Re: [spring] [**EXTERNAL**] Re: C-SIDs and upper layer checksums (draft-ietf-spring-srv6-srh-compression)

Robert Raszuk <robert@raszuk.net> Thu, 11 April 2024 22:05 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EAE0C14F739 for <spring@ietfa.amsl.com>; Thu, 11 Apr 2024 15:05:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.995
X-Spam-Level:
X-Spam-Status: No, score=-1.995 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gAA2byKHvDfW for <spring@ietfa.amsl.com>; Thu, 11 Apr 2024 15:05:00 -0700 (PDT)
Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBD0DC14F6BD for <spring@ietf.org>; Thu, 11 Apr 2024 15:05:00 -0700 (PDT)
Received: by mail-ed1-x52d.google.com with SMTP id 4fb4d7f45d1cf-56e2b3e114fso274013a12.2 for <spring@ietf.org>; Thu, 11 Apr 2024 15:05:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; t=1712873098; x=1713477898; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=cTYb26NItce1y2+jItGNy5gwiC7Zk1HseY4mX84S+TM=; b=UM1lOkM3WZdsNjlX/QMTJI7JmHgHwRoz2c8QYP8F6O2c4EszXfikha00fRZtrU0HEr 4MIlgvPAcn4YotNtHfCFXT7zuAANQNlsarJ3MhNgYCcW9oZSLeR95GuVWt4jH+0KhfA/ 7yc/f4Jp9Ae2Xg0Q97QaVsAs9DRJOGjlTU4Cj4stAnyM9RS2BOkfsExZC8oA92EBIO7X iFJGWvDZNeqRx1unF10oYzCetlcdPUf6lN71OIm59sKUonnR88Yq4zlhP53ZaY1MzVwB bTeY/DAikR1+PD+fASF3pnWnTZyOLNcnX/CBVsypkJGeXll8qit2tUz92zBShIiRLV3Y zvFA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712873098; x=1713477898; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=cTYb26NItce1y2+jItGNy5gwiC7Zk1HseY4mX84S+TM=; b=hyksiWMpQLCBxAnjY312vMgqYWd2/xARd3lH3nSEEkIkOxh3m9q2BheKazydUN+btP 22o7Orrts/u7lxb1rnv2uTqw/Dduv0s6eCvUBZ8dxqsm6oIARqxqoKrrhKE1oeKbH3hX 9abraOblEywFi0xQI9rReesomFlJg0wXYisMLP3VDaEHOfhD2ZJrLRAqi+Z8o3ecLfmy DHdgrbHIB56/Tcg+3O/Ld2NLQ+Vv+2qXMMRpqaB+cm3ZM0/UtO2jloNjRH3KUVMLziBI Pe8NRjvQhU0dRsKNd3FhaZMcUzBd28QvSl30lNEN3eOc316TK2qQ2L2dxwOGaHLgT5eK 4O0w==
X-Forwarded-Encrypted: i=1; AJvYcCWQkQ1NZkpC/zJ+E25cCJOjXNAI9XVCzoYAtYU+iIiFTQx022omuSeUmCwZr01y460qT5K2Bgtas6pZRuRnRps=
X-Gm-Message-State: AOJu0Yx1VmrwJ4uog26pIrIEkROyem8ssp1eV9AhF/G6JWnC91htSzzS dGti0WqYbnVISB4O91nrdmrM4mFVv+/Z2G2tvcSq3qeDpJj5OeKH0Wi3fjdWSkcU1r9YS7EnDLm tl7c27EP3ikhdDQE2KyxYaaKrOuZU0WtWZ5S4jA==
X-Google-Smtp-Source: AGHT+IGEhVRavY0zVu/QnvfHA7MgXKjILJ3diB0IsHpWTFefMeUB67CrvkD7buW/Iw8pw6nnCjugRLSj0Llo6BZznxE=
X-Received: by 2002:a50:8e19:0:b0:56e:2b0b:58 with SMTP id 25-20020a508e19000000b0056e2b0b0058mr628064edw.10.1712873098303; Thu, 11 Apr 2024 15:04:58 -0700 (PDT)
MIME-Version: 1.0
References: <CAMMESsyCYJwWP48=a9RWx3n8txS1eR4VLnUeE++VEdHKFeKOjw@mail.gmail.com> <CAH6gdPxHQY_fGWXWt6W9W=+QFr882NdGHESsf-qohiquVs-Frg@mail.gmail.com> <114579709.4041173.1712594638924@mail.yahoo.com> <MN2PR04MB5981C6BBA2A275F03BD6EDF3AF052@MN2PR04MB5981.namprd04.prod.outlook.com>
In-Reply-To: <MN2PR04MB5981C6BBA2A275F03BD6EDF3AF052@MN2PR04MB5981.namprd04.prod.outlook.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Fri, 12 Apr 2024 00:04:46 +0200
Message-ID: <CAOj+MMGCeSTvPfdRH7yVxSQ6qwFwfPFES_=_fWYQEO-=3kzVHw@mail.gmail.com>
To: "Shah, Himanshu" <hshah=40ciena.com@dmarc.ietf.org>
Cc: Boris Hassanov <bhassanov=40yahoo.com@dmarc.ietf.org>, Alvaro Retana <aretana.ietf@gmail.com>, SPRING WG List <spring@ietf.org>, "spring-chairs@ietf.org" <spring-chairs@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000091f7ea0615d958e8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/NAuZ78t7NS4duRel2dm_rzRQBJ8>
Subject: Re: [spring] [**EXTERNAL**] Re: C-SIDs and upper layer checksums (draft-ietf-spring-srv6-srh-compression)
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Apr 2024 22:05:05 -0000

