Re: [spring] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

"Christian Schmutzer (cschmutz)" <cschmutz@cisco.com> Tue, 02 May 2023 16:28 UTC

Return-Path: <cschmutz@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FF2FC1524DE; Tue, 2 May 2023 09:28:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.584
X-Spam-Level:
X-Spam-Status: No, score=-14.584 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b="Cr5APLAt"; dkim=pass (1024-bit key) header.d=cisco.com header.b="SRLy3HTc"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id akGR1E-y9KnH; Tue, 2 May 2023 09:28:51 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B868C13738F; Tue, 2 May 2023 09:28:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=82497; q=dns/txt; s=iport; t=1683044931; x=1684254531; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=tIdxODX6ZJDcuJNfA+BO73ITXGiTpqwYLJ6VrHFXp+w=; b=Cr5APLAtkQuMtvr4ynPeJB5xNgQCK4VMENDmSFA+h+drLVZbzxUhIDIb /Y7X0ckPPs6P6IpyBhxxRf80tjSv91Uk/654WiBxg2bOJYOFqUvx5kfTG MgYiDNsPhnTohKqr6Hlnk8rCtw2+P8hRusHJtbxx+UF4BSH/nIzvMxZ92 A=;
X-IPAS-Result: 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
IronPort-PHdr: A9a23:swczsRdbNYjJj6DRDSQegWIRlGM/fYqcDmcuAtIPkblCdOGk55v9e RGZ7vR2h1iPVoLeuLpIiOvT5rjpQndIoY2Av3YLbIFWWlcbhN8XkQ0tDI/NCUDyIPPwKS1vN M9DT1RiuXq8NBsdA97wMmXbuWb69jsOAlP6PAtxKP7yH9vZlM+30v2u6bXYYh5Dg3y2ZrYhZ BmzpB/a49EfmpAqar5k0wbAuHJOZ+VQyCtkJEnGmRH664b48Mto8j9bvLQq8MsobA==
IronPort-Data: A9a23:QlSo1K2ZW49hkwiurPbD5c5xkn2cJEfYwER7XKvMYLTBsI5bp2QHz 2UdCz2Gb62DZGqjKNAgPY6x/EsOv8TTyYVmGQtt3Hw8FHgiRegpqji6wuYcGwvIc6UvmWo+t 512huHodZxyFjmGzvuUGuCJQUNUjclkfZKhTr+VUsxNbVU8Enx51Eo5w7RRbrNA2LBVPSvc4 bsenOWHULOV82Yc3rU8sv/rRLtH5ZweiRtA1rAMTakjUGz2yxH5OKkiyZSZdBMUdGX78tmSH I4vxJnhlo/QEoxE5tmNyt4XeWVSKlLe0JTnZnd+A8CfbhZ+SiMa0J4+OqYyZ1hsiyzOk/FXl IQctaOSVlJ8VkHMsLx1vxhwCSpyO+hN/6XKZCj5us2IxEqAeHzpqxlsJBhpZstDpaAmWicXq aBwxDMlNnhvg8q927m7T/RwlOwoLdLgO8UUvXQIITTxUK55HsybEvSiCdlwhjUOj4NkIujlP pQHZBtUdC6ZWiUTAwJCYH45tL742iagG9FCk3qOvbA25Wf7zQFt3v7qKtW9UtCQTMtJ212Tp mfb43b0GFQBLMaezzXA+WnpnfWKhST/WYkDUrS88tZrjUGdgGsJB3UruUCTu/K1jAu1XMhSb hxS8Ss1pq90/0uuJjXgY/GmiHy8uxBAddRPKO0jrw2s7PaFsgamJHdRG1atd+canMMxQDUr0 HqAkNXoGSFjvdWppZS1quf8QdSaZHF9EIMSWcMXZVBavIS78enfmjqKH4kzSvfk5jHgMWiom 2jikcQou1kEYSc2O0iT51vLhXenoYLEC15z7QTMVWXj5QR8DGJEW2BKwQWHhRqjBN/JJrVkg JTis5PFhAzpJcrW/BFhuM1XQNmUCw+taVUwe2JHEZg77CiK8HW+Z41W6zwWDB43YpxVJ2K5O xeC6Fs5CHpv0J2CMPIfj2WZVptC8EQcPYiNug38N4AXOcEhKGdrAgk0PhPNt4wSrKTcufhvZ cjEGSpdJX0bEq9ghCGnXPsQ1KRD+8zN7T27eHwP9Dz+ieD2TCfMEd8taQLeBshnt/nsiFuOr L5i2z6ilk83vBvWOHeHqOb+7DkicBAGOHwBg5cJLLXfe1s3cIzjYteIqY4cl0Vet/09vs/D/ 2q2XQlTz1+XuJENAVjihqxLAF83YatCkA==
