Re: [RTG-DIR] RtgDir review: draft-ietf-pals-ethernet-cw-05.txt

Alexander Vainshtein <Alexander.Vainshtein@ecitele.com> Sun, 27 May 2018 07:23 UTC

Return-Path: <Alexander.Vainshtein@ecitele.com>
X-Original-To: rtg-dir@ietfa.amsl.com
Delivered-To: rtg-dir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05A61124217; Sun, 27 May 2018 00:23:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.39
X-Spam-Level:
X-Spam-Status: No, score=-2.39 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.599, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=eci365.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r38oeW3-fJkf; Sun, 27 May 2018 00:23:45 -0700 (PDT)
Received: from mail1.bemta25.messagelabs.com (mail1.bemta25.messagelabs.com [195.245.230.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6299D124D37; Sun, 27 May 2018 00:23:44 -0700 (PDT)
Received: from [46.226.52.103] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-4.bemta.az-a.eu-west-1.aws.symcld.net id 3A/76-30560-CFC5A0B5; Sun, 27 May 2018 07:23:40 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA1VSfUgTYRzu3d1u53DxOi1/igYuIoxubWG4PjG IMIowCEqn5DlPt9jm2E3U/ojSsJgZfZikGWZJmkqRmdqHBZKok0q0b7ScX9kwiqKs8KO7XfZx cPC8z/O8z++540cT6vtUOM3lujinnbVqKCUZExWXwkwnK426tq+LDZ1tE6ShtquQMjTMXpMZu iu+E4aLDWMKg2eIjaPib5cPKuKrq3/I4l/kP1MkEElyiz0tKzdVbu57edAxvjn3WH4neQh9j3 MjJU3iSwRcLS2Riwc1LpFBwezc78MIgprhd8iNAmgKb4TG+kFKxCE4ER7eGCBFE4F7ENxqviI XhWAcD0IZ4QItmLbBizMOyb8Oxmue+u+SeBm4O6r8dhVOhZqZWr9djR1Q9nO5CAOEURP9jOhA eDFMeRpkIiZwKLwerfRjwBiq7z0hJLwI3o/MyiV/Grwdq0ISHwXn3lQoJBwJfZVFSGwMuFkGR wtG5JLAwKezZwlxLuCl0DSRItEdCNx1WoleCTWtwRKdBZ6r7XKJ3gEDxTESvQTqir2klP6AgD Z3MykJEVB03kdJQjcFU63d/s5qbIKuii/kSaQt/+fTyoVcAkfD9TurJDoKSoq8inL/vwqC7rJ R8iIi65AhzWnJNLtsrMXK6HU6Rq9fzejXrhFenZY9wLBaLpvJ4XgXo9eyObyWz7OZrOlaO+dq RMIuLRCeVtT7zdSOwmiZZpHKcIo2qhemZaXnmVnevM+ZbeX4dhRB0xpQDRqVRnWQk8vkcjMsV mEh52WgAzUhKl2SIKt4B2vjLZmS5EEMPdpfepxQk/YsOxceqvokZmDRZM62/4mYX+s+FBkerE JCKXWgg3PaLK7/dR8KpZEmWDUlpgRa7K4/k3xCCZlQ4lq9QizhYv9K4YfQkR5v5u7LCb1PcwZ Oty8w95i3nmuJU1Y2TUcfPvYhqb9ob9iO6KPeDWXJj617gya9W9b3NT+PjNXaEhX7d4XOTJzY Pje5tTDD9tnXs6TeOKJ8NeCcvuuxfFx4IdbaEpO3qRLjcWVC68102NP5sVQZwIEr1jTkS91pO pXzaHkiNawheTOrX0E4efYX7Owto9EDAAA=
X-Env-Sender: Alexander.Vainshtein@ecitele.com
X-Msg-Ref: server-20.tower-267.messagelabs.com!1527405816!929319!1
X-Originating-IP: [52.33.64.93]
X-SYMC-ESS-Client-Auth: mailfrom-relay-check=pass
X-StarScan-Received:
X-StarScan-Version: 9.9.15; banners=ecitele.com,-,-
X-VirusChecked: Checked
Received: (qmail 12250 invoked from network); 27 May 2018 07:23:39 -0000
Received: from us-west-2b.mta.dlp.protect.symantec.com (HELO EUR01-HE1-obe.outbound.protection.outlook.com) (52.33.64.93) by server-20.tower-267.messagelabs.com with AES256-SHA256 encrypted SMTP; 27 May 2018 07:23:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ECI365.onmicrosoft.com; s=selector1-ecitele-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8A7SuC4E2OfwqAKLBuO1HdOcfZUPwc4PPpYMMPuQ8Og=; b=VdpNqhHNTQF5q6zZi1oFeL99r1WR57lqgFL+Y69EOKeBp1kqv6qpLJv0Ap95TGomHaYgPV9Pa7WWTHkTL6NXzhkeR5f161qa7EfCFPIFGfZE8JGP0s8V1skgymxPWEvrxnlq2NggsZyhQLgi1RDWkBtZOYl/1DX3UvmuiNJR830=
Received: from DB5PR0301MB1909.eurprd03.prod.outlook.com (10.167.226.155) by DB5PR0301MB1957.eurprd03.prod.outlook.com (10.167.227.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.797.11; Sun, 27 May 2018 07:23:33 +0000
Received: from DB5PR0301MB1909.eurprd03.prod.outlook.com ([fe80::d461:c56e:7404:d5b1]) by DB5PR0301MB1909.eurprd03.prod.outlook.com ([fe80::d461:c56e:7404:d5b1%5]) with mapi id 15.20.0797.015; Sun, 27 May 2018 07:23:33 +0000
From: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>
To: Stewart Bryant <stewart.bryant@gmail.com>, Harish Sitaraman <hsitaraman@juniper.net>
