Re: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?

Linda Dunbar <linda.dunbar@futurewei.com> Mon, 15 July 2019 22:24 UTC

Return-Path: <linda.dunbar@futurewei.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9739A1200A4; Mon, 15 Jul 2019 15:24:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=futurewei.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8jzL3mMVL2YM; Mon, 15 Jul 2019 15:24:16 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-eopbgr780132.outbound.protection.outlook.com [40.107.78.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6785D12002E; Mon, 15 Jul 2019 15:24:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Tl0HUU41gHirk7rBnOs1dhtl2mYjJEBimgWW5ontMl+7t6NfgDdnUFf3KD9S8dg44eUAjh4BUiJzLOxZ6p7FP84J0hoJazixBxT/yTWQfSGnTGzaRvSX6z2Y5XZblMOI/HkmCsqsyOLfs43oP0F7TvNkQBrPPBJ3OHcYZQHko2M20xTNhekmlihk2vCf0csSR/TnsCyMg12/ENXmml0fdQ9EqXKsnac8zPfxUe0UabvMnyCHMRAvRtjuJPeOXzy0JwLFd0x+RJIfkgMVsolj+rStqpXiOu9xLLuyWVVoUpUmaIu4GQoPY24zamCjzeqLIgAzY8bHgC6Yp8FFAqISVA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rw9VUnnq0tFdUuLMqyIscyjJ1HD58pUfH99GdTknous=; b=Z/YinYv8rwk4aMi3Aoq/5nfOkM0aNtBWbipQ+C0onRuSd7tBEJ951EaF5vx69nOmaSe8Ml+2xu0PPlerwUX7kBSb1owRR2hyCX/lyO5x40srJVXriCHW6hfmc8/C/vwNxHD3pFCMSwLM8rzeVoyaHCWF/R+IV/EO2MDFsIDt+ZC/itDVmGTyS3e83F2tlsJSvfrYbbKybmw2QgHZM1UR/IcoBRdhm9PQhUdj7AcXaOJ9gMwtiSJp0YgahF8db/zEpkjN0+fdOMlXmTv6OqDuQP9R4ukeSfNMB/AOTCe1TPW59AJg2p5qcQF8hOu0qFz9pJ4wFGyk1aKOnbO8hpVeOQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=futurewei.com;dmarc=pass action=none header.from=futurewei.com;dkim=pass header.d=futurewei.com;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Futurewei.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rw9VUnnq0tFdUuLMqyIscyjJ1HD58pUfH99GdTknous=; b=d4gVFNHUB8zfeN8rNkd0EgmSQrSUSxtXC5Za2IA1Zh2/l6X3wcLb9DJfU3aQlszSxJ8r83PITBkKSdjV58L4+zwKQ+iOCnWaQ7YNdA7DKnveYRc0YuaV+py4eb5PyUFJLQruoLOMva/z/akVGYAMN2bcrkcGy73GVWEDil8YJsI=
Received: from MN2PR13MB3582.namprd13.prod.outlook.com (10.255.238.139) by MN2PR13MB3150.namprd13.prod.outlook.com (20.179.150.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2094.10; Mon, 15 Jul 2019 22:24:13 +0000
Received: from MN2PR13MB3582.namprd13.prod.outlook.com ([fe80::e068:8461:62d7:e0c1]) by MN2PR13MB3582.namprd13.prod.outlook.com ([fe80::e068:8461:62d7:e0c1%7]) with mapi id 15.20.2094.009; Mon, 15 Jul 2019 22:24:13 +0000
From: Linda Dunbar <linda.dunbar@futurewei.com>
To: Jeff Tantsura <jefftant.ietf@gmail.com>, spring <spring-bounces@ietf.org>, SPRING WG <spring@ietf.org>, "徐小虎(义先)" <xiaohu.xxh@alibaba-inc.com>
Thread-Topic: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?
Thread-Index: AdU12gZxiC6o7DmCSja15PZWT4zSoAAAVQwAABGhPIAAHfM+gAEu9MiQ
Date: Mon, 15 Jul 2019 22:24:13 +0000
Message-ID: <MN2PR13MB358219A35895BE96008D1DDB85CF0@MN2PR13MB3582.namprd13.prod.outlook.com>
