Re: [sfc] TTL field within the NSH base header

Dave Dolson <ddolson@sandvine.com> Fri, 28 April 2017 14:22 UTC

Return-Path: <ddolson@sandvine.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D8AB129484 for <sfc@ietfa.amsl.com>; Fri, 28 Apr 2017 07:22:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5HlvTv1qDyYV for <sfc@ietfa.amsl.com>; Fri, 28 Apr 2017 07:22:52 -0700 (PDT)
Received: from mail1.sandvine.com (mail1.sandvine.com [64.7.137.165]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84BFF1294A3 for <sfc@ietf.org>; Fri, 28 Apr 2017 07:18:55 -0700 (PDT)
Received: from WTL-EXCHP-1.sandvine.com ([fe80::ac6b:cc1e:f2ff:93aa]) by WTL-EXCHP-3.sandvine.com ([fe80::3c39:d305:d721:f00a%15]) with mapi id 14.03.0319.002; Fri, 28 Apr 2017 10:18:54 -0400
From: Dave Dolson <ddolson@sandvine.com>
To: Ron Parker <Ron_Parker@affirmednetworks.com>, "jmh.direct" <jmh.direct@joelhalpern.com>, "Joel M. Halpern" <jmh@joelhalpern.com>, Joe Clarke <jclarke@cisco.com>, James N Guichard <james.n.guichard@huawei.com>, "sfc@ietf.org" <sfc@ietf.org>
Thread-Topic: [sfc] TTL field within the NSH base header
Thread-Index: AQHSwBtMhW5bvXGwSoCeYu3QIaIxxqHauKZEgAAMRtCAAA3GcA==
Date: Fri, 28 Apr 2017 14:18:53 +0000
Message-ID: <E8355113905631478EFF04F5AA706E98705BCFF4@wtl-exchp-1.sandvine.com>
References: <yf9nr0yeep0h2j6f08320633.1493382662802@email.android.com> <20170428123908.5161041.12187.10550@sandvine.com> <CDF2F015F4429F458815ED2A6C2B6B0B839926F2@MBX021-W3-CA-2.exch021.domain.local>
In-Reply-To: <CDF2F015F4429F458815ED2A6C2B6B0B839926F2@MBX021-W3-CA-2.exch021.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.200.114]
x-c2processedorg: b2f06e69-072f-40ee-90c5-80a34e700794
Content-Type: multipart/alternative; boundary="_000_E8355113905631478EFF04F5AA706E98705BCFF4wtlexchp1sandvi_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/xIQ3Vcw1OQrj_agWdxQ9i1My3bo>
Subject: Re: [sfc] TTL field within the NSH base header
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Apr 2017 14:22:56 -0000

Ron,
I would not want an SFF to have to know if it is the first that is capable of decrementing TTL.
Also, the backwards-compatibility is also intended to address the situation with some SFFs not decrementing the TTL.

So I think what you propose only complicates matters.

Can we instead say, “TTL coded as 0 (binary 000000) represents 64. Decrementing this value of 0 results in 63 (binary 111111)”.
This doesn’t actually produce any special cases in code, since integer math under-flows properly on all modern processors and hardware adders.


-Dave



From: Ron Parker [mailto:Ron_Parker@affirmednetworks.com]
Sent: Friday, April 28, 2017 10:07 AM
To: Dave Dolson; jmh.direct; Joel M. Halpern; Joe Clarke; James N Guichard; sfc@ietf.org
Subject: RE: [sfc] TTL field within the NSH base header

Thanks all for the discussion, and I now appreciate the backward compatibility aspect.   But, if we take a more direct approach to describing the behavior, we simply need to state what happens when SFF receives NSH with TTL=0, TTL=1, TTL >1.   I might offer the following…

TTL: Service plane time-to-live. Treatment of certain received TTL values by an SFF is dependent on the SFF’s position within the sequence of SFF’s for the given Service Function Path.   A received TTL value of 0 received by the first SFF in an SFP shall be treated as if it had a value of 64, for backward compatibility with classifiers that don’t set TTL.    A received TTL value of 0 at a non-first SFF shall result in discard of the packet.   A received TTL value of 1 received by the last SFF in an SFP is valid and shall result in appropriate forwarding to attached service functions.   A received TTL value of 1 received by a non-last SFF in an SFP shall result in discard of the packet.   For all scenarios where propagation to a subsequent SFF are valid, the transmitted TTL shall be a decrement of 1 from the received TTL, except in the special case of first-SFF receiving TTL 0 which shall result in a transmitted TTL of 63.   Classifiers that support TTL shall adopt 63 as the default initial TTL.



From: Dave Dolson [mailto:ddolson@sandvine.com]
Sent: Friday, April 28, 2017 8:39 AM
To: jmh.direct <jmh.direct@joelhalpern.com>; Joel M. Halpern <jmh@joelhalpern.com>; Joe Clarke <jclarke@cisco.com>; Ron Parker <Ron_Parker@affirmednetworks.com>; James N Guichard <james.n.guichard@huawei.com>; sfc@ietf.org
Subject: Re: [sfc] TTL field within the NSH base header

Sorry, yes, I think the proposed text is OK.
If it would help others, we could be more explicit about the reason.

