Re: [spring] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

"Christian Schmutzer (cschmutz)" <cschmutz@cisco.com> Wed, 15 February 2023 18:24 UTC

Return-Path: <cschmutz@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E075C14F74E; Wed, 15 Feb 2023 10:24:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.887
X-Spam-Level:
X-Spam-Status: No, score=-11.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b="L+M6zABj"; dkim=pass (1024-bit key) header.d=cisco.com header.b="bPcHfGqy"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2lib_d5FfnD3; Wed, 15 Feb 2023 10:24:18 -0800 (PST)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6658CC14F749; Wed, 15 Feb 2023 10:24:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=52741; q=dns/txt; s=iport; t=1676485458; x=1677695058; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=UG/j+Ex5pwYUtx9yKcRLvO5sp4nuMH/hEaxCZktKwug=; b=L+M6zABj16q/pVGp4edtJ70wfiguQ+D1MhSUE7fQRh2ZgjYduxJcWw23 rMz6wgmLuaM4sSH3kVqv6pIRPZ82a4ZQLjxy+IVKM06ByEjGILJXaNzg3 HxcPDGvBbjReVrmbDpDuvsEoMqmygkU1Xlfe6x5oXB5VjCVVcSTugElQU Q=;
X-IPAS-Result: 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
IronPort-PHdr: A9a23:whTOKxN3ri/13YmgZWgl6ncDWUAX0o4cdiYZ6Zsi3rRJdKnrv5HvJ 1fW6vgliljVFZ7a5PRJh6uz0ejgVGUM7IzHvCUEd5pBBBMAgN8dygonBsPNAEbnLfnsOio9G skKVFJs83yhd0ZPH8OrbFzJqXr05jkXSX3C
IronPort-Data: A9a23:rG7zoKJq5knbnRz/FE+RSJUlxSXFcZb7ZxGr2PjKsXjdYENS12QFy jcWXz/QO6uDZzbxed1xb4/npk4HuZHTmodiSQQd+CA2RRqmiyZq6fd1j6vUF3nPRiEWZBs/t 63yUvGZcIZsCCW0Si6FatANl1EkvU2zbue6WbGs1hxZH1c+E3970E87wYbVv6Yx6TSHK1LV0 T/Ni5W31G+Ng1aY5UpNtspvADs21BjDkGtwUm4WPJinj3eC/5UhN6/zEInqR5fOria4KcbhL wrL5OnREmo0ZH7BAPv9+lrwWhVirrI/oWFih1IOM5VOjCSuqQQy4IYqMLkEVH5P1QS7zpc28 pZ/n7iJHFJB0q3kwIzxUjFCGC14eKZB4rKCcD60sNeYyAvNdH6EL/dGVR5te9ZHvLcsRzgSq JT0KxhVBvyHr+mty7K+V/V+rs8iN8LseogYvxmMyBmHVKx2Ec2TEs0m4/dBzjYoht5LGM3bR MgVTRVjSxfqehtmbwJ/5JUWxbf02SaXnydjgHeUrqo+7myV4wtr17vtN8TOec2iX89fmACTo Weu13zyDzkbOcCRjz2f/RqEoO7Thir9Hq4VELCm3uRgilvVzWsWYDUsUke2pL+SjU6zXfpFI UYSvCEpqMAa71SxT9/ydxy1vHDCuQQTM/JcCeQ09ESWwarR/hqLC3JBVSZbadop8cQtACcwk 0eOm9LiFHpmtLm9SH+B+PGTtzzaEQERIH8LYyMJV0076tjlu4EvgxPJZsxpGqjzhdrwcRnyw j3MoC84iJ0TkMcU2qT99lfC6w9AvbDTRQIzow7QRG/gv0VyZZWuYMqj7l2zAet8wJixTmuhr XxHg/Wn9L4/P8DK0xbOcs8pJeT8jxqaCwH0jVlqFpgn0j2i/X+/YIxdiA2Swm80b67onhe0P CfuVRNtCIx7ZyT1MPcmC26lI4F7kvi6TIWNuuX8N4IWOvBMmBm7EDaCjHN8Mkj3m0Qq1Ko4I 5reIICnDG0RDuJsyz/eqwYhPV0DmHhWKYD7HMCTI/GbPVy2PyP9pVAtawPmUwzBxPnYyDg5C v4GXydw9z1RUfflfg7c+pMJIFYBIBATXM6p9ZcGJ7PYf1Y+RgnN7sM9J5t8JOSJeIwIyI/1E o2VASe0NXKm3ySccFXWApydQOO2Bf6TUk7XzQR1bQr3hBDPkK6k7bwUcNMsbKI7+el4pcOYv NFbE/hs9s9nE2ydkxxENMGVhNU7KHyD21nUVwL7O2dXQnKVb1GTkjMSVlGxpHBm4+venZZWn oBMISuBGcFSF1kyXJeKAB9tpnvo1UUgdCtJdxOgCrFulI/EreCG9wSZYicLHvwx
