Re: [spring] draft-ietf-spring-srv6-network-programming: Relative advantages of SRv6

Robert Raszuk <robert@raszuk.net> Thu, 02 January 2020 01:00 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA8E01200DF for <spring@ietfa.amsl.com>; Wed, 1 Jan 2020 17:00:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NXm-vJ2ABsS9 for <spring@ietfa.amsl.com>; Wed, 1 Jan 2020 17:00:20 -0800 (PST)
Received: from mail-qv1-xf2b.google.com (mail-qv1-xf2b.google.com [IPv6:2607:f8b0:4864:20::f2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47D1A12009C for <spring@ietf.org>; Wed, 1 Jan 2020 17:00:20 -0800 (PST)
Received: by mail-qv1-xf2b.google.com with SMTP id o18so14521595qvf.1 for <spring@ietf.org>; Wed, 01 Jan 2020 17:00:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=l1bSUGNAPpp+ezjIxY/wwYkCFgfhSYSjT7+8eA0l7Mk=; b=ENZgSlESpl3XMZjC39pxRH5yXeQjKLUrtS/H4bhHIqY75xJ9AAm1bkhrBgnsoh1Tjm Cc9TCxvRnYbUPBOLszF0rpZ8gVi27tlsaWuVMQv+giImeFXos5WMeEVLrQg1ApEBD4kq gzZq/knZYNOd1k+QbblFn9LZqbDbyexDdrqeR3qP3PsvjzI5ZI/i6tjBq0wsuiu1op/b K47SW8rcFlZIasB5yWtftYHwOR+fEUo60PmNT0BRwyFU7eXowyE1eghW3rA9CD6q4sQg PvlAqjxA8MCqEVAEltCjVa6vzBPmA0FCug/879HYBKkCavCKkwufbJuuViWWCWGfoGPM GoAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=l1bSUGNAPpp+ezjIxY/wwYkCFgfhSYSjT7+8eA0l7Mk=; b=auJrmNDkMqtXu0NTaEEWxaZNTQe+G9yW+UjdmBPWLYXQTVLZGOyp8eTDfnUnU9bFl7 SFWnv0gOffedUX09d9L0ZTHOy3Xp9N/D/sY0r9ti3NJ5DJpL/K+gDX1bWIzMYstIJZC1 FNkDsA3vORI4PJk+c6MTGUQnXCUuBEngH+gzO+D8XXrK98bYCoTvQV1YPN+6Aa5l7cFO dqH+MymkMCQbP0t7zjYXcWnthk8MbwfaGmxMnHkvQVZF9uzJ+d4CTLFZ8jKwmzBhgyTH Rey6IQpi7uuBpi6nZpM6eKUWonmNd/tNVIhiVmJaM7kCd/B/xF6p8wpsynR4dnW/O6Iq Fn7A==
X-Gm-Message-State: APjAAAUHhEJLUpLznDBq8GFdxYMO0s7Tn5knm9n9jt0I8Io0CJVc/0r8 YnjpEYo7Sl7xvBnzB0qco5pBMFKvM201Vgo0Lu9orA==
X-Google-Smtp-Source: APXvYqzeMJN1NApM8H0N9m5KYfRFk3K8SeMeLV0gdGgEfpO+lOjJg/ZXZnuE8KtBMTtcDmeNX+iH2Ib4B5TZUcaaaoY=
X-Received: by 2002:a05:6214:1745:: with SMTP id dc5mr59517098qvb.230.1577926819268; Wed, 01 Jan 2020 17:00:19 -0800 (PST)
MIME-Version: 1.0
References: <BN7PR05MB393899B40E06055BCEE73B13AE270@BN7PR05MB3938.namprd05.prod.outlook.com> <CAOj+MMFes1Sz0rzMY61maoQhH-soc_6f_Ni7D78dDimxuDjwEQ@mail.gmail.com> <BN7PR05MB393849548B10852E021EB9D2AE270@BN7PR05MB3938.namprd05.prod.outlook.com> <CAOj+MMEikwu581tBkXjx0nXb_asfrmLYSrbVgCyduq+oXMXS=g@mail.gmail.com> <BN7PR05MB393811632AA9BAA112FDF26CAE270@BN7PR05MB3938.namprd05.prod.outlook.com> <BN7PR05MB3938963BCD78C8747521ED3FAE210@BN7PR05MB3938.namprd05.prod.outlook.com> <CAOj+MMHvY4b5o=GOAhFGCX1ZqiSGVDM3UKC0Jrj2ZweZe0ph0w@mail.gmail.com> <CAO42Z2yr1w0cjZ_GyDUszadCEzgJf6eW6Fec=ZE=87YiNTEcQw@mail.gmail.com>
In-Reply-To: <CAO42Z2yr1w0cjZ_GyDUszadCEzgJf6eW6Fec=ZE=87YiNTEcQw@mail.gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Thu, 02 Jan 2020 02:00:08 +0100
Message-ID: <CAOj+MMHqkhVo1-yAvkmQk=z+mn--wkkUXiZE-WDkb_fFhb-dTA@mail.gmail.com>
To: Mark Smith <markzzzsmith@gmail.com>
Cc: Ron Bonica <rbonica@juniper.net>, SPRING WG <spring@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000008b58c1059b1db719"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/lGZIepWlR7o6gVvBD5OBF3Ay808>
Subject: Re: [spring] draft-ietf-spring-srv6-network-programming: Relative advantages of SRv6
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Jan 2020 01:00:23 -0000

