RE: multi-homing for provider-assigned IPv6 addresses

Chris Bowers <cbowers@juniper.net> Thu, 24 March 2016 23:34 UTC

Return-Path: <cbowers@juniper.net>
X-Original-To: rtgwg@ietfa.amsl.com
Delivered-To: rtgwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3AD812D9F3 for <rtgwg@ietfa.amsl.com>; Thu, 24 Mar 2016 16:34:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UFPXeEiJx4Kd for <rtgwg@ietfa.amsl.com>; Thu, 24 Mar 2016 16:34:26 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0142.outbound.protection.outlook.com [65.55.169.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C5AF12D0A6 for <rtgwg@ietf.org>; Thu, 24 Mar 2016 16:34:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=GbP2uH3LqLbV05kfZCn7VQgNBYXGuLbMuYRs0xZQAK8=; b=ecd8kqsasbGRObrK1SdU0iAzxe1JwHI5ld2JnaPg1XrDR0eo2LHI5U+uzvhwEHUm4qnN9U2e/W0AJ5eP4VWMAyiRB9QRcHB6xuETENhhbVkSww3jRD4SVDrPkVZ5XqspMjTT9OWlnSgERuVs3V1HIfaXgesZPbDy/ai8ML4RY7Y=
Received: from BY2PR05MB614.namprd05.prod.outlook.com (10.141.218.148) by BY2PR05MB613.namprd05.prod.outlook.com (10.141.218.145) with Microsoft SMTP Server (TLS) id 15.1.434.16; Thu, 24 Mar 2016 23:34:23 +0000
Received: from BY2PR05MB614.namprd05.prod.outlook.com ([10.141.218.148]) by BY2PR05MB614.namprd05.prod.outlook.com ([10.141.218.148]) with mapi id 15.01.0434.023; Thu, 24 Mar 2016 23:34:23 +0000
From: Chris Bowers <cbowers@juniper.net>
To: "rtgwg@ietf.org" <rtgwg@ietf.org>
Subject: RE: multi-homing for provider-assigned IPv6 addresses
Thread-Topic: multi-homing for provider-assigned IPv6 addresses
Thread-Index: AdF+uwDrcP0DGOmLTI2DpIRz9JHSSAHYdCQg
Date: Thu, 24 Mar 2016 23:34:23 +0000
Message-ID: <BY2PR05MB6149CE3235088E8010AE616A9820@BY2PR05MB614.namprd05.prod.outlook.com>
References: <BY2PR05MB614108C29A178E43A88B9D0A9890@BY2PR05MB614.namprd05.prod.outlook.com>
In-Reply-To: <BY2PR05MB614108C29A178E43A88B9D0A9890@BY2PR05MB614.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [66.129.239.13]
x-ms-office365-filtering-correlation-id: 98b457a5-f816-4f9e-d675-08d3543cd4f9
x-microsoft-exchange-diagnostics: 1; BY2PR05MB613; 5:keOuR44cWDcMsG4UN3vDrdNVCygjL8MPKF7zzaonVrX8CfNLFesRMepkSIKPMxMeN3+7RZ2R9V9p1iNM/zMOZ4+Y7uuuJbroptIFxXmP3hWY8EIWoZgHl/XOVnzuiXg8QKFL+fZbE/oHovFV/jG4rA==; 24:s15M86C/53edMpiAdadLUMwZlDsWv4+v3QLFDsL3ZvF9AypBIuy/tGC2EP79Y7q5tr05tMuxp4RNJtvibfHHAyFdvjjxSKm7kAbSALvXbS0=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR05MB613;
x-microsoft-antispam-prvs: <BY2PR05MB61398BC7282BB6F44E03948A9820@BY2PR05MB613.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(95692535739014);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001); SRVR:BY2PR05MB613; BCL:0; PCL:0; RULEID:; SRVR:BY2PR05MB613;
x-forefront-prvs: 0891BC3F3D
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(164054003)(377424004)(13464003)(51414003)(561944003)(76576001)(66066001)(33656002)(5004730100002)(76176999)(50986999)(54356999)(189998001)(15975445007)(2501003)(87936001)(77096005)(19580405001)(122556002)(3900700001)(5008740100001)(3660700001)(3280700002)(2906002)(2900100001)(2950100001)(19580395003)(450100001)(1096002)(1220700001)(5003600100002)(81166005)(11100500001)(5640700001)(10400500002)(586003)(2351001)(74316001)(1730700002)(110136002)(5002640100001)(107886002)(102836003)(4001150100001)(6116002)(3846002)(92566002)(86362001)(3194002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR05MB613; H:BY2PR05MB614.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Mar 2016 23:34:23.4785 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR05MB613
Archived-At: <http://mailarchive.ietf.org/arch/msg/rtgwg/Tua_nmXBYJxeYJ5X5TUcgFTiqf4>
X-BeenThere: rtgwg@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Routing Area Working Group <rtgwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtgwg/>
List-Post: <mailto:rtgwg@ietf.org>
List-Help: <mailto:rtgwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Mar 2016 23:34:28 -0000