HI Himanshu,

> It might be adequate enough to add  ‘apology’ section

LOVE IT !!!

Cheers,
R.


On Thu, Apr 11, 2024 at 11:53 PM Shah, Himanshu <hshah=
40ciena.com@dmarc.ietf.org> wrote:

> All –
>
> I agree with Ketan/Boris and the points they have made (no need to repeat
> them again).
>
> In general, srh-compression technology has been accepted, implemented and
> deployed by many vendors and service providers.
>
> The issue of some legacy nodes not being able to ascertain final
> destination and conducting and failing upper layer checksum verification
>
> does not seem to have been widely reported, which is not to claim as not
> legit, but to support the argument that it is not wide
>
> spread but perhaps not significant enough to prevent the adoption of this
> technology.
>
>
>
> It might be adequate enough to add  ‘apology’ section to acknowledge such
> limitation, in order to progress the adoption of this document.
>
> I believe there is a precedence – section 7 of
> https://datatracker.ietf.org/doc/draft-ietf-6man-comp-rtg-hdr/.
>
>
>
> Thanks,
>
> Himanshu
>
>
>
>
>
> *From: *spring <spring-bounces@ietf.org> on behalf of Boris Hassanov
> <bhassanov=40yahoo.com@dmarc.ietf.org>
> *Date: *Monday, April 8, 2024 at 12:44 PM
> *To: *Alvaro Retana <aretana.ietf@gmail.com>
> *Cc: *SPRING WG List <spring@ietf.org>, spring-chairs@ietf.org <
> spring-chairs@ietf.org>
> *Subject: *[**EXTERNAL**] Re: [spring] C-SIDs and upper layer checksums
> (draft-ietf-spring-srv6-srh-compression)
>
> Hi Alvaro and all,
>
>
>
> I re-read section 6.5, it seems to be clear enough IMO, it also  has link
> towards section 9.2 (ICMP Error processing).
>
> I do agree with Ketan's email about  the methodology for splitting all
> nodes into those 3 categories (Source, Transit, Destination). Indeed
> those   concerns were about some transit nodes (especially legacy,
> Special Transit Node as Ketan said) which may experience issues with upper
> layer checksums and they also cannot deliver the behavior per section 9.2.
> I have discussed such potential issue with some colleagues and they told
> that for modern applications there such as eBPF based it is not an issue at
> all to make correct checksum handling. I also found some public references
> for that such as: https://github.com/facebookincubator/katran/tree/main
> [github.com]
> <https://urldefense.com/v3/__https:/github.com/facebookincubator/katran/tree/main__;!!OSsGDw!NigVX2MITPjUv5es_hCerGiVQWYxbzo2f0c9dlpVV4Q41fSk37U--WWnWdpgNM6asmUyT47YmNQNBGmnuMAT6k7TBoQ$>
> (katran/lib/bpf/csum_helpers.h). But additional research and experiments
> are  needed. Anyway it is beyond the scope of this draft.
>
>
>
> May be we can just mention about such possibility  for non-SRv6 aware
> Special Transit Nodes in 6.5 and that would be enough to inform
> implementers and operators in advance.
>
>
>
> SY,
>
> Boris
>
>
>
>
>
> On Monday, April 8, 2024 at 07:06:12 PM GMT+3, Ketan Talaulikar <
> ketant.ietf@gmail.com> wrote:
>
>
>
>
>
> Hi Alvaro,
>
> I find some level of confusion on the discussion threads and it might
> perhaps be due to the inconsistent use of terminologies. It would help to
> use the correct terminologies from RFC8754 (6man WG RFC) to bring clarity
> on what is within the scope and what is beyond the scope of this document.
>
> a) SR Source Node: the node originating the packet - it may have an SRH or