CC: "rtg-dir@ietf.org" <rtg-dir@ietf.org>, "draft-ietf-pals-ethernet-cw.all@ietf.org" <draft-ietf-pals-ethernet-cw.all@ietf.org>, "pals@ietf.org" <pals@ietf.org>, "rtg-ads@ietf.org" <rtg-ads@ietf.org>
Thread-Topic: [RTG-DIR] RtgDir review: draft-ietf-pals-ethernet-cw-05.txt
Thread-Index: AQHT8tHuFNWGlh/rA0yezqtr8M0oVqRAgmUAgAKtW6A=
Date: Sun, 27 May 2018 07:23:33 +0000
Message-ID: <DB5PR0301MB1909547090F62888814FB0BA9D6F0@DB5PR0301MB1909.eurprd03.prod.outlook.com>
References: <24346049-C4F5-493D-AA4D-3C7D48477DBE@juniper.net> <03e34c0f-c9d5-5c57-761c-69b6ba6faf0b@gmail.com>
In-Reply-To: <03e34c0f-c9d5-5c57-761c-69b6ba6faf0b@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [147.234.241.1]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DB5PR0301MB1957; 7:r47wvIqS5DUm+MVnyyrvjbSn7TyGTz0jDSgI+Sj+ylN1+8baefxTPkL/wPRMIF86a/812mWSPzPb9HlUTBEWC4+iim7W/x/VejmSidb+HsYa+5ojzDDeYNsjCQC2z5TBk1d1mHRTB67KUx//3XZHXvJlteCwqfz5LasTwXgtnKFHCQ8YpzXdNLtKWnoreu4SqPlfTCm0Q4IZ9HPYKbLzwR1XlD/XcEPH7VYdA6c6D9nXIGj3ziOmjDjbZkXXnQpR
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:DB5PR0301MB1957;
x-ms-traffictypediagnostic: DB5PR0301MB1957:
x-microsoft-antispam-prvs: <DB5PR0301MB1957CB2B8226F4602CB8314F9D6F0@DB5PR0301MB1957.eurprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(138986009662008)(279101305709854);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231254)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:DB5PR0301MB1957; BCL:0; PCL:0; RULEID:; SRVR:DB5PR0301MB1957;
x-forefront-prvs: 0685122203
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(39850400004)(39380400002)(366004)(396003)(199004)(189003)(252514010)(13464003)(6506007)(7736002)(105586002)(476003)(9686003)(6116002)(4326008)(59450400001)(102836004)(39060400002)(53936002)(5660300001)(54906003)(110136005)(55016002)(1941001)(2906002)(6306002)(8666007)(81156014)(81166006)(99286004)(76176011)(66066001)(53546011)(26005)(68736007)(186003)(316002)(7696005)(86362001)(966005)(3280700002)(72206003)(14454004)(3660700001)(446003)(5250100002)(1720100001)(2900100001)(305945005)(6436002)(25786009)(8676002)(478600001)(3846002)(33656002)(74316002)(11346002)(8936002)(229853002)(345774005)(6246003)(97736004)(486006)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:DB5PR0301MB1957; H:DB5PR0301MB1909.eurprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: ecitele.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: ynynTgUTV4CQ707/B9Auo1xDg+023uJg5kBtjLxffY/lq3SSViS6kXsmCFum9At9HRhZrjtmjBhqsUONW5oPRe4IOb0V2wzLYJNNRh56Q67Cm5NFex3IVSbC0BFhEle9g1Adjrf+dbjtPaSPbt9hnp6u+UZVli5+zFHNkjSWdv3ROtRZOJGJKjPfePRiW6yM
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 473a22a9-aa81-4380-1f4a-08d5c3a2c13d
X-OriginatorOrg: ecitele.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 473a22a9-aa81-4380-1f4a-08d5c3a2c13d
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 May 2018 07:23:33.5201 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2c514a61-08de-4519-b4c0-921fef62c42a
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR0301MB1957
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtg-dir/6-gIrW04-xLSaxr6gR5sNFATNE0>
Subject: Re: [RTG-DIR] RtgDir review: draft-ietf-pals-ethernet-cw-05.txt
X-BeenThere: rtg-dir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Routing Area Directorate <rtg-dir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtg-dir>, <mailto:rtg-dir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtg-dir/>
List-Post: <mailto:rtg-dir@ietf.org>
List-Help: <mailto:rtg-dir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtg-dir>, <mailto:rtg-dir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 27 May 2018 07:23:49 -0000