RTGWG,

It seems to me that most use cases for ipv6 multi-homing with provider-assigned addresses only need to route based on source address when the destination prefix is the default route.  So why not require that source prefixes can only be paired up with the default destination prefix ::/0?  That is, we could require that a router can only route based on the source address after the longest match route lookup based on destination address has reached ::/0.  That way, a router can still route packets local to the site based on destination address.  Only once it is clear that the packet is going to the Internet can the router use the source address to pick the correct CE router to get there. 

I see that there was some discussion about this in 2013 on a thread in homenet and rtgwg in the context of draft-baker-rtgwg-src-dst-routing-use-cases, and a number of different opinions were expressed mainly from the point of view of what is needed for homenet.  At this point, RTGWG also needs to consider the impact of proposed solutions on routing scalability.  On the surface, this simplification would seem to improve the scaling properties of the solution in draft-ietf-rtgwg-dst-src-routing, while covering most use cases.

Regardless of how this discussion turns out, I think the draft itself will benefit from more active discussion of the tradeoffs involved.  

Thanks,
Chris

-----Original Message-----
From: Chris Bowers 
Sent: Tuesday, March 15, 2016 8:14 AM
To: 'rtgwg@ietf.org' <rtgwg@ietf.org>
Subject: multi-homing for provider-assigned IPv6 addresses

RTGWG,

We scheduled a significant amount of time in Buenos Aires for a discussion of multi-homing for provider-assigned IPv6 addresses for enterprise networks as well as homenet.  I want to explain the motivation for this and provide some background on the topic.  And hopefully spark some discussion on the list before Buenos Aires, as well.

RTGWG adopted draft-ietf-rtgwg-dst-src-routing last October in the context of supporting multi-homing for provider-assigned IPv6 addresses in homenet.  In Yokohama, the v6ops WG had a lengthy discussion about the need for a solution to support multi-homing for provider-assigned IPv6 addresses for enterprise networks in general (as opposed to just homenet).  This discussion took place in the context of draft-ietf-v6ops-design-choices.  That discussion can be found at:

https://youtu.be/VzH7yqqGiGc?t=5835

This discussion led to the email (copied below) from Fred Baker in his role as v6ops co-chair to the chairs of several working groups in which drafts related to this topic are being discussed.  

Our meeting in Buenos Aires includes a 20 minute time slot to discuss the background and motivation of this request from v6ops.  The topic of multi-homing for provider-assigned IPv6 addresses has a long history with many documents written, so I thought it would be useful to highlight a few of the more recent documents that I found to be particularly useful reading.

RFC 7157 "IPv6 Multihoming without Network Address Translation"
https://datatracker.ietf.org/doc/rfc7157/

draft-ietf-6man-multi-homed-host-06 "Routing packets from hosts in a multi-prefix network"
https://datatracker.ietf.org/doc/draft-ietf-6man-multi-homed-host/

In addition, it would obviously be useful read or re-read the RTGWG document on this topic:
https://datatracker.ietf.org/doc/draft-ietf-rtgwg-dst-src-routing/

There following expired document is also helpful.
https://www.ietf.org/archive/id/draft-baker-rtgwg-src-dst-routing-use-cases-01.txt

And finally, this document is useful to understand a concrete proposal for how src/dst routing information could be carried in a link-state routing protocol. 
https://datatracker.ietf.org/doc/draft-baker-ipv6-isis-dst-src-routing/

I look forward to a fruitful discussion on this topic on the list and in Buenos Aires.

