Re: [spring] SRv6 And ICMP Processing

"Pablo Camarillo (pcamaril)" <pcamaril@cisco.com> Mon, 09 December 2019 15:17 UTC

Return-Path: <pcamaril@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D69812000F for <spring@ietfa.amsl.com>; Mon, 9 Dec 2019 07:17:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=XgfiROrw; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ZRns6bQe
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qSvsqZEE7-O3 for <spring@ietfa.amsl.com>; Mon, 9 Dec 2019 07:17:31 -0800 (PST)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8C1D1200B6 for <spring@ietf.org>; Mon, 9 Dec 2019 07:17:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15691; q=dns/txt; s=iport; t=1575904651; x=1577114251; h=from:to:subject:date:message-id:mime-version; bh=IrQm7UG7JU9nxfj6ugI8PZa7Vhf+r602fCrEMOWcwXc=; b=XgfiROrwZ88TW1gpPgrdB/JZM0eS3lNLCnDRWCjYklDDpOaRFdooEYuX 1Ks8Jws+N6Oi4Y3qJDSOv47Rh4zreuA4xLN2Hc8XZLxkYinfF7hsZx9DO 4HZsLauEcgkvycjPGt9MNgo/z6yueaJL6Starj1RI4hTZ9LlOzqJnZerj M=;
IronPort-PHdr: 9a23:rCjPVxJluIVvRVsz8dmcpTVXNCE6p7X5OBIU4ZM7irVIN76u5InmIFeBvKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUgMdz8AfngguGsmAXFXwJfvjdS0+NM9DT1RiuXq8NBsdFQ==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0D9AAB+ZO5d/4MNJK1kHQEBAQkBEQUFAYFqCAELAYEbL1AFbA5KIAQLKgqDeINGA4RahilOghGTI4RigS6BJANUCQEBAQwBAS0CAQGEQAIXggIkNAkOAgMNAQEEAQEBAgEFBG2FNwyFUgEDAxIRChMBATgRAQgRAwECKwIEMB0KBAESIoMAAYF5TQMuAaEmAoE4iGF1gTKCfgEBBYJKgkYYghcJgTYBjBcagUE/gTgggkw+gmQEggGCcDKCLJAnhVCJUI8WCoIulWYbmjKOSporAgQCBAUCDgEBBYFSOYFYcBVlAYJBUBEUjGYMF4NQilN0AYEnjFkBgQ8BAQ
X-IronPort-AV: E=Sophos;i="5.69,296,1571702400"; d="scan'208,217";a="677048399"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 09 Dec 2019 15:17:30 +0000
Received: from xch-rcd-011.cisco.com (xch-rcd-011.cisco.com [173.37.102.21]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id xB9FHU8R007915 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 9 Dec 2019 15:17:30 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-RCD-011.cisco.com (173.37.102.21) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 9 Dec 2019 09:17:30 -0600
Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 9 Dec 2019 09:17:30 -0600
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 9 Dec 2019 09:17:30 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=laqZ9gygEAwSdeJ0a8xwKStcSlFvubdQaqoIafgGk6IXx3UN+bLgLiF+Ox2zWHvNZEua1apvU3uVpk1zIrLDeCMD4TQbMRBFxA9i4k0czxdUCedYCxR3G1OYism4FhNHeeA6uPEdCv/G5xDZu1sD8I6SLmigPrNFui1a7QOkK1Z6oVQRKaNXOT521IHfisfDJSdPVDXj2p0xb6+hdQYFLYzyf1wz9ljYoz6T44id9f0+IAMpMOfBfEW1SrOYHkubUCM+fM33V5EkvKSx2gNar47htgg+ar+40WH8+Cd+Vh7zUa5NOwaPNqXkHsGwmIUzzTH+Vlq0DI2n6VkFTgR/pw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IrQm7UG7JU9nxfj6ugI8PZa7Vhf+r602fCrEMOWcwXc=; b=CjGLrIf41tP6vdCz5xUHr+VLMcf8TayaTkrdZc/ycS/T9bcbZih7HqARO5y/tMCjU+NbPxL4OId3brKd0MLko8MsSqqGC9dAJVIDopM8eX+zy30J98nodB/1blBorkot4sxGg90Iq1ZJIBXISWmYJuu5WfeiUh9G2Gvw1BY5fnxnNdpjwebWGnLXBYoJQjOHpSmTawDBJmakQtlzjAmkRecW1vUC0Xtl/Qx3B4J9qQv9CLPJdKw284rv67eFJTVKFRDbz/Nfl94tuTKuwKd9pIItOzxTYqovEXFBe5CrP0y7fC/CnuDVvVgu1Vapdbpl2ioTggbKK8ZGA8H1bHcr3Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IrQm7UG7JU9nxfj6ugI8PZa7Vhf+r602fCrEMOWcwXc=; b=ZRns6bQeozdcoczg4j5XZkSkzkBxBSy9y7sUc5NwnQQD6GcGDC3/fUbV8B+P1W/M0fCS0sot7XQDs2R1P+e4RMr72+snsXENbi3AOQXVNs8T25ExUNCtGRf374ZsLLpO71hKWSSb3l8SU4vvZmHq53XIKX7Jp9ve/yqW8iuwfAU=
Received: from MWHPR11MB1374.namprd11.prod.outlook.com (10.169.234.8) by MWHPR11MB1840.namprd11.prod.outlook.com (10.175.55.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.12; Mon, 9 Dec 2019 15:17:29 +0000
Received: from MWHPR11MB1374.namprd11.prod.outlook.com ([fe80::b04b:c9bb:2378:7a8d]) by MWHPR11MB1374.namprd11.prod.outlook.com ([fe80::b04b:c9bb:2378:7a8d%11]) with mapi id 15.20.2516.018; Mon, 9 Dec 2019 15:17:29 +0000
