Re: [spring] to drop or to forward unlabelled (Re: Question on RFC8660)

"Ketan Talaulikar (ketant)" <ketant@cisco.com> Thu, 27 August 2020 11:10 UTC

Return-Path: <ketant@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66EA03A0BA0 for <spring@ietfa.amsl.com>; Thu, 27 Aug 2020 04:10:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.601
X-Spam-Level:
X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=ULw3o6eR; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ZL4bc/u+
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FHOOx324ulBr for <spring@ietfa.amsl.com>; Thu, 27 Aug 2020 04:10:35 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 624693A0B9C for <spring@ietf.org>; Thu, 27 Aug 2020 04:10:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5650; q=dns/txt; s=iport; t=1598526635; x=1599736235; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=8M5AXYFve5PKPkQO8P1iN0Z1kMAj/OLOh+Kq5S1hp9c=; b=ULw3o6eRjc3SwfzJTUT9sRQJjlqh7rTx/1g6ycLhGpJwHz1eVRKDi6bc 79KuLTqtBgG3TSrKvuLdAJkj3bY7RpTp6eOw9tUDiJyYLrzL6SQElf8RY wXhdWcmcN+B+f+Js2kAmPWEaY5ZGt6y0vAKAJGig7eqTHpr2O/K7egPYu M=;
IronPort-PHdr: 9a23:m7n1ox0woOthoBI/smDT+zVfbzU7u7jyIg8e44YmjLQLaKm44pD+JxWGtadphVWPUZnS5LRIhrmev6PhXDkG5pCM+DAHfYdXXhAIwcMRg0Q7AcGDBEG6SZyibyEzEMlYElMw+Xa9PBtREcy4a0HbrTu+4G1aFhD2LwEgIOPzF8bbhNi20Obn/ZrVbk1IiTOxbKk0Ig+xqFDat9Idhs1pLaNixw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CVGgBblEdf/4kNJK1gHAEBATwBAQQEAQECAQEHAQEVgUoCgTwCEikoB3BYLywKhC2DRgONaphxgS6BJQNVCwEBAQwBARgLCgIEAQGECEQCF4IrAiQ1CA4CAwEBCwEBBQEBAQIBBgRthVwMhXIBAQEEAQEQEREMAQEsDAsEAgEGAg4DBAEBAwImAgICJQsVCAgCBAESCBqDBYJLAy0BAQ6WVpBoAoE5iGF2gTKDAQEBBYU3GIIQAwaBDigCAQGCb4JXS0OGTxuBQT+BEUOCTT6BBIFYAQGBYYMVM4Itj3qDF5JRj3KBCAqCY5pOgwedPpJMgW2ZNoQoAgQCBAUCDgEBBYFWAjaBV3AVO4JpUBcCDY4rF4ECAQmCQoUUhUJ0NwIGAQkBAQMJfI0hLYEGAYEQAQE
X-IronPort-AV: E=Sophos;i="5.76,359,1592870400"; d="scan'208";a="565531482"
Received: from alln-core-4.cisco.com ([173.36.13.137]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Aug 2020 11:10:34 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by alln-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 07RBAY0B014355 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 27 Aug 2020 11:10:34 GMT
Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 06:10:34 -0500
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 27 Aug 2020 06:10:33 -0500
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 27 Aug 2020 07:10:33 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RpEVnzCv0iNU4wJKGMLpXM4QLaWv4Jjs1yACPMxkFP/pRjvlVjczFUJiqLUi3x08SZ0YlqdoCp9AmLDkvN+t67OywzmB9WhLigB9H7Cp3CtiNO9LL8h7342424RyJaN/Go4tgi4xeST9GPlb46s9drUZWXhDFzRHEYkzHjQmCDURnQavflKUGK9Y4KmlImhSEm+GS9Lw7yp3x2iVYP63b9vqOYgAZL1ximJKUlgN5fXRWrR8gFm6Xe46zaQgv8Q3TNynB983w9CLJVVSZSOVSRIs1kqaI6JF4CxVwqnt2R0lbh0keOaDvukE8V+nLhlS9PQVYs3lxstW8gqSb91gnA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8M5AXYFve5PKPkQO8P1iN0Z1kMAj/OLOh+Kq5S1hp9c=; b=Oy3EDNfyYnG+wCZj/ueEGeUvcOEAtenkdNb7NfcNEV0mQOnEaYfYNj9MC5T6VS6im+Ak4mm394cCRfKm1xg7IGtbrULjlM2QXWLQwWUVVEBXmlG4xaQFUnKKeD1con5JarqNWFIk7dWoTIaAy1pOYrHncg2mdYIckG/PhC2/N9ZuE8k6GZQRZqTqtnyxl48OvimOI5SGAGIphLisuHXJcqRzjNFxLbxaoJlkhGqtkSunFDP0qkU5iLkChB1uGqE9OmTuyAl9uNFPAn+jUkuTKcnlIAsVnYqFXyupHktK8KeVRnDyh1T7OKT209EdjQOYkaHpRoQDCalv2V7Zlp4KfQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8M5AXYFve5PKPkQO8P1iN0Z1kMAj/OLOh+Kq5S1hp9c=; b=ZL4bc/u+RyhJv2DWJWaxs+FbTjCdrVPK8rhyLk1H+bfQ78IgiDpcp7yLke84Cn6BdpoqpZHLucNmIu862s/8zAfa31jP6hi3a05DgY/fHFh2bU19qGAlQM+FIBSOpeq2v58GKVUvu7imU2gmu6i5RQNn49VeETJjQ3Kg2MEKQgc=
Received: from MW3PR11MB4570.namprd11.prod.outlook.com (2603:10b6:303:5f::22) by MWHPR11MB1838.namprd11.prod.outlook.com (2603:10b6:300:10c::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3305.24; Thu, 27 Aug 2020 11:10:31 +0000
