Re: [v6ops] [IPv6] New Version Notification for draft-fbnvv-v6ops-site-multihoming-01.txt

Vasilenko Eduard <vasilenko.eduard@huawei.com> Wed, 12 July 2023 06:52 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7539CC151AE2; Tue, 11 Jul 2023 23:52:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.895
X-Spam-Level:
X-Spam-Status: No, score=-6.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XcJ5RyVKTOrE; Tue, 11 Jul 2023 23:52:20 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAE92C151094; Tue, 11 Jul 2023 23:52:19 -0700 (PDT)
Received: from mscpeml100002.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4R17f56cjkz6J6jP; Wed, 12 Jul 2023 14:50:05 +0800 (CST)
Received: from mscpeml500001.china.huawei.com (7.188.26.142) by mscpeml100002.china.huawei.com (7.188.26.75) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.27; Wed, 12 Jul 2023 09:52:16 +0300
Received: from mscpeml500001.china.huawei.com ([7.188.26.142]) by mscpeml500001.china.huawei.com ([7.188.26.142]) with mapi id 15.01.2507.027; Wed, 12 Jul 2023 09:52:16 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: Nick Buraglio <buraglio@forwardingplane.net>, Mark Smith <markzzzsmith@gmail.com>
CC: v6ops list <v6ops@ietf.org>, 6MAN <6man@ietf.org>
Thread-Topic: [v6ops] [IPv6] New Version Notification for draft-fbnvv-v6ops-site-multihoming-01.txt
Thread-Index: AQHZsLElUwl/s/kNjUuVDC0zSwnnMK+uASiwgAPTW4CAAME1sIABMmAAgABdVECAAFrcAIAAJEQAgAERcOA=
Date: Wed, 12 Jul 2023 06:52:16 +0000
Message-ID: <0f750c74036f4f299cac67239dd961d0@huawei.com>
References: <168872027038.54873.9391913547328336551@ietfa.amsl.com> <eee131c5b7214a0eb2d9fa9aa7adbd17@huawei.com> <CAO42Z2wRfD9tjeWf6v+gNCaFZ4zKziu5NPrChKu1JyD_XWhnQw@mail.gmail.com> <6e0b444e61b84eb58c870266726b378b@huawei.com> <02dfa210-8bf6-69ed-386d-34c72690e0f6@gmail.com> <f77493c96a8c429f8abd70a834e81da5@huawei.com> <CAO42Z2zMyZtHmznvr0pXqm_NSwjfRq=v2qS=Q9+gfxwjxuUpBw@mail.gmail.com> <KvYXOH4odXuz76ULqemUzSz7r84gSz0GCb-Mi8JoBFbJEsjH2fcy0-9jbTSByNz_iRxvXxwzbsj8yZGS2ShkoakeplZxIxKJB0TelaXaePQ=@forwardingplane.net>
In-Reply-To: <KvYXOH4odXuz76ULqemUzSz7r84gSz0GCb-Mi8JoBFbJEsjH2fcy0-9jbTSByNz_iRxvXxwzbsj8yZGS2ShkoakeplZxIxKJB0TelaXaePQ=@forwardingplane.net>
Accept-Language: en-US, zh-CN
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.199.56.242]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/fcrSBq77F22SZEAuWmFFkYoeOe8>
Subject: Re: [v6ops] [IPv6] New Version Notification for draft-fbnvv-v6ops-site-multihoming-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Jul 2023 06:52:24 -0000

Hi Mark,

MPTCP design goals: it MUST be transparent (not visible) for the application.
Hence, they put in the document:
"MPTCP MUST NOT be used for applications that request to bind to a specific address or interface, since such applications are making a deliberate choice of path in use ".
Hence, it could not help a host in solving MHMP problems with PA addresses. The great majority of client applications use getaddrinfo() to get a random next hop and then (as a consequence) a random source IP address.
MPTCP had in mind the situation when the 3GPP interface is directly connected to the host. In such a situation MHMP problem is resolved automatically, even without MPTCP.

I am waiting for the information on what is used by MP QUIC implementations: getaddrinfo() or bind() to establish a connection.
In one case, it helps to resolve MHMP (not fully), in another case, it does not.
IMHO: it is highly possible that MP QUIC implementations again assume the separate 3GPP interface on the host which makes it not relevant to the MHMP PA problem.

