Re: [spring] solicit feedback on draft-dunbar-sr-sdwan-over-hybrid-networks-02 proposing SD-WAN source node using UDP port to indicate to SR ingress node how to map to appropriate Binding SID

Robert Raszuk <robert@raszuk.net> Tue, 03 July 2018 08:07 UTC

Return-Path: <rraszuk@gmail.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F6B7130F6F for <spring@ietfa.amsl.com>; Tue, 3 Jul 2018 01:07:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.399
X-Spam-Level:
X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3alK-K-Rt0wr for <spring@ietfa.amsl.com>; Tue, 3 Jul 2018 01:07:32 -0700 (PDT)
Received: from mail-pl0-x243.google.com (mail-pl0-x243.google.com [IPv6:2607:f8b0:400e:c01::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFE83130E24 for <spring@ietf.org>; Tue, 3 Jul 2018 01:07:32 -0700 (PDT)
Received: by mail-pl0-x243.google.com with SMTP id 30-v6so638409pld.13 for <spring@ietf.org>; Tue, 03 Jul 2018 01:07:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=AWoevh36NyRlczFFyFOR078bjTC93z0EZMt1bsFiW+M=; b=LNsfY1PvvdgzRXiAgtMTUa1HLiNE5KyVsuJiKHu+oLbnXsTo9nzgB3efL28OhflB2r UQozN8Vn8bv1Gc3J5xpfd8Wuw/S1Du9lK1MJu2Mbofq+ZTSavXuAAUFc+l/jtZx7cFf5 /p74SF7JoZojzDhpHOHf4C8wDuEqK6Subl9iFqSa9WCDylaZmP1cGqTCemEv5FBdg5h8 5JbT1zWhQf5Y4hlY+6QcUAZ84pH6eEWfF3uuzgOgNQjvLjZTY8bUlQ5z9qWusVYu42U3 k7bAyhd8njlu/vO+EfzohEMP2l1IyOHPZIDtgWRgZHGlFNbTlD7iZBoVgLwKxx1jboSj dINA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=AWoevh36NyRlczFFyFOR078bjTC93z0EZMt1bsFiW+M=; b=eTy17OzjQcL03sOzS73UBlvgJCmPBYKNU3kQpmY0sQ51/mWtk5lsgQg3+U5KTEb8/2 u+NRSxojz6/2AYPChGW8I3iZl9WIz3JTrkATgirbVt4xIJw9ECnhlW7y0EEQ7KsJgPUx 86kUjvVJWnkI6De3tWPVGcCn19MvGbW8DmcLSdMIkqSgLISF6yDtcUBptf5egbIb7bz+ rmy9fXYm4ojGz8exwwOpMsPOXFiqb8uzM4CL0kH/uiMsdgiVur6as64MyhfWiRZC6crt Z9LQXz3I+hQy1vC59HZohTzO6VFLGZi1b9uflhzh1473Z/AwChq5JHybjxQlcwLSWqGM qrZw==
X-Gm-Message-State: APt69E1Nza9Zjg4Kopeyzg8DQlY3WmHbNBK71w+x93BYM/JUXjlejs65 Kj8WzxdBwhdJXh2rKjCrgyHimyLaGQUNyyLXI+Y=
X-Google-Smtp-Source: ADUXVKKNbSGwW929xa8b17OEGFbrKrVGjviyTpU8jzt2TmetIpD8XgkscesjG5Cf8vwSCoH2l+ABc1P/AiPnDq5a0jo=
X-Received: by 2002:a17:902:7896:: with SMTP id q22-v6mr28307122pll.243.1530605251987; Tue, 03 Jul 2018 01:07:31 -0700 (PDT)
MIME-Version: 1.0
Sender: rraszuk@gmail.com
Received: by 2002:a17:90a:6d62:0:0:0:0 with HTTP; Tue, 3 Jul 2018 01:07:31 -0700 (PDT)
In-Reply-To: <55961CCD-1466-46DE-8203-F0B6620A6738@gmail.com>
References: <4A95BA014132FF49AE685FAB4B9F17F66B07A77E@sjceml521-mbs.china.huawei.com> <CA+b+ERnB_6XUWmGFORxfLbvsEqMG-QrduvFJQZ2LvfdpPdq7jw@mail.gmail.com> <4A95BA014132FF49AE685FAB4B9F17F66B07A7B3@sjceml521-mbs.china.huawei.com> <0D03E661-E302-46E4-B459-A155EFA295C7@gmail.com> <CA+b+ERm62KDq5mNSkCKqQPe+y_58oVAG03ArO0-iJ+O+2_KzPw@mail.gmail.com> <CA+b+ERkmYix=bb=81FFaNE_aPxdQNRFj3WsjqGyjDaB+i9OPgQ@mail.gmail.com> <55961CCD-1466-46DE-8203-F0B6620A6738@gmail.com>
From: Robert Raszuk <robert@raszuk.net>
Date: Tue, 03 Jul 2018 10:07:31 +0200
X-Google-Sender-Auth: yMV7UL5ZBbjgy6LURnw07ra0Wrs
Message-ID: <CA+b+ERndJsU94rDX+AZfpmQpguUYr+=ZfKQ4ux63mx5nuRYsOA@mail.gmail.com>
To: Jeff Tantsura <jefftant.ietf@gmail.com>
Cc: Linda Dunbar <linda.dunbar@huawei.com>, SPRING WG List <spring@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000560d01057013ce8b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/yH0jnsh-roxuePC--XyanDr5-Vw>
Subject: Re: [spring] solicit feedback on draft-dunbar-sr-sdwan-over-hybrid-networks-02 proposing SD-WAN source node using UDP port to indicate to SR ingress node how to map to appropriate Binding SID
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2018 08:07:34 -0000