IronPort-HdrOrdr: A9a23:zRDy/6stNCRuWexIC1tEgzkG7skCwYMji2hC6mlwRA09TyXGra 6TdaUguiMc1gx8ZJh5o6H9BEDhexnhHZ4c2/h0AV7QZniYhILIFvAu0WKG+Vzd8kLFh5ZgPM tbAspD4ZjLfCVHZKXBkUWF+rQbsaK6GcmT7I+0rwYPcegpUdAb0+4TMHf9LqQCfng+OXNPLu v72iMonUvERZ0QVKmGL0hAe9KGi8zAlZrgbxJDLQUg8hOygTSh76O/OwSE3z8FOgk/j4sKwC zgqUjU96+ju/a0xlv3zGnI9albn9Pn159qGNGMsM4IMT/h4zzYJbiJGofy/AzdktvfqmrCo+ O85ivI+P4Dr085S1vF4icFHTOQlwrGpUWSj2NwykGT3/ARDAhKevapw7gpPScwLyEbzYlBOG Uh5RPBi7NHSRzHhyjz/N7OSlVjkVe1u2MrlaoJg2VYSpZ2Us4YkWSOlHklYKvoMRiKnrzPKt MeRf309bJTaxeXfnrZtm5gzJilWWkyBA6PRgwHttaO2zZbkXhlxw9ArfZv1Eso5dY4Ud1J9u 7EOqNnmPVHSdIXd7t0AKMETdGsAmLATBrQOCaZIEjhFqsAJ3XRwqSHq4kd9aWvYtgF3ZEykJ POXBdRsnMzYVvnDYmU0JhC4nn2MRKAtPTWu7VjDrRCy8jBreDQQF6+oXgV4rmdn8k=
X-Talos-CUID: 9a23:dd3aX2ChsP/oewr6Eytf8UBINM46SX3Ei3vxBRPpWGZWaqLAHA==
X-Talos-MUID: 9a23:H38FGAykPlwZWlZNzerKWOIgz8uaqP6sNklOu6oYgJDaKyFRAC+n1Q2PHrZyfw==
X-IronPort-Anti-Spam-Filtered: true
Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 02 May 2023 16:28:34 +0000
Received: from rcdn-opgw-5.cisco.com (rcdn-opgw-5.cisco.com [72.163.7.169]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id 342GSX1f011152 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 2 May 2023 16:28:34 GMT
Authentication-Results: rcdn-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com; spf=Pass smtp.mailfrom=cschmutz@cisco.com; dmarc=pass (p=quarantine dis=none) d=cisco.com
X-IronPort-AV: E=Sophos;i="5.99,244,1677542400"; d="scan'";a="913180"
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=c3kxp0cccaRf+0y266oSIZTARrV/7uSGNih4uHEYdtrSwMWD+xn4BmsQ15KcxVXuPe5Ed2l22oLj/pCDDcJ5gepA8dKhVIdwvRjW0B2Cfi3t/lTePF0WLKDipEn6fRWQ93k7CqLvXVIzUKUBiWjZ3eH8K6BLsCE6EZ4k9qygSOaqk20q2BhxZU8C8Cp9lqZFKXwAprDER6UPMTTA6iIXwyP6eHVmjEicuCvOuFv1KZmY9CrAP/dIaqeQ0GktXVnyexBqAVGhLYkGkVfpo7pCFMswqT7B/jPb/a9NJe4+9o8KQxUYupOOuNeYWnLjoT69y8wrx1s3zRfWkWZMKlUuTw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tIdxODX6ZJDcuJNfA+BO73ITXGiTpqwYLJ6VrHFXp+w=; b=O8wma1cL55vH2CY/q8JIHDR88KqXYzRNMbtYF5e46uOEs8YIe/2YEQkidEYY3AdnLlKLodDBnqn6cp0A7TJyvlicRG0gCbjEfE0xYS+vFlrjyizaM94IilvYc8GyqgrOFkMojdrk/1gKuUTd0V6FtxyYALKx3ikCvPc3aq/i1AEPdZGta5zB1szKSQ2Yy/4/xkW+YRJ61iFxpcEAjpZYfw40nJpEGE1+p5006YOm+APLMgpLJsO5ycL+8/7VeojG/hhluwqozEdje2+DXfr9COHD0Wrh7VyJSKSCTRFCzt8WKouglu8FjtSPetcfWTvEocO7NR+lV9kpCw6WadJ17A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tIdxODX6ZJDcuJNfA+BO73ITXGiTpqwYLJ6VrHFXp+w=; b=SRLy3HTcZJSBNdzgqUvtgs7MgCRelm6dxtDmVQzmBlen8pyFSHXT0DuyU5ht7P7UiOmYTaT5o95JCVel64trzTOVVO7hc5b59A/Ejmc98remmXWiU/2hi1mq+jYk8HV55WZeRFcGr5GEQf2jRG4GYC/WLDsSnqbLJ1MIg/uA4bw=
Received: from SJ0PR11MB5662.namprd11.prod.outlook.com (2603:10b6:a03:3af::7) by SN7PR11MB6604.namprd11.prod.outlook.com (2603:10b6:806:270::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6340.25; Tue, 2 May 2023 16:28:30 +0000
Received: from SJ0PR11MB5662.namprd11.prod.outlook.com ([fe80::a6fd:428:ae3:c13f]) by SJ0PR11MB5662.namprd11.prod.outlook.com ([fe80::a6fd:428:ae3:c13f%6]) with mapi id 15.20.6340.030; Tue, 2 May 2023 16:28:30 +0000
