[spring] Some comments on draft-ietf-spring-srv6-path-segment

Adrian Farrel <adrian@olddog.co.uk> Thu, 10 February 2022 21:19 UTC

Return-Path: <adrian@olddog.co.uk>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D57683A11FE; Thu, 10 Feb 2022 13:19:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BkXXLD72HqtU; Thu, 10 Feb 2022 13:19:02 -0800 (PST)
Received: from mta7.iomartmail.com (mta7.iomartmail.com [62.128.193.157]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 123423A11BB; Thu, 10 Feb 2022 13:18:43 -0800 (PST)
Received: from vs1.iomartmail.com (vs1.iomartmail.com [10.12.10.121]) by mta7.iomartmail.com (8.14.7/8.14.7) with ESMTP id 21ALIflN030507; Thu, 10 Feb 2022 21:18:41 GMT
Received: from vs1.iomartmail.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 724E54604B; Thu, 10 Feb 2022 21:18:41 +0000 (GMT)
Received: from vs1.iomartmail.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 5C0004603D; Thu, 10 Feb 2022 21:18:41 +0000 (GMT)
Received: from asmtp1.iomartmail.com (unknown [10.12.10.248]) by vs1.iomartmail.com (Postfix) with ESMTPS; Thu, 10 Feb 2022 21:18:41 +0000 (GMT)
Received: from LAPTOPK7AS653V ([85.255.237.13]) (authenticated bits=0) by asmtp1.iomartmail.com (8.14.7/8.14.7) with ESMTP id 21ALIdYG013406 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 10 Feb 2022 21:18:40 GMT
Reply-To: adrian@olddog.co.uk
From: Adrian Farrel <adrian@olddog.co.uk>
To: draft-ietf-spring-srv6-path-segment@ietf.org
Cc: spring@ietf.org
Date: Thu, 10 Feb 2022 21:18:38 -0000
Organization: Old Dog Consulting
Message-ID: <15a601d81ec3$c6589620$5309c260$@olddog.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Thread-Index: Adgew299vviUatAyTi+cBPePOlId/Q==
Content-Language: en-gb
X-Originating-IP: 85.255.237.13
X-Thinkmail-Auth: adrian@olddog.co.uk
X-TM-AS-GCONF: 00
X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-8.6.0.1018-26708.003
X-TM-AS-Result: No--7.828-10.0-31-10
X-imss-scan-details: No--7.828-10.0-31-10
X-TMASE-Version: IMSVA-9.1.0.2090-8.6.1018-26708.003
X-TMASE-Result: 10--7.827900-10.000000
X-TMASE-MatchedRID: XafQxseY2BoOwAmmWH5kBGKYf8urrAmQ3AJrtcannrbWXfwzppZ8SBxa WBB0ymAAlnTp5rmebe/xgPhmH7qVhI4kk6s2eLUqrMcMK3Nm8dkBqNb4Qv6Vo3Y04sukLWz6krI 9/WPu3jdorcscbwxtx4X4yNDFzWWE7ns6Ai0dhJmVOwZbcOalS792t/Q6R4L/Ofpf+mAZMCFdeo 0SmBLMi95eTZKO6G7QFHOQutlZTPkdpNb7ZdqI995x7RpGJf1aDpDqNyhH7mnZCmb4VMeP0yuh0 LN7/qaj4nEuQySeQX+y6U8OhaA+VIt55Ou5Qz3gjoyKzEmtrEeHnrXtAg8lI/z8/tFdCtAAGSE9 W8wHt0YSj4q/tneg2m7kamKGhf/8+88MtxwefuJDlKXa97ejTxiDIOPlOJG1YxDgISSqWZ6Cnce LUCNweEuaH2lspx+3y/bRptJBlDO2F9mW29B7smvOwg12ikVSGKTU+n7puzWMEc2I6XQW8YpbwG 9fIuITUBJNYDtxTduqxeF6rW3Jo00xWB8Q2zWq547kEFZFT00MhHBU2puWzrkiJ/BgvX6rBoGhV 1TduQHhzuIC6VXp1yM1cPjzClQa2gDqaB5TWu2jGOtqnkAZCxfJTYLG2XFvK4YqHgCSopXbzMkN iKUuYN6Oe25X9ITZUtfSROZsTg1dml91vlljGfDrY9Cr30dZDm+4joeL+f1x3jx5KhY39aohvsT Ml9uo8uX9tF7/jHrUozMO2sWb4Y0wxO7oO8Fj+NCQDut0K4UX705dnYk+LOCbuVI7hVbL0gyLcC 2OOiWVFPeRyDaGxMOqitBVtx389Zm06PS0lgCeAiCmPx4NwLTrdaH1ZWqCii7lXaIcF/Ww7M6dy uYKg46HM5rqDwqtI41Z+VjGWyyqPJg2zyprLQmB/h8phyd1D9ry+ZUbM7jubWbEqufA1g==
X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:0-0
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/AsRF1-XMAbT3yu3GUbvnnU2dyBk>
Subject: [spring] Some comments on draft-ietf-spring-srv6-path-segment
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Feb 2022 21:19:07 -0000

