Re: Protecting SR policy midpoints (draft-bashandy-rtgwg-segment-routing-ti-lfa)

Stewart Bryant <stewart.bryant@gmail.com> Tue, 28 November 2017 15:15 UTC

Return-Path: <stewart.bryant@gmail.com>
X-Original-To: rtgwg@ietfa.amsl.com
Delivered-To: rtgwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6A1612711E for <rtgwg@ietfa.amsl.com>; Tue, 28 Nov 2017 07:15:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jip4QAZfzf6x for <rtgwg@ietfa.amsl.com>; Tue, 28 Nov 2017 07:15:12 -0800 (PST)
Received: from mail-wr0-x234.google.com (mail-wr0-x234.google.com [IPv6:2a00:1450:400c:c0c::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 029E7126D3F for <rtgwg@ietf.org>; Tue, 28 Nov 2017 07:15:12 -0800 (PST)
Received: by mail-wr0-x234.google.com with SMTP id v22so365518wrb.0 for <rtgwg@ietf.org>; Tue, 28 Nov 2017 07:15:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=zsvBLXRjf1NCDMOB7hQg9x6FCtTSbDYduiqeBKRfml0=; b=WP8mQOBoSAirJJDAXg6A4OG4VjEFS/2TkAQPdsI1Kl4L5E6GQIrtcoGERmTFnqV6/7 luQCzMxOko5vc2ei6XfF70gSLvedgjw5DQXwUW9Z5f7T6MuoIR8phIALG86ImJxzQ1Th 9EN5kig2R39LaylnwUVdo8w8nal9PTc0X5rqV0tabxSuqBPVj2RX9kZCl/ZtHCto6ST8 4JMhOHPmqqo31Oy0xef4cx7006EEYeqBguakjl7aJKHv3cTlwAGT2o+bQ2qewn60GYEw A1qmYdQBmC/iCjgCby5ZCGbWT5iV3mjXUVArnFuUrEE/2Uwwco7F8svavqDHEsmSyZEm Qzfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=zsvBLXRjf1NCDMOB7hQg9x6FCtTSbDYduiqeBKRfml0=; b=Hv2N71TLeMKAAGc/vhfvIZ5wwBnF/NGbu707guygsOvVSda+j599A3Wl5nW+RQML27 8KfKnPMOkDY2JTSLZk7kJtEBsvdzFUnvyOLv8l9a0JDMZFsGDXa7z2mCzmAABQaXNvAs oUyx8JA0MGjU/aHIanDsPEfbm0pVQX0ZIYrM2qzqJsGKvo1DFD7oE2RNqE2QZwCls3gv rguzzkmLNt+FYbtytj6PmCZXNNUs16ZNUpUHp12DBeaUyTflspD8k+F8ua74HzBXOMv/ txoFGgBSsEFKM4+dFd/2a/VBPd/eesEdezpsORsuwaR0HVh8mEzXr+lEDvyrf4TQ7rUu jlcA==
X-Gm-Message-State: AJaThX7UenRvvmg/Kr2M2yRktDBL6spQvJHsbMBlUzZwD0QMNNow+n2Z jJ/LyoR7xprdYCol3CdltaW3Elc9
X-Google-Smtp-Source: AGs4zMYFMaOh9tHdjyNEEvYyld076cL3cqQZm0rHkLft3FWfApV37rgKK/MOHQPujcyezy/75tNRGg==
X-Received: by 10.223.154.43 with SMTP id z40mr36177816wrb.210.1511882110152; Tue, 28 Nov 2017 07:15:10 -0800 (PST)
Received: from [192.168.2.126] (host213-123-124-182.in-addr.btopenworld.com. [213.123.124.182]) by smtp.gmail.com with ESMTPSA id c12sm11296716wrc.92.2017.11.28.07.15.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Nov 2017 07:15:09 -0800 (PST)
Subject: Re: Protecting SR policy midpoints (draft-bashandy-rtgwg-segment-routing-ti-lfa)
To: "Ahmed Bashandy (bashandy)" <bashandy@cisco.com>, Muthu Arul Mozhi Perumal <muthu.arul@gmail.com>, "sasha@axerra.com" <sasha@axerra.com>
Cc: "rtgwg@ietf.org" <rtgwg@ietf.org>
References: <CAKz0y8wLYjkSO486w5WpSuDYV3Cjvgkv6887o9-Ky9o_ViWMrQ@mail.gmail.com> <210606893.1211556.1511362363266@mail.yahoo.com> <CAKz0y8xeYnqOjLxADVwndtOp8QQaPeQBiAO2TtnCi6pYfebONA@mail.gmail.com> <5A1D50E5.7030302@cisco.com>
From: Stewart Bryant <stewart.bryant@gmail.com>
Message-ID: <8948158b-6fbe-4458-476a-ea1f8f34ee6c@gmail.com>
Date: Tue, 28 Nov 2017 15:15:07 +0000
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <5A1D50E5.7030302@cisco.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-GB
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtgwg/FK-2YDOtJcN5WaoCaNCaobGV5h8>
X-BeenThere: rtgwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Routing Area Working Group <rtgwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtgwg/>
List-Post: <mailto:rtgwg@ietf.org>
List-Help: <mailto:rtgwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Nov 2017 15:15:14 -0000


On 28/11/2017 12:04, Ahmed Bashandy (bashandy) wrote:
>
> - The top label of incoming packet to node "S" is either a prefix SID 
> owned by node "F" or an adjacency SID for (S,F)

If it is an adjacency SID for (S,F) then you are violating the original 
intent of the ingress PE which was to send the packet along the path 
S->F. I really don't think you can blindly repair such a packet since to 
do so violates the policy applied to the packet. You have to do a policy 
check, and you have to make sure that the packet is not subject to ECMP 
along the repair path since ECMP avoidance might have been the intent of 
using the SR Adjacency in the first place.

- Stewart