From: "Christian Schmutzer (cschmutz)" <cschmutz@cisco.com>
To: "Dongjie (Jimmy)" <jie.dong@huawei.com>
CC: "Christian Schmutzer (cschmutz)" <cschmutz@cisco.com>, Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>, "draft-schmutzer-spring-cs-sr-policy.all@ietf.org" <draft-schmutzer-spring-cs-sr-policy.all@ietf.org>, "spring@ietf.org" <spring@ietf.org>
Thread-Topic: A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00
Thread-Index: Adiffy2snJpRyJ62TvmDqoJV6SGHgAAvkJUAACBaJTAAGxBukCgP5i6ADeJfSwAALcWjkADZ9nuA
Date: Tue, 02 May 2023 16:28:30 +0000
Message-ID: <965B838D-A3BA-45CF-AAE1-C98CCCA1717E@cisco.com>
References: <PH0PR03MB63007D82CD11836C4BE5B13AF6929@PH0PR03MB6300.namprd03.prod.outlook.com> <664D8681-C2DD-4163-B6CD-7BC8E785805D@cisco.com> <PH0PR03MB630015DFF140BC9D1405D311F6949@PH0PR03MB6300.namprd03.prod.outlook.com> <598b3d2ef59b4bb5978f05d225f11925@huawei.com> <54EFE818-3243-4FE0-854E-11866145C79E@cisco.com> <5D7BCEE9-BE8E-42DF-B15A-3270C0678DE0@cisco.com> <71cf2d9e791645f4b84ea032f134e801@huawei.com>
In-Reply-To: <71cf2d9e791645f4b84ea032f134e801@huawei.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3696.120.41.1.3)
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SJ0PR11MB5662:EE_|SN7PR11MB6604:EE_
x-ms-office365-filtering-correlation-id: 62f39a33-ba91-444e-5773-08db4b2a441e
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR11MB5662.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(376002)(136003)(346002)(366004)(39860400002)(396003)(451199021)(2616005)(478600001)(186003)(166002)(30864003)(66899021)(966005)(38070700005)(71200400001)(36756003)(2906002)(6486002)(83380400001)(66556008)(66446008)(76116006)(91956017)(66946007)(6506007)(6512007)(64756008)(66476007)(53546011)(8676002)(8936002)(38100700002)(33656002)(54906003)(122000001)(4326008)(26005)(41300700001)(6916009)(316002)(5660300002)(86362001)(45980500001)(579004); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_965B838DA3BA45CFAAE1C98CCCA1717Eciscocom_"
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SJ0PR11MB5662.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 62f39a33-ba91-444e-5773-08db4b2a441e
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 May 2023 16:28:30.6457 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 7W3GI9vfoJx4Oh/vsqgHKO/NaxvOYCAOypRwLLzoqmJmCuSiIzTfJnJHbDOPY1OdcptWy8quU6QOzV/Xh1cvag==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR11MB6604
X-Outbound-SMTP-Client: 72.163.7.169, rcdn-opgw-5.cisco.com
X-Outbound-Node: rcdn-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/6WHwi5XBC6FtOO_pd6xH3f_QXVI>
Subject: Re: [spring] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 May 2023 16:28:56 -0000

