Re: [spring] Different MSDs for different traffic types on the same headend.

"Ketan Talaulikar (ketant)" <ketant@cisco.com> Tue, 17 December 2019 12:21 UTC

Return-Path: <ketant@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FC3B120220 for <spring@ietfa.amsl.com>; Tue, 17 Dec 2019 04:21:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.497
X-Spam-Level:
X-Spam-Status: No, score=-14.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=lj8lfDro; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=tkqjCROk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WM97-RH83tn1 for <spring@ietfa.amsl.com>; Tue, 17 Dec 2019 04:21:27 -0800 (PST)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91C321201E3 for <spring@ietf.org>; Tue, 17 Dec 2019 04:21:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=40446; q=dns/txt; s=iport; t=1576585287; x=1577794887; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ANXvlvX15nC2z+XRCPoO0z3brKGljOTm2XIlXON0AQ4=; b=lj8lfDroiNzPbHi9vAk1PSxoXTaHADWXdxT4eEzqsCXXU8koHoBnmzk7 UGB2kbBF4UhOK0Ai0Ed5PvnpprJLRFYsyHWPBVeoyAeMqo9LtmiSU6VE3 2wH6m7qXakAa3ACDx6arsa6aaxh/BNI9vYMG5Z+S2lsmW9IqAFXtoLFxS Q=;
IronPort-PHdr: 9a23:zYm4/xy/7n1IpKfXCy+N+z0EezQntrPoPwUc9psgjfdUf7+++4j5YR2N/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A1RJKa5lQT1kAgMQSkRYnBZuGBFHyKuLCZC0hF8MEX1hgrDm2
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DtAgANx/hd/40NJK1iAxsBAQEBAQEBBQEBAREBAQMDAQEBgX6BHC8kLAVsWCAECyqEBINGA4sPgl+JXI4qgUKBEANQBAkBAQEMAQEYAQwIAgEBg3tFAheCACQ4EwIDDQEBBAEBAQIBBQRthTcMhV4BAQEBAQIBARARChMBAQclAQoBDQICAQgOAwQBASEBBgMCAgIZBgYLFAkIAgQBDQUIGoMBgXlNAy4BDqMWAoE4iGF1gTKCfgEBBYE1AYNeDQuCFwkFgTGFHIZ8GoFBP4EQAUeCHi4+ghtJAQEBAQGBLQEMBgEhBAEHCQoFBwkRgkkygiyNdIJBhVaJFo5yMUMKgjSHLIo6hEGCQ4d2hEGLT45MiFCCGo9hAgQCBAUCDgEBBYFpImdxcBU7gmwJRxEUjRIMBRKDUIUUhT90ATB3jmoOF4IbAQE
X-IronPort-AV: E=Sophos;i="5.69,325,1571702400"; d="scan'208,217";a="597946599"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 17 Dec 2019 12:21:26 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id xBHCLQ1S012364 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 17 Dec 2019 12:21:26 GMT
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 17 Dec 2019 06:21:25 -0600
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 17 Dec 2019 06:21:25 -0600
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 17 Dec 2019 06:21:24 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=juxRaPVDFxvoGRN5sUE3r81cimfXzwm/By2lRVIUt7tIf0xkRLtouf4eqlf+Ef+3j+efCtGrIhG2xQWAUQDylWpBkLrCCLlD10cqAWVlJ7MYg6CNCHP+EZduhSqg9lOMm2JF6r3/02CASlkoZ/LsBydNKbG75g0n8M6+m05789d8gzPyeGEPCQhPEsozhcScSkY2aCMFWTM9FUq6LgVTsxzQNpC/X5ZoidhGbZBTPiFYTRU9XkEEuLmbQESRGnLkjsYlE9xDm0RpbMqoeoHc47U94qjQKH8EAymEW32jb27zQoIouuL1fPyYmOxOxalhpyGDl+r1C3I5X9iy/g2C+A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ANXvlvX15nC2z+XRCPoO0z3brKGljOTm2XIlXON0AQ4=; b=QC4N7dJDvQBbar548AS1yk8f3zsafH8ODs1MRQG1HcCugEpF//Ttp26V5h/unVBcqn0zvVwwei5oFlUJkdcrf9XftDcdD+NHGTma89S+xuqo5nXoaf3FgLFQZ1x/9Y89uWMBWNCDbLRt1bbCciAnfngUeF72lg37ZJRfNoaQ/Rp3x1rzhSOfUDVsJEBCyeOUlXqRF0hKco+2cfuZ1Gqx5IVpoXS/uYZW2FCTOsCgF04Gd0KiV5pIJCwJlAAm4iqT42t3jMDphue/pPcDRDLCD2heXYxNJjL2S8A5v7mRurvwk/3xFTXR1vTwoY7quhYFFnxxXolKPyLEd7zhcAFsDg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ANXvlvX15nC2z+XRCPoO0z3brKGljOTm2XIlXON0AQ4=; b=tkqjCROkVfkwLDverw4FGcecOoUxNhJU9FqTvybXwxMhTXwoQ1NW7lLdBfOVlIq+HjzsgBu616qi0aQNb/iS8u4fBGykRrfggn5+x/XqItJgp891th3gadCHACoNMYosvjb5yZ/uDfPtOzWQcxbIjSGTRBhjIf7xUMkpyE3cVHU=
Received: from MWHPR11MB1600.namprd11.prod.outlook.com (10.172.53.142) by MWHPR11MB2032.namprd11.prod.outlook.com (10.169.237.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2538.15; Tue, 17 Dec 2019 12:21:24 +0000
