Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12

"Ketan Talaulikar (ketant)" <ketant@cisco.com> Thu, 12 March 2020 11:06 UTC

Return-Path: <ketant@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 831433A0D56 for <spring@ietfa.amsl.com>; Thu, 12 Mar 2020 04:06:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.589
X-Spam-Level:
X-Spam-Status: No, score=-9.589 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=VInrgDu9; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=OgKuTXQv
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yMva4TBlzwGp for <spring@ietfa.amsl.com>; Thu, 12 Mar 2020 04:06:41 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B42B3A0CA8 for <spring@ietf.org>; Thu, 12 Mar 2020 04:06:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=121250; q=dns/txt; s=iport; t=1584011201; x=1585220801; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=rT2Hpakk7O0aaNelHjNiYbof8LAggKNdrQlEuY1fDHE=; b=VInrgDu9+xzf5r24QEqBSF14UDCtMk67X8E8e6vTjft3enwXQmTfnPTX 2Lp9vEX3zPnkbNfKWVxg0BUlKkH0OAPqalkA/TfyPOE0rZVJeHKD/gv6u JrYv96sWZg3xxJuaPip1AE4k526urbNqdEVRefThkadAJjmCN63lN+HQg w=;
X-IPAS-Result: A0BaAQC2Fmpe/4sNJK1mGgEBAQEBAQEBAQMBAQEBEQEBAQICAQEBAYF7gSUvJCwFbFggBAsqCoQLg0UDinCCX4EBlxWBQoEQA1AECQEBAQwBARgBCwkCBAEBg35FAheBfiQ4EwIDAQEBAwIDAQEBAQUBAQECAQUEbYVWDIVjAQEBAQIBAQEQCAEIChMBASUHCwEEBwICAgEIEQMBAQEhAQYDAgICFBELFAkIAgQBDQUIGoMFgX1NAw4gAQ6gDQKBOYhidYEygn8BAQWBLwGEABiCDAkFgTOMLxqBQT+BEUeCGDU+gmQBAQIBGYEUAQwGAQccFQkNCQiCUzKCLI1bCg8DgneFdYoUjkx2CoI8h1aBYYNsiWeCSogmhE+Lf48BiQCSWQIEAgQFAg4BAQWBaSJncXAVO4JsCUcYDY4dDAUSglCBAIUUYIRhdAKBJ4pPgTIBM1wBAQ
IronPort-PHdr: 9a23:V/qrLRDeHWPu1In5QcicUyQJPHJ1sqjoPgMT9pssgq5PdaLm5Zn5IUjD/qg83kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMfkuHwQAld1QmgUhBMCfDkiuL/P2ZiomNM9DT1RiuXq8NBsdQZysfVDZr3ys4DJXAQ3xZVYnAOPzF8aSl96wy+2555zUZUNPmSa5ZrRxah6xqFeZvcgNiowkIaE0ghfOr2AAfeNKjW9lPlOcmR/g66LStIZu6SFRp+4s+4ZbXKP2cr5wTbtDEC9nPg==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.70,544,1574121600"; d="scan'208,217";a="434420323"
Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Mar 2020 11:06:40 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 02CB6dtm002084 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 12 Mar 2020 11:06:39 GMT
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 12 Mar 2020 06:06:39 -0500
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 12 Mar 2020 06:06:38 -0500
Received: from NAM11-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 12 Mar 2020 06:06:38 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mRqxGa4rrCAiyl6UZ5vwPvSJ7L6mL8ldooKr8dxO0p5vk7Z/Zz7waoGFY+pgKETpybNaXl2wYAIkXuU+LkYv9xs7AUE0tq+j9tk/Doa0yn5Voc0Zr6tGf2sLIyi1m6RKk38K5GHlcJTnvy75O18EyWurJZWqMnmv/3Dnly7jkSxhLztLWEbuX7jmX7oHI4rYcFgkFdQcS9uU9rP40hzmVK7Zmx31+PJmRCwTtpFOMcLRpV38bICi+3CGMeAefC5PqcUbUGDyzayq75BDG+oh1mhhaWLWYh/s3nRwZs699r66NhKlMTHoSFkrEGnGIsyry4nplVcv6bLwxuep14AxKg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=rT2Hpakk7O0aaNelHjNiYbof8LAggKNdrQlEuY1fDHE=; b=FUuaZ+hvrMl3ywwZVMbasy4hK9fEIy61kFEekHOIk39rbi64odWECRgJGO/7j+djBhDaq34KvVANa0gFTzWFXYx4827NliLDJU/n3uUrH72mPhKboC1ufnBMbu4ErSKWExdO73h8qTHQKWq6kNlxb83C3dJUNl5+Exe91dDXfPVlYVgSctSYuGUm/rROtO5TSuyZcVac8GDqW9zW00YYPr2MlfywGcjFTLaCUjBpadDd5STYsZOxGsrKMP2MlYG+RUPMUG40k9D+UP+rYOoCIf7PspUsDgGWmZwqk5hWApYhnB4QOX08zrMpqPa6HsQV6O3v4sqNsLcD3FlPyenoog==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rT2Hpakk7O0aaNelHjNiYbof8LAggKNdrQlEuY1fDHE=; b=OgKuTXQvvikblyYYPFdFeqLVzktoSTW7riiX4ikMq3719SB7JHVD3S7rX/2NIttBZNm9F0gxswR54GMlIhjx//mLkck+zBw3c5eDD3GVCk7zWUnaER7u2b3y/QwAaqXDLsjKASb42VWmv9nUOweFjgLZW1rdsFdZ0TYBdukFfRw=