Thanks,
Chris

-----Original Message-----
From: Fred Baker (fred) [mailto:fred@cisco.com] 
Sent: Sunday, November 01, 2015 11:03 PM
To: isis-ads@tools.ietf.org; rtgwg-chairs@ietf.org; isis-chairs@tools.ietf.org; ospf-chairs@tools.ietf.org; 6man Chairs <6man-chairs@tools.ietf.org>; homenet-chairs@tools.ietf.org
Cc: v6ops@ietf.org WG <v6ops@ietf.org>; The IESG <iesg@ietf.org>
Subject: PA Address Multihoming in IPv6

This email is being sent in accordance with the v6ops charter, which calls for the working group to communicate operational issues and requirements to working groups that are chartered to address them.

The IETF's current primary recommendation for multihoming of midrange enterprise networks - those that cannot justify the costs and overheads of a PI address and in fact multihome - is to obtain a provider-allocated prefix from each of their upstream networks, and deploy a /64 out of each on each LAN in their networks.

https://tools.ietf.org/html/rfc4213
4213 Basic Transition Mechanisms for IPv6 Hosts and Routers. E. Nordmark,
     R. Gilligan. October 2005. (Format: TXT=58575 bytes) (Obsoletes
     RFC2893) (Status: PROPOSED STANDARD) (DOI: 10.17487/RFC4213)

This has a number of issues, not the least of which is in the back end OSS software, which needs to now scale to a much larger number of prefixes, handle multiple addresses in DNS for servers and perhaps clients, resolve reverse DNS queries, and so on. It also is obviously carrying that much more information in routing.

One outcome of v6ops' discussions this morning was that PI multihoming demonstrably works, but PA multihoming when the upstreams implement BCP 38 filtering requires the deployment of some form of egress routing - source/destination routing in which the traffic using a stated PA source prefix and directed to a remote destination is routed to the provider that allocated the prefix. The IETF currently has no such recommendation, or consensus that it should have. However, enterprise networks are known to delaying operational deployment of IPv6 in part due to the complexities visited upon them and the cost of the back end software upgrades, and this is part of that issue.

Without trying to limit the options available to the working groups in question, I'll point out that options currently on the table include the following. There are also current open source implementations of source/destination and source-specific routing in IS-IS, OSPFv3, and Babel.

https://datatracker.ietf.org/doc/draft-baker-ipv6-isis-dst-src-routing
  "IPv6 Source/Destination Routing using IS-IS", Fred Baker, David
  Lamparter, 2015-10-19

https://datatracker.ietf.org/doc/draft-boutier-babel-source-specific
  "Source-Specific Routing in Babel", Matthieu Boutier, Juliusz
  Chroboczek, 2015-05-27

https://datatracker.ietf.org/doc/draft-ietf-6man-multi-homed-host
  "Routing packets from hosts in a multi-prefix network", Fred Baker,
  Brian Carpenter, 2015-10-15

https://datatracker.ietf.org/doc/draft-ietf-ospf-ospfv3-lsa-extend
  "OSPFv3 LSA Extendibility", Acee Lindem, Sina Mirtorabi, Abhay Roy, Fred
  Baker, 2015-10-08

https://datatracker.ietf.org/doc/draft-ietf-rtgwg-dst-src-routing
  "Destination/Source Routing", David Lamparter, 2015-10-17,

https://datatracker.ietf.org/doc/draft-sarikaya-6man-sadr-overview
  "Source Address Dependent Routing and Source Address Selection for IPv6
  Hosts: Problem Space Overview", Behcet Sarikaya, Mohamed Boucadair,
  2015-08-17

https://datatracker.ietf.org/doc/draft-sarikaya-6man-sadr-ra
  "IPv6 RA Option for Source Address Dependent Routing", Behcet Sarikaya,
  2015-06-08

https://datatracker.ietf.org/doc/draft-sarikaya-dhc-6man-dhcpv6-sadr
  "DHCPv6 Solution for Source Address Dependent Routing", Behcet Sarikaya,
  2015-05-08

https://datatracker.ietf.org/doc/draft-xu-ospf-multi-homing-ipv6
  "Extending OSPFv3 to Support Multi-homing", Mingwei Xu, Shu Yang,
  Jianping Wu, Fred Baker, 2015-10-11,

https://datatracker.ietf.org/doc/draft-baker-rtgwg-src-dst-routing-use-cases