Re: [v6ops] draft-gont-v6ops-ipv6-ehs-in-real-world: clarification text

Mark ZZZ Smith <markzzzsmith@yahoo.com.au> Wed, 22 April 2015 06:46 UTC

Return-Path: <markzzzsmith@yahoo.com.au>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85D841B31F2 for <v6ops@ietfa.amsl.com>; Tue, 21 Apr 2015 23:46:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.502
X-Spam-Level:
X-Spam-Status: No, score=0.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, HK_RANDOM_REPLYTO=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CxauOL8Ijt3m for <v6ops@ietfa.amsl.com>; Tue, 21 Apr 2015 23:46:10 -0700 (PDT)
Received: from nm39-vm5.bullet.mail.bf1.yahoo.com (nm39-vm5.bullet.mail.bf1.yahoo.com [72.30.239.149]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D1A21B31C6 for <v6ops@ietf.org>; Tue, 21 Apr 2015 23:46:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.au; s=s2048; t=1429685169; bh=58b0SnxOuq7gxlfJ5TsEvOrLcj3qh21MENkd0MKe408=; h=Date:From:Reply-To:To:In-Reply-To:References:Subject:From:Subject; b=rmge1q8rgwlub2939TTe3NjHfFOYgFxaD9etCgzVIz0/1a+GH0IyrbOy+c3TtOlSPgp/qoOKv5Ey4lY5bWNstyup877MQT9NPC+1bG+mvMoAQqJxorUVmwmhYB+VNXp52hV+oIJZ6kT1lmjhWfFgXme5m8xNe7cRV7cXBKiswUQiksUvK7dYDWHy5UZh9Y3/RrIWsePjSn1VKmvSv7HAv9PxrsUQQe6h9WtihaBf0meIZ+6RR5JLrFBelqEFIkhoyoy5xOSpKEffcE61NYOa/VYodgjb/TdLuNtMPamQKC5xMfAcQpgFAByc5PPjksIbXxWiFrASAnp7ek/61dLujA==
Received: from [98.139.170.181] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 22 Apr 2015 06:46:09 -0000
Received: from [98.139.212.200] by tm24.bullet.mail.bf1.yahoo.com with NNFMP; 22 Apr 2015 06:46:09 -0000
Received: from [127.0.0.1] by omp1009.mail.bf1.yahoo.com with NNFMP; 22 Apr 2015 06:46:09 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 599523.29243.bm@omp1009.mail.bf1.yahoo.com
X-YMail-OSG: B.3zZF0VM1lHQXoe.dGnW7V7dZ7UQ0JV_Ersce39KGo7l6_VssO0lyXx3PRVRZv HwG5YRs3L2x5M37atR6DxbBQuUGaipw6AL5ghWwpaJUx0HZRfuIabDtur_dFlLvA_xZnrFTtI0Ri ghyK7suQ0UtEwJwdpl01v_e5bjXg4I97y.tiVuC6AmmISolwL7KYYMicO_MH5Dp9XWFgmz_8Ma0d 10E1DT.kSZEGIeaUFCqxaok79eyOCcpyRtg04sJlns0tk06QoWTrkbntk.TUxd3vBVB93STYAe3p RntEJ8BCMTOOLAMYs5H1Wt6aGNASVndTdvGq.0iT57vnaMLa8OulcznrN0cWPZCyEbJQYsw1Lgwl 3yyi1vky1Ddq2V6UTG9sQ8NydxsIziMIDjtKalPIwpmhgZYZcWhL4WR8snUHy_MOiOIpLaEIqhXR d38SfySZ8E.Mr_5C6PABH4I4OoxEEAY5ucogETNHhSDfuOkdIOBwNReAgHLnQ3C0qTnzsQ5Erz1W tmwLgxKfncf8wqedGYhDhRW8cVImQgdvE8TL4QDVDu_I6jD0C
Received: by 66.196.80.122; Wed, 22 Apr 2015 06:46:09 +0000
Date: Wed, 22 Apr 2015 06:46:08 +0000
From: Mark ZZZ Smith <markzzzsmith@yahoo.com.au>
To: joel jaeggli <joelja@bogus.com>, Nick Hilliard <nick@foobar.org>, "v6ops@ietf.org" <v6ops@ietf.org>
Message-ID: <1358113193.2147388.1429685168609.JavaMail.yahoo@mail.yahoo.com>
In-Reply-To: <55374092.9000406@bogus.com>
References: <55374092.9000406@bogus.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_2147387_539950581.1429685168603"
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/FNUuMzUqP8n-Z9tMdYEbGhgfi14>
Subject: Re: [v6ops] draft-gont-v6ops-ipv6-ehs-in-real-world: clarification text
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Mark ZZZ Smith <markzzzsmith@yahoo.com.au>
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Apr 2015 06:46:12 -0000