Received: from MWHPR11MB1600.namprd11.prod.outlook.com ([fe80::884c:b80e:f787:2098]) by MWHPR11MB1600.namprd11.prod.outlook.com ([fe80::884c:b80e:f787:2098%12]) with mapi id 15.20.2538.019; Tue, 17 Dec 2019 12:21:24 +0000
From: "Ketan Talaulikar (ketant)" <ketant@cisco.com>
To: Nat Kao <lekao@pyxisworks.org>, Robert Raszuk <robert@raszuk.net>
CC: SPRING WG <spring@ietf.org>
Thread-Topic: [spring] Different MSDs for different traffic types on the same headend.
Thread-Index: AQHVsapqDSX4vTDzmEe6M/qZUjS3Bqe4ZtSAgADaAACAAZbkgIACk16AgABg3UKAAFHhAIAAHd4AgAAEA2A=
Date: Tue, 17 Dec 2019 12:21:23 +0000
Message-ID: <MWHPR11MB1600FC5024F4CB780597079CC1500@MWHPR11MB1600.namprd11.prod.outlook.com>
References: <CAN3QBScGjeL=yDSW3AOXZrVTGA-czbY2qDrOMQ=gDxAd4d=nYQ@mail.gmail.com> <38b14bf5-b6d9-4d46-ad1d-d26d3376df51@Spark> <CAN3QBSf2Kpu3Pd_FYmA7BCHJ=uWu9DnEEaYdQwGDDs26NmbJQg@mail.gmail.com> <CABNhwV1-yRcK18JsJbAr3e+Hm-35WdmUFZ0mkzwLj5iBD9zWxw@mail.gmail.com> <c8967bfb-5a8e-447d-8e28-314820764f13@Spark> <CAN3QBScyJ5QgmKU8_h62pLF=FQ8y40C3sSRB1TWfKBQfdb1Mkw@mail.gmail.com> <CAN3QBSdFVCBQVPVc2Ax0i2EgMrGqzSCj7YpsUUE2m3HiM9AcyA@mail.gmail.com> <CAOj+MMFZnhYgOShZDFuBAwvhaUPGppo+JTF1k_1+MWKh08NGQg@mail.gmail.com> <CAN3QBSf8e7H7337_E9odFRbz--whH4w+D0NVozsefVSsD75nNg@mail.gmail.com>
In-Reply-To: <CAN3QBSf8e7H7337_E9odFRbz--whH4w+D0NVozsefVSsD75nNg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ketant@cisco.com;
x-originating-ip: [2001:420:c0e0:1004::11]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8ce52bb5-a351-44c2-347c-08d782eba1d2
x-ms-traffictypediagnostic: MWHPR11MB2032:
x-microsoft-antispam-prvs: <MWHPR11MB2032EA4AA7E74034C936F315C1500@MWHPR11MB2032.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:6108;
x-forefront-prvs: 02543CD7CD
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(376002)(366004)(396003)(136003)(39860400002)(51914003)(189003)(199004)(52536014)(76116006)(2906002)(66556008)(66446008)(64756008)(66946007)(66476007)(966005)(55016002)(86362001)(5660300002)(7696005)(4326008)(33656002)(71200400001)(6506007)(186003)(316002)(8676002)(81156014)(81166006)(110136005)(9686003)(8936002)(66574012)(478600001)(53546011)(9326002)(45080400002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB2032; H:MWHPR11MB1600.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: x/2nwknlP5cT4kKwCgpjibBjTV7bRW7uNFypeT54/IXl15t7PrMBwBCBdlyXBRMC1ln3vlXHLhHtOSHGTK+2Qy+vCc3gZwaHVnbT27+PcDYPuM9TingkPbRg+Q/jj7D3eOwXFQVAczB3Lu3KLtotQ8kIQtMViSlaQCqdpUEa2oyraZ784YiRNVFVhftveiuvko5Q7O6XxTwr2mB4IJeUUgkn4BCKbtuUsAa6ZzfzBGBXhveS6x2+z4PVKzcjbqr8ZEj6tF3TMzwAW9DPjc5j0MgvpUoet7Wf+Q6k76XqRiYM4Qx71I7hRjLI2z5jUCLMtsT7K3i3t1LOFcgszBbYh5OobztIn2OPxqHdN39Z1n+mUXI1yodni86TyEz3v3RHhACR87fOf9wy3/6TMTPeYExgzvL27r3GMG8P8xxydn/rXQdTtSvNBQwBsW+3lqqf7DefHG4tO/9WgGkYaKWMItFqXTatmuf2Yb9Q3XA1NENxFses6TB933DL11q15a45dU671qWa2wiENT6pY9o0z9z9/mBGYX8192hiTy76op4=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MWHPR11MB1600FC5024F4CB780597079CC1500MWHPR11MB1600namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 8ce52bb5-a351-44c2-347c-08d782eba1d2
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Dec 2019 12:21:23.7728 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: jyhKjzwEeDvuBFHgdmfmhyRF9WiwHZomwy6x4hk2DgvbdnaEHW/poPorpDrM6nTsgOqVR/tXTD6mMhXcm17UDw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB2032
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com
X-Outbound-Node: alln-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/4PkI1AqzsZXOWe689FM_g6TA_wI>
Subject: Re: [spring] Different MSDs for different traffic types on the same headend.
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Dec 2019 12:21:31 -0000