Hi Mark,

I am the last one who would recommend you more state and more intelligence
or even new mapping into the network. Networks should just be dumb and
should be just able to forward IPv4 and IPv6 with proper QoS treatment.

All "extra functionality" is about the edges and service processing nodes.
Hint: take a look at Terastream architecture.

/* Disclaimer: Yes there is overlap of SRv6 in that respect with NSH - but
allow me not to get into this battle field here. I think both will continue
for a while fwd. */

For use case - There is a lot of them which I can see very useful. And
since some of them can be commercial value naturally are not to be
discussed in public. But I will illustrate just one ... Imagine today a
network connecting to some services it offers customers. Those can be IPv4
RFC1918 or IPv6 customers. Well if you do not want to turn each IPv4
customer into separate VPN you need to NAT (some of them may be coming with
the same address space to you). NAT has its own set of issues .. so one
alternative would be to encapsulate all of them into SRv6 and add into SRH
sufficient info about customer ID, function required, etc ... such that
your service can be accomplished. I can not see how to do that with
SR-MPLS.

I think your statement about fit into IPv6 architecture is coming from a
completely different perspective. Pls keep in mind that I am using IPv6 as
an encapsulation so my edge is the actual v6 host just taking a v6 payload.
Not also that those fancy service processing mentioned above Terastream
dpes are also all (at least originally) done by x86 IPv6 service nodes. In
IPv6 terminology those are real v6 hosts.

Ron started this thread trying to prove that SRv6 services can all be done
with SR-MPLS so why do we need SRv6 in the first place. While I am sure
bashing MPLS transport would be fun let's move it to some other forum and
form.

For networks already running MPLS transport and are really happy with it
SR-MPLS can provide few real benefits - one getting rid of LDP. By all
means great move. For those who in addition to some VPN support would also
like to enable some SR-MPLS for TE .. again very simple and incremental
change. Those folks should not hesitate and go for it.

But those who like to enable more services on their networks, those who
have extra spare capacity to accommodate SRv6 encap overhead, and those who
can think outside of their vendor manual - will likely see a benefit to
consider SRv6.

Btw I do think that EH addition to IPv4 is a good thing and SRv4 should be
defined and also progressed in SPRING.

Yes I just barely scratched the surface of the questions you posted. But
again I would like to highlight that the main decision of choice of SR-MPLS
vs SRv6 or maybe even SRv4 (one day) would be mainly dependent on given
network's transport protocol and service needs.

Best regards,
Robert.



> I am afraid feature or capability parity between SRv6 and SR-MPLS is far
>> from equal. Sure if you consider just TE or VPN applications one could draw
>> such a conclusion. However where I see SRv6 evolving is actually into very
>> flexible operator defined embedded functions with dynamic arguments.
>>
>
> Can you elaborate on this further, or provide some links to descriptions
> of these use cases?
>
> This sounds a bit like an "intelligent network" vision.
>
> That doesn't fit IPv6's architecture, prohibits encryption, and makes
> scaling harder. There's a reason that the smart and complex functions are
> done in hosts at the edge, and the network does dumb forwarding, and that
> is it's much easier to scale.
>
> Does it also mean that SR-MPLS shouldn't be used, or at least its possibly
> severe SR limitations should be called out in SR-MPLS specs?
>