Received: from MW3PR11MB4570.namprd11.prod.outlook.com (2603:10b6:303:5f::22) by MW3PR11MB4684.namprd11.prod.outlook.com (2603:10b6:303:5d::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.17; Thu, 12 Mar 2020 11:06:37 +0000
Received: from MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::95ae:a984:9998:f2c8]) by MW3PR11MB4570.namprd11.prod.outlook.com ([fe80::95ae:a984:9998:f2c8%7]) with mapi id 15.20.2793.018; Thu, 12 Mar 2020 11:06:37 +0000
From: "Ketan Talaulikar (ketant)" <ketant@cisco.com>
To: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>, "Pablo Camarillo (pcamaril)" <pcamaril=40cisco.com@dmarc.ietf.org>, Christian Hopps <chopps@chopps.org>
CC: "spring@ietf.org" <spring@ietf.org>
Thread-Topic: [spring] Question on draft-ietf-spring-srv6-network-programming-12
Thread-Index: AQHV9HaX0YcH9mxpeUeeZmLJVJi8cahCJkcAgAAu+QCAANk/gIAAEs6AgAATm4CAAECMgIAAK8wAgAAKL4CAAPddAIAAB4GAgAAITtA=
Date: Thu, 12 Mar 2020 11:06:36 +0000
Message-ID: <MW3PR11MB45709D4DE8B221EDA2C9257BC1FD0@MW3PR11MB4570.namprd11.prod.outlook.com>
References: <D5A410FF-EEA3-4F01-8147-5E180EE35DE6@chopps.org> <A6B1D2E0-0230-468B-931F-C6C976BDC9DC@cisco.com> <84B6A844-0811-4317-8EC5-A204B2B23F23@chopps.org> <81EA92B2-5057-43F3-A895-53B08FB0D746@cisco.com> <7DDFB2C3-4C7D-4750-8B4B-8D96532B6A6D@chopps.org> <BD09DFAC-1A16-41F8-B204-38D98AA38050@cisco.com> <1114E167-1853-4004-A42F-E4F1185CB296@chopps.org> <A053B5E0-ECB3-42E8-9740-12B87DB0749B@cisco.com> <D136317A-5A91-4847-A613-35C36D3F9AEA@chopps.org> <9BBFFFEB-EECE-48D0-B50A-F5ECBCE105E8@cisco.com> <AM0PR0302MB32175954E55F778A4559B2989DFD0@AM0PR0302MB3217.eurprd03.prod.outlook.com>
In-Reply-To: <AM0PR0302MB32175954E55F778A4559B2989DFD0@AM0PR0302MB3217.eurprd03.prod.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ketant@cisco.com;
x-originating-ip: [72.163.220.23]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: d3537d04-a674-4d50-8128-08d7c6756f02
x-ms-traffictypediagnostic: MW3PR11MB4684:
x-microsoft-antispam-prvs: <MW3PR11MB4684B4698DB7EC84DB79A390C1FD0@MW3PR11MB4684.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0340850FCD
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(346002)(366004)(396003)(39860400002)(376002)(199004)(33656002)(26005)(8936002)(9686003)(186003)(110136005)(5660300002)(66946007)(66476007)(4326008)(66556008)(6506007)(66446008)(64756008)(76116006)(316002)(52536014)(86362001)(2906002)(30864003)(9326002)(478600001)(55016002)(66574012)(81156014)(966005)(53546011)(7696005)(71200400001)(8676002)(81166006)(559001)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:MW3PR11MB4684; H:MW3PR11MB4570.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata: pm8BtNqoJB1+Sq+4WfgDQk28adYStc7P5Ji+wyIpSdLXbKMkCQTQ3E24lL8rBlYCMO+Wqx9kanZQ2K50VonA2GaezbVjjTPD4fGGhgy1FHDjNoGRV8AN3CFc3xHwGgbhcjoQUHAyH715vnkbJSVW7g==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MW3PR11MB45709D4DE8B221EDA2C9257BC1FD0MW3PR11MB4570namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: d3537d04-a674-4d50-8128-08d7c6756f02
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2020 11:06:36.9862 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 5mJX4QLhrfdrkKw/F5hSUOAB+OubmYgk372Wpf2LB6IT2OmoTDYzdYOs3GshQ/haQvaPyT7WW4h8PbIMPcoYgw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR11MB4684
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com
X-Outbound-Node: alln-core-6.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/TSp5m13o0bGg-tLOquVBlZTtQC0>
Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2020 11:06:55 -0000

