Re: [spring] Chair Review of draft-ietf-spring-srv6-srh-compression-11

Joel Halpern <jmh@joelhalpern.com> Mon, 25 March 2024 17:25 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0D99C14F5F1 for <spring@ietfa.amsl.com>; Mon, 25 Mar 2024 10:25:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.804
X-Spam-Level:
X-Spam-Status: No, score=-2.804 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DuFTwC-8wgwh for <spring@ietfa.amsl.com>; Mon, 25 Mar 2024 10:25:43 -0700 (PDT)
Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AB2BC151096 for <spring@ietf.org>; Mon, 25 Mar 2024 10:25:43 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 4V3KZt6fXxz1pfTZ; Mon, 25 Mar 2024 10:25:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1711387542; bh=aCYEdeRuAplzKO5n7+V9GfQtNsQHXLTCdeBCWwn4b6I=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=mpNVDdBuLqvbhkN7dSdNrojoMO73rWTx6CyMExxc9CB6bXYjvXLh4yvr/1+mWtFvg YaKb7rv3xA4N6siv2q0l1R2g2TwTiXhQJsi1zoLNNVabVUWdyGtbiaUC+nq339T6O2 leG8H70n+hZj/Fq0cFrIPaVnRFeHb9JS0CT4R8PY=
X-Quarantine-ID: <FHGMak0WhELp>
X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net
Received: from [192.168.22.20] (unknown [50.233.136.230]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 4V3KZp29hLz1pK5f; Mon, 25 Mar 2024 10:25:38 -0700 (PDT)
Content-Type: multipart/alternative; boundary="------------6SsVGwLSaFDf0UxMeEZTsSoZ"
Message-ID: <5e644c97-c316-4618-97ec-cb8ec8c097bd@joelhalpern.com>
Date: Mon, 25 Mar 2024 13:25:36 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: Robert Raszuk <robert@raszuk.net>, Tom Herbert <tom@herbertland.com>
Cc: Andrew Alston - IETF <andrew-ietf@liquid.tech>, Ron Bonica <rbonica@juniper.net>, "spring@ietf.org" <spring@ietf.org>
References: <CAMMESsw=PihfkO3nECiBnCALfCC=vTRn6c1_OYPK-jT5=yHFZA@mail.gmail.com> <DU2PR03MB802141D381DD2C716442D01DFA362@DU2PR03MB8021.eurprd03.prod.outlook.com> <CAOj+MMGWkyLqfk-PM8rTCyEpMLQDvujO3P6O=NxGQunB5GBxdA@mail.gmail.com> <DU2PR03MB8021817EDB0676FCDFC0FF3CFA362@DU2PR03MB8021.eurprd03.prod.outlook.com> <CAOj+MMEPZ4O1sTEUm4u-v72MwcptejNWLfcBvFJA98-2qDzzfg@mail.gmail.com> <DU2PR03MB8021CFB963C174317CF604E2FA362@DU2PR03MB8021.eurprd03.prod.outlook.com> <CAOj+MMFDrRq9igN16Dy0LXR=QiopdmHJbTd0SRT=_XdVGgjt+g@mail.gmail.com> <DU2PR03MB80213CDDFC54A4A9C456D654FA362@DU2PR03MB8021.eurprd03.prod.outlook.com> <CAOj+MMGyoo3afahjqfqK50E0NQRN6C-HyZ8HMaK7ZEegRhacsg@mail.gmail.com> <DU2PR03MB8021359DEE67FF457F914384FA362@DU2PR03MB8021.eurprd03.prod.outlook.com> <CAOj+MMHhKVBg2LDqDqZRzAiLLRfCcwv_3g2Jpmud1aLsF2hL_Q@mail.gmail.com> <CALx6S35FDPDMinDYxTL9Bj8bmjzx5q-JGWMTJObCn=uyVVfrZA@mail.gmail.com> <CAOj+MMH95uErZXS7+02KQrguL6S96EzyP1qdf7sXAGtuCjMtxw@mail.gmail.com>
From: Joel Halpern <jmh@joelhalpern.com>
In-Reply-To: <CAOj+MMH95uErZXS7+02KQrguL6S96EzyP1qdf7sXAGtuCjMtxw@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/zxzWt3D-1CuJp84f3vMshIQcjoo>
Subject: Re: [spring] Chair Review of draft-ietf-spring-srv6-srh-compression-11
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2024 17:25:48 -0000

(Speaking technically as an individual, but noting that Alvaro and I are 
the responsible chairrs who will have to resolve any technical standards 
incompatibility.  And I have not talked with Alvaro.  So I may be 
putting my foot in my mouth.)

As I understand it, the current view is that the compressed SID draft 
permists the case where a single container represents the SR policy.  If 
that contianer is using uSID, and if the packet is going between two 
hosts in the SRv6 domain, then the SRH may be omitted and no 
encapsulation is needed.

In that case, the sending host needs to compute the checksum based on 
what the receiver will see.  It can do that, and there is text in the 
draft to do so.  There are however two related issues.  First, that 
direction for computing the upper layer checksum does not match what RFC 
8200 says.  If indeed that is a change to 8200, then that needs to be 
indicated somehow, and presumably approved by 6man.  related to that, 
any intermediate node looking at the packet will see an apparently 
ordinary IPv6 packet whose upper layer checksum is incorrect.

Tom Herbert, if I am understanding him correctly, is arguing that since 
the shifting of the uSID container is essentially  a DA rewrite, the 
operation is sufficiently similar to NAT that one should expect the NAT 
device to correct the checksum (which is a different repair than the 
current compression draft calls for.)

As far as I can tell, this intradomain, non-SRH, uSID case is intendedd 
to be supported by the compression solution.  (Another option for the WG 
would be to declare that out of scope, but I have not seen evidence the 
WG wants that restriction.)  If so, we need to reach agreement on what 
we expect of this case, and where it needs to be documented.

Yours,

Joel M. Halpern

PS: Ron has suggested that a HbH optioncould be used to address the 
inconsistency.  I do not yet understand the desired behavior there.

On 3/25/2024 1:03 PM, Robert Raszuk wrote:
> Hi Tom,
>
> I don't think so, but I admit I may not be aware of some interesting 
> use cases ....
>
> Many thx,
> R.
>
>
> On Mon, Mar 25, 2024 at 5:57 PM Tom Herbert <tom@herbertland.com> wrote:
>
>     On Mon, Mar 25, 2024 at 9:40 AM Robert Raszuk <robert@raszuk.net>
>     wrote:
>     >
>     >
>     > Actually looking at this from the perspective where SRH may be
>     omitted I see in the subject draft this clearly stated:
>     >
>     > A source node steers a packet into an SR Policy. If the SR
>     Policy results in a Segment List containing a single segment, and
>     there is no need to add information to the SRH flag or add TLV;
>     the DA is set to the single Segment List entry, and the SRH MAY be
>     omitted.¶
>     >
>     >
>     > That to me indicated that host computed checksum will be correct
>     all along the transit nodes. So no issue either here.
>     >
>     > Could someone illustrate with a drawing of packet's traversing
>     the network their assumed header format and forseen issues ?
>
>     Robert,
>
>     Are there any cases in segment routing where the Destination Address
>     is changed in flight and a routing header is not present in the
>     packet?
>
>     Tom
>
>     >
>     > Thx,
>     > R,
>     >
>
>
> _______________________________________________
> spring mailing list
> spring@ietf.org
> https://www.ietf.org/mailman/listinfo/spring