Hi Dongjie,

As long as traffic of a CS-SR policy is within the “bandwidth contract” established during the CS-SR policy instantiation (or last update) I don’t see any issue with resource competition.

Cases where a CS-SR policy is “out of contract” we tried to address so far with those two sentences
https://datatracker.ietf.org/doc/html/draft-schmutzer-spring-cs-sr-policy-01#section-3.1-6
https://datatracker.ietf.org/doc/html/draft-schmutzer-spring-cs-sr-policy-01#section-7.3-3

Packet bursts of course are a different story, but do equally apply to RSVP-TE and MPLS-TP/GMPLS and I don’t think have been explicitely discussed in respective documents there? Having said that we can think of expanding on https://datatracker.ietf.org/doc/html/draft-schmutzer-spring-cs-sr-policy-01#section-3.1-3.1 and discuss how policer burst values and network interface queue limits can be tuned to accomodate for bursts.

I would propose to incorporate potential changes in the future, or do you see final text for these topics gating WG adoption call?

regards
Christian

On 28.04.2023, at 10:58, Dongjie (Jimmy) <jie.dong@huawei.com<mailto:jie.dong@huawei.com>> wrote:

Hi Christian,

Thanks for updating the draft and reminding me about my comments on the previous version.

I’ve gone through the text in section 3.1, and think it describes useful approaches for providing bandwidth guarantee to CS policies. While I have one remaining question:

My reading is that the bandwidth is allocated to all the CS SR policies (either via a physical link, a logical link or a queue), this could ensure the total bandwidth of all the CS policies are guaranteed. While since different CS policies share the same set of resources, is it possible that in some cases the services carried by the CS policies may compete with each other for that set of shared resources (e.g. due to burst in some CS services)? If so, do you want to mention this in the draft, and may also provide some approaches to avoid or mitigate this effect.

Best regards,
Jie

From: Christian Schmutzer (cschmutz) [mailto:cschmutz@cisco.com]
Sent: Thursday, April 27, 2023 6:37 PM
To: Dongjie (Jimmy) <jie.dong@huawei.com<mailto:jie.dong@huawei.com>>; Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>>
Cc: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>; draft-schmutzer-spring-cs-sr-policy.all@ietf.org<mailto:draft-schmutzer-spring-cs-sr-policy.all@ietf.org>; spring@ietf.org<mailto:spring@ietf.org>
Subject: Re: A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

Dear WG,

As we are preparing for WG adoption call, could you please let us know if the concerns have been addressed?

