Re: [spring] SRv6 Network Programming and Link Local Source Addresses

"Darren Dukes (ddukes)" <ddukes@cisco.com> Mon, 02 December 2019 21:43 UTC

Return-Path: <ddukes@cisco.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6397E120018 for <spring@ietfa.amsl.com>; Mon, 2 Dec 2019 13:43:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=SzoxJ/Ua; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=n5ZSLcmp
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YtrKo2zNUFxk for <spring@ietfa.amsl.com>; Mon, 2 Dec 2019 13:43:53 -0800 (PST)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEBC412008C for <spring@ietf.org>; Mon, 2 Dec 2019 13:43:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7362; q=dns/txt; s=iport; t=1575323033; x=1576532633; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Scm5tw9FJ/QLNT1EkwuM9prstQb/haw2tVPHpNRMgUw=; b=SzoxJ/UagIhh/r3cp86OfrPqIejnb+Uumz9P8eyG+UfxJkULlNyeQoct zq2X6Rtsb96h2MPwYGC2wNAR8y+xZ11QFA8e4VjMX+rt/rI1yHZiXWKBg WE/RDGwZRKZU3tVuVLqPpDeQokLOHZtmT6+9vg2ZpYOGJmarkMCqKcBR6 s=;
IronPort-PHdr: 9a23:qrLzgxVWF5Cq8IS2jskc+mo9PD/V8LGuZFwc94YnhrRSc6+q45XlOgnF6O5wiEPSANSJ8OpK3uzRta2oGXcN55qMqjgjSNRNTFdE7KdehAk8GIiAAEz/IuTtank2ENlBWURN9HCgOk8TE8H7NBXf
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AqAABIhOVd/4YNJK1mGgEBAQEBAQEBAQMBAQEBEQEBAQICAQEBAYFtAgEBAQELAYFKUAVsWCAECyoKhCGDRgOKd4I6JYlbjimCUgNUCQEBAQwBARgLCgIBAYN7RQIXgXQkNwYOAgMNAQEEAQEBAgEFBG2FNwyFUgEBAQECAQEBEBERDAEBLAsBBAcEAgEIEQEDAQEBAgImAgICHwYLFQIGCAIEDgUigwABgkYDDiABAgynfAKBOIhgdYEygn4BAQWFBg0LghcDBoEOKAGMFRqBQT+BEiYMFIIeLj6CG0kBAQKBeIJ5gl6NL4JrnWZCCoIukT6EGxQHgkGHbY91kAyJDo9HAgQCBAUCDgEBBYFoI4FYcBU7KgGCQVARFIxmg3OFFIU/dAGBJ48SAYEPAQE
X-IronPort-AV: E=Sophos;i="5.69,270,1571702400"; d="scan'208";a="385674442"
Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 02 Dec 2019 21:43:52 +0000
Received: from XCH-RCD-014.cisco.com (xch-rcd-014.cisco.com [173.37.102.24]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id xB2LhqV1025798 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 2 Dec 2019 21:43:52 GMT
Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-014.cisco.com (173.37.102.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 2 Dec 2019 15:43:51 -0600
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 2 Dec 2019 15:43:51 -0600
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 2 Dec 2019 16:43:51 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ajv00NKnQAocuWrS0xwjU9OwTbPWeRiN6eSOZm9jyK9IHD9nEJ6kEiVyF3RFRrwnwitAaqeCVnJuftCpfJabtKAitety5Kc5R/HAzJ4WQ7x7/kBpo1pO4OcXn7Zw8qrdSWg8JidUq2VuxLIxUp/1+WRiGHMn/o6PNXi1EcF9/6KNvjaqZmRDEhigiINcTAEvfbZUs1Kz4J8nd/HMaIuETR5BRwLLDjycQl5ia7Zd7AQV334phaBjWyZUsq6c2xii0SJB6whrRK8EBGzU8Vtac9eAePZelKTqF/paqT6ku09RCR//+5rwxDORMaf+tgo9h/JAwre5jiAdNmsTLrm99Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Scm5tw9FJ/QLNT1EkwuM9prstQb/haw2tVPHpNRMgUw=; b=lfW14lchrlgjm8i1ULL4C+cA6/AFD6m/6nMTeQj2MeCbO/qfQ5EXFM22Jhr9ljgy6028rvU15+kzIppFlnT4yIH6/ukTZlOYAfkM1uRiGNJ5ocxIpgWjp2bPaHW+okipjmm7SnaExwFyNn+sIfKiXeKmLz2/EelAfcRVIZsDqlTlkYx4KUiSb5oQpEVohEAOIGyAOo4DHGl7Wejco9uQqxbGMOpjmMGL0Je2CSsHmbL23UBzR9jyd0a65cdk/GWRUVfkfsq6TXhLO/WBvrIuWKFrNKI0RNqjFCbzB31e55MlcXwqrjqn93jbNIVP1uPmR89zKeWcfvq+5cG1cfv7lg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Scm5tw9FJ/QLNT1EkwuM9prstQb/haw2tVPHpNRMgUw=; b=n5ZSLcmpvsdu8KOVyPoarhMDeNa04MjU3s9+JANod39YfnXK5L2i4zq6FettPdKjLgjeBos0joTzaA1Px9jx/Q7i1mMvZdU8XufoTY6hZNNgf/KQ5gSX70wf8qTtXlCNs1h036P9UUS59ITTyhAuE9DtGu55jsfIw+IpnVfvV/w=
Received: from BN7PR11MB2594.namprd11.prod.outlook.com (52.135.246.159) by BN7PR11MB2724.namprd11.prod.outlook.com (52.135.245.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.22; Mon, 2 Dec 2019 21:43:49 +0000
Received: from BN7PR11MB2594.namprd11.prod.outlook.com ([fe80::c72:fa12:757e:cca3]) by BN7PR11MB2594.namprd11.prod.outlook.com ([fe80::c72:fa12:757e:cca3%5]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 21:43:49 +0000
From: "Darren Dukes (ddukes)" <ddukes@cisco.com>
To: Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>
CC: Bob Hinden <bob.hinden@gmail.com>, SPRING WG <spring@ietf.org>, Mark Smith <markzzzsmith@gmail.com>
Thread-Topic: [spring] SRv6 Network Programming and Link Local Source Addresses
Thread-Index: AdWnvRd0lqtmH80YQu+C6Oz5BkM5rgA0iXcAAAHtYYAAAH2owAAAaB+AACLhNsAAAGgsgAAAEqowAAxmgQA=
Date: Mon, 02 Dec 2019 21:43:49 +0000
Message-ID: <E0D0D186-4D16-4404-A8A8-31998475188A@cisco.com>
References: <BN7PR05MB5699A179E7206F3899564234AE410@BN7PR05MB5699.namprd05.prod.outlook.com> <F42D9CF3-DB62-4402-86B6-B48843959A84@gmail.com> <CAO42Z2zv9D7cncX2EfS=Amkbx9cbqNrRytZPdj5YP+h4DsSMGg@mail.gmail.com> <BN7PR05MB5699616A8A4F8DFD876C8352AE400@BN7PR05MB5699.namprd05.prod.outlook.com> <CBB0837B-C743-46A4-86C1-28C96A336E06@gmail.com> <BN7PR05MB5699F8930082179B3B1A28B3AE430@BN7PR05MB5699.namprd05.prod.outlook.com> <1E03C1DB-980A-4BFE-9DCD-56C26BDC8B77@gmail.com> <BN7PR05MB5699E56B4195DBD06F479FB9AE430@BN7PR05MB5699.namprd05.prod.outlook.com>
In-Reply-To: <BN7PR05MB5699E56B4195DBD06F479FB9AE430@BN7PR05MB5699.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ddukes@cisco.com;
x-originating-ip: [161.44.213.21]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 1d91fb55-bbd7-4863-1d73-08d77770b756
x-ms-traffictypediagnostic: BN7PR11MB2724:
x-microsoft-antispam-prvs: <BN7PR11MB272432C5DC78EDD36838D7FFC8430@BN7PR11MB2724.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0239D46DB6