IronPort-HdrOrdr: A9a23:HqIPI6/rwwvbvxOO8QFuk+Ftdb1zdoMgy1knxilNoENuHPBwxv rAoB1E73PJYW4qKQ0dcdDpAtjlfZquz+8L3WBxB8bvYOCCggqVxe5ZnPPfKlHbak/DH6tmpN pdmstFeZLN5DpB/L3HCWCDer5KqrTmgcOVbKXlvg1QpGpRGsZdBnJCe3+m+zpNNW977PQCZf +hz/sCgwDlVWUcb8y9CHVAdfPEvcf3mJXvZgNDLwI76SGV5AnYpoLSIly95FMzQjlPybAt/S zuiAri/JiutPm911v1y3LT1ZJLg9Hso+EzRfBky/JlagkEuDzYJriJaIfy+QzdZ9vfrGrCpe O84CvI+f4DrE85MFvF5ycFkDOQrgrGo0WSuGNwx0GT+PAQgFkBepF8bUUzSGqA16NohqAO7I tbm22erJZZFhXGgWD04MXJTQhjkg6urWMlivN7tQ0VbWOPAIUh3bD30XklWavoJhiKoLwPAa 1rFoXR9fxWeVSVYzTQuXRu2sWlWjA2Eg2dSkYPt8SJ23wO9UoJgncw1YgahDMN5Zg9Q55L66 DNNblpjqhHSosTYbhmDOkMTMOrAijGQA7KMmiVPVP7fZt3cU7lutry+vE49euqcJsHwN87n4 nASkpRsSood0fnGaS1ret2G9D2MRKAtBjWu7VjDsJCy8/BrZLQQFi+dGw=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos; i="5.97,300,1669075200"; d="scan'208,217"; a="61288589"
Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Feb 2023 18:24:16 +0000
Received: from mail.cisco.com (xfe-aln-003.cisco.com [173.37.135.123]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 31FIOGZU023454 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=OK); Wed, 15 Feb 2023 18:24:16 GMT
Received: from xfe-aln-001.cisco.com (173.37.135.121) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.9; Wed, 15 Feb 2023 12:24:15 -0600
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xfe-aln-001.cisco.com (173.37.135.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.15 via Frontend Transport; Wed, 15 Feb 2023 12:24:15 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mjM86a5TJ3QrJa1hN0GLtcgjD0W0M2sxf37UiOdSboVjEth2ojaVe+6e8Hk28k2dO3NxMID59svBm8XG0cOweELd9rC7J2T5xFGujoJeCKgZcwh3V2MuFL1GA/HH9rmSUUNOEuBeBR4xKakAFUYHexRXSCfkha3FgtzsXIsbD/zLGSpgikwB/E4JbNdkjwrYAPRSmuUyhwOIT8U2Q5KYwzFQ/GyM57njygy5V7NPRw87Juc2C54BoMQ9Xx6UCGYCfjrnXnq5AXn+CfKALMRcnlrboxrZY+YAOuPHOgPWeCdOYs5kcqTPFOxASrLzUfjXPSjhP6wj+mbMaxCcnsv5cA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UG/j+Ex5pwYUtx9yKcRLvO5sp4nuMH/hEaxCZktKwug=; b=aSQwcJLdV41nKnltx5rC9+udn2U26UKSA1ishAbH3NUw9jIQbiNMQ/FCRCN+VHwQweV3S7f5zGPDJ7fGK5boqRJzcyNDvrSrF86BzKDMz9YxUpCyQwFWC2PUAfwHO09W/xN1lwIfrpBaePCYd0iftV5aGDCbl7BdN+Niy6yADGRoLD+ug6tbR7Ftnq4xNqfLFZig6CyD1D0GJMKRb2eZ1qesa8IMWApH71lDF2SrLHM40UiSyi6l8yzaq9XGVe6Igc+LWca/Y+XKxBpJh8Vb5a4k7ct19cjpaUqcC7BvNxrWjUUqS3xiVHpQl+aYF/bo5UeeA5trXJMU7qtvkLn0zg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UG/j+Ex5pwYUtx9yKcRLvO5sp4nuMH/hEaxCZktKwug=; b=bPcHfGqyLXQyldQXRjlOpOfOEwdMvt/lYnGkEnIDbhma/EcE4oJVyHbjnzo8J5bKwol5j0K7UDJfz8BtfiG7IMsODY6BsAL0tCJnhPZhiKtGVPQJ5LRPJtH6PvQg6fCN5JWQfJpgjcIyu5sFOdDpjscmIpK9SwDtZQN8noP6M6Q=
Received: from SJ0PR11MB5662.namprd11.prod.outlook.com (2603:10b6:a03:3af::7) by DS0PR11MB6399.namprd11.prod.outlook.com (2603:10b6:8:c8::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6086.26; Wed, 15 Feb 2023 18:24:13 +0000
Received: from SJ0PR11MB5662.namprd11.prod.outlook.com ([fe80::2f03:613e:17db:eb04]) by SJ0PR11MB5662.namprd11.prod.outlook.com ([fe80::2f03:613e:17db:eb04%9]) with mapi id 15.20.6086.026; Wed, 15 Feb 2023 18:24:13 +0000
