution is too large to try to design the actual behavioral
change.  If you feel the need to pursue that thread, please reduce the scope
of the cc: list.  This will be my last reply to this topic on the expanded
distro.

To offer one example of how such a thing could be implemented, BFD
authentication can be used with different parameters for each session.  This
provides the necessary split for demultiplexing.  Such a hack is not unusual
operations trick when running OSPF for (partially) disjoint domains on the
same interface, although I suspect that the hack is no longer necessary with
multi-instance techs.  (This trick goes back to the 1990's.)

-- Jeff