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(376002)(366004)(39860400002)(396003)(346002)(189003)(199004)(13464003)(51444003)(2906002)(71190400001)(81166006)(478600001)(14454004)(256004)(14444005)(25786009)(305945005)(71200400001)(966005)(8936002)(54906003)(316002)(7736002)(6246003)(6436002)(3846002)(76176011)(66066001)(99286004)(66446008)(64756008)(66556008)(66476007)(66946007)(81156014)(8676002)(86362001)(6306002)(6512007)(4326008)(229853002)(446003)(6486002)(76116006)(2616005)(5660300002)(11346002)(26005)(186003)(102836004)(53546011)(6506007)(6116002)(36756003)(33656002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN7PR11MB2724; H:BN7PR11MB2594.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: UuF6O7SkS1W+To7wP/mtavvHhdtiEilJ2tazz+jxg6QZAYAQxKpw69NMQtl1ZFDFWxYPkcVH6ozqMKKuQHepO8DcxWIQFwZOdl55P6E1iHsAFeVRaoRTayq9KcEhvohiJUnNf7FjVmvxeReav4L/Z8Y3D/DxOqq43SFIUb2XKVZW+OTKMik86gOuitrI0iEccSdJIGycjzY7Kko5Qccs+cU1iNKHyHOMJUWbW9FwD3x1V/mGhmewNPG68HsWchlHj5O2+K/TmQ0+MorsWgn27+R0RMjg4Z8tzvWfRSELlCBw0424MVyfabqZpEU//VNQ/Td7pF1/fmdeV+/NxaLaufxEChF4UEYTRXKQy/nPUPcg9K2jD1RmI7PCFQ2+gvubEvLhAxKRPpd3dOAZipo4xpolPwWEA4vwhVSPXdCcgHFx5Oehu0C/3Sy49LQmNI6ikt/4iDyQQmOIUl8I9dowhJMQQCQnt+qXIjg08MV5EaA=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <D48D2445F94E5843B67C5F8882912C83@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 1d91fb55-bbd7-4863-1d73-08d77770b756
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2019 21:43:49.0192 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: YTH4aGSqDmVSrYjmXI0/T+8YqMaA21BoawPeR+9u03PrzEEs1D8EAuYFpuyydHyNP/LHFsaeMdZ1IPrOm5CrkA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR11MB2724
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.24, xch-rcd-014.cisco.com
X-Outbound-Node: alln-core-12.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/uZ_J1xK7HDlhE7DB4rTUssMF8vY>
Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2019 21:43:56 -0000

Hi Ron, Pablo and some others are on vacation last week and the rest of this week. Some responses will be delayed.

Darren

> On Dec 2, 2019, at 10:58 AM, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org> wrote:
> 
> Bob,
> 
> Before we debate presentation too much, we should let Pablo answer the original question. Will the packet be dropped or forwarded?
> 
> If the packet will be dropped, how is the reader of Section 4.2 to know this? Normally, pseudocode is taken literally, and the pseudocode in Section 4.2 suggests that the packet will be forwarded.
> 
> One way to wiggle out of this problem is to include a sentence at the beginning of Section 4 saying, "When the following pseudocode contradicts RFC 4291 or 8200, RFCs 4291 and 8200 take precedence.
> 
>                                                                                                              Ron
> 
> 
> 
> 
> Juniper Business Use Only
> 
> -----Original Message-----
> From: Bob Hinden <bob.hinden@gmail.com> 
> Sent: Monday, December 2, 2019 10:47 AM
> To: Ron Bonica <rbonica@juniper.net>
> Cc: Bob Hinden <bob.hinden@gmail.com>; Mark Smith <markzzzsmith@gmail.com>; SPRING WG <spring@ietf.org>
> Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses
> 
> Ron,
> 
>> On Dec 2, 2019, at 7:36 AM, Ron Bonica <rbonica@juniper.net> wrote:
>> 
>> Bob,
>> 
>> Take a look at Section 4.2. The pseudocode is pretty specific.