From: "Christian Schmutzer (cschmutz)" <cschmutz@cisco.com>
To: "Dongjie (Jimmy)" <jie.dong@huawei.com>, Alexander Vainshtein <Alexander.Vainshtein@rbbn.com>
CC: "Christian Schmutzer (cschmutz)" <cschmutz@cisco.com>, "draft-schmutzer-spring-cs-sr-policy.all@ietf.org" <draft-schmutzer-spring-cs-sr-policy.all@ietf.org>, "spring@ietf.org" <spring@ietf.org>, Rotem Cohen <Rotem.Cohen@rbbn.com>, Nitsan Dolev <Nitsan.Dolev@rbbn.com>, "pce@ietf.org" <pce@ietf.org>, Michael Gorokhovsky <Michael.Gorokhovsky@rbbn.com>
Thread-Topic: A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00
Thread-Index: Adiffy2snJpRyJ62TvmDqoJV6SGHgAAvkJUAACBaJTAAGxBukCgP5i6A
Date: Wed, 15 Feb 2023 18:24:13 +0000
Message-ID: <54EFE818-3243-4FE0-854E-11866145C79E@cisco.com>
References: <PH0PR03MB63007D82CD11836C4BE5B13AF6929@PH0PR03MB6300.namprd03.prod.outlook.com> <664D8681-C2DD-4163-B6CD-7BC8E785805D@cisco.com> <PH0PR03MB630015DFF140BC9D1405D311F6949@PH0PR03MB6300.namprd03.prod.outlook.com> <598b3d2ef59b4bb5978f05d225f11925@huawei.com>
In-Reply-To: <598b3d2ef59b4bb5978f05d225f11925@huawei.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3696.120.41.1.2)
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cisco.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SJ0PR11MB5662:EE_|DS0PR11MB6399:EE_
x-ms-office365-filtering-correlation-id: 619478bd-f4e3-4376-7511-08db0f81d71c
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR11MB5662.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230025)(346002)(39860400002)(136003)(396003)(376002)(366004)(451199018)(33656002)(2906002)(36756003)(86362001)(2616005)(83380400001)(91956017)(54906003)(110136005)(478600001)(6486002)(966005)(53546011)(6506007)(26005)(6512007)(316002)(71200400001)(38070700005)(4326008)(166002)(186003)(41300700001)(5660300002)(66446008)(76116006)(122000001)(66556008)(8676002)(64756008)(38100700002)(66476007)(66946007)(8936002)(66899018)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_54EFE81832434FE0854E11866145C79Eciscocom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SJ0PR11MB5662.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 619478bd-f4e3-4376-7511-08db0f81d71c
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Feb 2023 18:24:13.6908 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: k4SY3P/H6PWgxHAucnyJs1sBIucw4GRyQ8v/1/zhJvr8Q1rMqSWoZH1NSKRozVrAQy7DsuBJSXRmpjRs+sR4/Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR11MB6399
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.135.123, xfe-aln-003.cisco.com
X-Outbound-Node: rcdn-core-9.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/D14x8Sa9psgaV3YbpHZOb9R3ajY>
Subject: Re: [spring] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Feb 2023 18:24:23 -0000

