Re: [sfc] The SFC WG has placed draft-eastlake-sfc-nsh-ecn-support in state "Candidate for WG Adoption"

Bob Briscoe <in@bobbriscoe.net> Tue, 15 January 2019 22:53 UTC

Return-Path: <in@bobbriscoe.net>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CBDF130F1F; Tue, 15 Jan 2019 14:53:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 3
X-Spam-Level: ***
X-Spam-Status: No, score=3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_SUMOF=5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=bobbriscoe.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U9eWYLb0KeVd; Tue, 15 Jan 2019 14:53:27 -0800 (PST)
Received: from server.dnsblock1.com (server.dnsblock1.com [85.13.236.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2EFD127598; Tue, 15 Jan 2019 14:53:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bobbriscoe.net; s=default; h=Content-Type:In-Reply-To:MIME-Version:Date: Message-ID:From:References:Cc:To:Subject:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=AepkGPFN0DypkiFeETQcnn8oHn18vsrRm/KlXIvJWuo=; b=LLBWDdITocjGxUOFAyO3PCQBz gylXqW4mDUcxIpFW6Wwhk/J/LwdFegrkxPol56jpB5ulVY7l95/hV28hDoutVktBq9jAE4dmwMKLR Xshoscxt5hChC24hR6f9aSuz/6dcVdlhf5//X0v9tL6hv+NedSargKMaOcpqWMXMaMjRzYgcTkfBm cInrWLr1Hrvr5EYMRlhP+IVrmYMSiRTi2LDLHQDPojkO9p7SVqjeWf9qAfn/odCng3FIJQXQHXZ0b KRAlZHVxCIXsGzxwjRbJM9a0cAHT2/nFWv0dJaLv6PlPfAXKpvByQMxs+iC7YBLKLzCE40k/KZzDK uLPhxDO0A==;
Received: from 35.0.208.46.dyn.plus.net ([46.208.0.35]:58330 helo=[192.168.0.3]) by server.dnsblock1.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.91) (envelope-from <in@bobbriscoe.net>) id 1gjXaF-0003dC-KR; Tue, 15 Jan 2019 22:53:24 +0000
To: Donald Eastlake <d3e3e3@gmail.com>, Tal Mizrahi <tal.mizrahi.phd@gmail.com>
Cc: IETF Secretariat <ietf-secretariat-reply@ietf.org>, sfc-chairs@ietf.org, draft-eastlake-sfc-nsh-ecn-support@ietf.org, sfc@ietf.org
References: <154649225579.32607.12231566034033496144.idtracker@ietfa.amsl.com> <CABUE3XmrmTK9EJLGD=Zz1ANSAqja-avTuoAGgNoAcALqAVVOrA@mail.gmail.com> <CAF4+nEHFcEa18b0zJ+myqo=GmzdRB=iycH5vXAU=kK9A-FjPyA@mail.gmail.com>
From: Bob Briscoe <in@bobbriscoe.net>
Message-ID: <4f7963fc-0157-8587-eeb5-48d63a3de7f8@bobbriscoe.net>
Date: Tue, 15 Jan 2019 22:53:22 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1
MIME-Version: 1.0
In-Reply-To: <CAF4+nEHFcEa18b0zJ+myqo=GmzdRB=iycH5vXAU=kK9A-FjPyA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------E6819EA495549B4E2C925F01"
Content-Language: en-GB
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.dnsblock1.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bobbriscoe.net
X-Get-Message-Sender-Via: server.dnsblock1.com: authenticated_id: in@bobbriscoe.net
X-Authenticated-Sender: server.dnsblock1.com: in@bobbriscoe.net
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/tmLF1WGFWUV7pfR9DH0ZzYsbqL4>
Subject: Re: [sfc] The SFC WG has placed draft-eastlake-sfc-nsh-ecn-support in state "Candidate for WG Adoption"
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jan 2019 22:53:31 -0000

Tal,

Following up on Donald's responses as a co-author,...

