Re: [spring] IPv6 EH-insertion (Re: Spirit and Letter of the Law (was: Question about SRv6 Insert function))

Fernando Gont <fgont@si6networks.com> Mon, 09 September 2019 23:49 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33EFA120180; Mon, 9 Sep 2019 16:49:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.307
X-Spam-Level:
X-Spam-Status: No, score=-0.307 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_03_06=1.592, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1M2ACS3HFaBI; Mon, 9 Sep 2019 16:49:33 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1962412010E; Mon, 9 Sep 2019 16:49:33 -0700 (PDT)
Received: from [192.168.0.107] (unknown [62.74.25.59]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 046E8863E0; Tue, 10 Sep 2019 01:49:29 +0200 (CEST)
To: Michael Richardson <mcr+ietf@sandelman.ca>, spring <spring@ietf.org>, 6man <6man@ietf.org>, draft-ietf-spring-srv6-network-programming@ietf.org
References: <BYAPR05MB54637FEAE1518F83977D274FAEB80@BYAPR05MB5463.namprd05.prod.outlook.com> <0d3df64e-d596-1cac-eb3d-e08a6e1151ea@si6networks.com> <HK0PR03MB3970EB9B1326CDD4609A6CB4FCBB0@HK0PR03MB3970.apcprd03.prod.outlook.com> <BL0PR05MB54580DA411A332701090B5A6AEBB0@BL0PR05MB5458.namprd05.prod.outlook.com> <66f1195d-3e71-71d8-9304-1b5e76211c5b@si6networks.com> <17262_1567694774_5D711FB6_17262_144_1_53C29892C857584299CBF5D05346208A48BFA9FB@OPEXCAUBM43.corporate.adroot.infra.ftgroup> <C7C2E1C43D652C4E9E49FE7517C236CB026B769F@dggeml529-mbx.china.huawei.com> <357ceb44-5ef4-a5e6-4cb0-087792c9daf5@si6networks.com> <28835.1567943715@dooku.sandelman.ca>
From: Fernando Gont <fgont@si6networks.com>
Openpgp: preference=signencrypt
Message-ID: <b7927b4d-382f-4e21-c42b-4219dea94d3c@si6networks.com>
Date: Mon, 09 Sep 2019 21:31:46 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <28835.1567943715@dooku.sandelman.ca>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/gu5uw9eliqxejjn51jwgEeTG-Hc>
Subject: Re: [spring] IPv6 EH-insertion (Re: Spirit and Letter of the Law (was: Question about SRv6 Insert function))
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Sep 2019 23:49:35 -0000

On 8/9/19 14:55, Michael Richardson wrote:
> 
> Fernando Gont <fgont@si6networks.com> wrote:
>     >> 
>     >> Why do these kind of arguments emerge right now instead of 5 years
>     >> ago?  We left the “problem “ for 5 years? And suddenly we notice them?
>     >> How interesting.
> 
>     > One possibility: All this kind of arguments did emerge a long time ago
>     > -- NAmely, when working on rfc2460bis, which eventually became
>     > RFC8200. As a results of the problems associated with EH-insertion,
>     > there was IETF consensus to explicitly ban it in RFC8200. Maybe some
>     > 6man'ers were not subscribed to the spring wg list, were quite
>     > surprised to see documents relying on EH-insertion (one ins spring, and
>     > another, indirectly, in lsr), and hence decided to comment.
> 
> I would suggest that the result was slightly different.
> 
> We decided in RFC8200 that EH-insertion by random devices for randomly
> defined purposes was banned.
> 
> That if a device/operator needed to do that, that they ought to use IPIP
> insertion. We failed to actually follow through with RFC8504 to make
> it possible to actually use IPIP in a general case.
> 
> What I think that we wound up in RFC8200, and I think that it was
> intentionally very subtly under-stated by the AD at the time, was that any
> IETF Specification could in effect make any rule it wanted, and it
> would be subject to IETF Last Call and IESG review.

Yeah, that's IETF process, right? You can make any rule that you want
(assuming you do it within a wg with the proper scope), and you get wg
review and ietf-wide review. No new here. And I don't know why the rules
should be any different for eh-insertion.




> So what we banned was EH-insertion by vendors or operators without
> significant (standards-level) thought as to applicability.

Huh?

EH insertion is banned. If you want to violate that, you have to publish
a spec that updates RFC8200. Either to remove the corresponding text in
RFC8200, or at least to include an "UPdates: RFC8200" tag, such that
folks that read RFC8200 know what are the excemptions to the rule.


> We are now here,
> we are supposed to be discussing if this use case, along with it's
> applicability, warant a reasonable exception.

I assume by "we" you mean IETF. Because this doesn't look like a minor
modification to IPv6. Hence, that would be out of scope for 6man.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492