Re: [sfc] clarification on Service Path ID for draft-penno-sfc-packet

Ron Parker <Ron_Parker@affirmednetworks.com> Tue, 18 July 2017 14:11 UTC

Return-Path: <Ron_Parker@affirmednetworks.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E119131B09 for <sfc@ietfa.amsl.com>; Tue, 18 Jul 2017 07:11:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AxXfJ7CnndvD for <sfc@ietfa.amsl.com>; Tue, 18 Jul 2017 07:11:37 -0700 (PDT)
Received: from hub021-ca-1.exch021.serverdata.net (hub021-ca-1.exch021.serverdata.net [64.78.22.168]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E506D1317C3 for <sfc@ietf.org>; Tue, 18 Jul 2017 07:11:37 -0700 (PDT)
Received: from MBX021-W3-CA-2.exch021.domain.local ([10.254.4.78]) by HUB021-CA-1.exch021.domain.local ([10.254.4.30]) with mapi id 14.03.0319.002; Tue, 18 Jul 2017 07:11:37 -0700
From: Ron Parker <Ron_Parker@affirmednetworks.com>
To: "Joel M. Halpern" <jmh@joelhalpern.com>, "Kent Leung (kleung)" <kleung@cisco.com>, "Reinaldo Penno (repenno)" <repenno@cisco.com>, Dave Dolson <ddolson@sandvine.com>, "Roberta Maglione (robmgl)" <robmgl@cisco.com>, James N Guichard <james.n.guichard@huawei.com>
CC: "sfc@ietf.org" <sfc@ietf.org>
Thread-Topic: [sfc] clarification on Service Path ID for draft-penno-sfc-packet
Thread-Index: AdL8yGj6ijlxPpxFQhyonVi4uiBr2QABYlRQAACi1WAACSYE0ACIKd4AAAhrTgAAAUD4AAAAxu6AACekloAABb+SAAAE3CsAAA5wt1A=
Date: Tue, 18 Jul 2017 14:11:36 +0000
Message-ID: <CDF2F015F4429F458815ED2A6C2B6B0B839F7479@MBX021-W3-CA-2.exch021.domain.local>
References: <91d8a4564df24299a24bee2688c9f6a6@XCH-RTP-006.cisco.com> <BF1BE6D99B52F84AB9B48B7CF6F17DA3EF0D62@SJCEML702-CHM.china.huawei.com> <E8355113905631478EFF04F5AA706E98A9060316@wtl-exchp-2.sandvine.com> <BF1BE6D99B52F84AB9B48B7CF6F17DA3EF0DF8@SJCEML702-CHM.china.huawei.com> <F241AD1D-A007-4AC7-A2B0-19550F1FF52C@cisco.com> <E8355113905631478EFF04F5AA706E98A9064B5C@wtl-exchp-2.sandvine.com> <99da3de545b142f5b9400f808f418fa1@XCH-RTP-006.cisco.com> <7B36C41A-EBE1-453E-BB25-04377E63B559@cisco.com> <6a0788234fec45909112016317e149fd@XCH-RTP-006.cisco.com> <CDF2F015F4429F458815ED2A6C2B6B0B839F731A@MBX021-W3-CA-2.exch021.domain.local> <6fa79c3c-6ae7-7818-47b3-1c71de2f0c50@joelhalpern.com>
In-Reply-To: <6fa79c3c-6ae7-7818-47b3-1c71de2f0c50@joelhalpern.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [50.203.66.100]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/6DIiFdv6-tJmjJtmWRcR7knpN1A>
Subject: Re: [sfc] clarification on Service Path ID for draft-penno-sfc-packet
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jul 2017 14:11:40 -0000

Good point on the optionality of this bidirectional concept.

For the bidirectional case, we would ultimately like to know the correlation of the 2 paths.    I'm thinking that this is more, even, than correlating the "forward" SPI and the "reverse" SPI.   It also becomes useful to correlate the position of a particular service function.   A strict presumption of mirrored order for the 2 directions does not always hold.   Lets say in the forward direction we want SF types A, B, C, D but in the reverse direction we want A, D, C, B.   It would be useful to know that SF D appears at the 4th position of the forward flow and the 2nd position of the correlated reverse flow.   This starts to become too heavy to insert into the encapsulation itself.   Instead, this full knowledge can be achieved through control plane distribution and stateful elements (e.g., SFF, SF).

So, the encapsulation can carry all of the correlation information, none of the correlation information, or some of the correlation information.    I'm not so sure "some" is that useful.

   Ron


-----Original Message-----
From: Joel M. Halpern [mailto:jmh@joelhalpern.com] 
Sent: Tuesday, July 18, 2017 9:58 AM
To: Ron Parker <Ron_Parker@affirmednetworks.com>; Kent Leung (kleung) <kleung@cisco.com>; Reinaldo Penno (repenno) <repenno@cisco.com>; Dave Dolson <ddolson@sandvine.com>; Roberta Maglione (robmgl) <robmgl@cisco.com>; James N Guichard <james.n.guichard@huawei.com>
Cc: sfc@ietf.org
Subject: Re: [sfc] clarification on Service Path ID for draft-penno-sfc-packet

Since there are not always two directions, I would prefer not to define that bit as always meaning direction.  I do not mind if the bit is used by configuration in a directional fashion.  (It is odd, but clearly works.)