References: <MN2PR13MB35821DA403CCE784CB3B065D85F60@MN2PR13MB3582.namprd13.prod.outlook.com> <MN2PR13MB3582CAA473AD49E7357B6CD085F60@MN2PR13MB3582.namprd13.prod.outlook.com> <c4f2a5ff-cac2-4d5f-9f9d-2dd810009384.xiaohu.xxh@alibaba-inc.com> <53f3a00b-2dc1-4762-99c3-de7f57b592d2@Spark>
In-Reply-To: <53f3a00b-2dc1-4762-99c3-de7f57b592d2@Spark>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=linda.dunbar@futurewei.com;
x-originating-ip: [12.111.81.80]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 77e102c0-628e-47e1-cdc3-08d709732abf
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:MN2PR13MB3150;
x-ms-traffictypediagnostic: MN2PR13MB3150:
x-ms-exchange-purlcount: 5
x-microsoft-antispam-prvs: <MN2PR13MB31503C9B1BF12A2EC39D380885CF0@MN2PR13MB3150.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 00997889E7
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(396003)(366004)(376002)(346002)(136003)(39850400004)(199004)(189003)(66556008)(33656002)(236005)(66446008)(6246003)(66946007)(52536014)(66476007)(64756008)(99286004)(14444005)(256004)(5660300002)(66066001)(8936002)(6506007)(53546011)(966005)(102836004)(81156014)(81166006)(68736007)(486006)(25786009)(76116006)(2906002)(478600001)(229853002)(26005)(66574012)(186003)(86362001)(7696005)(53936002)(76176011)(606006)(74316002)(7736002)(3846002)(110136005)(790700001)(6116002)(316002)(14454004)(446003)(11346002)(9686003)(476003)(54896002)(71200400001)(6306002)(71190400001)(6436002)(55016002)(8676002)(44832011); DIR:OUT; SFP:1102; SCL:1; SRVR:MN2PR13MB3150; H:MN2PR13MB3582.namprd13.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: futurewei.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: CQkGEH2K4ObFqVdE7KAh9UGeexdOVRckR9znw2RiYPZ+Sn4b9AbkVvUylIcCYfUBSrXAWfJUduO8je+7jN7a8UX9N4usm2uLuFC25L7PPCTP9f6JtTEb7MjiYqARrweY1to6bGTygKARXHpDFgN2qeulIL84mDD82NszQJKE8kTLKZdgq96AK5KYXOy3Q7dri4nsoeKAYVQtuNfUtKiUDSg8QwrDGoKNGytwd7vQYfYL6IKDQBwda1Gn+S2i2WdaWIFXhmcD1osUymfOvA1NKAut6YFExo6Ri7dVU2UEF0h9xIA0Qcx0ljZ6hSCi6++ISLi0H3CnBWhCPNL3xXeVYCLgxIujkoCkAV5IPHtfi3mvRXqSZfyb4gadeIgeSuJGRCFOgvlB46Yk1E3JJpqEcZMPHQSHHGiG5GPfoN9moAQ=
Content-Type: multipart/alternative; boundary="_000_MN2PR13MB358219A35895BE96008D1DDB85CF0MN2PR13MB3582namp_"
MIME-Version: 1.0
X-OriginatorOrg: Futurewei.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 77e102c0-628e-47e1-cdc3-08d709732abf
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2019 22:24:13.6958 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0fee8ff2-a3b2-4018-9c75-3a1d5591fedc
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ldunbar@futurewei.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3150
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/KNHJxeKyFXWCvMTXFa3DeNxpxhA>
Subject: Re: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2019 22:24:20 -0000