Hi Sasha,

In SR-MPLS, we have the inner VPN label and then we can have the BSID label. Similarly for SRv6, we have the VPN SID (e.g. End.DT4) and the BSID (i.e. End.B6.Encaps).

I hope that clarifies.

Thanks,
Ketan

From: spring <spring-bounces@ietf.org> On Behalf Of Alexander Vainshtein
Sent: 12 March 2020 16:03
To: Pablo Camarillo (pcamaril) <pcamaril=40cisco.com@dmarc.ietf.org>; Christian Hopps <chopps@chopps.org>
Cc: spring@ietf.org
Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12


Pablo, Chris and all,

I have not found the restriction for Binding SID not being the last SID in the SID list in RFC 8402 or RFC 8666.

And I think that no such limitation exists in SR-MPLS, where a binding SID can be easily be the last SID in the LIST of SIDs in the SR policy that is used to deliver L3VPN traffic in an SR-based deployment of inter-AS Option C BGP/MPLS IP VPNs:

  *   The ASBR of the AS hat contains the specific egress PR implements an intra-AS SR policy that goes to this PE, and allocates a Binding SID to steer packets into it
  *   The ASBR of the AS  that contains the specific ingress PE allocates an EPE SID to steer packets it receives from the PEs in  this AS to the ASBR of the domain that contains the specific egress PE
  *   The ingress PE implements an intra-AS SR policy going to the ASBR of this AS, augments it with the EPE SID to reach the ASNR of the AS that contains the specific egress PE and with the Binding SID allocated by this ASBR to reach the specific egress PE to obtain the inter-AS SR policy
  *   VPN-IP routes are advertised by the egress PE to the ingress PE with the egress PE as their BGP NH, and the ingress PE resolved these routes using an inter-AS SR policy that, from its POV, has the Binding SID as the last entry in the SID list
  *   VPN application labels carried in the VPN-IP routes do not represent any SIDs at all.



Did I miss something substantial?

Is the restriction you define here specific to just SRv6?



Regards, and lots of thanks in advance,

Sasha



Office: +972-39266302

Cell:      +972-549266302

Email:   Alexander.Vainshtein@ecitele.com<mailto:Alexander.Vainshtein@ecitele.com>





-----Original Message-----
From: spring <spring-bounces@ietf.org<mailto:spring-bounces@ietf.org>> On Behalf Of Pablo Camarillo (pcamaril)
Sent: Thursday, March 12, 2020 12:06 PM
To: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>
Cc: spring@ietf.org<mailto:spring@ietf.org>
Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12



Hi Chris,



The Binding SIDs have a restriction not to be the last SID in a SID list. This applies to all three Binding SID behaviors defined in draft-ietf-spring-network-programming (End.B6.Encaps, End.B6.Encaps.Red and End.BM) and is indicated by the statements such as "An End.B6.Encaps SID is never the last segment in a SID list." in section 4.13.