Yours,
Joel

On 7/18/17 9:12 AM, Ron Parker wrote:
> I support 5.4.1 (single SPI with direction indicated in SI).   That 
> being said, the approach effectively reduces SI by 1 bit and reallocates 
> that bit to direction.   Is it feasible to instead be explicit by 
> creating an direction bit?   Also, how do we refer to directions?   
> East/West?   North/South?  Left/Right?   Upstream/Downstream?
> 
>     Ron
> 
> *From:* sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *Kent Leung 
> (kleung)
> *Sent:* Tuesday, July 18, 2017 4:54 AM
> *To:* Reinaldo Penno (repenno) <repenno@cisco.com>; Dave Dolson 
> <ddolson@sandvine.com>; Roberta Maglione (robmgl) <robmgl@cisco.com>; 
> James N Guichard <james.n.guichard@huawei.com>
> *Cc:* sfc@ietf.org
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Hi Reinaldo. I agree we need to get agreement in WG and update the 
> draft soon as folks are unsure what to implement.
> 
> It seems most folks have chimed in. Here’s the latest count. I’m 
> putting names down to make sure the count is accurate.
> 
> Sect 5.4.1 (one service path ID, service index indicates flow direction):
> 
> -(2) Dave, Joel
> 
> Sect 5.4.2 (two service path IDs, each indicate flow direction):
> 
> -(6) Sumandra, Jim, Kent, Renaldo, Roberta, Paul
> 
> Do we have some rough consensus yet? Or wait for more opinions to decide?
> 
> Kent
> 
> *From:* Reinaldo Penno (repenno)
> *Sent:* Monday, July 17, 2017 3:59 PM
> *To:* Kent Leung (kleung) <kleung@cisco.com 
> <mailto:kleung@cisco.com>>; Dave Dolson <ddolson@sandvine.com 
> <mailto:ddolson@sandvine.com>>; Roberta Maglione (robmgl) 
> <robmgl@cisco.com <mailto:robmgl@cisco.com>>; James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>>
> *Cc:* sfc@ietf.org <mailto:sfc@ietf.org>
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Hi Kent/others,
> 
> this decision is quite important for real deployments, as opposed to 
> demos and related.  I hope as the first step we all agree that we 
> cannot have more than one way of interpreting directionality of paths 
> and associated reverse paths. That would be an interoperability 
> nightmare and reduce the usefulness of NSH considerably.
> 
> So, whatever way it goes the WG needs to embrace it.
> 
> Thanks,
> 
> *From: *sfc <sfc-bounces@ietf.org <mailto:sfc-bounces@ietf.org>> on 
> behalf of "Kent Leung (kleung)" <kleung@cisco.com 
> <mailto:kleung@cisco.com>>
> *Date: *Monday, July 17, 2017 at 10:36 AM
> *To: *Dave Dolson <ddolson@sandvine.com 
> <mailto:ddolson@sandvine.com>>, "Roberta Maglione (robmgl)" 
> <robmgl@cisco.com <mailto:robmgl@cisco.com>>, James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>>
> *Cc: *"sfc@ietf.org <mailto:sfc@ietf.org>" <sfc@ietf.org 
> <mailto:sfc@ietf.org>>
> *Subject: *Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Why can’t there be stats for per SPI and more granular stats for per 
> SPI/SI? They seem to serve different purposes. The former is providing 
> counters for all flows in each service path. The latter is provide 
> counters for all flows served at each hop in the service path.
> 
> Can you explain the “spiral” scenario and how that pertains to 
> usefulness of having per service path stats? Thanks.
> 
> Kent
> 
> *From:* Dave Dolson [mailto:ddolson@sandvine.com]
> *Sent:* Monday, July 17, 2017 3:01 PM
> *To:* Roberta Maglione (robmgl) <robmgl@cisco.com 
> <mailto:robmgl@cisco.com>>; James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>>
> *Cc:* Kent Leung (kleung) <kleung@cisco.com 
> <mailto:kleung@cisco.com>>; sfc@ietf.org <mailto:sfc@ietf.org>
> *Subject:* RE: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> Strictly, stats should be per SPI and SI, in order to support the 
> so-called spiral.
> 
> But I can see how folks might find the lazy implementation to be useful.
> 
> *From:*Roberta Maglione (robmgl) [mailto:robmgl@cisco.com]
> *Sent:* Monday, July 17, 2017 11:00 AM
> *To:* James N Guichard
> *Cc:* Dave Dolson; Kent Leung (kleung); sfc@ietf.org 
> <mailto:sfc@ietf.org>
> *Subject:* Re: [sfc] clarification on Service Path ID for 
> draft-penno-sfc-packet
> 
> I agree on the operational aspect: having different SPI's for each 
> direction simplifies the troubleshooting procedures, as statistics on 
> the packets counters for each direction on each SF, can be displayed 
> just based on SPI.
> 
> Regards,
> 
> Roberta
> 
> Inviato da iPad
> 
> 
> Il giorno 15 lug 2017, alle ore 01:09, James N Guichard 
