Re: [spring] Is srv6 PSP a good idea

Ron Bonica <rbonica@juniper.net> Tue, 17 December 2019 15:05 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0DE91208FF for <spring@ietfa.amsl.com>; Tue, 17 Dec 2019 07:05:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=KKbJc5LO; dkim=pass (1024-bit key) header.d=juniper.net header.b=Vwpbw/Yc
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 60-JGAf8aIRK for <spring@ietfa.amsl.com>; Tue, 17 Dec 2019 07:05:01 -0800 (PST)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFEE81201A3 for <spring@ietf.org>; Tue, 17 Dec 2019 07:05:01 -0800 (PST)
Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xBHF2pV9001487; Tue, 17 Dec 2019 07:05:00 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=AgbgoVOa2Zse7RmvXAOGFDCs1NDqZi6RU0giv4i5WQI=; b=KKbJc5LOIshE60WtuHpTuXGfG64m6RbubIbqfff2CEdZpvn/+Ax5p+762HUONRHZdTgb MWRlZ3DSJgaCYPlQGD2B/lg0G744548uoTFRlt6KTCOp77IChJd6aCWm5d9ofgVD1z6R EfZjLr+iP4TRGkoI1meAAEb8Ao0aocK/h74uucaxc48UKJFXKuz86YaIqf8Oj+hFvfgl 7o4mm3idUGHc2RuCFJsNbKrxapUhCagRfJz8oRp+QBpwpheCUShBcKRLcBHz3IHbdpIy wJdVZ0MbfI5dbtNfDJ1/ep7tdeheBg2KCi0ppofjqHYADdDvQWU7hcphAMkIoJbs0ti5 UQ==
Received: from nam12-mw2-obe.outbound.protection.outlook.com (mail-mw2nam12lp2047.outbound.protection.outlook.com [104.47.66.47]) by mx0a-00273201.pphosted.com with ESMTP id 2wxtxa8p43-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 17 Dec 2019 07:05:00 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PFE3Z+Hjjpyjm4Xo7qYo3pOhsz28vLbfE103L+/2oR6N+b2vs5hz/LHOLXh1Oobk71o0XkUsw21JvuAAy4ORRd/S2y7fkrsW3saVSB/2DJoq67y3qakrA1J2wr2rwqRaDZYyaJOs763xr8JnuOc/203XUYf214VqN+B2DdwQYWldw00P3cQBLuB2j0pG7zvpk33x+PUQwmuj/6ChYFs6EPDguC+RrV5JMqxsJOrJlV3+lXmABz3t+b9i3oKvaM0j/xecXYsC/LG1ZwnmYL/5q0c9jgp0uumk/nVs7WPNLnL75ETJjRA0Xq62qAJ5IfYMayZrnzxk4wR0VXSGKP52vA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AgbgoVOa2Zse7RmvXAOGFDCs1NDqZi6RU0giv4i5WQI=; b=i+wCtPTYqxQ3c3I2K+AoiHhdd2X+16LrpCpzCHpj5osa+/fASz1cmmZl59JmYTp7hPbvjmYDb6BCblqi+Zv2k/h/CkFZS7KE37nv8JDRIgGkYmOXj479f3ffxsauzAoUy+86OKQ9UF2z61D1ZXwgRWNOWypZvbUmp4HZDJ/hAV/QX2Al6WQKhOkeH8hYO3sWRPL89OrKcna0aVr7zkiu3uRX9BmJRdSb8+Q0mnPFPSCASClyvbGS42R6GasuN4PB1wKeuZTBccx5Oq3UrF+DEzFC8idrZDNUvj85CasGv/7BO/2wesu9uoB1CK60AaArmhsF6sn7FLWu1Jywh8DuZw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AgbgoVOa2Zse7RmvXAOGFDCs1NDqZi6RU0giv4i5WQI=; b=Vwpbw/YceDSyK24fMzKDnaeaw39pnXW4NhNfWS0PGCj0hrYb/kANtmDZIeDtVAaqb3d/lp8aSMDX3kCO9xZ86a1PwuZNmy9BzDH+l3gtsy4yA6lHNej1p2k0ozedTNpC1dAb/3+z5OP4pvzSWazUxKxaeAT9MV6jaOo0T43F138=
Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB3972.namprd05.prod.outlook.com (52.132.6.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2559.10; Tue, 17 Dec 2019 15:04:52 +0000
Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::9461:cfa8:fab9:736c]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::9461:cfa8:fab9:736c%7]) with mapi id 15.20.2559.012; Tue, 17 Dec 2019 15:04:52 +0000
From: Ron Bonica <rbonica@juniper.net>
To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com>, "Joel M. Halpern" <jmh@joelhalpern.com>, "spring@ietf.org" <spring@ietf.org>
Thread-Topic: [spring] Is srv6 PSP a good idea
Thread-Index: AQHVr85cKylyQvwmlUuU/o/AtwR+Fae1XsCAgAGaiECAAm7NgIAFC/uA
Content-Class:
Date: Tue, 17 Dec 2019 15:04:52 +0000
Message-ID: <BN7PR05MB5699D79B1FC40662EE9E95B6AE500@BN7PR05MB5699.namprd05.prod.outlook.com>
References: <5c2a4b36-0c59-709e-23eb-00f4aa1ce52f@joelhalpern.com> <9B89F4C2-5594-4D31-8893-21F3F4A0DF6C@cisco.com> <BN7PR05MB569969EE8D1929E7069E1BB0AE550@BN7PR05MB5699.namprd05.prod.outlook.com> <58ED78D3-9E0C-4556-8853-8754B361DF6D@cisco.com>
In-Reply-To: <58ED78D3-9E0C-4556-8853-8754B361DF6D@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-12-17T15:04:49.6941621Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=3b9d1444-2745-4163-b9e3-1474337f65b4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.3.2.8
dlp-reaction: no-action
x-originating-ip: [108.28.233.91]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: c85e1d20-9810-4ae3-43d8-08d783027815
x-ms-traffictypediagnostic: BN7PR05MB3972:
x-microsoft-antispam-prvs: <BN7PR05MB3972A5FE44F1796C92772A8FAE500@BN7PR05MB3972.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 02543CD7CD
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(13464003)(199004)(189003)(51444003)(8676002)(498600001)(8936002)(81166006)(81156014)(966005)(66574012)(186003)(26005)(86362001)(55016002)(9686003)(66946007)(53546011)(52536014)(76116006)(66476007)(66556008)(64756008)(66446008)(5660300002)(6506007)(7696005)(33656002)(110136005)(71200400001)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB3972; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: c85e1d20-9810-4ae3-43d8-08d783027815
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Dec 2019 15:04:52.2268 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 2hsG1dFKsW33pZwSTV8D7lX2NZTxsUTp5lAnnyQgHTEA5ptja0WClwgub0MGFZWzgZGE5PJdwMo3AaHz6jGHGA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB3972
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-17_02:2019-12-17,2019-12-17 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 malwarescore=0 mlxlogscore=999 adultscore=0 spamscore=0 clxscore=1015 priorityscore=1501 impostorscore=0 suspectscore=0 bulkscore=0 mlxscore=0 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912170126
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/eJ6tL9_DRxay-1KVTt1jKnDS1d8>
Subject: Re: [spring] Is srv6 PSP a good idea
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Dec 2019 15:05:05 -0000