Eduard
-----Original Message-----
From: Nick Buraglio [mailto:buraglio@forwardingplane.net] 
Sent: Tuesday, July 11, 2023 8:21 PM
To: Mark Smith <markzzzsmith@gmail.com>
Cc: Vasilenko Eduard <vasilenko.eduard@huawei.com>; v6ops list <v6ops@ietf.org>; 6MAN <6man@ietf.org>
Subject: Re: [v6ops] [IPv6] New Version Notification for draft-fbnvv-v6ops-site-multihoming-01.txt




------- Original Message -------
On Tuesday, July 11th, 2023 at 10:11 AM, Mark Smith <markzzzsmith@gmail.com> wrote:


> 
> 
> On Tue, 11 July 2023, 16:57 Vasilenko Eduard, <vasilenko.eduard@huawei.com> wrote:
> 
> > Hi Brian,
> > It is a theoretical "good wish". Practically, MPTCP RFC blocks this 
> > possibility by the statement below, MPTCP in general has the goal to be transparent for the application.
> > Hence, MPTCP is not capable in principle to solve any MHMP issues.
> 
> 
> I don't understand this conclusion or assertion at all.
> 
> The ideal is that network and host multihoming is transparent to applications.
> 
> We don't want to burden application developers with having to customise their applications to suit multihomed networks or hosts.
> 
> The advantage of MPTCP or MPQUIC is the multipathing, providing potentially both increased throughput and robustness is that those capabilities are hidden in the transport layer.
> 
> (And the fundamental problem that makes network multihoming hard is that IP addresses have been used as transport layer connection identifiers, such that a transport layer connection can't continue if the underlying IP address it is bound to stops working - the locator/identifier problem.
> 
> MPTCP and MPQUIC create their own connection identifiers, making the connections far more independent of the IP addresses used to send the packets between the endpoints.
> 
> TCP probably should have got it's own connection identifiers when it 
> was split off from IP in the 1970s.)

I really hope I am wrong about this, having another multi-homing option to try for a site would be a really fun experiment. I will re-read rfc8684 with more focus, but a brief skim looked like the MP-TCP spec relies on standard TCP setup signaling. My mind immediately goes to "how does this work for hosts with dual PA provided addressing?" and "how does this work for the underlying network?". For MPTCP to work from a site perspective, it would need the hosts to implement this uniformly to be consistently supported, I assert, and the network would also need to understand the diverse routing of two PA, a PI and a PA, or two PI addresses on a given host, so we're - I think - back to the problem of different addressing and load sharing. 