Thanks in advance
Christian


On 15.02.2023, at 19:24, Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>> wrote:

Hi Jie and Sasha,

We recently published a new version of the draft trying to address your concerns on assumptions and procedures for guaranteeing bandwidth for CS-SR policies in the following section https://datatracker.ietf.org/doc/html/draft-schmutzer-spring-cs-sr-policy-01#name-ensuring-bandwidth-guarante

Probably not perfect but wondering what you think? Further input and discussion is welcome !

regards
Christian


On 26.07.2022, at 22:23, Dongjie (Jimmy) <jie.dong@huawei.com<mailto:jie.dong@huawei.com>> wrote:

Hi Sasha and Christian,

To my understanding the potential services of CS-SR require some level of performance guarantee, which means the traffic needs to be distinguished from other traffic in the network and be treated separately. As discussed in this thread, one approach would be to steer the traffic to a separate queue or a separate set of resources.

I agree with Sasha that requesting a dedicated traffic class may not be easy. Sasha gave a mechanism based on the coexistence of MPLS-TP and SR-MPLS. An alternative to that would be to use a separate set of SR SIDs for the CS-SR, and associate such set of SR SIDs with a separate set of network resources (e.g. sub-interfaces or queue). That could be achieved by using resource-aware SIDs as defined in draft-ietf-spring-resource-aware-segments.

Best regards,
Jie

From: Pce [mailto:pce-bounces@ietf.org] On Behalf Of Alexander Vainshtein
Sent: Tuesday, July 26, 2022 3:48 PM
To: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>
Cc: draft-schmutzer-spring-cs-sr-policy.all@ietf.org<mailto:draft-schmutzer-spring-cs-sr-policy.all@ietf.org>; spring@ietf.org<mailto:spring@ietf.org>; Rotem Cohen <Rotem.Cohen@rbbn.com<mailto:Rotem.Cohen@rbbn.com>>; Nitsan Dolev <Nitsan.Dolev@rbbn.com<mailto:Nitsan.Dolev@rbbn.com>>; pce@ietf.org<mailto:pce@ietf.org>; Michael Gorokhovsky <Michael.Gorokhovsky@rbbn.com<mailto:Michael.Gorokhovsky@rbbn.com>>
Subject: Re: [Pce] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

Christian,
Lots of thanks for your prompt response to my concerns about the SR-CS Policy draft.
Unfortunately I will not be able to attend the SPRING session later today (even remotely).

Regarding your explanation, I believe that the key point is the sentence “everything not running over CS-SR has no bandwidth guarantee, is of lower priority and can undergo packet drops during DiffServ PHB processing”.

This statement is an assumption that:

  1.  Is critical for SR-CS to deliver its promise
  2.  Is actually a requirement (and quite a strong one) for the operator of the SR network to enforce strict separation of traffic that uses SR-CS and all the rest of traffic to different traffic classes. Implementing this requirement in a live operational network may be quite a non-trivial operation
  3.  Unless I am mistaken, is not explicitly stated in the current version of the draft (or in any of the associated drafts),


At the same time, I agree that, if this assumption holds, SR-CS can deliver its promise.

Please notice also that in the  case of MPLS networks the same results can be achieved with MPLS-TP running as “ships in the night” with SR-MPLS but without the overhead of deep label stacks required by SR-CS. This approach has been developed and deployed for quite some time now. IMHO it would be interesting to compare these two approaches.