Stewart, Harish and all,
Just wanted to confirm that the situation when "LSRs that noting the presence of the PW by noting that the first nibble after the label stack was zero, and then (sometimes) falsely concluding that what followed the label stack was CW, Ethernet Header, IP packet 
and using the five tuple in the assumed IP packet to do ECMP" indeed occurs in some modern off-the-shelf packet processors. The implications of this conclusions are disastrous for PW types that really care about reordering, especially TDM PWs.

The (AFAIK only) solution in these cases is disabling the ECMP mode that inspects the payload of labeled packets and using  what Stewart calls "non-five-tuple" methods instead.

My 2c,
Sasha

Office: +972-39266302
Cell:      +972-549266302
Email:   Alexander.Vainshtein@ecitele.com

-----Original Message-----
From: rtg-dir [mailto:rtg-dir-bounces@ietf.org] On Behalf Of Stewart Bryant
Sent: Friday, May 25, 2018 5:24 PM
To: Harish Sitaraman <hsitaraman@juniper.net>; rtg-ads@ietf.org
Cc: rtg-dir@ietf.org; draft-ietf-pals-ethernet-cw.all@ietf.org; pals@ietf.org
Subject: Re: [RTG-DIR] RtgDir review: draft-ietf-pals-ethernet-cw-05.txt

Harish

Thank you for the review.