Hi,

This is a bit of a "fly-by" review. I happened to need to read the draft
to check on the use of SRH flags, so here are a few quick comments.
I hope they are useful.

Best,
Adrian

==Medium==

General

Some of my points below are cleared up when I finally got to Section 7
and discovered that you are asking for a new Endpoint Behavior to be 
assigned. I think that means it *is* possible to detect that a PSID is
present at the wrong place in the stack *if* the processing node knows
enough to look at the endpoint behaviour and understand it. However, the
only (clear) mention of the new endpoint behaviour is in Section 7: TBA1
should be mentioned in the text somewhere!

---

4.1

Here you are attempting to state which bit is used as the P-flag.
But there is a registry for the SRH Header flags (at 
https://www.iana.org/assignments/ipv6-parameters/ipv6-parameters.xhtml#segme
nt-routing-header-flags)
so you should leave this as bit number TBD, and specifically ask IANA 
to assign *a* bit.

You do actually do this in Section 7 but it is in conflict with 4.1.

Note that the registry is IETF review which does allow early assignment
if you want to get the flag agreed for early implementation and interop
etc.

==Minor==

Section 1

   In an SR-MPLS network, when a packet is transmitted along an SR path,
   the labels in the MPLS label stack will be swapped or popped, so no
   label or only the last label may be left in the MPLS label stack when
   the packet reaches the egress node.  Thus, the egress node can not
   determine from which ingress node or SR path the packet came from.
   Therefore, to identify an SR-MPLS path, a Path Segment is defined in
   [I-D.ietf-spring-mpls-path-segment].

   Likewise, a path needs to be identified in an SRv6 network for
   several use cases such as binding bidirectional paths
   [I-D.ietf-pce-sr-bidir-path] and end-to-end performance measurement
   [I-D.gandhi-spring-udp-pm].

This all reads like the main use case in SR-MPLS is source
identification, and that bidirectional path binding and PM are special
for SRv6. I suggest reversing the order of the paragraphs so...

   In SR, a path needs to be identified for several use cases such as
   binding bidirectional paths [I-D.ietf-pce-sr-bidir-path] and end-to-
   end performance measurement [I-D.gandhi-spring-udp-pm].

   Additionally, in an SR-MPLS network, when a packet is transmitted
   along an SR path, the labels in the MPLS label stack will be swapped
   or popped, so no label or only the last label may be left in the MPLS
   label stack when the packet reaches the egress node.  Thus, the
   egress node can not determine from which ingress node or SR path the
   packet came from.  To identify an SR-MPLS path, a Path Segment is
   defined in [I-D.ietf-spring-mpls-path-segment].

---

1.

