Re: [sfc] clarification on Service Path ID for draft-penno-sfc-packet

"Joel M. Halpern" <jmh@joelhalpern.com> Tue, 18 July 2017 13:58 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C33D12785F for <sfc@ietfa.amsl.com>; Tue, 18 Jul 2017 06:58:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.702
X-Spam-Level:
X-Spam-Status: No, score=-2.702 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WZW-Iopp_1lu for <sfc@ietfa.amsl.com>; Tue, 18 Jul 2017 06:58:06 -0700 (PDT)
Received: from maila2.tigertech.net (maila2.tigertech.net [208.80.4.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D2EC5126CB6 for <sfc@ietf.org>; Tue, 18 Jul 2017 06:58:06 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by maila2.tigertech.net (Postfix) with ESMTP id B149D2412F8; Tue, 18 Jul 2017 06:58:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=1.tigertech; t=1500386286; bh=VXF8NpYVdjzgOKktU8AUu0cXar7rEb35yBHpMh4NaNU=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=XiNcH/eXfftxSWPQzS/5Cc9OTc7S8HLbwEMI/BHjFeXg9qK16qk2uXiruYeddDklu HI70AxTZOVUYt1EEFBqburi+EB0hEzRS2krGem+cWps3CQ6zfzFnouaB78etzyNnCT dIyMt5olc8I8ezcE/X5tqy5gNgn8P1Zf3vxtR3MI=
X-Virus-Scanned: Debian amavisd-new at maila2.tigertech.net
Received: from dhcp-84b9.meeting.ietf.org (dhcp-84b9.meeting.ietf.org [31.133.132.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by maila2.tigertech.net (Postfix) with ESMTPSA id 684D0240D43; Tue, 18 Jul 2017 06:58:04 -0700 (PDT)
To: Ron Parker <Ron_Parker@affirmednetworks.com>, "Kent Leung (kleung)" <kleung@cisco.com>, "Reinaldo Penno (repenno)" <repenno@cisco.com>, Dave Dolson <ddolson@sandvine.com>, "Roberta Maglione (robmgl)" <robmgl@cisco.com>, James N Guichard <james.n.guichard@huawei.com>
Cc: "sfc@ietf.org" <sfc@ietf.org>
References: <91d8a4564df24299a24bee2688c9f6a6@XCH-RTP-006.cisco.com> <BF1BE6D99B52F84AB9B48B7CF6F17DA3EF0D62@SJCEML702-CHM.china.huawei.com> <E8355113905631478EFF04F5AA706E98A9060316@wtl-exchp-2.sandvine.com> <BF1BE6D99B52F84AB9B48B7CF6F17DA3EF0DF8@SJCEML702-CHM.china.huawei.com> <F241AD1D-A007-4AC7-A2B0-19550F1FF52C@cisco.com> <E8355113905631478EFF04F5AA706E98A9064B5C@wtl-exchp-2.sandvine.com> <99da3de545b142f5b9400f808f418fa1@XCH-RTP-006.cisco.com> <7B36C41A-EBE1-453E-BB25-04377E63B559@cisco.com> <6a0788234fec45909112016317e149fd@XCH-RTP-006.cisco.com> <CDF2F015F4429F458815ED2A6C2B6B0B839F731A@MBX021-W3-CA-2.exch021.domain.local>
From: "Joel M. Halpern" <jmh@joelhalpern.com>
Message-ID: <6fa79c3c-6ae7-7818-47b3-1c71de2f0c50@joelhalpern.com>
Date: Tue, 18 Jul 2017 09:58:02 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <CDF2F015F4429F458815ED2A6C2B6B0B839F731A@MBX021-W3-CA-2.exch021.domain.local>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/3pPD9Y8lGsii5rayBHWFKCEe-wk>
Subject: Re: [sfc] clarification on Service Path ID for draft-penno-sfc-packet
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jul 2017 13:58:09 -0000

Since there are not always two directions, I would prefer not to define 
that bit as always meaning direction.  I do not mind if the bit is used 
by configuration in a directional fashion.  (It is odd, but clearly works.)

Yours,
Joel

On 7/18/17 9:12 AM, Ron Parker wrote:
> I support 5.4.1 (single SPI with direction indicated in SI).   That 
> being said, the approach effectively reduces SI by 1 bit and reallocates 
> that bit to direction.   Is it feasible to instead be explicit by 
> creating an direction bit?   Also, how do we refer to directions?   