On 23/05/2018 21:09, Harish Sitaraman wrote:
> Hello,
>
> I have been selected as the Routing Directorate reviewer for this 
> draft. The Routing Directorate seeks to review all routing or 
> routing-related drafts as they pass through IETF last call and IESG 
> review. The purpose of the review is to provide assistance to the 
> Routing ADs. For more information about the Routing Directorate, 
> please see http://trac.tools.ietf.org/area/rtg/trac/wiki/RtgDir
>
> Although these comments are primarily for the use of the Routing ADs, 
> it would be helpful if you could consider them along with any other 
> IETF Last Call comments that you receive, and strive to resolve them 
> through discussion or by updating the draft.
>
> Document: draft-ietf-pals-ethernet-cw-05.txt
> Reviewer: Harish Sitaraman
> Review Date: 23 May 2018
> IETF LC End Date: 29 May 2018
> Intended Status: Standards Track
>
> Summary:
> This document is basically ready for publication, but has nits that 
> should be considered prior to publication.
>
> Comments:
> This document is well written. The context is specified: RAC has been 
> issuing more Ethernet addresses starting with 0x4 or 0x6 and existing 
> ECMP implementations may examine the first nibble after the MPLS label 
> stack to determine whether the labeled packet is IP or not. This can 
> cause unreliable inference of the payload type at transit routers that may have been inspecting the first nibble.
Unreliable inference when the T-PEs are sending Ethernet over PW and not using the optional  CW.
> For my understanding, it would be useful to know how section 5 relates 
> (or offers more clarity) to the recommendation that CW MUST be used - 
> the solutions in section 5 are known for better ECMP and applicable 
> regardless of whether the packet has the CW.

There are two cases we had to deal with:

The main one where a PW without the CW was being deployed, in which case LSR's on the path were doing five tuple based ECMP (and making mistakes).

The other case that came to light was LSRs that noting the presence of the PW by noting that the first nibble after the label stack was zero, and then
(sometimes)
falsely concluding that what followed the label stack was

CW, Ethernet Header, IP packet

and using the five tuple in the assumed IP packet to do ECMP, sometimes getting it wrong.

Thus the point of this section was to explain how to correctly do ECMP on a PW.

> With the statement "However in both cases the situation is improved 
> compared...based on the five tuple of the IP payload.", is the point 
> that hashing would be "improved" (for some definition) since incorrect 
> identification of payload is corrected but yet we cannot precisely 
> steer the OAM packet along the specific ECMP path that the data packet may have taken?

An OAM packet does not have the five tuple, so cannot follow the same path as a five tuple packet by definition. The situation is improved if one of the non-five tuple methods are used and the same ECMP hints are included in both data and OAM packets since LSRs would select the same next hop in both cases.

> What is the intent behind the final paragraph in section 5 considering 
> it mentions the existing stacking order of labels between PW, LSP and 
> EL/ELI - could this paragraph be removed or should it also mention the 
> flow label position from Fat PW?

This text was added as a result of a WG LC comment where a reviewer wanted clarification of the ordering of these LSEs.

I am not sure why anyone would want to use both EL and FAT on the same packet.

FAT is always after the PW label and thus always BoS.

The question the arose where would the EL go if that was used instead. 
The agreement was
reached that since the EL was associated with the LSP, rather than the PW, and there where there is no FAT label the PW label is always BoS, it made sense for the EL to be somewhere in the LSP part of the label stack. However we also decided that it was none of our business specifying where in the label stack it belonged, other than not at the bottom.

Hopefully that explanation addresses your concern.

I have not changed any of the text.

> Major Issues:
> No major issues found.
>
> Minor Issues:
> Section 2: RFC2119 has been updated by RFC8174.
I have taken the text from RFC 8341.
>
> Nits:
> Section 5: LSP entropy labels specified 'in' [RFC6790]
done
>
> Check if style consistency for references might be useful:
>    Section 4: RFC6391 [RFC6391] vs. [RFC6391] vs. RFC6391 - all are used in the document.
>                       Similarly for RFC6790 references.
I have made everything the same style as RFC8341 (the most recent RFC
published)
>    Section 4/5: EL - expanded first in section 5, 3rd para "entropy label (EL)" but used earliest in section 4.
>                          Might be better to expand ELI too.
Done.

Thanks

Stewart
>
> --
> Harish
>


___________________________________________________________________________

This e-mail message is intended for the recipient only and contains information which is 
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have received this 
transmission in error, please inform us by e-mail, phone or fax, and then delete the original 
and all copies thereof.
___________________________________________________________________________