More precisely, when a node processes the SRH of a packet whose IPv6 Destination Address matches a locally instantiated SRv6 Binding-SID behavior (any of the three) and it is not the last segment in the SID list, it steers the packet into the associated SR Policy (either by performing an IPv6 encapsulation or by pushing an MPLS label stack on top of the existing packet).



However, if the binding SID is the last SID in a SID list or the IPv6 DA in a packet with no SRH, then the router will generate an ICMP Parameter Problem message with code 4. In either of those two cases, the packet is not steered in the SR Policy and the source is notified of the issue.



This restriction exists for two reasons:

First, the primary use-case for the Binding-SID concept is to apply an intermediate SR Policy that steers the packet along a particular path in an intermediate sub-domain, but the original SID-list is expected to steer the traffic up to the egress node of the SR domain. This means that the final segment in the original SID-list is usually an End.D* (VPN) segment at the egress node.



Second, the processing a Binding-SID at a last position in a SID list requires a different processing. First you would need to decapsulate the packet (since it has reached it final destination) and then re-encapsulate it (or push a label stack on top of the inner packet).



Many thanks,

Pablo.



-----Original Message-----

From: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

Date: Wednesday, 11 March 2020 at 20:21

To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com<mailto:pcamaril@cisco.com>>

Cc: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>, "spring@ietf.org<mailto:spring@ietf.org>" <spring@ietf.org<mailto:spring@ietf.org>>

Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12







    > On Mar 11, 2020, at 2:44 PM, Pablo Camarillo (pcamaril) <pcamaril@cisco.com<mailto:pcamaril@cisco.com>> wrote:

    >

    > Hi Chris,

    >

    > Indeed, an IPv6 packet with no SRH (and FIB entry is local End SID) is one way to get to the Upper Layer Header processing defined in 4.1.1.

    > Another way is to have a FIB entry bound to an End.DT* or End.DX* behavior. In these cases the ULH processing occurs if the SRH has SL=0 or there's no SRH.



    Ah right, sorry that's right there in the document, it's easy too lose track of all this when multitasking on other things. :)



    So if you don't mind, going back to my original question of how this works with Binding SID cases... You replied:



       "Normally the Upper-Layer Header should not be processed on a packet with a BSID, since you have just pushed an SR policy into the packet. That said, when the ultimate destination is BSID, then the Upper Layer Header processing is the same to End (4.1)."



    Can you expand on "when the ultimate destination is BSID"? Do you mean when the ultimate destination of the packet is the same node N that is currently processing the BSID FIB entry? If so then that will have to be handled in whatever way it should be after it is resubmitted to either IPv6 or MPLS engines and forwarded and then decapsulated. There won't be anymore header processing to follow from 4.{13,14,15} though. Given something has been added (an IPv6 header or an MPLS label stack) that still needs to get processed and removed before any upper-layer header of the now encapsulated packet gets looked at.



    I also find another bit of text confusing in these sections:



      "An End.BM SID is never the last SID, and any SID instantiation is

       associated with an SR-MPLS Policy B."



    Is that text is saying that if one lands on a BSID one can always expect more SIDs to be used in moving the packet (b/c of pushing an new IPv6 encap or MPLS label stack)? It's confusing b/c it certainly can read that a BSID can't be the "Last Segment" in an SRH, but that doesn't seem like a reasonable restriction.



    Thanks,

    Chris.



    >

    > Many thanks,

    > Pablo.

    >

    > -----Original Message-----

    > From: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

    > Date: Wednesday, 11 March 2020 at 17:08

    > To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com<mailto:pcamaril@cisco.com>>

    > Cc: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>, "spring@ietf.org<mailto:spring@ietf.org>" <spring@ietf.org<mailto:spring@ietf.org>>

    > Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12

    >

    >

    >

    >> On Mar 11, 2020, at 8:16 AM, Pablo Camarillo (pcamaril) <pcamaril=40cisco.com@dmarc.ietf.org<mailto:pcamaril=40cisco.com@dmarc.ietf.org>> wrote:

    >>

    >> Hi Chris,

    >>

    >> The processing defined in draft-ietf-spring-srv6-network-programming is aligned with the SRH.

