Re: [sfc] WG adoption of draft-quinn-sfc-problem-statement-02

"mikebianc@aol.com" <mikebianc@aol.com> Fri, 24 January 2014 16:04 UTC

Return-Path: <mikebianc@aol.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EC8D1A03FF for <sfc@ietfa.amsl.com>; Fri, 24 Jan 2014 08:04:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.834
X-Spam-Level:
X-Spam-Status: No, score=-1.834 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_91=0.6, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.535, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RWwnSLg5DgPx for <sfc@ietfa.amsl.com>; Fri, 24 Jan 2014 08:04:55 -0800 (PST)
Received: from omr-d09.mx.aol.com (omr-d09.mx.aol.com [205.188.108.133]) by ietfa.amsl.com (Postfix) with ESMTP id F24A01A001E for <sfc@ietf.org>; Fri, 24 Jan 2014 08:04:54 -0800 (PST)
Received: from mtaout-mcc01.mx.aol.com (mtaout-mcc01.mx.aol.com [172.26.253.77]) by omr-d09.mx.aol.com (Outbound Mail Relay) with ESMTP id B9253701FBA59; Fri, 24 Jan 2014 11:04:53 -0500 (EST)
Received: from mgs-aam01.mail.aol.com (mgs-aam01.mail.aol.com [64.12.250.54]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by mtaout-mcc01.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 825C13800008A; Fri, 24 Jan 2014 11:04:53 -0500 (EST)
Date: Fri, 24 Jan 2014 11:04:53 -0500
From: "mikebianc@aol.com" <mikebianc@aol.com>
To: Ron_Parker@affirmednetworks.com, jmh@joelhalpern.com, linda.dunbar@huawei.com, Cathy.H.Zhang@huawei.com, paulq@cisco.com, jguichar@cisco.com
Message-ID: <204899072.8879.1390579493455.JavaMail.tomcat@mgs-aam01.mail.aol.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_8878_1923892793.1390579493454"
X-Originating-IP: 10.181.180.127, 64.12.75.136
X-Mailer: Alto
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1390579493; bh=kwmM+OvShWQYKiyLgFTuWt4Hv+o5EiQQ6SP38nJdSkM=; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type; b=kyGK0sh85YqVq2yTngVb0Hluan2jyUzH2DzkSnLE3F48/1BUfCdHtmrsRIlUi9tfE oL5FxJsQiX4pXZSteNGcaCScp/3v0r1mYiCZg2vUGNtnBza8ifMffM7xAU6UCLuoQY RrKGHMUy32MhNjQXPjUOf5PdXEf2nuD8qugA0Vps=
x-aol-sid: 3039ac1afd4d52e28f253366
X-AOL-IP: 64.12.250.54
Cc: sfc@ietf.org
Subject: Re: [sfc] WG adoption of draft-quinn-sfc-problem-statement-02
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jan 2014 16:04:59 -0000

To contextualize my comments:
Assuming you needed to insert a CDN into a chain and had 8 equally viable instances (cdn1..cdn8), I see two primary methods of choosing which instance receives a particular flow:
1.  The chain includes either the pool of services (CDN) or a shim service (proxy, service lb) where the specific instance is selected on the fly
2. The specific instance is part of the chain (cdn1)


If the latter (instance in chain), should SFC include a mechanism for remapping the chain to use another instance?

In either case, should the selection of the instance ("service distribution"?  anyone?  anyone?) be part of SFC or left up to implementation?


Since we've already discussed dynamically inserting and removing services into or from a chain (long flow use cases draft), it seems that specifying the specific service instance in a chain (#1 above) for a flow would be simpler than introducing a shim proxyish service.  This approach might also simplify the requirements for stateful v non-stateful services.




From: Ron_Parker@affirmednetworks.com<Ron_Parker@affirmednetworks.com>
To: Joel M. Halpern<jmh@joelhalpern.com>,Linda Dunbar<linda.dunbar@huawei.com>,Cathy Zhang<Cathy.H.Zhang@huawei.com>,Paul
 Quinn (paulq)<paulq@cisco.com>,Jim Guichard (jguichar)<jguichar@cisco.com>
cc: sfc@ietf.org<sfc@ietf.org>
Sent: Friday, January 24, 2014
Subject: Re: [sfc] WG adoption of draft-quinn-sfc-problem-statement-02

Hi, Joel.

