Re: [v6ops] Question on multi-homed nodes and address/route selection

Simon Hobson <linux@thehobsons.co.uk> Fri, 03 March 2017 16:53 UTC

Return-Path: <linux@thehobsons.co.uk>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F02E1298C6 for <v6ops@ietfa.amsl.com>; Fri, 3 Mar 2017 08:53:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dzcP5DJcWfuC for <v6ops@ietfa.amsl.com>; Fri, 3 Mar 2017 08:53:24 -0800 (PST)
Received: from patsy.thehobsons.co.uk (patsy.thehobsons.co.uk [IPv6:2001:470:1f09:baa::21]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08F6E1294BC for <v6ops@ietf.org>; Fri, 3 Mar 2017 08:53:23 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at patsy.thehobsons.co.uk
Received: from [192.168.1.55] (lan.furness.net [84.9.59.220]) by patsy.thehobsons.co.uk (Postfix) with ESMTPSA id 04F081BC37 for <v6ops@ietf.org>; Fri, 3 Mar 2017 16:53:17 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Simon Hobson <linux@thehobsons.co.uk>
In-Reply-To: <38FD32ED-C942-40AA-8FC7-365A244AB7C9@gmail.com>
Date: Fri, 03 Mar 2017 16:53:15 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <C5B204AE-CD12-42A9-9EBE-48CB49019B70@thehobsons.co.uk>
References: <E969A0C5-46E5-4B58-BDEB-AE686D76210F@thehobsons.co.uk> <013B7A75-E5F6-4F47-9D92-33114F1781F8@cisco.com> <B1BBBF51-2B5D-4E65-BB23-1D1A52C1A183@thehobsons.co.uk> <CC646EAB-3175-4A6E-A6EC-0623198C2C9F@employees.org> <38FD32ED-C942-40AA-8FC7-365A244AB7C9@gmail.com>
To: IPv6 Operations <v6ops@ietf.org>
X-Mailer: Apple Mail (2.1510)
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/JgbRvO2h5C7FErmC6CahS0_gfTo>
Subject: Re: [v6ops] Question on multi-homed nodes and address/route selection
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Mar 2017 16:53:26 -0000

Fred Baker <fredbaker.ietf@gmail.com> wrote:

> Simon, take a look in rtgwg. There is some work happening for source/destination routing in OSPF, IS-IS, BGP, and I believe Babel, and a problem statement being considered for adoption in rtgwg as we speak. The BGP prototype is operational in CERNET2, I'm told.
> 
> https://datatracker.ietf.org/doc/draft-baker-ipv6-isis-dst-src-routing
> https://datatracker.ietf.org/doc/draft-bowbakova-rtgwg-enterprise-pa-multihoming
> https://datatracker.ietf.org/doc/draft-ietf-ospf-ospfv3-lsa-extend
> https://datatracker.ietf.org/doc/draft-ietf-rtgwg-dst-src-routing
> https://datatracker.ietf.org/doc/draft-ietf-rtgwg-multihomed-prefix-lfa
> https://datatracker.ietf.org/doc/draft-xu-ospf-multi-homing-ipv6
> https://datatracker.ietf.org/doc/draft-xu-src-dst-bgp

I think you've missed the issue I'm looking to address - on a quick peruse, it looks like only the second of those links addresses source address selection by the host/service. While these various routing protocol extensions may well be important in the larger networks, I believe the vast majority of small to medium business have no need of those - the big problem is not how to route the packets for a given source address(prefix), but how to select the source address(prefix) in the first place.

Taking my own situation at work. I have a single router - it's actually a Debian 7 (Wheezy) virtual machine and already doing source based routing for IPv4 traffic across two egress routes. Extending that to IPv6 is relatively easy - "simply" a matter of configuring the routing rules in much the same way as is currently done for IPv4.
This is echoed at some of our customer sites where they have a "small business" grade router (typically Draytek) supporting multiple WAN interfaces. The Draytek routers have policy based routing - "traffic matching this set of criteria should be routed via that WAN interface".

Where there are multiple routers (eg separate routers provided by each ISP), then my *assumption* would be that the IPv6 stack would forward packets to the router which advertised the prefix containing the IP address the host/service has chosen to use for the outbound connection. In general we would frown upon this setup since it doesn't work well in the IPv4 world - in the general case it means manual configuration on nodes to select the egress router and is inflexible.