David Dolson
‎
From: jmh.direct
Sent: Friday, April 28, 2017 8:31 AM
To: Dave Dolson; Joel M. Halpern; Joe Clarke; Ron Parker; James N Guichard; sfc@ietf.org<mailto:sfc@ietf.org>
Subject: Re: [sfc] TTL field within the NSH base header


It seems you are saying you agree with the described behavior.

Can you live with the text as it is?

Yours,
Joel



Sent via the Samsung Galaxy S® 6, an AT&T 4G LTE smartphone

-------- Original message --------
From: Dave Dolson <ddolson@sandvine.com<mailto:ddolson@sandvine.com>>
Date: 4/28/17 13:49 (GMT+01:00)
To: "Joel M. Halpern" <jmh@joelhalpern.com<mailto:jmh@joelhalpern.com>>, Joe Clarke <jclarke@cisco.com<mailto:jclarke@cisco.com>>, Ron Parker <Ron_Parker@affirmednetworks.com<mailto:Ron_Parker@affirmednetworks.com>>, James N Guichard <james.n.guichard@huawei.com<mailto:james.n.guichard@huawei.com>>, sfc@ietf.org<mailto:sfc@ietf.org>
Subject: Re: [sfc] TTL field within the NSH base header

For the record, I want backwards compatibility.
And also, I think it is wasteful to have a code-point that is prohibited on the wire. I've always felt IP.TTL was bad for this reason.

As for the wording, we could be explicit that TTL=0 is valid on the wire, meaning 64.

David Dolson
‎
  Original Message
From: Joel M. Halpern
Sent: Friday, April 28, 2017 4:28 AM
To: Joe Clarke; Ron Parker; Dave Dolson; James N Guichard; sfc@ietf.org<mailto:sfc@ietf.org>
Subject: Re: [sfc] TTL field within the NSH base header


There are really two separate issues.
First, and most important, what behavior does the working group want?
     The discussion started with a proposal along the lines Ron
suggests, and moved to what is in the summary Jim provided.  We are
trying as chairs to reflect the WG agreement, and to bring this to a
close.  Yes, we are incurring technical debt (of different forms and
degrees) in any solution that allows backwards compatibility.  So, yes,
we can still change this if the WG wants, but this was the rough
consensus Jim and I saw.

Second, there is the question of whether the text is clear.  It is
always a balancing act between explaining the motivation for everything
at great length 9and losing the reader), vs just giving the behavior
with no explanation (and tending to get incorrect implementations.)  We
need to be somewhere in between.  We may not be in the right place.