Jeff,

The draft-ietf-mpls-sr-over-ip only has MPLS packets being tunneled by IP, but not reversed (IP packets tunneled over MPLS).

Do you think it worthwhile to add some similar sections (of course with different content), such as Forwarding entry Construction, forwarding procedures as in draft-ietf-mpls-sr-over-ip?

Linda

From: Jeff Tantsura <jefftant.ietf@gmail.com>
Sent: Tuesday, July 09, 2019 4:03 PM
To: spring <spring-bounces@ietf.org>; Linda Dunbar <linda.dunbar@futurewei.com>; SPRING WG <spring@ietf.org>; 徐小虎(义先) <xiaohu.xxh@alibaba-inc.com>
Subject: Re: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?

+1

take a look at draft-ietf-mpls-sr-over-ip

Cheers,
Jeff
On Jul 8, 2019, 11:45 PM -0700, 徐小虎(义先) <xiaohu.xxh@alibaba-inc.com<mailto:xiaohu.xxh@alibaba-inc.com>>, wrote:

Hi Linda,

Why not directly use the MPLSoUDP encapsulation to carry the B-SID label so as to indicate the preferred path? For more details, please read https://tools.ietf.org/html/draft-dukes-spring-sr-for-sdwan-02#section-7.3<https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-dukes-spring-sr-for-sdwan-02%23section-7.3&data=02%7C01%7Clinda.dunbar%40futurewei.com%7Cf52fb4f3cd9849504fca08d704b0d42f%7C0fee8ff2a3b240189c753a1d5591fedc%7C1%7C1%7C636983029839380080&sdata=rORtMbo%2FgwAi1PypRoiiRcKkw%2ByLqhvgLKKqnetp5jA%3D&reserved=0>

Best regards,
Xiaohu

------------------------------------------------------------------
From:Linda Dunbar <linda.dunbar@futurewei.com<mailto:linda.dunbar@futurewei.com>>
Send Time:2019年7月9日(星期二) 06:26
To:Linda Dunbar <linda.dunbar@futurewei.com<mailto:linda.dunbar@futurewei.com>>; SPRING WG <spring@ietf.org<mailto:spring@ietf.org>>
Subject:Re: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?

Sorry, I meant to ask:

When the SDWAN edge nodes are NOT directly connected to the PEs of SR domain, is it appropriate for SDWAN edge nodes to use GRE/VxLAN header bits to indicate the desired SR Path?

Linda

From: spring <spring-bounces@ietf.org<mailto:spring-bounces@ietf.org>> On Behalf Of Linda Dunbar
Sent: Monday, July 08, 2019 5:11 PM
To: SPRING WG <spring@ietf.org<mailto:spring@ietf.org>>
Subject: [spring] Seeking comments for draft-dunbar-sr-sdwan-over-hybrid-networks: is it appropriate for not-directly connect SDWAN edges to use GRE/VxLAN header bits to indicate the desired SR path?

SD-WAN, as described by ONUG (Open Network User Group), is about pooling WAN bandwidth from multiple service providers to get better WAN bandwidth management, visibility & control.
Because of the ephemeral property of the selected Cloud DCs, an enterprise or its network service provider may not have the direct links to the Cloud DCs that are optimal for hosting the enterprise’s specific workloads/Apps. Under those circumstances, SD-WAN is a very flexible choice to interconnect the enterprise on-premises data centers & branch offices to its desired Cloud DCs...
However, SD-WAN paths over public internet can have unpredictable performance, especially over long distances and cross state/country boundaries. Therefore, it is highly desirable to place as much as possible the portion of SD-WAN paths over service provider VPN (e.g. enterprise’s existing VPN) that have guaranteed SLA and to minimize the distance/segments over public internet.

https://datatracker.ietf.org/doc/draft-dunbar-sr-sdwan-over-hybrid-networks/<https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-dunbar-sr-sdwan-over-hybrid-networks%2F&data=02%7C01%7Clinda.dunbar%40futurewei.com%7Cf52fb4f3cd9849504fca08d704b0d42f%7C0fee8ff2a3b240189c753a1d5591fedc%7C1%7C1%7C636983029839390078&sdata=aiQ6DE4Cq9Y1J%2B%2FsfbHNwlRblnBYB%2BDDaqGXs1CZBIw%3D&reserved=0> describes a method to enforce a SD-WAN path’s head-end selected route traversing through a list of specific nodes of multiple network segments without requiring the nodes in each network segments to have the intelligence (or maintaining states) of selecting next hop or next segments.

When a SR domain has multiple PEs with ports facing the external networks (such as the public internet or LTE termination), SD-WAN paths can traverse the SR domain via different ingress/egress PEs resulting in different E2E performance.

Even with the same ingress/egress, some flows may need different segments across the SR Domain. It is not practical, or even possible, for PEs to determine which Apps’ flows should egress.
Segment Routing can be used to steer packets (or path) to traverse the explicit egress node, or explicit segments through the SR Domain based on the SLA requested by the SD-WAN head-end nodes.

When the SDWAN edge nodes are directly connected to the PEs of SR domain, is it appropriate for SDWAN edge nodes to use GRE/VxLAN header bits to indicate the desired SR Path?

We are looking for feedback, criticisms, or suggestion on the the proposed approach.

Thank you,
Linda
_______________________________________________
spring mailing list
spring@ietf.org<mailto:spring@ietf.org>
https://www.ietf.org/mailman/listinfo/spring