> <james.n.guichard@huawei.com <mailto:james.n.guichard@huawei.com>> ha
> scritto:
> 
>     Yes understood but I was assuming no manipulation of the SI and my
>     point was more from an operational perspective; if I use the same
>     path ID in both directions then I cannot immediately tell in which
>     direction the packets are flowing unless I go one step deeper and
>     look at the SI leading to a correlation of SPI + SI to be able to
>     figure out my traffic matrix. Not so if the SPI is uni-directional.
> 
>     Jim
> 
>     *From:* Dave Dolson [mailto:ddolson@sandvine.com]
>     *Sent:* Friday, July 14, 2017 2:51 PM
>     *To:* James N Guichard <james.n.guichard@huawei.com
>     <mailto:james.n.guichard@huawei.com>>; Kent Leung (kleung)
>     <kleung@cisco.com <mailto:kleung@cisco.com>>; sfc@ietf.org
>     <mailto:sfc@ietf.org>
>     *Subject:* RE: clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     There is not actually forwarding ambiguity, since SFF forwarding
>     depends on **both** SPI and SI.
> 
>     So for example, there is no ambiguity in forwarding to use SI in the
>     range [0,127] of up-link and range [128,255] for down-link, on the
>     same SPI.
> 
>     The limitation is ~127 SFs per path instead of ~255.
> 
>     As I see it, Kent’s question is one of aesthetics. Do folks like the
>     same SPI used for two directions?
> 
>     Personally, I find use of a single SPI to be more elegant,
>       consuming only one path ID instead of two. (section 5.4.1).
> 
>     It may make debugging easier as well.
> 
>     Also, for what it’s worth, we demonstrated this method of section
>     5.4.1 at a previous IETF hackathon.
> 
>     -Dave
> 
>     *From:*sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *James N Guichard
>     *Sent:* Friday, July 14, 2017 2:25 PM
>     *To:* Kent Leung (kleung); sfc@ietf.org <mailto:sfc@ietf.org>
>     *Subject:* Re: [sfc] clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     Hi Kent,
> 
>     [personal opinion …] I have always assumed that the service path ID
>     would be uni-directional given that it would be difficult to avoid
>     collision in all forwarding scenarios. If you look at a basic SFC
>     a-b-c and the service index is set to 255 at the classifiers a & c
>     (which imho will be the normal practice) then at b you would have a
>     conflict if the same service path ID is used in both directions.
> 
>     Jim
> 
>     *From:* sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *Kent Leung
>     (kleung)
>     *Sent:* Friday, July 14, 2017 1:58 PM
>     *To:* sfc@ietf.org <mailto:sfc@ietf.org>
>     *Subject:* [sfc] clarification on Service Path ID for
>     draft-penno-sfc-packet
> 
>     Hi. We are working on a revision for this draft. There were 4
>     proposed solution options in section 5. During some discussions,
>     most folks seem to favor the use of algorithmic method in section
>     5.4. However, there are 2 sub-options. One is based on same Service
>     Path ID and using Service Index to determine flow direction (sect.
>     5.4.1). The other is based on setting high order bit on Serve Path
>     ID, which determines flow direction (sect. 5.4.2). There are mixed
>     opinions. One reason is that there may be the assumption the Service
>     Path ID is uni-directional. No explicit wording of that nature has
>     been encountered in the RFCs, maybe we missed something?
> 
>     If Serve Path ID is required to be uni-directional, then the answer
>     is easy (=> 5.4.2). We would like to solicit WG comments to get
>     rough consensus and revised the next version with that solution.
>     This problem is critical to address for Service Function that
>     generate packet in reverse direction, especially security service
>     functions as mentioned in draft-wang-sfc-ns-use-cases.
> 
>     Thanks.
> 
>     Kent
> 
>     _______________________________________________
>     sfc mailing list
>     sfc@ietf.org <mailto:sfc@ietf.org>
>     https://url.serverdata.net/?a_R6iwBQImYWCr69g6-h0raXDRY2EORuQb3vcjuo_jYzi8LHrrWr1VlAzSt23U6FhEXpHwQ1RPMguMZ7RGyHHPw~~
>     
> <https://url.serverdata.net/?a_R6iwBQImYWCr69g6-h0raXDRY2EORuQb3vcjuo_
> jYzi8LHrrWr1VlAzSt23U6FhEXpHwQ1RPMguMZ7RGyHHPw~~>
> 
> 
> 
> _______________________________________________
> sfc mailing list
> sfc@ietf.org
> https://url.serverdata.net/?a_R6iwBQImYWCr69g6-h0raXDRY2EORuQb3vcjuo_j
> Yzi8LHrrWr1VlAzSt23U6FhEXpHwQ1RPMguMZ7RGyHHPw~~
>