Hi Jie and Sasha,

We recently published a new version of the draft trying to address your concerns on assumptions and procedures for guaranteeing bandwidth for CS-SR policies in the following section https://datatracker.ietf.org/doc/html/draft-schmutzer-spring-cs-sr-policy-01#name-ensuring-bandwidth-guarante

Probably not perfect but wondering what you think? Further input and discussion is welcome !

regards
Christian

On 26.07.2022, at 22:23, Dongjie (Jimmy) <jie.dong@huawei.com<mailto:jie.dong@huawei.com>> wrote:

Hi Sasha and Christian,

To my understanding the potential services of CS-SR require some level of performance guarantee, which means the traffic needs to be distinguished from other traffic in the network and be treated separately. As discussed in this thread, one approach would be to steer the traffic to a separate queue or a separate set of resources.

I agree with Sasha that requesting a dedicated traffic class may not be easy. Sasha gave a mechanism based on the coexistence of MPLS-TP and SR-MPLS. An alternative to that would be to use a separate set of SR SIDs for the CS-SR, and associate such set of SR SIDs with a separate set of network resources (e.g. sub-interfaces or queue). That could be achieved by using resource-aware SIDs as defined in draft-ietf-spring-resource-aware-segments.

Best regards,
Jie

From: Pce [mailto:pce-bounces@ietf.org] On Behalf Of Alexander Vainshtein
Sent: Tuesday, July 26, 2022 3:48 PM
To: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>
Cc: draft-schmutzer-spring-cs-sr-policy.all@ietf.org<mailto:draft-schmutzer-spring-cs-sr-policy.all@ietf.org>; spring@ietf.org<mailto:spring@ietf.org>; Rotem Cohen <Rotem.Cohen@rbbn.com<mailto:Rotem.Cohen@rbbn.com>>; Nitsan Dolev <Nitsan.Dolev@rbbn.com<mailto:Nitsan.Dolev@rbbn.com>>; pce@ietf.org<mailto:pce@ietf.org>; Michael Gorokhovsky <Michael.Gorokhovsky@rbbn.com<mailto:Michael.Gorokhovsky@rbbn.com>>
Subject: Re: [Pce] A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

Christian,
Lots of thanks for your prompt response to my concerns about the SR-CS Policy draft.
Unfortunately I will not be able to attend the SPRING session later today (even remotely).

Regarding your explanation, I believe that the key point is the sentence “everything not running over CS-SR has no bandwidth guarantee, is of lower priority and can undergo packet drops during DiffServ PHB processing”.

This statement is an assumption that:

  1.  Is critical for SR-CS to deliver its promise
  2.  Is actually a requirement (and quite a strong one) for the operator of the SR network to enforce strict separation of traffic that uses SR-CS and all the rest of traffic to different traffic classes. Implementing this requirement in a live operational network may be quite a non-trivial operation
  3.  Unless I am mistaken, is not explicitly stated in the current version of the draft (or in any of the associated drafts),


At the same time, I agree that, if this assumption holds, SR-CS can deliver its promise.

Please notice also that in the  case of MPLS networks the same results can be achieved with MPLS-TP running as “ships in the night” with SR-MPLS but without the overhead of deep label stacks required by SR-CS. This approach has been developed and deployed for quite some time now. IMHO it would be interesting to compare these two approaches.