    >> Particularly see https://clicktime.symantec.com/a/1/OOssComq7nKv3aheXcw3XaZubndcUPTiP4r7XKVYET0=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-ietf-6man-segment-routing-header-26%23section-4.3

    >>

    >>> Is 4.1.1 covering (and only covering) the case where my FIB lookup yields a local End SID, but the packet has no SRH in it?

    >>

    >> It is not *only* covering that case (although that is one of the cases, there are others). You process the extension header chain as defined in RFC8200.

    >

    >    Right I had quoted the 8200 processing order so I'm using that as a guide.

    >

    >> When processing the SRH you follow the processing of 4.1; If you get to the Upper Layer Header, you process it as per 4.1.1

    >

    >    This is what I'm getting at though, if there is an SRH you will enter section 4.1 prior to 4.1.1, and if you are in 4.1 there is no processing path that leads to the upper-layer header. So AFAICT the only way to get to section 4.1.1 is if the FIB entry is a local END SID and there is no SRH.

    >

    >    Thanks,

    >    Chris.

    >

    >>

    >> Thank you,

    >> Pablo.

    >>

    >> -----Original Message-----

    >> From: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

    >> Date: Wednesday, 11 March 2020 at 12:06

    >> To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com<mailto:pcamaril@cisco.com>>

    >> Cc: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>, "spring@ietf.org<mailto:spring@ietf.org>" <spring@ietf.org<mailto:spring@ietf.org>>

    >> Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12

    >>

    >>

    >>

    >>> On Mar 11, 2020, at 5:59 AM, Pablo Camarillo (pcamaril) <pcamaril=40cisco.com@dmarc.ietf.org<mailto:pcamaril=40cisco.com@dmarc.ietf.org>> wrote:

    >>>

    >>> Hi Chris,

    >>>

    >>> They are the same thing.

    >>

    >>   Ok, so how do I get on 2 different processing paths for the same thing entry as Section 4.1 cannot lead to processing of an upper-layer header as far as I can tell, yet section 4.1.1 is talking about processing the upper layer header for the same FIB entry.

    >>

    >>   1) Packet arrives, FIB lookup on packet destination address returns local End SID entry.

    >>

    >>   2) Start processing the extension headers and arrive at the SRH (which comes prior to the upper-layer header.

    >>

    >>      From RFC8200 the extension header order:

    >>         IPv6 header

    >>         Hop-by-Hop Options header

    >>         Destination Options header (note 1)

    >>         Routing header <------------------------------------ SRH

    >>         Fragment header

    >>         Authentication header (note 2)

    >>         Encapsulating Security Payload header (note 2)

    >>         Destination Options header (note 3)

    >>         Upper-Layer header <-------------------------------- Upper Layer Header

    >>

    >>   3) Process the SRH according to 4.1 for which there is no exit that leads to processing any more headers.

    >>

    >>   Oh wait...

    >>

    >>   Is 4.1.1 covering (and only covering) the case where my FIB lookup yields a local End SID, but the packet has no SRH in it? If this is the case then it would make things *way* more clear for the document to state this outright. "When a packet's DA returns a FIB entry for a local END SID, but the packet does not contain an SRH ..." or something like that.

    >>

    >>   Thanks,

    >>   Chris.

    >>

    >>

    >>>

    >>> Section 3:

    >>> ...

    >>> Its processing is defined in [I-D.ietf-6man-segment-routing-header]

    >>> section 4.3 and reproduced here as a reminder.

    >>>

    >>>    Without constraining the details of an implementation, the SR

    >>>    segment endpoint node creates Forwarding Information Base (FIB)

    >>>    entries for its local SIDs.

    >>>

    >>>    When an SRv6-capable node receives an IPv6 packet, it performs a

    >>>    longest-prefix-match lookup on the packets destination address.

    >>>    This lookup can return any of the following:

    >>>

    >>>    - A FIB entry that represents a locally instantiated SRv6 SID

    >>>

    >>>    - A FIB entry that represents a local interface, not locally

    >>>      instantiated as an SRv6 SID

    >>>

    >>>    - A FIB entry that represents a non-local route

    >>>

    >>>    - No Match

    >>>

    >>> Section 4:

    >>>> Each FIB entry indicates the behavior associated with a SID instance

    >>>> and its parameters.

