Re: [spring] Draft for Node protection of intermediate nodes in SR Paths

Robert Raszuk <robert@raszuk.net> Sat, 23 November 2019 10:37 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD225120882 for <spring@ietfa.amsl.com>; Sat, 23 Nov 2019 02:37:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.4
X-Spam-Level:
X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, PDS_BTC_ID=0.499, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=raszuk.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fjOhgnDNRmv2 for <spring@ietfa.amsl.com>; Sat, 23 Nov 2019 02:37:43 -0800 (PST)
Received: from mail-qt1-x834.google.com (mail-qt1-x834.google.com [IPv6:2607:f8b0:4864:20::834]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8018E12011E for <spring@ietf.org>; Sat, 23 Nov 2019 02:37:42 -0800 (PST)
Received: by mail-qt1-x834.google.com with SMTP id y39so11070909qty.0 for <spring@ietf.org>; Sat, 23 Nov 2019 02:37:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=raszuk.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=EgDivIgqG5Ehdm1dX+VVzZdMA4UF8AUdfjPUFKxzUOk=; b=UmhWtW88rer9ceNEpfLz7y4HJe+/V3TnA/u9sklPtZjWMWN3z4e8Sszd/zNj3q5fU1 O5fJ8ePsAZKvTEmz3m717hweFww3UUdVRAfA/NbAK5R0tbrleIzvkKoIBQvyx9pf2dg0 gXENAly+gYFiJVQJLIxWBD1yk8UybbjXNgWV3+TZGUyIBI28uKYUr/bMRH0Denqs/1RM vpI9EODGqIQVo5/e6mTWV8i9Rq/VEfZP6diwGpHr73m0Z/C+8D6rYurS1BNEnC9Qzu+n iSGejyTQhIRuCjz58btj+6DF5mHYFf5Ryzyirwolmv57rCT6+n/VisF0QZIOm6tEFsCH zMVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=EgDivIgqG5Ehdm1dX+VVzZdMA4UF8AUdfjPUFKxzUOk=; b=kihkfptNpYOW8uh9lCg8Lxp/pgFcZz//SGN/uJqbojpIruPRuYmk+NRqEwphYrxaGE eS5n7x7UJfQFqEoXMX/UhfoSn0FhW9pd2tOJsMqn6pLAjrwC6vwN8CzkSQMmm6IgCMko NnwER1nI0pj9SHqsb1mR3SauQBG7AR0qk19zoSdQ8ZQb2LOvii9mgrhtJbqU/efHGi/o UyQTPrTEiu8PfyNbVdRAuxDCobHKFTE0Tod8hUcgUbVFiIeZaW3gEaVGl7aVsGG0qbHo IOY041KXvPEek0LIXfkfIJ2Y/7oplBgmb+2EiRJa/JrrofN7cbxQPQo2h91PJ5zNZ4BF LK4A==
X-Gm-Message-State: APjAAAXFANTiM6Ecu6GL4ZR13tsuT3KZY6K80qQCrfrkzkv/rG05AsJL njbsA3V9dat2S3KFU7fV1b/e7GQoQfzGTAMY+HCvYQ==
X-Google-Smtp-Source: APXvYqwjVXZtKNmhcHtSqMuwmy6mNpOJ8aX2OjaAyoL7zWmSGQ5KD4UD2m0U9Trt8SfTX6t4u4krogjMHOOXWs+qApA=
X-Received: by 2002:aed:36a1:: with SMTP id f30mr4911144qtb.154.1574505461278; Sat, 23 Nov 2019 02:37:41 -0800 (PST)
MIME-Version: 1.0
References: <BYAPR05MB394365C9E4719913BEC0809CD5490@BYAPR05MB3943.namprd05.prod.outlook.com> <CAOj+MMFOueodpR-06AN47aND6_9WJAwPaXMTaP-0nzd0HCVzKA@mail.gmail.com> <AM0PR03MB382893DAFDE830D24EE7FAD49D480@AM0PR03MB3828.eurprd03.prod.outlook.com>
In-Reply-To: <AM0PR03MB382893DAFDE830D24EE7FAD49D480@AM0PR03MB3828.eurprd03.prod.outlook.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Sat, 23 Nov 2019 11:37:33 +0100
Message-ID: <CAOj+MMFzrMBTbQbRXrnN0HTNm=uH+HF_LGggVZ3WUtAzGQSNgQ@mail.gmail.com>
To: Alexander Vainshtein <Alexander.Vainshtein@ecitele.com>, Shraddha Hegde <shraddha=40juniper.net@dmarc.ietf.org>
Cc: "spring@ietf.org" <spring@ietf.org>, "rtgwg@ietf.org" <rtgwg@ietf.org>, rtg-bfd@ietf.org
Content-Type: multipart/alternative; boundary="000000000000b795db0598011ece"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/lJRdLfICzZdkLnt63PC7R5JchXc>
Subject: Re: [spring] Draft for Node protection of intermediate nodes in SR Paths
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Nov 2019 10:37:45 -0000

Hi Sasha,

On the surface your suggestion may look cool - but if you zoom in - I do
not think it will work in practice.