From: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com>
To: Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>, SPRING WG <spring@ietf.org>
Thread-Topic: [spring] SRv6 And ICMP Processing
Thread-Index: AQHVrqPDxVGKoYtCyU2EHlgld3Jxpg==
Date: Mon, 09 Dec 2019 15:17:29 +0000
Message-ID: <142CF3C0-FBCA-4D91-B0C7-2C8F59C43E1E@cisco.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1f.0.191110
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pcamaril@cisco.com;
x-originating-ip: [173.38.220.39]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 95db23c3-3d94-4a36-d02f-08d77cbae7d6
x-ms-traffictypediagnostic: MWHPR11MB1840:
x-microsoft-antispam-prvs: <MWHPR11MB184020556E8E7A33F5C92120C9580@MWHPR11MB1840.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-forefront-prvs: 02462830BE
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(39860400002)(346002)(366004)(136003)(189003)(199004)(86362001)(478600001)(36756003)(229853002)(66476007)(66556008)(6486002)(2906002)(66446008)(110136005)(316002)(64756008)(5660300002)(8676002)(2616005)(6506007)(53546011)(186003)(33656002)(6512007)(76116006)(91956017)(66946007)(8936002)(26005)(81156014)(81166006)(71200400001)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1840; H:MWHPR11MB1374.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: sJpPTWtp0V/EbMItUW9atv+eWzjeoLG8n7eRPqWvsLdlX27vNmHh4Lr3pMs1PaA4upRan3XXSwq8aBZk2UY6zln4GMa865ANxZMmWFLr9YSBSFSNs4B39XLar4lkhdPsIkNK9SOdlTP2oAQynI3V+bAF+MC4b15kDrWfkJOFnY561Rp/Kk4v58i8RlET4s5oDogBt6S1CBTc6QYFhEKH3EFUTOKgb6rVd+IC1lEXDv6vhH1+W8e6nYPRxOjzJ4g9nVY1MxCGPfb6wHzWFxLspiDkVXqDjgC78JZAJc4lil2hZUyq5F8xSIBkZHSg25Oh1DLot57woZ8olrZ4eJPkmQ6wXM7ZG85OT45OdC4inghhJF0RdvnWY5l8AVeJgOQPDbVRhyz7dFmTxUMByg0XAWbA0LuWMOmnIQVeIcLbc35U20y9gdpLdiEXAxM6viYk
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_142CF3C0FBCA4D91B0C72C8F59C43E1Eciscocom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 95db23c3-3d94-4a36-d02f-08d77cbae7d6
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Dec 2019 15:17:29.1140 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: nhb+GpQBZlKFphOeVQaZHdQtwYnj3cOmkuEn3uU/IaBw5IiPimSGjgUTRS/kXyuor9npCoeHZ9QIufKl01+/Vw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1840
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.21, xch-rcd-011.cisco.com
X-Outbound-Node: alln-core-1.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/9arHAl_mDDw5Ozb3fDtNYjSqE5Y>
Subject: Re: [spring] SRv6 And ICMP Processing
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Dec 2019 15:17:33 -0000

Ron,

In the example you listed the SRv6 implementation does not reply sending an ICMPv6 Parameter Problem message.
As you said, this would be a violation of RFC4443. I believe that RFC4443 is very clear about this.

Thanks,
Pablo.

From: spring <spring-bounces@ietf.org> on behalf of Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>
Date: Monday, 25 November 2019 at 20:22
To: SPRING WG <spring@ietf.org>
Subject: [spring] SRv6 And ICMP Processing

Pablo,

Assume that an SRv6 implementation receives the following packet:


-          IPv6 Header

o   Destination Address is a locally instantiated END.DX4 SID

o   Next Header is ICMPv6

-          ICMPv6 Header

o   Type is Parameter Problem

Section 4.5 of draft-ietf-spring-srv6-network-programming-05 suggests that the implementation would respond by sending another ICMPv6 Parameter Problem message. This would violate RFC 4443, Section 2.4.e.

You might want to add some text to the draft stating compliance with the rules in Section 2.4 of RFC 4443.

                                                                                     ROn




Juniper Business Use Only