> East/West?   North/South?  Left/Right?   Upstream/Downstream?
> 
>     Ron
> 
> *From:* sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *Kent Leung (kleung)
> *Sent:* Tuesday, July 18, 2017 4:54 AM
> *To:* Reinaldo Penno (repenno) <repenno@cisco.com>; Dave Dolson 
> <ddolson@sandvine.com>; Roberta Maglione (robmgl) <robmgl@cisco.com>; 
> James N Guichard <james.n.guichard@huawei.com>
> *Cc:* sfc@ietf.org
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Hi Reinaldo. I agree we need to get agreement in WG and update the draft 
> soon as folks are unsure what to implement.
> 
> It seems most folks have chimed in. Here’s the latest count. I’m putting 
> names down to make sure the count is accurate.
> 
> Sect 5.4.1 (one service path ID, service index indicates flow direction):
> 
> -(2) Dave, Joel
> 
> Sect 5.4.2 (two service path IDs, each indicate flow direction):
> 
> -(6) Sumandra, Jim, Kent, Renaldo, Roberta, Paul
> 
> Do we have some rough consensus yet? Or wait for more opinions to decide?
> 
> Kent
> 
> *From:* Reinaldo Penno (repenno)
> *Sent:* Monday, July 17, 2017 3:59 PM
> *To:* Kent Leung (kleung) <kleung@cisco.com <mailto:kleung@cisco.com>>; 
> Dave Dolson <ddolson@sandvine.com <mailto:ddolson@sandvine.com>>; 
> Roberta Maglione (robmgl) <robmgl@cisco.com <mailto:robmgl@cisco.com>>; 
> James N Guichard <james.n.guichard@huawei.com 
> <mailto:james.n.guichard@huawei.com>>
> *Cc:* sfc@ietf.org <mailto:sfc@ietf.org>
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Hi Kent/others,
> 
> this decision is quite important for real deployments, as opposed to 
> demos and related.  I hope as the first step we all agree that we cannot 
> have more than one way of interpreting directionality of paths and 
> associated reverse paths. That would be an interoperability nightmare 
> and reduce the usefulness of NSH considerably.
> 
> So, whatever way it goes the WG needs to embrace it.
> 
> Thanks,
> 
> *From: *sfc <sfc-bounces@ietf.org <mailto:sfc-bounces@ietf.org>> on 
> behalf of "Kent Leung (kleung)" <kleung@cisco.com <mailto:kleung@cisco.com>>
> *Date: *Monday, July 17, 2017 at 10:36 AM
> *To: *Dave Dolson <ddolson@sandvine.com <mailto:ddolson@sandvine.com>>, 
> "Roberta Maglione (robmgl)" <robmgl@cisco.com 
> <mailto:robmgl@cisco.com>>, James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>>
> *Cc: *"sfc@ietf.org <mailto:sfc@ietf.org>" <sfc@ietf.org 
> <mailto:sfc@ietf.org>>
> *Subject: *Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Why can’t there be stats for per SPI and more granular stats for per 
> SPI/SI? They seem to serve different purposes. The former is providing 
> counters for all flows in each service path. The latter is provide 
> counters for all flows served at each hop in the service path.
> 
> Can you explain the “spiral” scenario and how that pertains to 
> usefulness of having per service path stats? Thanks.
> 
> Kent
> 
> *From:* Dave Dolson [mailto:ddolson@sandvine.com]
> *Sent:* Monday, July 17, 2017 3:01 PM
> *To:* Roberta Maglione (robmgl) <robmgl@cisco.com 
> <mailto:robmgl@cisco.com>>; James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>>
> *Cc:* Kent Leung (kleung) <kleung@cisco.com <mailto:kleung@cisco.com>>; 
> sfc@ietf.org <mailto:sfc@ietf.org>
> *Subject:* RE: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Strictly, stats should be per SPI and SI, in order to support the 
> so-called spiral.
> 
> But I can see how folks might find the lazy implementation to be useful.
> 
> *From:*Roberta Maglione (robmgl) [mailto:robmgl@cisco.com]
> *Sent:* Monday, July 17, 2017 11:00 AM
> *To:* James N Guichard
> *Cc:* Dave Dolson; Kent Leung (kleung); sfc@ietf.org <mailto:sfc@ietf.org>
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> I agree on the operational aspect: having different SPI's for each 
> direction simplifies the troubleshooting procedures, as statistics on 
> the packets counters for each direction on each SF, can be displayed 
> just based on SPI.
