Re: [spring] Is srv6 PSP a good idea

"Joel M. Halpern" <jmh@joelhalpern.com> Wed, 11 December 2019 14:15 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E4FE12000F for <spring@ietfa.amsl.com>; Wed, 11 Dec 2019 06:15:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id itDeYUd0SDz3 for <spring@ietfa.amsl.com>; Wed, 11 Dec 2019 06:15:42 -0800 (PST)
Received: from maila2.tigertech.net (maila2.tigertech.net [208.80.4.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D18E7120041 for <spring@ietf.org>; Wed, 11 Dec 2019 06:15:42 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by maila2.tigertech.net (Postfix) with ESMTP id 47XzVQ5RQWz6GCj8 for <spring@ietf.org>; Wed, 11 Dec 2019 06:15:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1576073742; bh=05p47yL93lxQMdCcj/713fCuFjtT2AWZisDgvETlFFs=; h=Subject:To:References:From:Date:In-Reply-To:From; b=GW5uhbx54SjQwfKi2IxItBZk9EgYQfZJZfz3fApozan+2tNm1H9+wgqUrotGtNNIk BAT2xhkPINsivTiB6oI9yS2X67ONVNer79IWBAaKDvOXVCIT7Djqiytdxcos6vp/zl 4qryhAse4UqwcxNA5j8CLBMT2HlXG4Mt6vK9AWFk=
X-Virus-Scanned: Debian amavisd-new at a2.tigertech.net
Received: from [192.168.128.43] (209-255-163-147.ip.mcleodusa.net [209.255.163.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by maila2.tigertech.net (Postfix) with ESMTPSA id 47XzVQ232Pz6G86Z for <spring@ietf.org>; Wed, 11 Dec 2019 06:15:41 -0800 (PST)
To: "spring@ietf.org" <spring@ietf.org>
References: <5c2a4b36-0c59-709e-23eb-00f4aa1ce52f@joelhalpern.com> <16253F7987E4F346823E305D08F9115AABAEB42B@nkgeml514-mbx.china.huawei.com>
From: "Joel M. Halpern" <jmh@joelhalpern.com>
Message-ID: <d24357eb-c137-d14e-e394-0e49d7eff7bc@joelhalpern.com>
Date: Wed, 11 Dec 2019 09:15:37 -0500
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <16253F7987E4F346823E305D08F9115AABAEB42B@nkgeml514-mbx.china.huawei.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/CMSX7ijacRdG8qHlla61ylJNggo>
Subject: Re: [spring] Is srv6 PSP a good idea
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Dec 2019 14:15:45 -0000

Thank you Jingrong for providing some of the other motivations.  Two 
furhter comments.

As far as I know, the only savings on the end box is the processing for 
noticing the SRH, noticing that SL is 0 and there are no relevant TLVs, 
and then moving on.

If the actual end device is not part of the SR domain, I assume that 
encapsulation would have been used, so I think it is reasoanble to 
assume that in the PSP case the end device is SR capable.

Do you have any comments on what appears to be the significant increase 
in complexity on the device performing PSP?  The question I am trying to 
get at is about the tradeoff, which needs one to evaluate both sides.

Yours,
Joel

On 12/10/2019 11:13 PM, Xiejingrong (Jingrong) wrote:
> I think it's a good idea.
> Nothing new, but benefits that people have already said seems notable to me.
> 
> (1) reduce the load of final destination. This benefit can be notable for the following sub reasons.
> (1.1) final destination tends to have heavy load. It need to handle all the EHs and do the delivery/demultiplex the packet to the right overlay service.
> (1.2) example 1, the final destination may need to handle the DOH after the RH.
> (1.3) example 2, the final destination may need to do the assembly of fragmented packets.
> (1.4) example 3, the final destination may need to do AH/ESP after the Fragmentation Header.
> (1.5) example 4, the final destination may need to deliver the packet to the right overlay service.
> 
> (2) support the incremental deployment when final destination(s) do not process/recognize SRH. This benefit can be notable for the following sub reasons.
> (2.1) A core router may (fan-out) connected with a big number of low-end routers that do not support SRH but support tunnel-end/service-demultiplex function of SRv6.
> 
> Thanks
> Jingrong
> 
> -----Original Message-----
> From: spring [mailto:spring-bounces@ietf.org] On Behalf Of Joel M. Halpern
> Sent: Wednesday, December 11, 2019 10:55 AM
> To: spring@ietf.org
> Subject: [spring] Is srv6 PSP a good idea
> 
> For purposes of this thread, even if you think PSP violates RFC 8200, let us assume that it is legal.
> 
> As I understand it, the PSP situation is:
> o the packet arrives at the place (let's not argue about whether SIDs are locators) identified by the SID in the destination address field o that SID is the next to last SID in the SID list o that sid is marked as / known to be PSP o at the intended place in the processing pseudocode, the last (first) entry in the SRH is copied into the destination IPv6 address field of the packet
> -> The SRH being used is then removed from the packet.
> 
> In order to evaluate whether this is a good idea, we have to have some idea of the benefit.  It may be that I am missing some of the benefit, and I would appreciate clarification.
> As far as I can tell, the benefit of this removal is that in exchange for this node doing the work of removing the SRH, the final node in the SRH does not have to process the SRH at all, as it has been removed.
> 
> I have trouble seeing how that work tradeoff can be beneficial.
> Removing bytes from the middle of a packet is a complex operation.
> Doing so in Silicon (we expect this to be done in the fast path of significant forwarders as I understand it) requires very special provision.  Even in software, removing bytes from the middle of a packet requires somewhere between some and a lot of extra work.  It is distinctly NOT free.
> 
> In contrast, we have assumed that the work of processing SRH itself is tractable, since otherwise all of SRv6 would be problematic.  So why is this necessary.
> 
> Yours,
> Joel
> 
> PS: Note that both the MPLS case and the encapsulation case are very different in that the material being removed is at the front of the IP packet.  Pop or prepend are MUCH easier than middle-removal (or middle-insertion).
> 
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring
>