I understand this probably isn't the only use case, and as always, happy to be wrong. 
> 
> 
> 
> > 
> > I strongly suspect that QUIC real applications are not mangling with source IPv6 addresses - they use getaddrinfo() with the random next hop and source address selection.
> 
> 
> 
> You're guessing this.
> 
> 
> > Albeit, QUIC implementation of multipathing assumes that the application should be developed specially (MP QUIC by design is not transparent for the application layer).
> 
> 
> And then coming to a conclusion based on your own guess you've just made.
> 
> 
> > Hence, QUIC is capable potentially to implement the logic for choosing the source address first (by bind()).
> > 
> > Is anybody knows what the particular MP QUIC implementation is using for connection: getaddrinfo() or bind()?
> > If any use bind() then it would resolve the most important MHMP 
> > issues (not all - see section 5.2.1)
> > 
> > Eduard
> > -----Original Message-----
> > From: Brian E Carpenter [mailto:brian.e.carpenter@gmail.com]
> > Sent: Tuesday, July 11, 2023 7:12 AM
> > To: Vasilenko Eduard <vasilenko.eduard@huawei.com>; Mark Smith 
> > <markzzzsmith@gmail.com>
> > Cc: 6man@ietf.org; v6ops@ietf.org
> > Subject: Re: [IPv6] New Version Notification for 
> > draft-fbnvv-v6ops-site-multihoming-01.txt
> > 
> > 
> > 
> > Regards
> > Brian Carpenter
> > 
> > On 10-Jul-23 19:27, Vasilenko Eduard wrote:
> > > Hi Mark,
> > > Thanks a lot for this message. I would discuss it with co-authors, but IMHO: we need to mention MPTCP and QUIC Multipath. Many may have the same illusion as you.
> > >
> > > I. Let's consider the situation when we have only one interface on the host. Multiple Carriers are connected upstream (on the CPE?).
> > >
> > > About what is chosen first - the next hop or the source address:
> > > MPTCP (rfc6182) has strict in 2 places: " MPTCP MUST NOT be used for applications that request to bind to a specific address or interface, since such applications are making a deliberate choice of path in use ".
> > > QUIC Multipath (draft-ietf-quic-multipath) has nothing about binding (or not binding) to a specific source address or interface.
> > >
> > > Hence, it looks like they both would probably use getaddrinfo() that would randomly choose the next hop and then randomly again source address (as explained in section 5.2 of draft-fbnvv-v6ops-site-multihoming) which does not help in multihoming, not at all.
> > 
> > Multipath means: try all the available paths. If you have N source 
> > addresses and M destination addresses, that means N*M paths are 
> > available. The order of probing is of course a good question. I have 
> > no knowledge of QUIC but there's a little about MPTCP (and SHIM6) in 
> > this expired draft and some of its references: 
> > https://datatracker.ietf.org/doc/html/draft-naderi-ipv6-probing-01
> > 
> > Brian
> > 
> > 
> > 
> > >
> > > Do you know of any MPTCP or QUIC Multipath implementation that uses bind() initially (not getaddrinfo()) to reverse the logic (choose source address before the next hop)?
> > > Then it would be a big deal that MUST be mentioned.
> > >
> > > Anyway, section 5.2 explains the situation properly for both cases (getaddrinfo() or bind()).
> > > Just we need to mention that depending on what is chosen first for Multipathing solutions (next hop or source address) would drive the case to section 5.2.1 or 5.2.2.
> > > Bind() (section 5.2.1) would have much more help to MHMP than getaddrinfo() (section 5.2.2).
> > >
> > > II. Let's consider the situation when we have many interfaces on the host. And at least one carrier is connected directly to the host (3GPP Modem?).
> > >
> > > Indeed, in this case, it does not matter what would be chosen first: the next hop or source address, getaddrinfo() would lead to the same result as Bind().
> > > MHMP problem is resolved automatically. Does not matter whether MPTCP is used or not.
> > > IMHO: we have lost the message in the draft that the host *directly connected* (by a separate interface) to at least one carrier has no MHMP problem in principle.
> > >
> > > Eduard
> > > -----Original Message-----
> > > From: Mark Smith [mailto:markzzzsmith@gmail.com]
> > > Sent: Monday, July 10, 2023 1:24 AM
> > > To: Vasilenko Eduard <vasilenko.eduard@huawei.com>
> > > Cc: 6man@ietf.org
> > > Subject: Re: [IPv6] New Version Notification for 
> > > draft-fbnvv-v6ops-site-multihoming-01.txt
> > >
> > > Hi,
> > >
> > > There's one multihoming solution that hasn't been mentioned in the draft that has been very widely deployed for both IPv4 and IPv6.
> > >
> > > Multipath TCP, deployed on Apple's IOS 7, and used by Siri.
> > >
> > > https://perso.uclouvain.be/olivier.bonaventure/blog/html/2013/09/1
> > > 8/mp
> > > tcp.html
> > >