I think you raise an excellent point on the ambiguity of load balancing.   I would propose that there are more than 2 cases of load balancing:

* mid-box service function (e.g., firewall) with internal load balancing
* mid-box service function (e.g., firewall) requiring external load balancing
* explicitly addressed service (e.g., DB server) with internal load balancing
* explicitly addressed service (e.g., Web HTTP server) requiring external load balancing

>From an SFC perspective, I think we can ignore the cases where the mid-box or explicit application is internally load balanced.   Such applications would typically present a single locator (i.e., IP address) to the outside world and manage redirection internally to the clustered application.    

I think the last bullet, external load balancing for an explicitly addressed service (e.g., Web HTTP server) lends itself to load balancing as an explicit service function from an SFC perspective.   That is, the service function in the service function chain is "load balancer".

The second bullet, external load balancing for mid-box service function (e.g., firewall), is slightly trickier.   From an SFC perspective, my view is that the service function that appears in the service function chain is still firewall and not load balancer.   However, I do think that SFC should explicitly embrace the concept of a "load-balanced service function".   I tried to address this in http://datatracker.ietf.org/doc/draft-parker-sfc-chain-to-path/ and would appreciate any feedback.

Thanks.

   Ron


-----Original Message-----

From: sfc [mailto:sfc-bounces@ietf.org] On Behalf Of Joel M. HalpernSent: Thursday, January 23, 2014 10:36 PMTo: Linda Dunbar; Cathy Zhang; Paul Quinn (paulq); Jim Guichard (jguichar)Cc: sfc@ietf.orgSubject: Re: [sfc] WG adoption of draft-quinn-sfc-problem-statement-02For apps that have their own internal load balancer, I agree that there is no point in the tenant using the data center offered load balancer service.But many apps do not have their own custom load balancer.  So a data center might well offer load balancing as a service for those tenants who want it.My only point was to distinguish load balancing as a service selected by the customer from load balancing used by the oeprator internall;y to deliver some other service.Yours,JoelOn 1/23/14 10:18 PM, Linda Dunbar wrote:> Joel,> Questions inserted below:> -----Original Message-----> From: sfc [mailto:sfc-bounces@ietf.org] On Behalf Of Joel M. Halpern> Sent: Thursday, January 23, 2014 3:17 PM> To: Cathy Zhang; Paul Quinn (paulq); Jim Guichard (jguichar)> Cc: sfc@ietf.org> Subject: Re: [sfc] WG adoption of draft-quinn-sfc-problem-statement-02> In looking at the services, we need to be careful about who the > service is for.  Using load balancing as an example, there are two different cases.> One case, common in  a data center, will bw where load balncing is > part of the service being delivered to the tenant, to help manage the > tenants application traffic.> [Linda] do you mean when "Load Balancing" among cluster of servers for > one tenant application being offered as a service?> Isn't this kind of "load balancing" application specific? Like Oracle > DB has its own Load Balancer among cluster of servers.> A different situation is when load balancing is used internally to the > service chaining to manage instances of the internal services (where > cardinality is invisible to the tenant / user).> In the former case, LB is a service.  And has to be able to direct > traffic to the correct tenant application instance.> In the latter case, the load balancing may well be bundled in with a > collection of co-located service instances, with the whole looking > like a service instance to service chaining and the end user.  (There > appear to be a multiplicity of ways to deliver this behavior.  How > much we need to specify in the architecture remains to be seen.) > Yours, Joel _______________________________________________> sfc mailing list> sfc@ietf.org <mailto:sfc@ietf.org>> https://www.ietf.org/mailman/listinfo/sfc_______________________________________________sfc mailing listsfc@ietf.orghttps://www.ietf.org/mailman/listinfo/sfc_______________________________________________sfc mailing listsfc@ietf.orghttps://www.ietf.org/mailman/listinfo/sfc