> may skip it (section 4.1)
> b) Transit Node: node doing IPv6 forwarding
> c) (Ultimate) Destination Node (from RFC8200): the final node to which the
> packet is destined
>
> The CSID document in section 6.5 does not change or update the text in
> RFC8200 sec 8.1. It is simply stating what the "final destination" is going
> to be when CSID is used because RFC8200 does not talk about RHs in sec 8.1.
> RFC8754 covered this aspect by specifying that the last segment is the
> "final destination" but this needs to be specified when using C-SID (with
> or without SRH) and for all C-SID flavors/behaviors.
>
> I find the current text in section 6.5 to be necessary and sufficient for
> implementations that claim (or need to) support SR Source Node behavior for
> C-SIDs.
>
> The CSID document does not change any behavior at the Transit Node or for
> the (Ultimate) Destination Node. Therefore, the discussion of Transit Nodes
> is outside the scope of this document - just as it was outside the scope
> for RFC8754.
>
> Now, if some "Special Transit Node" wants to go beyond RFC8200 and do
> things like upper layer checksum validation enroute then they can refer to
> the same text in section 6.5 to first understand CSID processing and to do
> what is necessary for their packet processing enroute. This requires such
> "Special Transit Nodes" to be aware of first SRv6 and now C-SID - this is
> the same for any new packet encoding  technology.
>
> It seems like we are putting the cart before the horse when raising
> concerns about existing implementations that are not SRv6 and C-SID aware
> of not being able to do their processing. Let us publish the C-SID document
> so implementers of those "Special Transit Nodes" (also being referred to as
> middleboxes on some threads) have a reference to upgrade for C-SID support.
>
> Finally, I’ve not heard of issues related to these "Special Transit Nodes"
> from operators that have deployed SRv6. That may be a good discussion to
> have (again outside the scope of this document and perhaps in srv6ops?) -
> so operators who have SRv6 deployment experience can share their learnings
> and best practices.
>
> Thanks,
> Ketan
>
>
>
> On Thu, Mar 28, 2024 at 5:34 PM Alvaro Retana <aretana.ietf@gmail.com>
> wrote:
>
> Section 6.5 of draft-ietf-spring-srv6-srh-compression describes the
> behavior when an originating node inside an SRv6 domain creates a
> packet with a C-SID as the final destination. This description differs
> from the text in Section 8.1 of RFC8200.
>
> We plan to send the draft to the 6man WG for review and explicitly
> highlight this difference.
>
> Please comment on the text in Section 6.5. Does anything need to be
> added, deleted, changed, or clarified?
>
> We want to ask for feedback soon; please send comments on this topic
> by April 5th.
>
> Thanks!
>
> Alvaro.
> -- for spring-chairs
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring [ietf.org]
> <https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/spring__;!!OSsGDw!NigVX2MITPjUv5es_hCerGiVQWYxbzo2f0c9dlpVV4Q41fSk37U--WWnWdpgNM6asmUyT47YmNQNBGmnuMATcBToP6c$>
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring [ietf.org]
> <https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/spring__;!!OSsGDw!NigVX2MITPjUv5es_hCerGiVQWYxbzo2f0c9dlpVV4Q41fSk37U--WWnWdpgNM6asmUyT47YmNQNBGmnuMATcBToP6c$>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring
>