Re: [spring] RFC8200 update?

Robert Raszuk <robert@raszuk.net> Fri, 28 February 2020 14:02 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DF5C3A1874 for <spring@ietfa.amsl.com>; Fri, 28 Feb 2020 06:02:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 95gmhUcJqHe5 for <spring@ietfa.amsl.com>; Fri, 28 Feb 2020 06:02:41 -0800 (PST)
Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E51A3A1871 for <spring@ietf.org>; Fri, 28 Feb 2020 06:02:41 -0800 (PST)
Received: by mail-oi1-x236.google.com with SMTP id a22so2881294oid.13 for <spring@ietf.org>; Fri, 28 Feb 2020 06:02:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=LAUtKvwoEpIkzOQqJD6Tt98D4dK0ES2RR1Tt7MgCuTo=; b=D2RnlC9FeGIb+tIwAZRp2+lf/Xa4YKY+L+atTeh84QxsyehdN7/f2s5OStRQi8Fk+J xnEu9sydywgQCWj4AT+xUfDlmf9xwmIdnCm8bpKrw4SPr8WRvNyMyjx1OpeYlUugafX1 vKHokSvJnNRwF153whkRszKyGD49xMGriuPViMvdWBBmPoaEWN/iPfUKtI828NQ/MYFo f9eGZVV1Olar9V/kV+8O8PL5UhGQQgzin1a7a/7J9DkMgOrInLXESN5uj4TvGecgEH42 P+evjslFabQVVdhAwyqNuSdfFYRMeb1Oplakyl70bSLocmdv6wsGgXepX0ax54HxdUty aGNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LAUtKvwoEpIkzOQqJD6Tt98D4dK0ES2RR1Tt7MgCuTo=; b=kYrNzhkdTNPuuRYjvztjv6vDph9rHkLJD1hiVDfgNWu7y2cKktCRNEhnD9ujhxONgc n1M9JyEjGwgLKBYyNoOGNp1gTG8V3+ZvbpkgEbnZz+Su8HD/29fIqyvwokaMpyUdCFDI Upo/HqgdMuBUBODBaNo65qaZ2zgglEQUFU100VirYDwt/9HIHjJfKEPuvSbAG57l2M9N PioDWfibg+pQNQgyb2JFHMxQ6QgjJNHVisR42dt09Qjkp1Fx2K6BAWF7uoYPZnXf0AAO /Mj9vOOCXDCnuwFMabtuuUwhKa55g1Oh7biNL5pmiv45UYeecpojOzQSIsYXEQ8TOPNp 2p1A==
X-Gm-Message-State: APjAAAUqVO7Av8t76CZRIfg5fRKfWHH+ssT+GTNe2llL+ZKYZLBxqPDp wqmyjWYzvNK7B9GvRCi5COK0ButjTdKD7EZB+k9AmQ==
X-Google-Smtp-Source: APXvYqzTzAOwXOaSRKoT7yqIqtJ3zYXtjthMKL2njN6t504E83SUv9/1ZLvLwN0kr451MOPzgV2nMJhcW870GYR6+IM=
X-Received: by 2002:aca:d985:: with SMTP id q127mr3079196oig.132.1582898557708; Fri, 28 Feb 2020 06:02:37 -0800 (PST)
MIME-Version: 1.0
References: <D20C2322-8420-416A-90C4-6A2401825FBD@steffann.nl> <DBBPR03MB5415E186A3F30AB1E62EC5E3EEE80@DBBPR03MB5415.eurprd03.prod.outlook.com> <199B7645-A2AC-4E1A-9E6E-7638A200BE80@steffann.nl> <c1e8bc28880d4ee3a631ac9b9c6799d3@nokia-sbell.com> <C5A467D6-F4CB-4EE8-9746-B8E3DE235CB5@steffann.nl> <DM6PR13MB3066B3C8F53A6CDC5D097DE1D2E80@DM6PR13MB3066.namprd13.prod.outlook.com>
In-Reply-To: <DM6PR13MB3066B3C8F53A6CDC5D097DE1D2E80@DM6PR13MB3066.namprd13.prod.outlook.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 28 Feb 2020 15:02:23 +0100
Message-ID: <CAOj+MMFCWDSnQhBOdfApoowNZi5S-b2CVTP0+fu8-Wj8-+ORag@mail.gmail.com>
To: James Guichard <james.n.guichard@futurewei.com>
Cc: Sander Steffann <sander@steffann.nl>, "Wang, Weibin (NSB - CN/Shanghai)" <weibin.wang@nokia-sbell.com>, SPRING WG List <spring@ietf.org>, 6man WG <ipv6@ietf.org>, Andrew Alston <Andrew.Alston@liquidtelecom.com>
Content-Type: multipart/alternative; boundary="0000000000003f8164059fa34ac2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/L8sjSz7FwPzXBmNF5ChqqpC6Nbs>
Subject: Re: [spring] RFC8200 update?
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Feb 2020 14:02:44 -0000

> interestingly enough MPLS took the same approach

Well not really. As you know, MPLS unicast and multicast have a new
ethertype.

SRv6 folks were just too nice and thought to leverage 0x86DD. I think that
was a mistake. I further think we should fix it.

Cheers,
R.

On Fri, Feb 28, 2020 at 2:44 PM James Guichard <
james.n.guichard@futurewei.com> wrote:

> Hi Sander,
>
> RFC8402 explicitly says in section 8 security considerations that "by
> default, the explicit routing information MUST NOT be leaked through the
> boundaries of the administered domain". The intent therefore seems clear
> that "global internet" does not apply; interestingly enough MPLS took the
> same approach and has been widely deployed for years.
>
> Respectfully,
>
> Jim
>
> -----Original Message-----
> From: spring <spring-bounces@ietf.org> On Behalf Of Sander Steffann
> Sent: Friday, February 28, 2020 8:25 AM
> To: Wang, Weibin (NSB - CN/Shanghai) <weibin.wang@nokia-sbell.com>
> Cc: SPRING WG List <spring@ietf.org>; 6man WG <ipv6@ietf.org>; Andrew
> Alston <Andrew.Alston@liquidtelecom.com>
> Subject: Re: [spring] RFC8200 update?
>
> Hi,
>
> > In the bearer of srv6 traffic, srv6 domain is only one part of the whole
> packet journey. Because the srv6 domain is trusted by single operator, it
> is no necessary for the outer IPv6 header (for performing SRH function) to
> inherit all IPv6 extension headers specially designed for the initial
> end-to-end IPv6 communication, for example, the AH is not must for outer
> IPv6 header and its SRH. Therefore, the outer IPv6 processing of srv6
> traffic can appropriately relax the restrictions, that is to say, the outer
> IPv6 encapsulation only inherits a part of IPv6 spec.
>
> No. It uses IPv6 and must therefore follow the rules of IPv6. What I
> propose is to update IPv6 to make this possible, but you can't break the
> rules in a standard without consensus that the rules can be changed.
>
> > For example, it is allowed to perform functions such as PSP within SRv6
> domain;  Could we treat IPv6 headers function of internal and external
> layers differently, after all, their purposes are different.
>
> Let's not use implicit definitions of "internal" and "external" layers.
> They don't make sense in a global protocol (and despite your claims that
> SRv6 is limited to a specific domain, it really isn't. It uses global IPv6
> addresses and can traverse the global internet). Let's define global rules
> that apply to everybody instead, and standardise this behaviour.
>
> Cheers,
> Sander
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring
>