Received: from MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::3c42:544a:c4b2:6135]) by MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::3c42:544a:c4b2:6135%8]) with mapi id 15.20.3305.032; Thu, 27 Aug 2020 11:10:31 +0000
From: "Ketan Talaulikar (ketant)" <ketant@cisco.com>
To: Martin Horneffer <maho@lab.dtag.de>, "spring@ietf.org" <spring@ietf.org>
Thread-Topic: [spring] to drop or to forward unlabelled (Re: Question on RFC8660)
Thread-Index: AQHWfF3PJHPbhBOyy0eQumMBLyDp0qlLyxJA
Date: Thu, 27 Aug 2020 11:10:31 +0000
Message-ID: <MW3PR11MB4570CB9D3D905283B210A8C6C1550@MW3PR11MB4570.namprd11.prod.outlook.com>
References: <15389fb7-d7d5-2f28-2869-4ee9fb84fccb@lab.dtag.de> <52be9fc3-0764-93ec-9dca-64291f2f62ab@lab.dtag.de>
In-Reply-To: <52be9fc3-0764-93ec-9dca-64291f2f62ab@lab.dtag.de>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: lab.dtag.de; dkim=none (message not signed) header.d=none;lab.dtag.de; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [49.36.37.20]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4c2f7450-5d35-40aa-7c9c-08d84a79d044
x-ms-traffictypediagnostic: MWHPR11MB1838:
x-microsoft-antispam-prvs: <MWHPR11MB1838E62C11B0355ACF13EDF8C1550@MWHPR11MB1838.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: EGxA0+3CmkAJW+n7Vorab+dbmPILe6Hux4t4XKb9muDGYlpgTI+jAqlsNZLOY5XDQ0rhP35zBLHNy6m+nFiPUiOA4hV2w3W2CWrasXCe2IK8RPtrwbXe2yNVXbCJEVBH4gASEveE94TerEaCr3Jq2uPK8ad1LiMKCQhNAc/jbpKldKZH6Yk7Lj2jAfOC+P3eOC46Ipl5Kmk4uNq13x/NrWPNmoviSK5kQxNfSZufW3siCMZFxVU3TzNp6uqF0wQPTamGs1tBODiEwB7SVKGWok5sTu0VaIWimluEwApZouFc3n+HWPuWVaEIqrgQnaenx3rFwCBdtHdz88mLD+532YgvwlHFZN9quDgfUxkgCuwe99aD9Miq878Kpoko//Ss2V38nwDVmM580uU4OAbMUQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MW3PR11MB4570.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(366004)(346002)(39860400002)(396003)(186003)(33656002)(6506007)(53546011)(110136005)(7696005)(478600001)(316002)(966005)(8936002)(8676002)(55016002)(52536014)(5660300002)(9686003)(2906002)(66574015)(86362001)(26005)(83380400001)(66476007)(71200400001)(64756008)(76116006)(66556008)(66946007)(66446008); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: SV4J01Y8sI0xgvbgPIqU79+6ZonYZsz9lIIvVN4NCTIueqppmT33dsphObqBk5WEzL9C8Q3Z8Y0/yifVFSP/htl0vnwcMav2hFNrmww7u7LtAyr+1V+kQZPrML9c/prckV6QsBaL7q1+iBgjCYV5PWRiBsQy5GIWIWgxWmxeZSvWOuP82yYmlSOdwIvlrc31FvtRcFsCkiyO7XML+LvGE/UfX8s9OdyGw1zGxW+O57uQUQYNBrua2kXW7QtrqnlIb0Khp/UMxNZbn/oyYVWuTFsU0eUWuvJeO93UTQzdTgIqUpxF7/PkCnJAiKhAQHHo1Dwn1/WApff71WR4j86VfQUqnYwgyQWAWn17IFnHDrrbSfb96rAcpEXOpSCcFBzxRoOlY7HWltwEBFH71PmOAiiH7jsUbNl3gwgcDYgotxX025F4vgnSFCaEiI57N+3f1lSbG1NO1cJqFPT+P+GaVXH8rB83mc7drXLR1wv9hVfp+JYTC5CJJVHtnwdB9ZTGmev3CpiatG1Aiglt3E5aOtMzD/S0IpzulM3Og73UsQqREEdRpWai2dv4pGz/xYJ2nT4x5Rz3CpAnHANDkWu58VrbKfLvjZUxea5/byoEy8oTiDE3MiBSszdjsvVh+oSg3dsFE2YTjI/Zp+/P1YG9XQ==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MW3PR11MB4570.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4c2f7450-5d35-40aa-7c9c-08d84a79d044
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Aug 2020 11:10:31.5237 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: EAUmw+Jc0Lon/XDN2pExIfGxPxGMdtxH+cTf3RLihD3PgvH0tIgQzaw1y2wYJjZiD73O4Y5Kx/GP2e+Kz9SBjw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1838
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com
X-Outbound-Node: alln-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/KDbqCQ_musqcTd9n5rwOmmg5Zf8>
Subject: Re: [spring] to drop or to forward unlabelled (Re: Question on RFC8660)
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Aug 2020 11:10:37 -0000