Hello Jeff,

“What exactly do you call by "resource allocation" in WAN ?” – anything
> that is not “best effort”, BW reservation, protection type, number of hops,
> latency, you name it…
>
>
>
> Somehow, between ATM and now
> *​​*
> *we managed to build a technology that would work in both, control and
> data planes* 😉
>
> TE with BW reservation is a working technology, with all the bugs, whether
> done as a soft state on a device and enforced in FW, aka RSVP-TE or
> computed on a controller and enforced by policing configuration out of
> band. We also know pretty well how to compute a constrain path that is loop
> free and with the constrains. Either way, working stuff.
>


​It has been nearly 20 years and it seems that some marketing slides from
vendors are still in minds of many many people ...

MPLS-TE does *NOT* do any data plane reservations nor any data plane
resource allocation. It is all control plane game. Let me shock you even
more today ... what we call "Guaranteed Bandwidth TE" also does *NOT*
perform any data plane reservations. This up to current days is the most
misunderstood element (or hidden secret) of one of the technologies which
has been made available during the last two decades.

If you signal MPLS TE LSP with 5M "reservation" to check if such a path in
your network can be established such check is *ONLY* done at the control
plane (RP/RE) pools of available bandwidth (per priority level) registers
and physical interfaces nor any data plane queues are never aware of it.

Now what is a direct consequence of this is if you like to really do
control plane reservations and think of it as actual data plane you must do
it in 1:1 fashion - again all done in control plane. That means that two
fundamental conditions must be met:

A) All traffic must be sent over MPLS-LSPs - be it IPv4, IPv6, multicast
etc ... - even if I have seen 3 networks trying to do that for IPv4 no one
did it for all traffic types.

B) All traffic entering your network must be subject to very strict
admission control and excess shaped or dropped which is very hard thing to
do considering statistical multiplexing gains you count on in any IP
network (Explanation: On any single ingress node you must apply strict CAC
as you are not aware about what traffic is coming from other ingress nodes.
So you may be dropping or shaping traffic which could flow through your
network just fine end to end due to absence of competing class from
different ingress).
​
​All RSVP-TE does is traffic steering in normal steady state or during
protection. That's all. In the WAN's data plane it is all back to basic
Diff Serve at each router's data plane.

The only technology which does provide interface data plane reservation is
RSVP IntServ - but I doubt anyone here or Linda in her draft meant to use
such tool.

Why am I jumping on this here in SPRING WG list ... Well few months ago I
have witnessed a discussion where someone was arguing that SR is much worse
then MPLS-TE as it does not provide any data plane reservations. When I
tried to nicely and politely explain how confused the person is the look I
got was comparable to those green folks walking down from just arrived UFO.

So to conclude SR just like MPLS-TE does a good job in packet steering via
your domain. (SR can do actually more via embedded functions/apps). But the
fundamental difference is that SR does that steering without necessity of
number of control plane protocols and their required extensions - so does
simplify control plane significantly. Neither of those do any data plane
reservations and all bandwidth contentions need to be resolved via classic
QoS.

Cheers,
R.