See - one of the biggest value of BFD is its offload to line card's
hardware. And in most cases it is ingress line card to the box. So if you
instruct such hardware to respond to SID address loopback you still did not
gain much in terms of detection router's fabric failures, remote LC failure
or control plane issues which could soon result in box failure. The
catalogue of router failures is of course much more colorful.

If you ask BFD to be responded by RP/RE it no longer has the BFD advantage.

IMHO the best way to detect node failure is actually to send the probes
*across* the node under test to its peers.

The way I would think of establishing such m-hop sessions would be fully
automated with one knob per IGP adj. ex: "bfd detect-node-failure [max N]"
where local BFD subsystem would create N sessions to IGP peers of the node
we are to protect. LSDB has those peers so no new protocol extension is
needed, perhaps even no new IETF draft is required :). N would be the limit
of such sessions in case the node under protection has say 10s of peers.
Default could be perhaps even 1.

Thx,
Robert.


On Sat, Nov 23, 2019 at 10:00 AM Alexander Vainshtein <
Alexander.Vainshtein@ecitele.com> wrote:

> Shraddha, Robert and all,
> Regarding Robert's question:
> I wonder if multi-hop IP BFD session with addresses used as /32 (or /128)
> prefixes serving as Nose SIDs of R8 and R7 respectively could be used as
> such a trigger by R7? Such a session would not respond to link failures,
> and I find it problematic to imagine a scenario when it would be kept UP in
> the case of a real node failure.
>
> Of course such a session would have to be slow enough not to react to link
> failures. But it still couks be much faster than IGP conversion IMHO.
>
> My 2c,
> Sasha
>
> Such
>
>
> Get Outlook for Android <https://aka.ms/ghei36>
>
> ------------------------------
> *From:* spring <spring-bounces@ietf.org> on behalf of Robert Raszuk <
> robert@raszuk.net>
> *Sent:* Friday, November 22, 2019, 11:22
> *To:* Shraddha Hegde
> *Cc:* spring@ietf.org; rtgwg@ietf.org
> *Subject:* Re: [spring] Draft for Node protection of intermediate nodes
> in SR Paths
>
> Hi Shraddha,
>
> I have one question to the document.
>
> As you know the critical element for the effective protection of any
> scheme is the failure detection. On that your draft seems to have just one
> little paragraph:
>
>    Note that R7 activates the node-protecting backup path when it
>    detects that the link to R8 has failed.  R7 does not know that node
>    R8 has actually failed.  However, the node-protecting backup path is
>    computed assuming that the failure of the link to R8 implies that R8
>    has failed.
>
>
> Well IMO this is not enough. Specifically there can be a lot of types of
> node failure when link is still up. Moreover there can be even running BFD
> across the link just fine when say fabric failure occurs at R8.
>
> While this is not solely issue with this draft, it is our common IETF
> failure to provide correct means of detecting end to end path or fragments
> of path failures (I am specifically not calling them segment here :).
>
> For example I propose that to effectively detect R8 failure as node
> failure which is the topic of your proposal a mechanism is clearly defined
> and includes bi-dir data plane probes send between R7-R9, R3-R7, R4-R7,
> R4-R9, R3-R9
>
> Many thx,
> Robert.
>
>
> On Fri, Nov 22, 2019 at 4:38 AM Shraddha Hegde <shraddha=
> 40juniper.net@dmarc.ietf..org <40juniper.net@dmarc.ietf.org>> wrote:
>
>> WG,
>>
>> This is the draft I pointed out that talks about solutions for providing
>> node-protection.
>> It covers Anycast case as well as keeping forwarding plane longer.
>>
>> *https://tools.ietf.org/html/draft-hegde-spring-node-protection-for-sr-te-paths-05*
>> <https://clicktime.symantec.com/375SW6TBGPi2mN7V9YeVWGg6H2?u=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-hegde-spring-node-protection-for-sr-te-paths-05>
>>
>> Review and comments solicited.
>>
>> Rgds
>> Shraddha
>>
>> _______________________________________________
>> rtgwg mailing list
>> rtgwg@ietf.org
>> https://www.ietf.org/mailman/listinfo/rtgwg
>> <https://clicktime.symantec.com/35M9j5zHTaSYRwVh5RP6xcB6H2?u=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Frtgwg>
>
>