    >>>

    >>> Thank you,

    >>> Pablo.

    >>>

    >>> -----Original Message-----

    >>> From: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

    >>> Date: Tuesday, 10 March 2020 at 22:01

    >>> To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com<mailto:pcamaril@cisco.com>>

    >>> Cc: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>, "spring@ietf.org<mailto:spring@ietf.org>" <spring@ietf.org<mailto:spring@ietf.org>>

    >>> Subject: Re: [spring] Question on draft-ietf-spring-srv6-network-programming-12

    >>>

    >>>

    >>>

    >>>> On Mar 10, 2020, at 2:13 PM, Pablo Camarillo (pcamaril) <pcamaril=40cisco.com@dmarc.ietf.org<mailto:pcamaril=40cisco.com@dmarc.ietf.org>> wrote:

    >>>>

    >>>> Hi Chris,

    >>>>

    >>>> Thanks for going through the document.

    >>>> The behaviors 4.13 (End.B6.Encaps), 4.14 (End.B6.Encaps.Red) and 4.15 (End.BM) correspond to Binding SIDs [1].

    >>>>

    >>>> As a result of 4.13 for example, the packet is encapsulated with a new IPv6 header and an SRH that contains the SR policy associated to the BSID.

    >>>> Once the new IPv6 header is pushed into the packet, the NET-PGM pseudocode passes this packet to the IPv6 module of the router for transmission.

    >>>>

    >>>> Normally the Upper-Layer Header should not be processed on a packet with a BSID, since you have just pushed an SR policy into the packet.

    >>>> That said, when the ultimate destination is BSID, then the Upper Layer Header processing is the same to End (4.1).

    >>>>

    >>>> Hope it clarifies.

    >>>

    >>>  I'm still not clear on things I guess, but your answer leads me to a more basic question:

    >>>

    >>>  Section 4.1 described the basic "FIB entry" "End" which says:

    >>>

    >>>    "When N receives a packet whose IPv6 DA is S and S is a local End SID, N does..."

    >>>

    >>>  So it's talking about a FIB entry for a "local End SID".

    >>>

    >>>  Section 4.1.1 says:

    >>>

    >>>    "When processing the Upper-layer Header of a packet matching a FIB

    >>>     entry locally instantiated as an SRv6 End SID"

    >>>

    >>>  It's talking about a "FIB entry locally instantiated as an SRv6 END SID"

    >>>

    >>>  I'm not understanding how these 2 things are different. 4.1s calling a FIB Entry a "local End SID" 4.1.1 is calling something (different?) a "FIB Entry locally instantiated as an SRv6 END SID".

    >>>

    >>>  The terms seem too similar for me to make a distinction, where I feel the document expects me to make one.

    >>>

    >>>  Thanks,

    >>>  Chris.

    >>>

    >>>

    >>>>

    >>>> Thanks,

    >>>> Pablo.

    >>>>

    >>>> [1]. https://clicktime.symantec.com/a/1/ilkEJxP-mj7tnQF8crEOD_-axeoYHnBkoeJojGc0dEc=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Frfc8402%23section-5

    >>>>

    >>>>

    >>>> -----Original Message-----

    >>>> From: spring <spring-bounces@ietf.org<mailto:spring-bounces@ietf.org>> on behalf of Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

    >>>> Date: Saturday, 7 March 2020 at 12:50

    >>>> To: "spring@ietf.org<mailto:spring@ietf.org>" <spring@ietf.org<mailto:spring@ietf.org>>

    >>>> Cc: Christian Hopps <chopps@chopps.org<mailto:chopps@chopps.org>>

    >>>> Subject: [spring] Question on draft-ietf-spring-srv6-network-programming-12

    >>>>

    >>>> In sections 4.13, (implicitly in 4.14) and 4.15 a set of steps is indicated. As far as I can tell the processing of the IPv6 header chain in all cases is terminated. e.g.,

    >>>>

    >>>> "

    >>>>    When N receives a packet whose IPv6 DA is S and S is a local End.BM

    >>>>    SID, does:

    >>>>

    >>>>   S01. When an SRH is processed {

    >>>>   S02.   If (Segments Left == 0) {

    >>>> ....