Pablo,

In your message below, are you arguing that it is easier for the penultimate node to remove the SRH than it is for the ultimate node to ignore it? I think that would be a stretch.

                                                                              Ron



Juniper Business Use Only

-----Original Message-----
From: Pablo Camarillo (pcamaril) <pcamaril@cisco.com> 
Sent: Saturday, December 14, 2019 4:50 AM
To: Ron Bonica <rbonica@juniper.net>; Joel M. Halpern <jmh@joelhalpern.com>; spring@ietf.org
Subject: Re: [spring] Is srv6 PSP a good idea

Ron,

What is the "price paid by the penultimate segment"? All the current implementations do this at linerate with no performance degradation as I have explained in my email before.

There is substantial benefit. Four operators have deployed PSP, which proves the benefit. 
It enables new use-cases that have been provided by other members in the list. [1], [2] and [5].
From operational perspective it is not complex as explained in [3].
Operators have expressed their value in [4] and [5].

[1].- https://urldefense.com/v3/__https://mailarchive.ietf.org/arch/msg/spring/wTLJQkzC6xwSNPbhB84VH0mLXx0__;!!NEt6yMaO-gk!TzJ8_ZyDvWvLPNwsalQ6RiBzoLkP6Vj30eGaDVFEWdDq_IdPkWwaIL4IcdXeBzk_$ 
[2].- https://urldefense.com/v3/__https://mailarchive.ietf.org/arch/msg/spring/V0ZpjVLSVZxHaBwecXFxqJjlg_c__;!!NEt6yMaO-gk!TzJ8_ZyDvWvLPNwsalQ6RiBzoLkP6Vj30eGaDVFEWdDq_IdPkWwaIL4IcU9bihBc$ 
[3].- https://urldefense.com/v3/__https://mailarchive.ietf.org/arch/msg/spring/ssobwemrPz0uEZjvRCZP1e4l_l0__;!!NEt6yMaO-gk!TzJ8_ZyDvWvLPNwsalQ6RiBzoLkP6Vj30eGaDVFEWdDq_IdPkWwaIL4Icc_wo902$ 
[4].- https://urldefense.com/v3/__https://mailarchive.ietf.org/arch/msg/spring/KXCBHT8Tpy17S5BsJXLBS35yZbk__;!!NEt6yMaO-gk!TzJ8_ZyDvWvLPNwsalQ6RiBzoLkP6Vj30eGaDVFEWdDq_IdPkWwaIL4IcRXo_q-1$ 
[5].- https://urldefense.com/v3/__https://mailarchive.ietf.org/arch/msg/spring/ErcErN39RIlzkL5SKNVAeEWpnAI__;!!NEt6yMaO-gk!TzJ8_ZyDvWvLPNwsalQ6RiBzoLkP6Vj30eGaDVFEWdDq_IdPkWwaIL4IceGPpSab$ 

Cheers,
Pablo.