Regards,
Sasha

Office: +972-39266302
Cell:      +972-549266302
Email:   Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>

From: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>
Sent: Monday, July 25, 2022 6:45 PM
To: Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>>
Cc: Christian Schmutzer (cschmutz) <cschmutz@cisco.com<mailto:cschmutz@cisco.com>>; draft-schmutzer-spring-cs-sr-policy.all@ietf.org<mailto:draft-schmutzer-spring-cs-sr-policy.all@ietf.org>; spring@ietf.org<mailto:spring@ietf.org>; Rotem Cohen <Rotem.Cohen@rbbn.com<mailto:Rotem.Cohen@rbbn.com>>; Nitsan Dolev <Nitsan.Dolev@rbbn.com<mailto:Nitsan.Dolev@rbbn.com>>; pce@ietf.org<mailto:pce@ietf.org>; Michael Gorokhovsky <Michael.Gorokhovsky@rbbn.com<mailto:Michael.Gorokhovsky@rbbn.com>>
Subject: [EXTERNAL] Re: A technical concern regarding draft-schmutzer-spring-cs-sr-policy-00

Hi Sasha,

Many thanks for reviewing draft-schmutzer-pce-cs-sr-policy (draft-schmutzer-spring-cs-sr-policy) and sharing your input / concerns. Let me try to address them.

CS-SR policies don’t require additional unprotected adj-SIDs. The unprotected adj-SID part of the two adj-SIDs you mentioned typically being present per link in a network does suffice.

Further the draft does not assume bandwidth guarantees for those unprotected adj-SIDs. Bandwidth is managed by the PCE at a link level and bandwidth guarantees are achieved by ensuring that the total amount of bandwidth requested by all candidate-paths going via a link is kept below the reservable maximum bandwidth defined.

To ensure a link is never congested by just CS-SR traffic, end-to-end path-protection and restoration is used. This ensures traffic does only flow along a path (working, protect or restore) for which bandwidth admission control has been done during path establishment.

You are correct, mechanisms such as TI-LFA may lead to congestion, but the assumption is that everything not running over CS-SR, has no bandwidth guarantee, is of lower priority and can undergo packet drops during DiffServ PHB processing.

There are many ways to fulfil those PHB processing requirements. One way is to mark CS-SR policy traffic with a unique EXP/DSCP and map it into a dedicated priority queue. CS-SR traffic may share a EXP/DSCP and/or queue with other traffic if the operate is certain that the queue will never be congested (i.e. the non CS-SR traffic is important but has very low volume and the queue’s bandwidth is over-provisioned to be enough for CS-SR and non CS-SR traffic together)

I will take the action on thinking about how some more / better text could be added to the draft without being to specific to limit deployment choices.

Hopefully the above does provide a bit more clarity. I am happy to discuss more, fyi I will present the draft in the SPRING WG session, but will be attending IETF114 online only.

Regards
Christian


On 24.07.2022, at 19:02, Alexander Vainshtein <Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>> wrote:

Hi all,
I would like to clarify that, from my POV, my technical concerns about draft-schmutzer-pce-sr-cs-routing-policies<https://clicktime.symantec.com/15t5ZrUvivrzY8sT1ijxH?h=oARDBH4W-5ffeLBR147jEqYwP_rR1J1Akb38blbagcY=&u=https://datatracker.ietf.org/doc/html/draft-schmutzer-pce-cs-sr-policy-02> presented in my email dated 11-Jul-22<https://clicktime.symantec.com/15t5eggDBYYax5hNZH96u?h=SF8xdDZrlCfJegvv79QramWDaqy05gg48KBreJtvyuM=&u=https://mailarchive.ietf.org/arch/msg/spring/ctrAx6JFaNwLhMCQB5QUdBCR7B8/> fully apply to this draft.

Specifically, the authors do not define any mechanisms that would prevent possible usage of unprotected Adj-SIDs used in the configuration of the candidate paths of CR-CS policies from being also used by such well-known and widely deployed mechanisms as TI-LFA and Segment Routing Microloop Avoidance.  As a consequence, the “strict BW guarantees”  that are expected of SR-CS policies would be violated every time one of these mechanisms would result in some “regular” traffic being sent via the paths defined by such mechanisms.

Even if such mechanisms were defined in a future version of  draft-schmutzer-spring-cs-sr-policy, a retrofit of existing implementations of TI-LFA and/or SR Microloop Avoidance would be required.

I understand the motivation for CR-SC Policies, but I strongly suspect that SR cannot be used as a replacement for MPLS-TP when it comes to BW guarantees.

Regards,
Sasha

Office: +972-39266302
Cell:      +972-549266302
Email:   Alexander.Vainshtein@rbbn.com<mailto:Alexander.Vainshtein@rbbn.com>


Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.


Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.