So I wasn't naively asking those questions, I know what the answers were likely to be.
What I'd really like is for people to actually say what they want, which I think is an Internet with packets that look like
[IPv6 Fixed Hdr][TCP Hdr], total size <= 1280[IPv6 Fixed Hdr][UDP Hdr], total size <= 1280
and that is it.
The consequence would be to deprecate many existing protocols and making them work over fragment unnecessary TCP or UDP.
I'd think OSPF is probably the most important one to start with.


      From: joel jaeggli <joelja@bogus.com>
 To: Mark ZZZ Smith <markzzzsmith@yahoo.com.au>; Nick Hilliard <nick@foobar.org>; "v6ops@ietf.org" <v6ops@ietf.org> 
 Sent: Wednesday, 22 April 2015, 16:32
 Subject: Re: [v6ops] draft-gont-v6ops-ipv6-ehs-in-real-world: clarification text
   
On 4/21/15 11:20 PM, Mark ZZZ Smith wrote:
> So I'm going to call the emperor naked.

not a transit provider so I'm sitting in the edge that said I have some
exposure to this problem space.

hence

https://datatracker.ietf.org/doc/draft-ietf-v6ops-pmtud-ecmp-problem/

> What I think you and Gert actually want is for EHs to be completely
> deprecated, so that the TCP and UDP headers are always in the same place
> in the packet, so that hardware can look at them for the purposes of
> dropping them in hardware or as inputs into LB. Is that the case?
> 
> What I'm curious about then is how do you handle DDoSes that are using
> IP fragments, where there are no TCP or UDP headers ports to look at?

https://datatracker.ietf.org/doc/draft-taylor-v6ops-fragdrop/

> I'm also curious about how you LB packets (either at layer 2 or layer 3)
> that don't have TCP or UDP headers, or aren't IP. I've seen LB become
> completely ineffective at layer 2 because a customer was using MPLS
> between two routers, so no MAC address variation, and no IP addresses
> and no TCP or UDP ports to look at.

as someone who does stateless l3+l4 loadbalancing to servers, if I can't
find the l4 header in an asic based forwarding engine even if a server
can I have problem.

> In fact, given the trouble LAG has caused me in the past 2 years (LAG
> member links that are not current members are supposed to be considered
> by the bridge as normal bridge ports, so if you want to avoid loops
> across the links that are candidate members of the LAG, the IEEE expect
> you to be running STP of some form across them...), I'm a big fan of the
> quote on the last slide of this presentation:
> 
> "IEEE 802.3ad Link Aggregation (LAG) what it is, and what it is not"
> http://www.ieee802.org/3/hssg/public/apr07/frazier_01_0407.pdf
> 
> 
> "LAG is good, but it’s not as good as a fatter pipe."
> 
> 
> ------------------------------------------------------------------------
> *From:* Nick Hilliard <nick@foobar.org>
> *To:* v6ops@ietf.org
> *Sent:* Wednesday, 22 April 2015, 2:56
> *Subject:* Re: [v6ops] draft-gont-v6ops-ipv6-ehs-in-real-world:
> clarification text
> 
> On 21/04/2015 16:51, Gert Doering wrote:
>> I'm fully at a loss to express my amazement in polite words, so I'm just
>> *out* of this discussion now.
> 
> Fully agreed on this + that this thread needs to end.  The lack of
> operational reality being displayed is pretty severe.
> 
> Nick
> 
> 
> 
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org <mailto:v6ops@ietf.org>
> https://www.ietf.org/mailman/listinfo/v6ops


> 
> 
> 
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>