> 
> Regards,
> 
> Roberta
> 
> Inviato da iPad
> 
> 
> Il giorno 15 lug 2017, alle ore 01:09, James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>> ha 
> scritto:
> 
>     Yes understood but I was assuming no manipulation of the SI and my
>     point was more from an operational perspective; if I use the same
>     path ID in both directions then I cannot immediately tell in which
>     direction the packets are flowing unless I go one step deeper and
>     look at the SI leading to a correlation of SPI + SI to be able to
>     figure out my traffic matrix. Not so if the SPI is uni-directional.
> 
>     Jim
> 
>     *From:* Dave Dolson [mailto:ddolson@sandvine.com]
>     *Sent:* Friday, July 14, 2017 2:51 PM
>     *To:* James N Guichard <james.n.guichard@huawei.com
>     <mailto:james.n.guichard@huawei.com>>; Kent Leung (kleung)
>     <kleung@cisco.com <mailto:kleung@cisco.com>>; sfc@ietf.org
>     <mailto:sfc@ietf.org>
>     *Subject:* RE: clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     There is not actually forwarding ambiguity, since SFF forwarding
>     depends on **both** SPI and SI.
> 
>     So for example, there is no ambiguity in forwarding to use SI in the
>     range [0,127] of up-link and range [128,255] for down-link, on the
>     same SPI.
> 
>     The limitation is ~127 SFs per path instead of ~255.
> 
>     As I see it, Kent’s question is one of aesthetics. Do folks like the
>     same SPI used for two directions?
> 
>     Personally, I find use of a single SPI to be more elegant,
>       consuming only one path ID instead of two. (section 5.4.1).
> 
>     It may make debugging easier as well.
> 
>     Also, for what it’s worth, we demonstrated this method of section
>     5.4.1 at a previous IETF hackathon.
> 
>     -Dave
> 
>     *From:*sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *James N Guichard
>     *Sent:* Friday, July 14, 2017 2:25 PM
>     *To:* Kent Leung (kleung); sfc@ietf.org <mailto:sfc@ietf.org>
>     *Subject:* Re: [sfc] clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     Hi Kent,
> 
>     [personal opinion …] I have always assumed that the service path ID
>     would be uni-directional given that it would be difficult to avoid
>     collision in all forwarding scenarios. If you look at a basic SFC
>     a-b-c and the service index is set to 255 at the classifiers a & c
>     (which imho will be the normal practice) then at b you would have a
>     conflict if the same service path ID is used in both directions.
> 
>     Jim
> 
>     *From:* sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *Kent Leung
>     (kleung)
>     *Sent:* Friday, July 14, 2017 1:58 PM
>     *To:* sfc@ietf.org <mailto:sfc@ietf.org>
>     *Subject:* [sfc] clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     Hi. We are working on a revision for this draft. There were 4
>     proposed solution options in section 5. During some discussions,
>     most folks seem to favor the use of algorithmic method in section
>     5.4. However, there are 2 sub-options. One is based on same Service
>     Path ID and using Service Index to determine flow direction (sect.
>     5.4.1). The other is based on setting high order bit on Serve Path
>     ID, which determines flow direction (sect. 5.4.2). There are mixed
>     opinions. One reason is that there may be the assumption the Service
>     Path ID is uni-directional. No explicit wording of that nature has
>     been encountered in the RFCs, maybe we missed something?
> 
>     If Serve Path ID is required to be uni-directional, then the answer
>     is easy (=> 5.4.2). We would like to solicit WG comments to get
>     rough consensus and revised the next version with that solution.
>     This problem is critical to address for Service Function that
>     generate packet in reverse direction, especially security service
>     functions as mentioned in draft-wang-sfc-ns-use-cases.
> 
>     Thanks.
> 
>     Kent
> 
>     _______________________________________________
>     sfc mailing list
>     sfc@ietf.org <mailto:sfc@ietf.org>
>     https://www.ietf.org/mailman/listinfo/sfc
>     <https://url.serverdata.net/?a_R6iwBQImYWCr69g6-h0raXDRY2EORuQb3vcjuo_jYzi8LHrrWr1VlAzSt23U6FhEXpHwQ1RPMguMZ7RGyHHPw~~>
> 
> 
> 
> _______________________________________________
> sfc mailing list
> sfc@ietf.org
> https://www.ietf.org/mailman/listinfo/sfc
>