> 
> Please explain.  I don’t see that.
> 
> Thanks,
> Bob
> 
> 
>> 
>>                                           Ron
>> 
>> 
>> 
>> Juniper Business Use Only
>> 
>> -----Original Message-----
>> From: Bob Hinden <bob.hinden@gmail.com>
>> Sent: Sunday, December 1, 2019 5:56 PM
>> To: Ron Bonica <rbonica@juniper.net>
>> Cc: Bob Hinden <bob.hinden@gmail.com>; Mark Smith <markzzzsmith@gmail.com>; SPRING WG <spring@ietf.org>
>> Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses
>> 
>> Ron,
>> 
>>> On Dec 1, 2019, at 2:47 PM, Ron Bonica <rbonica@juniper.net> wrote:
>>> 
>>> Mark, Bob,
>>> 
>>> Yes, I agree that routers should not forward packets with link local source addresses.
>> 
>> or Destination addresses.
>> 
>>> 
>>> Pablo,
>>> 
>>> Maybe we should update section 4.2 of the network programming draft to reflect this?
>> 
>> I was thinking that unless network programming has text that might cause one to think it overrides the defined behavior from rfc4291 for link-local addresses, I am not sure it has to be mentioned.
>> 
>> Bob
>> 
>> 
>>> 
>>>                                                                Ron
>>> 
>>> 
>>> From: Mark Smith <markzzzsmith@gmail.com>
>>> Sent: Sunday, December 1, 2019 5:31 PM
>>> To: Bob Hinden <bob.hinden@gmail.com>
>>> Cc: Ron Bonica <rbonica@juniper.net>; SPRING WG <spring@ietf.org>
>>> Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses
>>> 
>>> 
>>> 
>>> On Mon, 2 Dec 2019, 08:35 Bob Hinden, <bob.hinden@gmail.com> wrote:
>>> Ron,
>>> 
>>>> On Nov 30, 2019, at 12:36 PM, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org> wrote:
>>>> 
>>>> Pablo,
>>>> 
>>>> 
>>>> 
>>>> Consider the packet (SA,DA) (S3, S2, S1; SL) where:
>>>> 
>>>> 
>>>> 
>>>>     • SA is link-local (fe80)
>>>>     • DA, S3, S2, and S1 are all END.X
>>>> 
>>>> 
>>>> Section 4.2 suggests that this packet will be delivered over multiple hops to its destination, regardless of its link-local source address.
>>> 
>>> I would think that RFC2460 Section 2.5.6. "Link-Local IPv6 Unicast Addresses” covers this:
>>> 
>>>  Link-Local addresses are for use on a single link.  Link-Local
>>>  addresses have the following format:
>>> 
>>>  |   10     |
>>>  |  bits    |         54 bits         |          64 bits           |
>>>  +----------+-------------------------+----------------------------+
>>>  |1111111010|           0             |       interface ID         |
>>>  +----------+-------------------------+----------------------------+
>>> 
>>>  Link-Local addresses are designed to be used for addressing on a
>>>  single link for purposes such as automatic address configuration,
>>>  neighbor discovery, or when no routers are present.
>>> 
>>>  Routers must not forward any packets with Link-Local source or
>>>  destination addresses to other links.
>>> 
>>> I think that's RFC4291.
>>> 
>>> RFC4007, "IPv6 Scoped Address Architecture" does too, more generally and probably more formally, in particular section 9, "Forwarding".
>>> 
>>> Regards,
>>> Mark.
>>> 
>>> 
>>> 
>>> Bob
>>> 
>>> 
>>>> 
>>>> 
>>>> 
>>>> Is this the case?
>>>> 
>>>> 
>>>> 
>>>>                                                            Ron
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>> Juniper Business Use Only
>>>> _______________________________________________
>>>> spring mailing list
>>>> spring@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/spring
>>> 
>>> _______________________________________________
>>> spring mailing list
>>> spring@ietf.org
>>> https://www.ietf.org/mailman/listinfo/spring
>>> 
>>> Juniper Business Use Only
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring