Re: [spring] SRv6 BGP based Overlay Services (draft-ietf-bess-srv6-services-07)

Robert Raszuk <robert@raszuk.net> Tue, 20 July 2021 10:27 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B82C53A1C3E for <spring@ietfa.amsl.com>; Tue, 20 Jul 2021 03:27:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pvLHC13c7eOc for <spring@ietfa.amsl.com>; Tue, 20 Jul 2021 03:27:35 -0700 (PDT)
Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F01403A1C44 for <spring@ietf.org>; Tue, 20 Jul 2021 03:27:34 -0700 (PDT)
Received: by mail-lj1-x22a.google.com with SMTP id e14so11949136ljo.7 for <spring@ietf.org>; Tue, 20 Jul 2021 03:27:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=iV0GuneZlZttX2LpgPOcKezwH5X5623OM4ujUcIyh8s=; b=InO2u+ZXeBNbXiEumyXx9Fyl9qDti9xG/xB3X7ndfy745Wuz0HwEYh+iBYapumEbsh JI0FRn2EVbrtdvJB2sBv6F8ADhWzm63btMORwvEhYc1EHFsX+u1aUwRPr1CMmXxtoVcA R5+fbSTaTqhen17rTIfKqPAeBr+509z9+2CR2WxwdWhQCu+Xk6zF0kqhUrTD8c4gW3i9 4tV/aqH9E7b53Hdcm7YPmCkudlpgJ2iq+KaFxffN6OCp8iVj0VcKecDZOpYiaNv/HTzH mMJnv5ovokThlu8ypZfuFuEHKMiUNtiMT47G/saZwn4+vdIpC8GDeprqVrYBjFen+kSf L35A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=iV0GuneZlZttX2LpgPOcKezwH5X5623OM4ujUcIyh8s=; b=X7cpk9goFSJyqvP38ddedet93YKzu/AeO6WIJNOkUNyF7bo/nixtRCN4JMiRkVQguw ZC6rK1T86JIAh7M/0V65uJ5J573L5RqMh+CF3qjOEp98HHEP/3osPCy/Wdm/deneQrqB uj15CGG5nERy4Tf8IBgwOQL4hqMziTwN2d2Uk1jzcACcTeG3IsfV1LreIy0SWWCZNLWX rl+ei5u3IFhUZx25II+vrXqHv2hbngB3+Mb3w2WwMjZ/rx3RAjxn7w/WztTLJ5ckstk5 Qx5k/5dwdKw1Xmc5VBMVo6ipwvqxLt7tEt6LSECjm579dJnDpfZVAxwZHJ8FwvfBGUcn 7USg==
X-Gm-Message-State: AOAM5313hQqY9mugFInsFmn8cZ6aL9/fz1faXJi6b9i8uAXTUhBiJTIX Rzbkjfcp4kxXVcXV7moETCIrnlivyA3qb1/Y7Q2RNA==
X-Google-Smtp-Source: ABdhPJxgLnE6KxBp+XRwJcWAvYklSnlbP+vHzSOV8EfBM7NJfZvMwcixPR1nrsgZscf6MZJ+9O1FZmcombMI9PPpDUU=
X-Received: by 2002:a2e:890f:: with SMTP id d15mr25903642lji.37.1626776851986; Tue, 20 Jul 2021 03:27:31 -0700 (PDT)
MIME-Version: 1.0
References: <BN6PR05MB36346DDD4F6824CD65D70491BE129@BN6PR05MB3634.namprd05.prod.outlook.com> <BN6PR05MB36341943DEC7D8DC5869A9E0BEE19@BN6PR05MB3634.namprd05.prod.outlook.com> <BY3PR08MB70603EB604AF65D3580E3794F7E19@BY3PR08MB7060.namprd08.prod.outlook.com> <DM6PR08MB6027C9A41B6B1DF2BB59687FE4E19@DM6PR08MB6027.namprd08.prod.outlook.com> <CY4PR05MB3576D4484BD96F6E08604AF4D5E29@CY4PR05MB3576.namprd05.prod.outlook.com> <CAOj+MMGuMG8jwEUbeUkZJc_vv+1y1cnav5rp1tL6drRr-G3sCA@mail.gmail.com> <CY4PR05MB3576F5A0BF1ECFA69808D637D5E29@CY4PR05MB3576.namprd05.prod.outlook.com> <CAOj+MME3=XPFL=qmY65nCkbL9+4kjionTRPPPjUCj3hTr8D+vg@mail.gmail.com> <CY4PR05MB357659B2C5C84B3CA9C6073ED5E29@CY4PR05MB3576.namprd05.prod.outlook.com> <MW4PR02MB739427194B881AC19D9B2B78C6E29@MW4PR02MB7394.namprd02.prod.outlook.com>
In-Reply-To: <MW4PR02MB739427194B881AC19D9B2B78C6E29@MW4PR02MB7394.namprd02.prod.outlook.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Tue, 20 Jul 2021 12:27:30 +0200
Message-ID: <CAOj+MMHzXL5miTB6UCd0Pe9QUHpDMJatY==PWas9=ke28pAmbw@mail.gmail.com>
To: "UTTARO, JAMES" <ju1738@att.com>
Cc: Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org>, "spring@ietf.org" <spring@ietf.org>, "bess@ietf.org" <bess@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000644a8405c78b8095"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/IJGT4ggd8S1Zk_Pw7pqlLvc95sQ>
Subject: Re: [spring] SRv6 BGP based Overlay Services (draft-ietf-bess-srv6-services-07)
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Jul 2021 10:27:41 -0000

Jim,

The "policy" I had in mind was a simple cfg switch "fallback global" for
any SRv6 service originally set to say run over different IGP topology. Or
perhaps if more then two options are available, list the chain of
forwarding tables/topologies to be used as transport for a given SRv6
service.

Implementation may get even smarter and allow operator to set performance
based triggers to select such forwarding topologies from a flat pool.

If Shraddha has the same in mind not sure there is much to elaborate on
here :)

Best,
R.

On Tue, Jul 20, 2021 at 12:20 PM UTTARO, JAMES <ju1738@att.com> wrote:

> *Comments In-Line..*
>
>
>
> *Thanks,*
>
> *              Jim Uttaro*
>
>
>
> *From:* spring <spring-bounces@ietf.org> *On Behalf Of *Shraddha Hegde
> *Sent:* Tuesday, July 20, 2021 5:56 AM
> *To:* Robert Raszuk <robert@raszuk.net>
> *Cc:* spring@ietf.org; bess@ietf.org
> *Subject:* Re: [spring] SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
>
>
> Good to know the intention is to support fallback for Srv6.
>
>
>
> The way current text is written, it implies service SID is always in the destination address.
>
> And hence service SID should be resolvable. This is not the case when a service SID
>
> Corresponding to flex-algo wants to fallback on best effort services. The destination address cannot carry
>
> Service SID for fallback cases and hence it need not be resolved.
>
>
>
> I suggest that the authors add below text in bold to the draft.
>
>
>
>
>
> “When providing best-effort connectivity *or flex-algo connectivity* to the egress PE,
>
> the ingress PE encapsulates the payload in an outer IPv6 header where the destination
>
> address is the SRv6 Service SID associated with the related BGP route update.
>
>  Therefore, the ingress PE SHOULD perform resolvability check for the SRv6 Service SID
>
>  before considering the received prefix for the BGP best path computation.
>
> “
>
> “*In some cases a service prefix intending to use flex-algo paths may want fallback on*
>
> *best effort paths when a flex-algo path isn’t available. The fallback behavior *
>
> *SHOULD be governed by local policies.   *
>
> *[Jim U>] It would be helpful to provide an example of local policies and how would/should said local policies be applied across a heterogeneous network.*
>
> *The destination address SHOULD contain the best-effort locator based END SID *
>
> *of the egress PE and the SRH SHOULD contain the service SID. Service SID *
>
> *resolvability SHOULD NOT be checked on the ingress for this case*.”
>
>
>
>
>
> Rgds
>
> Shraddha
>
>
>
>
>
> Juniper Business Use Only
>
> *From:* Robert Raszuk <robert@raszuk.net>
> *Sent:* Tuesday, July 20, 2021 12:04 PM
> *To:* Shraddha Hegde <shraddha@juniper.net>
> *Cc:* spring@ietf.org; bess@ietf.org
> *Subject:* Re: SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
> *[External Email. Be cautious of content]*
>
>
>
> Shraddha,
>
>
>
> > that authors don’t intend to support any form of tunnelling for SRv6
>
> > because it is not optimal. Is that the right read?
>
>
>
> Quite the opposite. It is the local operator's choice (not the draft
> authors) to decide to fall back to best effort or to drop.
>
>
>
> Thx,
>
> R.
>
>
>
>
>
>
>
> On Tue, Jul 20, 2021 at 8:15 AM Shraddha Hegde <shraddha@juniper.net>
> wrote:
>
> Robert,
>
>
>
> What do you mean by SR? is it SR-MPLS or SRv6.
>
> My question is about draft-ietf-bess-srv6-services and applies only to
> SRv6.
>
>
>
> Let me repeat the question.
>
> Do the authors intend to support the case of fallback from SRv6 flex-algo
> to SRv6 best effort transport for SRv6
>
> Services or not?
>
>
>
> From your vague answer it appears that authors don’t intend to support any
> form of tunnelling for SRv6
>
> because it is not optimal. Is that the right read?
>
>
>
> Rgds
>
> Shraddha
>
>
>
>
>
> Juniper Business Use Only
>
> *From:* Robert Raszuk <robert@raszuk.net>
> *Sent:* Tuesday, July 20, 2021 11:17 AM
> *To:* Shraddha Hegde <shraddha@juniper.net>
> *Cc:* Aissaoui, Mustapha (Nokia - CA/Ottawa) <mustapha.aissaoui@nokia.com>;
> Rabadan, Jorge (Nokia - US/Mountain View) <jorge.rabadan@nokia.com>;
> Rajesh M <mrajesh@juniper.net>; Rajesh M <mrajesh=
> 40juniper.net@dmarc.ietf.org>; Ketan Talaulikar (ketant) <ketant@cisco.com>;
> gdawra.ietf@gmail.com; Clarence Filsfils (cfilsfil) <cfilsfil@cisco.com>;
> bruno.decraene@orange.com; spring@ietf.org; bgp@ans.net; Srihari Sangli <
> ssangli@juniper.net>; bess@ietf.org
> *Subject:* Re: SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
> *[External Email. Be cautious of content]*
>
>
>
> Shraddha,
>
>
>
> In an SR network fallback to best effort will also result in encapsulated
> forwarding using SR. It may not be as optimal service wise as using
> flex-algo, but this is form of tunneling. Hence I don't think your comment
> applies.
>
>
>
> Note that operator may also choose to use IP tunneling for best effort
> forwarding if SR best effort forwarding is not supported or enabled.
>
>
>
> Best,
>
> R.
>
>
>
>
>
>
>
>
>
> On Tue, Jul 20, 2021 at 7:20 AM Shraddha Hegde <shraddha@juniper.net>
> wrote:
>
> Hi Authors,
>
>
>
> There is a possibility of a usecase that wants to use flex-algo paths if
> available and if flex-algo paths
>
> Are not available use best effort paths.
>
>
>
> “When providing best-effort connectivity to the egress PE, the ingress
>
>    PE encapsulates the payload in an outer IPv6 header where the
>
>    destination address is the SRv6 Service SID associated with the
>
>    related BGP route update.  Therefore, the ingress PE SHOULD perform
>
>    resolvability check for the SRv6 Service SID before considering the
>
>    received prefix for the BGP best path computation.
>
> “
>
>
>
> The current text says for best effort tunnels Srv6 service SID resolution
> SHOULD be checked and
>
> I am told that (from previous mailing list exchanges) authors intend to
> update the text to make it applicable for flex-algo connectivity  as well.
>
>
>
> It is not possible to support fallback on best effort tunnels if flex-algo
> SRv6 service SIDs have to be resolved.
>
> It is possible to support fallback to best effort in SRv6 if packets can
> be tunneled to egress PE  (destination address being PE’s best effort END
> SID and service SID in the SRH)and
>
> then do a service SID lookup on egress, in which case there is no need to
> resolve the SRv6 service SIDs on the ingress.
>
>
>
> It is not clear whether the authors intend to support these kind of
> tunnelling to egress cases for
>
> Best effort and flex-algo transport. If it not going to be supported, pls
> add text indicating clearly
>
> Tunnelling is not required to be supported and hence Fallback to best
> effort  is also not supported.
>
>
>
> If that is not the intention, Its reasonable to update the text to
> indicate SRv6 service SIDs need not be resolved
>
> If the ingress is tunneling the packet.
>
>
>
> Rgds
>
> Shraddha
>
>
>
> Juniper Business Use Only
>
> *From:* spring <spring-bounces@ietf.org> *On Behalf Of *Aissaoui,
> Mustapha (Nokia - CA/Ottawa)
> *Sent:* Monday, July 19, 2021 7:34 PM
> *To:* Rabadan, Jorge (Nokia - US/Mountain View) <jorge.rabadan@nokia.com>;
> Rajesh M <mrajesh@juniper.net>; Rajesh M <mrajesh=
> 40juniper.net@dmarc.ietf.org>; Ketan Talaulikar (ketant) <ketant@cisco.com>;
> gdawra.ietf@gmail.com; Clarence Filsfils (cfilsfil) <cfilsfil@cisco.com>;
> robert@raszuk.net; bruno.decraene@orange.com
> *Cc:* spring@ietf.org; bgp@ans.net; Srihari Sangli <ssangli@juniper.net>;
> bess@ietf.org; Shraddha Hegde <shraddha@juniper.net>
> *Subject:* Re: [spring] SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
> *[External Email. Be cautious of content]*
>
>
>
> Rajesh,
>
> Also you can change the service SID for a subset of prefixes using a
> policy, to apply a flex-algo for example, but you do not want to change the
> next-hop for each new service SID.
>
>
>
> Mustapha.
>
>
>
> *From:* spring <spring-bounces@ietf.org> *On Behalf Of *Rabadan, Jorge
> (Nokia - US/Mountain View)
> *Sent:* Monday, July 19, 2021 9:47 AM
> *To:* Rajesh M <mrajesh@juniper.net>; Rajesh M <
> mrajesh=40juniper.net@dmarc.ietf.org>; Ketan Talaulikar (ketant) <
> ketant@cisco.com>; gdawra.ietf@gmail.com; Clarence Filsfils (cfilsfil) <
> cfilsfil@cisco.com>; robert@raszuk.net; bruno.decraene@orange.com
> *Cc:* spring@ietf.org; bgp@ans.net; Srihari Sangli <ssangli@juniper.net>;
> Shraddha Hegde <shraddha@juniper.net>; bess@ietf.org
> *Subject:* Re: [spring] SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
> Hi Rajesh,
>
>
>
> The draft is written so that the next-hop address MAY be covered by the
> locator, but there are cases in which the next-hop address is not part of
> the locator prefix, and there are implementations already allowing that, so
> I don’t agree the document should mandate what you are suggesting.
>
>
>
> Thanks.
>
> Jorge
>
>
>
> *From: *Rajesh M <mrajesh@juniper.net>
> *Date: *Monday, July 19, 2021 at 3:24 PM
> *To: *Rajesh M <mrajesh=40juniper.net@dmarc.ietf.org>, Ketan Talaulikar
> (ketant) <ketant@cisco.com>, gdawra.ietf@gmail.com <gdawra.ietf@gmail.com>,
> Clarence Filsfils (cfilsfil) <cfilsfil@cisco.com>, robert@raszuk.net <
> robert@raszuk.net>, bruno.decraene@orange.com <bruno.decraene@orange.com>,
> Rabadan, Jorge (Nokia - US/Mountain View) <jorge.rabadan@nokia.com>
> *Cc: *spring@ietf.org <spring@ietf.org>, bgp@ans.net <bgp@ans.net>,
> Shraddha Hegde <shraddha@juniper.net>, bess@ietf.org <bess@ietf.org>,
> Srihari Sangli <ssangli@juniper.net>
> *Subject: *RE: SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
> Hi Authors,
>
>
>
> Please respond.
>
>
>
> Thanks
>
> Rajesh
>
>
>
>
>
> Juniper Business Use Only
>
> *From:* spring <spring-bounces@ietf.org> *On Behalf Of *Rajesh M
> *Sent:* Thursday, July 15, 2021 4:36 PM
> *To:* Ketan Talaulikar (ketant) <ketant@cisco.com>; gdawra.ietf@gmail.com;
> Clarence Filsfils (cfilsfil) <cfilsfil@cisco.com>; robert@raszuk.net;
> bruno.decraene@orange.com; jorge.rabadan@nokia.com
> *Cc:* spring@ietf.org; bgp@ans.net; Shraddha Hegde <shraddha@juniper.net>;
> bess@ietf.org
> *Subject:* [spring] SRv6 BGP based Overlay Services
> (draft-ietf-bess-srv6-services-07)
>
>
>
> *[External Email. Be cautious of content]*
>
>
>
> Hi All,
>
>
>
> As per this draft, this is how resolution must work.
>
>
>
> 1)For Non Intent service Route:
>
> if BGP next hop is not reachable return.
>
> Resolve SRv6 Service SID for forwarding.
>
>
>
> 2)For Intent service Route (IGP Flex-Algo first then BGP CAR then SR
> Policy):
>
> BGP next hop is not reachable return.
>
> Resolve SRv6 Service SID for forwarding(To find IGP flex algo).if
> successfully resolves then return.
>
> Resolve BGP next hop for forwarding (in case above is not success).
>
>
>
>
>
> *Using Service SID (overlay),for resolution is definitely not recommended.*
>
>
>
> *Instead in case of srv6, we always resolve on BGP nexthop. This will be
> in line with BGP legacy.*
>
> *In case of best effort/flex algo we must mandate user to set
> corresponding locator as BGP nexthop for srv6 routes.*
>
> *I think this is a reasonable mandate.*
>
>
>
> Thanks
>
> Rajesh
>
>
>
> Juniper Business Use Only
>
>