   An SRv6 Path Segment MUST NOT be copied to the IPv6 destination
   address, so it is not routable.

I think this is back-to-front...

   An SRv6 Path Segment is not routable (it is just an abstract 128 bit
   identifier) so it MUST NOT be copied to the IPv6 destination address.

---

Usually, we don't use BCP 14 language (you have MAY and MUST NOT) in the 
Introduction. It is supposed to be introducing the concepts not 
defining behaviour.

There are ways around this:
- use lower case (and sometimes reword)
- reduce the Introduction and move the normative language to later

---

4.1

   o  P-bit: set when SRv6 Path Segment is inserted.  It MUST be ignored
      when a node does not support SRv6 Path Segment processing.

Well, some nodes not supporting SRv6 Path Segment processing don't
understand the P flag and have never read this document. So you can't
tell them in this document what to do!

You have to refer them back to 8754 with something like

   o  P-bit: set when SRv6 Path Segment is inserted.  A node that does
      not understand the P-bit will ignore it as described in [RFC8754].
      A node that understands the P-flag but does not support SRv6 Path
      Segment processing MUST ignore the P-bit.

However, what is missing, I think is what happens at an egress node
when the P-flag is set and the egress either doesn't understand or
doesn't support SRv6 Path Segments. In this case, the P-flag will be
ignored, but what will happen to the PSID? Will processing be attempted?
You might argue that "A Path Segment is a local segment allocated by an
egress node, so this situation cannot happen." But I would say that is
"should not happen" because there are ingress errors, and there are 
timing windows. So you need to describe this edge case.

---

5.

   When a Path Segment is allocated by the egress, it MUST be
   distributed to the ingress node of the path that identified by the
   path segment.  In this case, only the egress will process the Path
   Segment, and other nodes specified by SIDs in the segment list do not
   know how to process the Path Segment.

   Depending on the use case, a Path Segment may be distributed to the
   SRv6 nodes along the SRv6 path.  In this case, the SRv6 nodes that
   learned the Path Segment may process the Path Segment depending on
   the use case.

This is pretty unclear about how the distribution happens. I think you
either need to describe or reference the mechanisms, or you have to be
clear that the distribution mechanisms are for future study (although,
in that case, it is debatable whether there is any value to this
document!)

---

6.

      An SRv6 Path
      Segment that appears at any other location in the SID list will be
      treated as an error.

Will it, though? Or will an attempt be made to treat it as some other
form of SID causing unpredictable behaviour? That is, regardless of the
P-flag, if a PSID is inserted into the middle of a SID stack, an
attempt will be made to process it (possibly resulting in an error, or
possibly resulting in the packet being forwarded on an address that
should not be treated as routable). But is there any way to know that
the PSID is at the wrong location (or present multiple times)?

So, I think you are fine to say "MUST be bottom of stack" and "MUST NOT
appear at other locations." But all that you can say beyond that is  
that "placing a PSID at any location in the SID list will result in
unpredictable forwarding behavior." 

---


==Nits==

Section 1

OLD
from which ingress node or SR path the packet came from.
NEW
from which ingress node or SR path the packet came.
END

---

1.

s/called "SRv6 Path Segment"/called the "SRv6 Path Segment"/

---

1.2

You don't need to include terms that appear at in the RFC Editor's list
at https://www.rfc-editor.org/materials/abbrev.expansion.txt marked with
an asterisk (*).

In this case, that's "MPLS"

---

3.1

   This document proposes two types of SRv6 Path Segment format.

Be future-proof! "This document defines..."

---

3.1.1

Here you appear to say that the SRv6 Path Identifier can be routable
(i.e., is built with as LOC:FUNCT), but in the Introduction you are 
adamant that it is not routable.

---

4.1

Nothing wrong with Figure 1 (except the alignment of the bit counters)
but it seems overkill to draw what the text says. 

---

Please decide "P-flag" or "P-bit". Probably flag.

---