    >>>>                Interrupt packet processing and discard the packet.

    >>>>   S04.   }

    >>>>   S05.   If (IPv6 Hop Limit <= 1) {

    >>>> ....

    >>>>                Interrupt packet processing and discard the packet.

    >>>>   S07.   }

    >>>>   S09.   If ((Last Entry > max_LE) or (Segments Left > (Last Entry+1)) {

    >>>> ....

    >>>>                Interrupt packet processing and discard the packet.

    >>>>   S11.   }

    >>>> ....

    >>>>   S15.   Submit the packet to the MPLS engine for transmission to the

    >>>>             topmost label.

    >>>>   S16. }

    >>>> "

    >>>>

    >>>> The text then says:

    >>>>

    >>>>    When processing the Upper-layer header of a packet matching a FIB

    >>>>    entry locally instantiated as an SRv6 End.BM SID, process the packet

    >>>>    as per Section 4.1.1.

    >>>>

    >>>> Why would I ever be processing the upper-layer header at this point?

    >>>>

    >>>> Thanks,

    >>>> Chris.

    >>>> _______________________________________________

    >>>> spring mailing list

    >>>> spring@ietf.org<mailto:spring@ietf.org>

    >>>> https://clicktime.symantec.com/a/1/Cdwzr-UEQMgwVYTI1eE5ix_5auaoRYzQKe9WVcMQ9MA=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fspring

    >>>>

    >>>>

    >>>> _______________________________________________

    >>>> spring mailing list

    >>>> spring@ietf.org<mailto:spring@ietf.org>

    >>>> https://clicktime.symantec.com/a/1/Cdwzr-UEQMgwVYTI1eE5ix_5auaoRYzQKe9WVcMQ9MA=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fspring

    >>>

    >>>

    >>>

    >>> _______________________________________________

    >>> spring mailing list

    >>> spring@ietf.org<mailto:spring@ietf.org>

    >>> https://clicktime.symantec.com/a/1/Cdwzr-UEQMgwVYTI1eE5ix_5auaoRYzQKe9WVcMQ9MA=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fspring

    >>

    >>

    >>

    >>

    >> _______________________________________________

    >> spring mailing list

    >> spring@ietf.org<mailto:spring@ietf.org>

    >> https://clicktime.symantec.com/a/1/Cdwzr-UEQMgwVYTI1eE5ix_5auaoRYzQKe9WVcMQ9MA=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fspring

    >>

    >

    >

    >







_______________________________________________

spring mailing list

spring@ietf.org<mailto:spring@ietf.org>

https://clicktime.symantec.com/a/1/Cdwzr-UEQMgwVYTI1eE5ix_5auaoRYzQKe9WVcMQ9MA=?d=FbLmDjVXbJhuMaAIeX4cFFFRyrykGJavriicKiMxIQmdbSLxawLPSlrgcZ8De4_VQPzYrIsIYu2Jpc6QjNpZWS3PiZaTFfeXC8XGjYl9YbsV2bSSqlKHj_RjzPOu_kt25loIwxspA7A3E--SZtLiLLyd4P5YBrCwuWwiPCoPRLIpAzbJ9P_R6b1K50qCQ4Q1glwB49KSM8nVDIJwsgkhY88KYSnFh3qVrXuAvTIUefHFLjrWyC1-ZHa99SHSs6-17QweSzVGf2LYBweiGQAqTcS-yp8BuVpwn9pg2WByynfNbk-85azDwcp2zfhA6bOZF7KkcH-Id1Sp7ko_TXsYJNElY0Mf2sa9gEtAruMwcmhnDWeTnwt9743JGtNA-k6AThTzy0xgZryhYxUHAVfzux8AmLMU2QXKbuGgtZoCYPmHo-G-giUPTuS5nGd2hYdCVb5GGYK5QoO43xeJxP0JqtJfXlhzeKqobRIKn1Txo1fWC547iPw_0dU4aJrrwAng&u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fspring

___________________________________________________________________________

This e-mail message is intended for the recipient only and contains information which is
CONFIDENTIAL and which may be proprietary to ECI Telecom. If you have received this
transmission in error, please inform us by e-mail, phone or fax, and then delete the original
and all copies thereof.
___________________________________________________________________________