Hi Nat,

The MSD framework enables us to define more/new MSD types. If there is a real use-case and requirement (as you express) and the necessary MSD type(s) can be formally defined then perhaps the WG can evaluate it.

Thanks,
Ketan

From: spring <spring-bounces@ietf.org> On Behalf Of Nat Kao
Sent: 17 December 2019 17:16
To: Robert Raszuk <robert@raszuk.net>
Cc: SPRING WG <spring@ietf.org>; Nat Kao <lekao@pyxisworks.org>
Subject: Re: [spring] Different MSDs for different traffic types on the same headend.

Hello, Robert.
Surely the current BMI-MSD definition is sufficient for platforms without artificial boundaries.
In this ideal case, maximum labels available for SR-TE policy can be inferred from BMI-MSD and VPN routes.

However we have 3 different artificial boundaries across 3 different platforms now.
Hardcoding these boundaries might not scale well. (Especially different OS versions may behave differently.)
A standard mechanism to discover this boundary would greatly help constructing SR-TE policy candidate paths.

Regards,
Nat.


On Tue, Dec 17, 2019 at 5:58 PM Robert Raszuk <robert@raszuk.net<mailto:robert@raszuk.net>> wrote:
Hi Nat,

I am having a bit of difficulty understanding reasoning and the way you are separating transport from service labels.

The processing label limit usually comes from data plane capabilities of the platform namely LFIB or hardware below.

Such layer is function agnostic and it does not matter what role the label serves.

Label lookup results in pointer to a adj. rewrite on the outbound side. It really does not matter if the adjacent peer is your P router, segment endpoint or CE.

Of course there are number of processing exceptions - for example concept of aggregate VPN label, additional header modifications etc ...

Likely some platforms put such artificial boundary between transport and service hence your request. But if so IMHO this is more of an issue with specific platform or its marketing message then IETF :).

Many thx,
R.







On Tue, Dec 17, 2019 at 6:06 AM Nat Kao <lekao@pyxisworks.org<mailto:lekao@pyxisworks.org>> wrote:
Hi, Jeff.
Consider a headend that can perform 1 of the following 2 modes(but not both):
1) Plain IPv4: 6 transport labels + 0 service label => traffic can be steered into a 6-label SR-TE policy.
2) Any type of VPN: 3 transport labels + 1~3 service labels => traffic cannot be steered into a 6-label SR-TE policy.
a) As defined in RFC8491, the BMI-MSD is 6 for this headend. Do we have a standardized way to signal the transport label depth in mode 2?
   Maybe in a different MSD type?
b) Since plain IPv4 and VPN routes can be steered into the same SR-TE policy, do we have a standardized headend behavior in this situation?
   (Should I open a new thread to discuss this? It seems not quite MSD-relative.)