On 08/01/2019 21:43, Donald Eastlake wrote:
> Hi Tal,
>
> On Mon, Jan 7, 2019 at 2:57 AM Tal Mizrahi <tal.mizrahi.phd@gmail.com> wrote:
>> Hi,
>>
>> I reviewed the draft, and I believe it is worth pursuing in the working group.
> Thanks for the support.
>
>> Comments:
>>
>> - Section 1.3 / Section 4: these sections discuss how the ingress node (classifier) may react to the congestion. However, it seems that there may be a conflict if the egress node both propagates the ECN to the destination AND sends a congestion feedback to the ingress node. In this case traffic may be throttled by two nodes (traffic source and NSH classifier). It would be helpful if the draft clarifies whether these two behaviors are mutually exclusive, or how they coexist.
> That is a reasonable consideration and the draft should probably talk
> about it. I think some actions by the NSH classifier could cause
> problems but there are other NSH classifier actions that would be OK.
[BB] We've started covered to cover this in Section 1.3 
<https://tools.ietf.org/html/draft-eastlake-sfc-nsh-ecn-support-02#section-1.3>, 
where we list and discuss the three types of action at the domain 
ingress that would be reasonable in response to congestion. However, I 
agree this isn't sufficient to address your concern, so it would also be 
useful to say what type of ingress action would /not/ be appropriate. 
Perhaps adding the following text to the note after the 3 bullets 
(subject to agreement by co-authors):

    "Any action by the ingress to reduce congestion needs to allow
    sufficient time for the end-to-end congestion control loop to
    respond first, for instance by the ingress taking a smoothed average
    of the level of congestion signalled by feedback from the tunnel
    egress."

I can also reassure you for each specific case that we suggest:

 1. Policing: Policing based on congestion feedback is intended to take
    over if the load is unresponsive to congestion signalling forwarded
    towards the receiver. Therefore, if the end-to-end congestion
    control is doing its job, policing-based on congestion feedback
    should do nothing. So the two ought not to conflict.
    Congestion-based policing should only intervene if congestion
    becomes excessive.

    [Note that this is not the same as a rate policer (which doesn't
    need congestion feedback - it can see the rate locally, so it can
    police to a rate without feedback about congestion from other
    nodes). Typically, rate policing conservatively limits everyone's
    rates to limit the possibility of congestion downstream. The idea of
    congestion policing is that you don't need to police rates - you
    only police if the sum of all the traffic at any node exceeds
    capacity (and if the end-systems don't respond to the congestion
    themselves).]

 2. Upstream congestion feedback: I believe this is a sub-case of
    congestion-based-policing (1), where the ingress passes its signals
    to some other node that does the policing on its behalf.

 3. Re-direction: Traffic engineering is definitely a case where it has
    to move slowly, which gives time for the end-system congestion
    controls to respond. We already have a point about taking care to
    avoid flap, etc. But I think being more specific with the extra
    words above can only help.

>
>> - The draft implies that in a network that uses ECN-in-NSH the Ingress and Egress nodes must be ECN aware, while the SFFs and SFs may be ECN unaware, allowing interoperability with older SFF/SF nodes. I would suggest to state this explicitly in the introduction.
> OK.
>
>> - "It MAY instead be set to ECT(1) if the NSH domain supports the experimental L4S capability [RFC8311], [ecnL4S]."
>>    This sentence is confusing from an implementer's perspective. Does the "MAY" here allow interoperability between the two approaches (RFC3168/ RFC8311)? Please clarify in the draft whether ECN-in-NSH-aware nodes are expected to be implemented as defined in [RFC3168] or as in [RFC8311], or a combination of both.
> I agree we need to clarify that.
Let me get back to you on this one. I have to admit that I can't 
remember why we catered for L4S in the way written around table 2. I've 
checked back, and I actually wrote this part myself, but it looks wrong 
to me, which would be embarrassing. However, I need to check with my 
co-authors to confirm that.

Whatever, thanks for picking this up.


Bob

>
> Thanks,
> Donald
> ===============================
>   Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
>   1424 Pro Shop Court, Davenport, FL 33896 USA
>   d3e3e3@gmail.com
>
>> Cheers,
>> Tal.
>>
>> On Thu, Jan 3, 2019 at 7:11 AM IETF Secretariat <ietf-secretariat-reply@ietf.org> wrote:
>>>
>>> The SFC WG has placed draft-eastlake-sfc-nsh-ecn-support in state
>>> Candidate for WG Adoption (entered by Joel Halpern)
>>>
>>> The document is available at
>>> https://datatracker.ietf.org/doc/draft-eastlake-sfc-nsh-ecn-support/
>>>
>>> Comment:
>>> This starts the WG call for adoption of this draft.
>>> Please respond to the list, indicating support for this as a work item of the
>>> working group with this document as the basis for the work, or objection to
>>> the working group adopting this item as a working group draft.
>>>
>>> The authors should confirm to the chairs and WG secretary that all IPR known
>>> to them relevant to this draft has been disclosed.
>>>
>>> The working group adoption call will last 2 weeks, ending at the end of the
>>> day on Thursday, January 17 2019 COB somewhere.
>>>
>>> Thank you,
>>> Joel

-- 
________________________________________________________________
Bob Briscoe                               http://bobbriscoe.net/