Re: [spring] Is srv6 PSP a good idea

Dirk Steinberg <dirk@lapishills.com> Wed, 26 February 2020 17:50 UTC

Return-Path: <dirk@lapishills.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D4AD3A0E92 for <spring@ietfa.amsl.com>; Wed, 26 Feb 2020 09:50:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, NO_DNS_FOR_FROM=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lapishills-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zvee2ImptRbl for <spring@ietfa.amsl.com>; Wed, 26 Feb 2020 09:50:56 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 911973A0E8F for <spring@ietf.org>; Wed, 26 Feb 2020 09:50:56 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id z15so4234178wrl.1 for <spring@ietf.org>; Wed, 26 Feb 2020 09:50:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lapishills-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=anjBX6fTNxm71OEbgagwY/RXKPLmYU2DR7ClwNt3tw4=; b=f97uT87P7iVil0OJ0whhc4fo8npesMvaULGEWeFf1VJRAwoHLuMpHfW8FZ7S8nV5/1 /08AnmjSHKKupl1eylORdnh0l1YP9jO2B3wvK0FNV0SRvxBcgKsHawnmuVyPJ2AVXtDa EtnH+F2w2CCP3assCRNnhUAM4pWhv5BrSw9O6CgnEmuzP7hxNeca+yqxojiVAy9EP2DH cJFJYtHKi1KuBlfuvzTa8iB8N2sYstCAwXhJPOADDl8eyaJ6waSkXsK8TbDVGIKdr6R5 vqkwazO0sJ47ZnWS7CU8A8Zt0GhhEivw3witWwb2GDihg2lnOj4OqRUusCTXrOXrvqrZ 1ppw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=anjBX6fTNxm71OEbgagwY/RXKPLmYU2DR7ClwNt3tw4=; b=oCDNrA7D2a1U7qAMU5b7sznjzuDXawptsyu+m2wnc/PM9xY2bYKHB8/DdYIOGNW7t0 3R9/le9RXBif+05d86cq35WTbEvcShfye2jpY51zr+9xZ+OPQNp/mG1VvwPPV7ATMf54 TKsvFctiszQrqRXJzBqQb/lpgxuoTEhViXFLIwsA2fg+Bh3SUWcwkM4R6MqbjvCj44uE lLo9r8iJdwYrOUv5v9jwpPaUcE4BkRBQIn5aOtJo8g+mdzBYfNSn4dNJgt7E+Qg/k4aV iJYg6lQlcm0JmmSRZB19kGegu3ecI5qMp3EHFJrMP9aklSTE2hQoc1NSsE5pHcD0M3Sh JKUg==
X-Gm-Message-State: APjAAAWRRvvFNUe0dts+5IcjDuTk6x431OXKB4hHQEBdBNYt3PnNKVFB D7Zu3PaPJFEq9Fqs/GMSa6Ml+JUFSWhhlctcOB7Swg==
X-Google-Smtp-Source: APXvYqx+HgmvXK49wOppTHy+Xhp0pMik2bXSJIz4p4gYQQQN6AinRcSjznTAmKktAe1lD58OHQ3FFETC2i7J09VuPUY=
X-Received: by 2002:adf:fd4c:: with SMTP id h12mr6834285wrs.101.1582739454720; Wed, 26 Feb 2020 09:50:54 -0800 (PST)
MIME-Version: 1.0
References: <75EF2179-679B-43B1-9E8C-C85086E70021@cisco.com> <e2183573-9003-ef9e-8fc9-f94c1bf5cac5@gont.com.ar> <CAFqxzqbFGN4KvQ5-k0mT+SDd+C7=U30ufBs6it_Uy4ZfyJOH0Q@mail.gmail.com> <CAFqxzqb8Dt0BMBfEHFkz5n=q=FK42tk0GcE2=V1wW+6GwBRNaQ@mail.gmail.com> <b7f32a7d-98ee-f26c-031d-a626e48fbd1a@gont.com.ar>
In-Reply-To: <b7f32a7d-98ee-f26c-031d-a626e48fbd1a@gont.com.ar>
From: Dirk Steinberg <dirk@lapishills.com>
Date: Wed, 26 Feb 2020 19:50:47 +0200
Message-ID: <CAFqxzqZJMPn8wB6EWY=Bojx4CRM0OBGM1otx3YnTP9BY7cBd_A@mail.gmail.com>
To: Fernando Gont <fernando@gont.com.ar>
Cc: "Pablo Camarillo (pcamaril)" <pcamaril=40cisco.com@dmarc.ietf.org>, Mark Smith <markzzzsmith@gmail.com>, SPRING WG <spring@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f89578059f7e3e96"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/UNIMGxwnUNkq2WsrG3VSE9OQaj4>
Subject: Re: [spring] Is srv6 PSP a good idea
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Feb 2020 17:51:00 -0000