Hi Martin,

I share your position.

Thanks,
Ketan

-----Original Message-----
From: spring <spring-bounces@ietf.org> On Behalf Of Martin Horneffer
Sent: 27 August 2020 16:05
To: spring@ietf.org
Subject: [spring] to drop or to forward unlabelled (Re: Question on RFC8660)

Hello everyone,

may I come back the the question below? Or rather let me update it a little:

In case an SR-MPLS path is broken, should a node rather drop the packet, or forward it?
This can happen whenever the IGP points to a certain next hop, but that neither supplies a valid SID, nor allows LDP-stitching for whatever reason. For PUSH as well as for CONTINUE.

We have been using MPLS transport and a BGP free core since about two decades now, using LDP. In the analog case, LDP creates "unlabelled" 
entries in the LFIB, does the equivalent of a POP operation and forwards the packet to the next-hop as chosen by the IGP.

This behavior obviously breaks any traffic that relies on a service label, but it can protect some traffic.
In our case a huge percentage of all traffic still is public IPv4. This needs MPLS only for a transport label, be it LDP or SR-MPLS. If this traffic gets forwarded unlabelled, it follows an IGP default route to a central device, where it is 1) redirected to the correct destination and
2) counted in a way that operators can quickly see whether and where this kind of failure occurs at some point in the network.

After more operational experience and several internal discussions we agreed that we want packets to be forwarded unlabelled rather than dropped. Anyone to share, or oppose this position?

Best regards, Martin


Am 31.01.20 um 16:50 schrieb Martin Horneffer:
> Hello everyone,
>
> again it seems the interesting questions only show up when applying 
> something to the live network...
>
> We ran into something that poses a question related to RFC8660: What 
> is the exact meaning of section 2.10.1, "Forwarding for PUSH and 
> CONTINUE of Global SIDs", when the chosen neighbor doesn't provide a 
> valid MPLS path?
>
> The relevant sections reads:
>
>       -  Else, if there are other usable next hops, use them to 
> forward
>          the incoming packet.  The method by which the router "R0"
>          decides on the possibility of using other next hops is beyond
>          the scope of this document.  For example, the MCC on "R0" may
>          chose the send an IPv4 packet without pushing any label to
>          another next hop.
>
> Does the part "send an IPv4 packet without pushing any label" apply to 
> PUSH and CONTINUE, or just to PUSH?
> Does R0 have to validate that neighbor N can correctly process to 
> packet? Or can it forward the packet regardless?
>
> The reason for asking is that we are now seeing issues similar to ones 
> we had when starting with LDP based MPLS about two decades ago:
> traffic being black holed even though a path to the destination 
> exists, because the MPLS path is interrupted somewhere in the middle.
>
> With LDP we know the case of LFIBentries called "unlabelled". While 
> this does break connectivity for many kinds of service, e.g. those 
> relying on an additional service labels, it still works for plain
> IP(v4) traffic. In our cases, this works perfectly fine for all 
> internal routing and control traffic. And even for IPv4 traffic that 
> gets collected by a central router that injects a default route.
>
> However, depending on the exact interpretation of the above paragraph, 
> an implementor might feel obliged to chose the next paragraph:
>
>       -  Otherwise, drop the packet.
>
> Which is, at least in our case, very unfortunate...
>
> Any advice or opinion appreciated!
>
>
> Best regards, Martin
>
>
>
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring

_______________________________________________
spring mailing list
spring@ietf.org
https://www.ietf.org/mailman/listinfo/spring