Yours,
Joel

On 4/27/17 5:55 PM, Joe Clarke wrote:
> On 4/27/17 16:37, Joel M. Halpern wrote:
>> That alternative was discussed.  It also works.
>> However, with that alternative, if the Initial classifier is an old
>> system (not RFC compliant), we will not get any protection from the TTL.
>> If we take this (admittedly slightly odd) approach to decrementing the
>> TTL, then even though we do not recommend it, things still work with an
>> initial classifier that generates a TTL of 0.
>>
>> It is thus more robust, so the WG selected it in discussion atht
>> einterim adn on the list.
>
> Thanks, Joel.  I know it was discussed, but reading the final text, I
> wonder if this is just building technical debt into the protocol from
> the beginning.
>
> While this makes sense today, will it be as obvious (or as needed) in a
> year?  In two?
>
> Ron's text does seem clearer at the expense of the backward compat
> explicitness.
>
> Joe
>
>>
>> Yours,
>> Joel
>>
>> On 4/27/17 4:05 PM, Ron Parker wrote:
>>> Thanks, Dave.    Do you think it is possible to combine that backward
>>> compatibility with the simpler (to me) concept of testing for a packet
>>> that arrives with TTL=1 and conditioning behavior on whether the SFF is
>>> the terminating SFF of the path?
>>>
>>>
>>>
>>>    Ron
>>>
>>>
>>>
>>>
>>>
>>> *From:* Dave Dolson [mailto:ddolson@sandvine.com]
>>> *Sent:* Thursday, April 27, 2017 4:03 PM
>>> *To:* Ron Parker <Ron_Parker@affirmednetworks.com<mailto:Ron_Parker@affirmednetworks.com>>; James N Guichard
>>> <james.n.guichard@huawei.com<mailto:james.n.guichard@huawei.com>>; sfc@ietf.org<mailto:sfc@ietf.org>
>>> *Subject:* RE: TTL field within the NSH base header
>>>
>>>
>>>
>>> Ron,
>>>
>>> Decrementing from zero to reach 63, and checking for zero after
>>> decrementing provides a degree of backwards compatibility with the prior
>>> header format.
>>>
>>> This permits packets on the wire to have 0 in the bits that were
>>> previously “reserved”.
>>>
>>>
>>>
>>> -Dave
>>>
>>>
>>>
>>>
>>>
>>> *From:*sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *Ron Parker
>>> *Sent:* Thursday, April 27, 2017 3:21 PM
>>> *To:* James N Guichard; sfc@ietf.org<mailto:sfc@ietf.org> <mailto:sfc@ietf.org>
>>> *Subject:* Re: [sfc] TTL field within the NSH base header
>>>
>>>
>>>
>>> I had to really think about the language around decrementing by 1 from 0
>>> and reaching 63.   This would only occur in an error scenario where a
>>> preceding SFF misbehaved, wouldn’t it?   Why are we insistent that the
>>> test for 0 happen after decrement, thereby creating this problem.     I
>>> suspect that this has been already discussed and I apologize if I missed
>>> it, but if the language were simplified to say an SFF that receives an
>>> NSH with TTL=1 shall not forward it to another SFF (e.g., allowing it to
>>> engage its local SF instances, still).   Otherwise, it must decrement by
>>> 1 before forwarding to another SFF.
>>>
>>>
>>>
>>> An exact wording along these lines might be something like:
>>>
>>>
>>>
>>> TTL: Service plane time-to-live. An SFF MUST test the TTL before
>>> forwarding to another SFF for a given Service Function Chain.  If the
>>> received TTL value is 1, the SFF MUST drop packets that would otherwise
>>> have been forwarded to another SFF, but SHALL send such packets to
>>> attached service functions if the SFF terminates the Service Function
>>> Chain.   If the TTL value is greater than 1, the SFF must decrement the
>>> TTL by 1 before forwarding to another SFF.   The default for originating
>>> an NSH packet is a TTL value of 63.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> *From:* sfc [mailto:sfc-bounces@ietf.org] *On Behalf Of *James N Guichard
>>> *Sent:* Thursday, April 27, 2017 2:54 PM
>>> *To:* sfc@ietf.org<mailto:sfc@ietf.org> <mailto:sfc@ietf.org>
>>> *Subject:* [sfc] TTL field within the NSH base header
>>>
>>>
>>>
>>> Dear WG:
>>>
>>>
>>>
>>> Having reviewed all of the email discussion on the mailing list it
>>> appears to the chairs that we have consensus to add a TTL field to the
>>> NSH base header. We would like to propose the following changes:
>>>
>>>
>>>
>>> Section 3.2:
>>>
>>> Update figure 2 as follows:
>>>
>>>
>>>
>>>      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>>>
>>>     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>     |Ver|O|R|    TTL    |   Length  |R|R|R|R|MD Type| Next Protocol |
>>>
>>>     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>
>>>
>>> Add the following text after figure 2:
>>>
>>>
>>>
>>> TTL: Service plane time-to-live. An SFF MUST decrement the TTL by a
>>> value of 1 for all NSH packets it receives. Decrementing by a value of 1
>>> from 0 shall result in a TTL value of 63. The default for originating an
>>> NSH packet is a TTL value of 63. The decrement SHALL occur before
>>> testing for 0. After decrement, if the TTL is 0, the NSH packet MUST NOT
>>> be forwarded.
>>>
>>>
>>>
>>> Section 3.4:
>>>
>>> Update figure 4 to reflect the new base header format as per section 3.2
>>> base header.
>>>
>>>
>>>
>>> Section 3.5:
>>>
>>> Update figure 5 to reflect the new base header format as per section 3.2
>>> base header.
>>>
>>>
>>>
>>> Section 12.2.1:
>>>
>>> Current text is as follows:
>>>
>>>
>>>
>>>    There are ten bits at the beginning of the NSH Base Header.  New bits
>>>
>>>    are assigned via Standards Action [RFC5226].
>>>
>>>
>>>
>>>    Bits 0-1 - Version
>>>
>>>    Bit 2 - OAM (O bit)
>>>
>>>    Bit 3 - Critical TLV (C bit)
>>>
>>>    Bits 4-9 - Reserved
>>>
>>>
>>>
>>> Replace entire text as follows:
>>>
>>>
>>>
>>>    There are eight reserved bits in the NSH Base Header. New bits
>>>
>>>    are assigned via Standards Action [RFC5226].
>>>
>>>
>>>
>>>    Bits 0-1 - Version
>>>
>>>    Bit 2 - OAM (O bit)
>>>
>>>    Bit 3 - Reserved
>>>
>>>    Bits 16-19 - Reserved
>>>
>>>
>>>
>>> Section 12.2.3:
>>>
>>> Current text has the MD-type as 8-bit values.
>>>
>>>
>>>
>>> Update text for this section and table 1 to reflect 4-bit values *not*
>>> 8-bit values.
>>>
>>>
>>>
>>> *Please review carefully and indicate support for these changes (or any
>>> changes to the suggested text).*
>>>
>>> * *
>>>
>>> Thanks,
>>>
>>>
>>>
>>> Jim & Joel
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> sfc mailing list
>>> sfc@ietf.org<mailto:sfc@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/sfc
>>>
>>
>> _______________________________________________
>> sfc mailing list
>> sfc@ietf.org<mailto:sfc@ietf.org>
>> https://www.ietf.org/mailman/listinfo/sfc
>