Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer

Vasilenko Eduard <vasilenko.eduard@huawei.com> Wed, 29 July 2020 08:07 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAC6C3A109F; Wed, 29 Jul 2020 01:07:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pBx1j7OJcaah; Wed, 29 Jul 2020 01:07:00 -0700 (PDT)
Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59C093A109E; Wed, 29 Jul 2020 01:07:00 -0700 (PDT)
Received: from lhreml723-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id 046CC78CE9C509DCF69B; Wed, 29 Jul 2020 09:06:59 +0100 (IST)
Received: from msceml705-chm.china.huawei.com (10.219.141.144) by lhreml723-chm.china.huawei.com (10.201.108.74) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 29 Jul 2020 09:06:58 +0100
Received: from msceml703-chm.china.huawei.com (10.219.141.161) by msceml705-chm.china.huawei.com (10.219.141.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 29 Jul 2020 11:06:57 +0300
Received: from msceml703-chm.china.huawei.com ([10.219.141.161]) by msceml703-chm.china.huawei.com ([10.219.141.161]) with mapi id 15.01.1913.007; Wed, 29 Jul 2020 11:06:57 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: Fernando Gont <fgont@si6networks.com>, Brian E Carpenter <brian.e.carpenter@gmail.com>, Tom Herbert <tom@herbertland.com>
CC: IPv6 Operations <v6ops@ietf.org>, "draft-gont-v6ops-ipv6-ehs-packet-drops@ietf.org" <draft-gont-v6ops-ipv6-ehs-packet-drops@ietf.org>
Thread-Topic: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer
Thread-Index: AQHWZCBNgvrnr0hITbeSprlQeXLX06kbuR9A///jMoCAAQipcIAAiCYAgAAMnYCAADSSAIAACsQAgAAgWYCAACZ3gIAAD62AgABkoDA=
Date: Wed, 29 Jul 2020 08:06:57 +0000
Message-ID: <28b5e1bf20ee43a9b583cf96a32798dc@huawei.com>
References: <b380408712364589a45ab9f39ab6f764@huawei.com> <CALx6S35rkA5nVPm6C6MToUdHKFmcAabGfMN9prTiUfWr+GKwCA@mail.gmail.com> <6439ceb9d73b435d950e73a7a2d68fc7@huawei.com> <CALx6S37ih8VabN2PHvQ3ELDvV2DoiUqnd28LRxr4ofj6zUq3Jw@mail.gmail.com> <947a50398cbb4bbcad85462a69d7dd45@huawei.com> <CALx6S35FX-SNoNFhd2JXFio9B0vGVyXGkeob=7x+dn6u4qOaVw@mail.gmail.com> <42B3046E-6157-4460-A10B-F13E299340B6@apnic.net> <4720fdaa-71b6-4816-e800-938c01a30abb@gmail.com> <CALx6S342x_u4pLD5DpYKh=_u1e0dLujgrmoxfKpeuE5SbZerEA@mail.gmail.com> <d6cc0f77-151f-060f-54f0-2987597ff11f@si6networks.com> <32d99263-7176-3188-b9d2-72a67c6ed3d6@gmail.com> <d2beec78-4d21-1583-db30-0753dcceebe1@si6networks.com>
In-Reply-To: <d2beec78-4d21-1583-db30-0753dcceebe1@si6networks.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.199.195]
Content-Type: text/plain; charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Sef1SkqroTdAMvtUmMrbSQOO_es>
Subject: Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2020 08:07:03 -0000

Thanks to Brian.
After Brian has extracted " Forwarding nodes such as routers and load distributors MUST NOT depend only on Flow Label values being uniformly distributed." from RFC 8504 (Node Requirement).
I believe that original dispute about "should LB relay only on Flow Label" is finished. LB should look deeper into headers.
If somebody is going to dispute this - the only way is to push 8504bis where Flow label "MAY be used as the only value" or "MUST be used".

I was very happy about Fernando's explanation for business logic - I was long time in the business too - it is exactly like his said.
Do not ignore the economy, because economy is very capable to ignore you.

Ed/
-----Original Message-----
From: v6ops [mailto:v6ops-bounces@ietf.org] On Behalf Of Fernando Gont
Sent: 29 июля 2020 г. 8:00
To: Brian E Carpenter <brian.e.carpenter@gmail.com>; Tom Herbert <tom@herbertland.com>
Cc: IPv6 Operations <v6ops@ietf.org>; draft-gont-v6ops-ipv6-ehs-packet-drops@ietf.org
Subject: Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer

Hi, Brian,

On 29/7/20 01:03, Brian E Carpenter wrote:
[....]
>> It seems evident that the IPv6 packet structure makes a 
>> cost-effective implementation rather difficult. Since engineering 
>> does not only have to do with science, but also with economics, it follows that:
>>
>> * Folks (group #1) will not be willing to pay for features that their 
>> clients do not explicitly require.
>>
>> * Vendors (group #2) will not spend cycles on something which will 
>> not get them money in return.
>>
>> * Other set of folks (group #3) will not actively try to leverage 
>> features with a high failure rate, since they would also need to 
>> implement workarounds -- and if the workarounds already solve the 
>> problem, with a much higher success rate, there's not much of a point 
>> in spending time (and ultimately $$) in the feature that usually fails.
>>
>> * Users (group #4) use whatever solves their problem.
>>
>>
>> We may be unhappy with the above fact. But unless we're willing to 
>> pay the bill :-), I'm not sure to what extent embarking into a 
>> Crusade would solve the "problem".
> 
> Not what I meant, really. 

FWIW, I do agree with you. My comment was a response to Tom where he was objecting to folks that, for one reason or another, happen to drop packets. (in this particular case the advice given by JOel in his
presentation)

And what I meant is that rather that being mad about them, one should try to find the reasons for which they are resorting to that (which is what this document is meant to), and then figure out and do what we can from a protocol engineering perspective.



> All we can do here is write documents. So if the consensus is still 
> what the standards track documents say, including Node Requirements, 
> we have actually done our duty.

That's in part correct. However, for cases where standards track documents implementation become unfeasible or cost-ineffective, one may need to consider being more flexible and reconsider the spec.

A good example was the IPsec requirement in an early revision of Node
Reqs: it was words on paper that would never be complied with - so the spec was changed to reflect that.

I'm not necessarily saying that this is the case here, but rather that that's an option that should be on the table.



> And we have, in RFC8504:
> "All nodes SHOULD support the setting and use of the IPv6 Flow Label
> field as defined in the IPv6 Flow Label specification [RFC6437].
> Forwarding nodes such as routers and load distributors MUST NOT
> depend only on Flow Label values being uniformly distributed.

I retrospective, if it cannot depend on the FL (which I agree), is there 
much of a point in using it?

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492




_______________________________________________
v6ops mailing list
v6ops@ietf.org
https://www.ietf.org/mailman/listinfo/v6ops