Thanks...
Nat

On Tue, Dec 17, 2019 at 7:19 AM Jeff Tantsura <jefftant.ietf@gmail.com<mailto:jefftant.ietf@gmail.com>> wrote:
Gyan,

MSD is only relevant for a device that either imposes the label stack (head-end) or manipulates it (BSID anchor). There are some other constrains when it comes to entropy labels and ERLD, please read the respective drafts.
In general, SID stack would grow when TE is in use (any time you need to use additional SID to deviate from SPT), another case is when additional SID’s are used for services on the nodes, other than the tail-end.
That’s why we've designed MSD to be very flexible to accommodate all the different use cases, it is upto computational logic to decide how to deal with different constrains (MSD types)

Cheers,
Jeff

P.S. you might want to see the NANOG MSD presentation I did some time ago.
https://pc.nanog.org/static/published/meetings/NANOG71/1424/20171004_Tantsura_The_Critical_Role_v1.pdf
On Dec 14, 2019, 11:59 PM -0800, Gyan Mishra <hayabusagsm@gmail.com<mailto:hayabusagsm@gmail.com>>, wrote:

Jeff

With SR-MPLS with SR-TR let’s say if you use cSPF snd don’t have an ERO strict explicit path defined or is a loose path, then the for the cSPF would the transport labels be 1.  For loose would also be 1 also.  If the path were explicit defined to egress PE and was 7 hops from ingress to egress then transport would be 6.  And if L3 vpn service sid was signaled that would be 1 vpn label.

Let me know if I have that right.

In Nats scenario for IPv6 he has 3 vpnv6 labels.

Why is that?

With both SR-MPLS and SRv6 the L3 vpn AFI/SAFI MBGP services overlay single label sits on top off SR as if does today with MPLS so why 3 vpn labels.

So with this draft with BGP-LS and BMI-MSD you can flood into the IGP the SID depth so all the nodes along the SR-TE path don’t go over the maximum which would result in an error.

If you set your MTU high enough in the core like 9216, does that overcome the SID depth issues with SR-TE?

Warm regards,

Gyan

On Sat, Dec 14, 2019 at 2:43 AM Nat Kao <lekao@pyxisworks.org<mailto:lekao@pyxisworks.org>> wrote:
Hi, Jeff.

Thanks for the BMI-MSD reference. If I understand correctly:

BMI-MSD = Transport Label Depth + Service Label Depth
Only former can be utilized by SR-TE policies.

Currently do we have any method to determine the composition of BMI?
We need to know the transport label depth when doing service route per-destination steering.

This problem arises when trying to steer a plain IPv4 route and a VPN service route into the same SR-TE policy that exceeds the transport label depth of the service route. I'm trying to figure out the standard behavior in this case since the headend we use currently produces some interesting results.

Regards,
Nat.

On Sat, Dec 14, 2019 at 2:42 AM Jeff Tantsura <jefftant.ietf@gmail.com<mailto:jefftant..ietf@gmail.com>> wrote:
Hi Nat,

Please read https://tools.ietf.org/html/rfc8491#section-5
Currently defined MSD types are:
1: BMI
2: ERLD

Specifically to BMI:
Base MPLS Imposition MSD (BMI-MSD) signals the total number of MPLS labels that can be imposed, including all service/transport/special labels.
The answer to your question is 6

Cheers,
Jeff
On Dec 13, 2019, 3:42 AM -0800, Nat Kao <lekao@pyxisworks.org<mailto:lekao@pyxisworks.org>>, wrote:

Hello, SPRING WG.
How do we deal with an SR-TE policy headend with different MSDs for different types of traffic?
For example, a headend H can impose:
6 transport labels for plain IPv4 packets;
5 transport labels + 1 IPv6 ExpNull label for plain IPv6 packets;
3 transport labels + 3 VPN  labels for VPN packets.

a) For a plain IPv4 route R4 and a VPN route Rv both steered into the SR-TE policy P1 with SID list <S1, S2, S3, S4, S5>, what will H perform in this situation?
b) What is the MSD of H? 6, 5 or 3?

Thanks,
Nat.
_______________________________________________
spring mailing list
spring@ietf.org<mailto:spring@ietf.org>
https://www.ietf.org/mailman/listinfo/spring
_______________________________________________
spring mailing list
spring@ietf.org<mailto:spring@ietf.org>
https://www.ietf.org/mailman/listinfo/spring
--
Gyan S. Mishra
IT Network Engineering & Technology
Verizon Communications Inc. (VZ)
13101 Columbia Pike FDC1 3rd Floor
Silver Spring, MD 20904
United States
Phone: 301 502-1347
Email: gyan.s.mishra@verizon.com<mailto:gyan.s.mishra@verizon.com>
www.linkedin.com/in/networking-technologies-consultant<http://www.linkedin.com/in/networking-technologies-consultant>

_______________________________________________
spring mailing list
spring@ietf.org<mailto:spring@ietf.org>
https://www.ietf.org/mailman/listinfo/spring