> > > https://blog.apnic.net/2022/08/23/analyzing-mptcp-adoption-in-the-
> > > inte
> > > rnet/
> > >
> > > QUIC is gaining multipath capabilities as well.
> > >
> > > https://multipath-quic.org/
> > >
> > > The only issue left for a multi-homed network is to steer traffic out of the correct ISP connection based on source address so that the packets don't get dropped by BCP 38 filters. Source routing, segment routing or simply IP tunnelling from the first hop router directly to the correct ISP egress edge router via addition of an IP in IP or GRE header solves that.
> > >
> > > Regards,
> > > Mark.
> > >
> > >
> > >
> > > On Fri, 7 Jul 2023 at 19:34, Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org> wrote:
> > >>
> > >> Hi IPv6 WG,
> > >>
> > >> We have heavily edited the draft between versions 00 and 01 (216 commits on github).
> > >>
> > >> Primarily, we have expressed the general WG opinion in different sections on "how bad NAT and NPT are", propagating the hate to the table of content, including mentioning that NPT is experimental.
> > >> Yet, we have not deleted solutions that exist in the real world - like we or not.
> > >>
> > >> The section on another "not good" solution is added - unfortunately, "application proxy" is very popular in Enterprise that may address the draft subject.
> > >> Again, we were trying to be very negative on it, yet balanced - it is part of the real Enterprise practice and needs to be overviewed.
> > >>
> > >> More places to mention PVD when applicable.
> > >>
> > >> Paolo Nero has discovered that Microsoft is capable to use "preference" from RA even if RFC 4191 is not claimed.
> > >>
> > >> And many other small changes addressing comments from Tim 
> > >> Winters, Eric Vincke, Toerless Eckert, Lorenzo Colitti, Sheng Jiang, Erik Nygren, Fernando Gont, Jared Mauch, and Juliusz Chroboczek.
> > >> Thanks for the feedback!
> > >>
> > >> Eduard
> > >> -----Original Message-----
> > >> From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> > >> Sent: Friday, July 7, 2023 11:58 AM
> > >> To: Vasilenko Eduard <vasilenko.eduard@huawei.com>; Vasilenko 
> > >> Eduard <vasilenko.eduard@huawei.com>; Klaus Frank 
> > >> <klaus.frank@posteo.de>; Nick Buraglio 
> > >> <buraglio@forwardingplane.net>; Paolo Nero <oselists@gmail.com>; 
> > >> Paolo Volpato <paolo.volpato@huawei.com>
> > >> Subject: New Version Notification for 
> > >> draft-fbnvv-v6ops-site-multihoming-01.txt
> > >>
> > >>
> > >> A new version of I-D, draft-fbnvv-v6ops-site-multihoming-01.txt
> > >> has been successfully submitted by Eduard Vasilenko and posted to the IETF repository.
> > >>
> > >> Name: draft-fbnvv-v6ops-site-multihoming
> > >> Revision: 01
> > >> Title: IPv6 Site connection to many Carriers Document date: 
> > >> 2023-07-07
> > >> Group: Individual Submission
> > >> Pages: 38
> > >> URL: 
> > >> https://www.ietf.org/archive/id/draft-fbnvv-v6ops-site-multihomin
> > >> g-01.txt
> > >> Status: 
> > >> https://datatracker.ietf.org/doc/draft-fbnvv-v6ops-site-multihomi
> > >> ng/
> > >> Htmlized: 
> > >> https://datatracker.ietf.org/doc/html/draft-fbnvv-v6ops-site-mult
> > >> ihoming
> > >> Diff: 
> > >> https://author-tools.ietf.org/iddiff?url2=draft-fbnvv-v6ops-site-
> > >> multihoming-01
> > >>
> > >> Abstract:
> > >> Carrier resilience is a typical business requirement. IPv4 
> > >> deployments have traditionally solved this challenge through 
> > >> private internal site addressing in combination with separate NAT 
> > >> engines attached to multiple redundant carriers. IPv6 brings 
> > >> support for true end-to-end connectivity on the Internet, and 
> > >> hence NAT is the least desirable option in such deployments. 
> > >> Native IPv6 solutions for carrier resiliency, however, have 
> > >> drawbacks. This document discusses all currently-available 
> > >> options to organize carrier resiliency for a site, their 
> > >> strengths and weaknesses, and provides a history of past IETF 
> > >> efforts approaching the issue. The views presented here are the 
> > >> summary of discussions on the v6ops mailing list and are not just the personal opinion of the authors.
> > >>
> > >>
> > >>
> > >>
> > >> The IETF Secretariat
> > >>
> > >>
> > >>
> > >> -----------------------------------------------------------------
> > >> --- IETF IPv6 working group mailing list ipv6@ietf.org 
> > >> Administrative Requests: 
> > >> https://www.ietf.org/mailman/listinfo/ipv6
> > >> -----------------------------------------------------------------
> > >> ---
> > >
> > > ------------------------------------------------------------------
> > > -- IETF IPv6 working group mailing list ipv6@ietf.org 
> > > Administrative Requests: 
> > > https://www.ietf.org/mailman/listinfo/ipv6
> > > ------------------------------------------------------------------
> > > --