Regards,
Sasha

Office: +972-39266302
Cell:      +972-549266302
Email:   Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>

From: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>
Sent: Monday, July 25, 2022 6:45 PM
To: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>>
Cc: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>; draft-schmutzer-spring-cs-sr-policy.all@ietf.org<mailto:draft-schmutzer-spring-cs-sr-policy.all@ietf.org>; spring@ietf.org<mailto:spring@ietf.org>; Rotem Cohen <Rotem.Cohen@rbbn.com<mailto:Rotem.Cohen@rbbn.com>>; Nitsan Dolev <Nitsan.Dolev@rbbn.com<mailto:Nitsan.Dolev@rbbn.com>>; pce@ietf.org<mailto:pce@ietf.org>; Michael Gorokhovsky <Michael.Gorokhovsky@rbbn.com<mailto:Michael.Gorokhovsky@rbbn.com>>
Subject: [EXTERNAL] Re: A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

Hi Sasha,

Many thanks for reviewing draft-schmutzer-pce-cs-sr-policy (draft-schmutzer-spring-cs-sr-policy) and sharing your input / concerns. Let me try to address them.

CS-SR policies don’t require additional unprotected adj-SIDs. The unprotected adj-SID part of the two adj-SIDs you mentioned typically being present per link in a network does suffice.

Further the draft does not assume bandwidth guarantees for those unprotected adj-SIDs. Bandwidth is managed by the PCE at a link level and bandwidth guarantees are achieved by ensuring that the total amount of bandwidth requested by all candidate-paths going via a link is kept below the reservable maximum bandwidth defined.

To ensure a link is never congested by just CS-SR traffic, end-to-end path-protection and restoration is used. This ensures traffic does only flow along a path (working, protect or restore) for which bandwidth admission control has been done during path establishment.

You are correct, mechanisms such as TI-LFA may lead to congestion, but the assumption is that everything not running over CS-SR, has no bandwidth guarantee, is of lower priority and can undergo packet drops during DiffServ PHB processing.

There are many ways to fulfil those PHB processing requirements. One way is to mark CS-SR policy traffic with a unique EXP/DSCP and map it into a dedicated priority queue. CS-SR traffic may share a EXP/DSCP and/or queue with other traffic if the operate is certain that the queue will never be congested (i.e. the non CS-SR traffic is important but has very low volume and the queue’s bandwidth is over-provisioned to be enough for CS-SR and non CS-SR traffic together)

I will take the action on thinking about how some more / better text could be added to the draft without being to specific to limit deployment choices.

Hopefully the above does provide a bit more clarity. I am happy to discuss more, fyi I will present the draft in the SPRING WG session, but will be attending IETF114 online only.

Regards
Christian


On 24.07.2022, at 19:02, Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>> wrote:

Hi all,
I would like to clarify that, from my POV, my technical concerns about draft-schmutzer-pce-sr-cs-routing-policies<https://clicktime.symantec.com/15t5ZrUvivrzY8sT1ijxH?h=oARDBH4W-5ffeLBR147jEqYwP_rR1J1Akb38blbagcY=&u=https://datatracker.ietf.org/doc/html/draft-schmutzer-pce-cs-sr-policy-02> presented in my email dated 11-Jul-22<https://clicktime.symantec.com/15t5eggDBYYax5hNZH96u?h=SF8xdDZrlCfJegvv79QramWDaqy05gg48KBreJtvyuM=&u=https://mailarchive.ietf.org/arch/msg/spring/ctrAx6JFaNwLhMCQB5QUdBCR7B8/> fully apply to this draft.

Specifically, the authors do not define any mechanisms that would prevent possible usage of unprotected Adj-SIDs used in the configuration of the candidate paths of CR-CS policies from being also used by such well-known and widely deployed mechanisms as TI-LFA and Segment Routing Microloop Avoidance.  As a consequence, the “strict BW guarantees”  that are expected of SR-CS policies would be violated every time one of these mechanisms would result in some “regular” traffic being sent via the paths defined by such mechanisms.

Even if such mechanisms were defined in a future version of  draft-schmutzer-spring-cs-sr-policy, a retrofit of existing implementations of TI-LFA and/or SR Microloop Avoidance would be required.

I understand the motivation for CR-SC Policies, but I strongly suspect that SR cannot be used as a replacement for MPLS-TP when it comes to BW guarantees.

Regards,
Sasha

Office: +972-39266302
Cell:      +972-549266302
Email:   Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>


Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.


Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.