On Wed, Feb 26, 2020 at 6:55 PM Fernando Gont <fernando@gont.com.ar> wrote:

> On 26/2/20 12:57, Dirk Steinberg wrote:
> > Hi Fernando,
> >
> > adding to my own comment and to be more specific:
> >
> > The existing RFCs are very clear in their wording that
> > the node identified in the Destination Address field of
> > the  IPv6 header is free to do whatever it desires with
> > the packet it just received. After all, the packet was
> > addressed specifically to that node.
> >
> > These nodes are called segment endpoint nodes in SRv6.
> >
> > Only nodes that are *NOT* identified in the DA are
> > prohibited from making any changes.
> > This should be very clear, even if you seem to
> > wish that IPv6 had been defined differently.
>
> Are you saying that IPv6 allows for in the network header
> insertion/removal?
>

No, not on a transit node.

Yes, in SRv6 on a segment endpoint node.
And that is not plain IPv6 anymore, that is
the innovation the SRv6 brings along.


> If so, please tell me how AH, Path-MTU Discovery, and ICMPv6 error
> reporting works -- all very basic functions of IPv6.
>
> IPv6 is an end to end protocol.


The IPv6 you are referring to (end-to-end user traffic)
must not be confused with what SRv6 is. SRv6 will
always encapsulate said user traffic and NOT modify
it at all -- just like you demand. Therefore on that user
plane all functions that you talk about will continue
to function as before, AH, PMTU, and all.
Managing MTU so as not to blow up within a carrier network
has been done successfully with MPLS for more than 20 years.

SRv6 should be understood for what it is -- a modern successor
to MPLS to be used as both an underlay and service layer,
managed within a well-defined network domain.

SRv6 SRH should never occur directly within the user IPv6
header but only within the header added and owned by the
carrier running SRv6. And within their own header the
network operator, after receiving the packet at the IPv6 DA,
can make changes. It's their own private header, just like
the MPLS label stack in SR-MPLS.

If you want to take a really orthodox and strict viewpoint
maybe you should view the "end-to-end" IPv6 relation
as being segment endpoint to segment endpoint only.
Each new SRv6 segment opens up a new IPv6 end-to-end
relation, whereas the "end-to-end" relation from the SRv6
point of view is at a higher layer.

Then of course you could also adopt a more liberal viewpoint
and just view the entire end-to-end SRv6 path as one
end-to-end IPv6 entity as well without considering the
underlying segment endpoints as IPv6 endpoints.

With RH you change the DA on the flight,
>

No -- you do not change DA in flight -- only on segment endpoints
which are the DA of the IPv6 packet. When IPv6 was defined
decades ago nobody was thinking about SRv6. That notion was
not present then -- otherwise one might have indeed clarified some
of the points that are debated today. But just because the inventors
of IPv6 did not think to include SRv6 capabilities from the start
this should not be used as an excuse to block innovation.

One could, of course, just say that SRv6 is a completely new animal
to completely avoid the current type of discussion and just redefine
everything from scratch. But why should we do such a thing?
IMHO it is much better to take existing IPv6 and innovate by
extending it -- not changing existing behavior -- in ways that had
never been envisioned by the original authors of IPv6.
That is what SRv6 is doing.


> because routing only works based on the DA -- there's no other way to
> specify waypoints.
>

If you claim otherwise, that can be, at best, a major misunderstanding
> of how IPv6 works.
>

SRv6 is not the same as IPv6.

Maybe there is a misunderstanding about SRv6 here.

Cheers
Dirk

Thanks,
> --
> Fernando Gont
> e-mail: fernando@gont.com.ar || fgont@si6networks.com
> PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
>
>
>
>