-----Original Message-----
From: Ron Bonica <rbonica@juniper.net>
Date: Thursday, 12 December 2019 at 21:50
To: "Pablo Camarillo (pcamaril)" <pcamaril@cisco.com>, "Joel M. Halpern" <jmh@joelhalpern.com>, "spring@ietf.org" <spring@ietf.org>
Subject: RE: [spring] Is srv6 PSP a good idea

    Pablo,
    
    I am not convinced the benefit derived by the ultimate segment justifies the price paid by the penultimate segment. Specifically,
    
    - the ultimate segment benefits because it doesn't have to skip over the SRH with SL == 0
    - in order for the ultimate segment to derive this benefit, the penultimate segment needs to remove bytes from the middle of the packet and update two fields in the IPv6 header
    
    As Joel said, we typically don't add options (i.e., complexity) to a specification unless there is substantial benefit.
    
                                                        Ron
    
    
    
    
    Juniper Business Use Only
    
    -----Original Message-----
    From: spring <spring-bounces@ietf.org> On Behalf Of Pablo Camarillo (pcamaril)
    Sent: Wednesday, December 11, 2019 3:12 PM
    To: Joel M. Halpern <jmh@joelhalpern.com>; spring@ietf.org
    Subject: Re: [spring] Is srv6 PSP a good idea
    
    Joel,
    
    1.- The use-case for PSP has already been provided at the mailer. There are scenarios where it provides benefits to operators.
    
    2.- The PSP behavior is optional. It is up to the operator in his deployment to decide whether to enable it or not at one particular router.
    Similarly, a vendor may decide not to implement it. The PSP behavior has been implemented by several vendors and deployed (see the srv6 deployment draft).
    
    3.- A network may have PSP enabled at some nodes and not at others.  Everything is still interoperable and works fine.  
    
    4.- PSP is not a complex operation in hardware (doable at linerate on existing merchant silicon). 
    Example: It has been implemented and deployed on Broadcom J/J+. If I recall correctly Broadcom Jericho+ started shipping in March 2016! PSP is supported on this platform at linerate with no performance degradation (neither PPPS nor BW).
    Given that this is doable in a platform from more than 3 years ago, I fail to see how you need "very special provision" to do this.
    
    Is it really something that horrible to provide freedom of choice to the operators deploying?
    
    In summary, it can be implemented without any burden in hardware and deployment experience prove this is beneficial to operators.
    
    Thanks,
    Pablo.
    
    -----Original Message-----
    From: spring <spring-bounces@ietf.org> on behalf of "Joel M. Halpern" <jmh@joelhalpern.com>
    Date: Wednesday, 11 December 2019 at 03:55
    To: "spring@ietf.org" <spring@ietf.org>
    Subject: [spring] Is srv6 PSP a good idea
    
        For purposes of this thread, even if you think PSP violates RFC 8200, 
        let us assume that it is legal.
        
        As I understand it, the PSP situation is:
        o the packet arrives at the place (let's not argue about whether SIDs 
        are locators) identified by the SID in the destination address field
        o that SID is the next to last SID in the SID list
        o that sid is marked as / known to be PSP
        o at the intended place in the processing pseudocode, the last (first) 
        entry in the SRH is copied into the destination IPv6 address field of 
        the packet
        -> The SRH being used is then removed from the packet.
        
        In order to evaluate whether this is a good idea, we have to have some 
        idea of the benefit.  It may be that I am missing some of the benefit, 
        and I would appreciate clarification.
        As far as I can tell, the benefit of this removal is that in exchange 
        for this node doing the work of removing the SRH, the final node in the 
        SRH does not have to process the SRH at all, as it has been removed.
        
        I have trouble seeing how that work tradeoff can be beneficial. 
        Removing bytes from the middle of a packet is a complex operation. 
        Doing so in Silicon (we expect this to be done in the fast path of 
        significant forwarders as I understand it) requires very special 
        provision.  Even in software, removing bytes from the middle of a packet 
        requires somewhere between some and a lot of extra work.  It is 
        distinctly NOT free.
        
        In contrast, we have assumed that the work of processing SRH itself is 
        tractable, since otherwise all of SRv6 would be problematic.  So why is 
        this necessary.
        
        Yours,
        Joel
        
        PS: Note that both the MPLS case and the encapsulation case are very 
        different in that the material being removed is at the front of the IP 
        packet.  Pop or prepend are MUCH easier than middle-removal (or 
        middle-insertion).
        
        _______________________________________________
        spring mailing list
        spring@ietf.org
        https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/spring__;!!NEt6yMaO-gk!Uvd5DRUIJlsmob5a7r4JRgMMbZcE60JOPIW3K2MubKpIuKXA1r78vsFpWAHa8hW2$ 
        
    
    _______________________________________________
    spring mailing list
    spring@ietf.org
    https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/spring__;!!NEt6yMaO-gk!Uvd5DRUIJlsmob5a7r4JRgMMbZcE60JOPIW3K2MubKpIuKXA1r78vsFpWAHa8hW2$