Tom, so moving SRv6 into NAT equivalent space is an interesting take,
granted (and sure better than bis'ing STD).

Thinking along those lines

a) SRv6 becomes L4 aware and goes chasing all the checksums in all L4s to
inc adjust them and gets silicon rev'ed up on every new L4 in the future.
b) somehow the checksum gets diff'ed up on the compressed header changes
into some magic bits to absorb the diff. For this spare bits are needed,
possibly quite a lot, I don't remember the precise increment csum math. But
where would we find those bits given L4 TCP only goes over src/dst and
protocol/tcp len AFAIR so we cannot put it into SRH (which may have been
palatable just as NAT was palatable out of desperation). And let's assume
we somehow have them, even then to get any performance we start to keep per
flow state in some hash for fast adjustments. Not a particularly
efficacious use of limited silicon and especially very limited power to
drive it to maximize goodput.
c) so the SRH with some more magic inside driving endpoint to change the L4
stack seems feasible (xiao draft probably) while hoping that none of the
intermediate hops do for any reason csum validation on the frame flying by
after the sids in the destination address changed.

And even then, I remember years and years of supposedly fun things like
having to re-muck  FTP and bunch other things due to reasons you surely
remember once NAT was in place; SIP/IPSEC NAT detection and so on. Endpoint
could possibly remedy that by patching the destination address into frame
from SRH of course. But yeah, let's see we start to see further fallout
here as well.

-- tony

On Thu, Aug 3, 2023 at 8:18 PM Tom Herbert <t...@herbertland.com> wrote:

> On Thu, Aug 3, 2023 at 9:30 AM Tony Przygienda <tonysi...@gmail.com>
> wrote:
> >
> > well, turns out using a destination address to piggy back some
> computation semantics and especially changing it in mid-flite is not a
> great idea. Who knew ...
>
> Tony,
>
> We already have a working example on how to change destination
> addresses in flight and deal with L4 checksums: NAT. So compressed
> SIDs in Destination address could work if typical NAT processing to
> adjust the TCP/UDP checksum is performed each time the Destination
> address is written with a different SID. This method would require no
> update to RFC8200 nor any changes to deployed IPv6 stacks.
>
> Tom
>
> >
> > as to bis'ing STD86 I was quickly thinking "it's not April yet" ...
> >
> > -- tony
> >
> >
> > On Thu, Aug 3, 2023 at 9:43 AM <xiao.m...@zte.com.cn> wrote:
> >>
> >> Hi Tal,
> >>
> >>
> >> Please note that there is an existing draft:
> >>
> >> https://datatracker.ietf.org/doc/draft-xiao-spring-srv6-checksum/
> >>
> >> which attempts to address the problem you found and another one
> described in the penultimate paragraph of the Introduction section, in a
> different way not requiring to update RFC 8200.
> >>
> >>
> >> Best Regards,
> >>
> >> Xiao Min
> >>
> >> Original
> >> From: TalMizrahi <tal.mizrahi....@gmail.com>
> >> To: spring@ietf.org <spring@ietf.org>;i...@ietf.org <i...@ietf.org>;
> >> Date: 2023年08月03日 15:03
> >> Subject: [IPv6] New draft: L4 Checksums in SRv6
> >>
> >> Hi,
> >>
> >> This new draft introduces a proposed update to [RFC8200], which is
> >> intended to address compressed segment lists in SRv6
> >> [draft-ietf-spring-srv6-srh-compression].
> >>
> >> Link to the new draft:
> >> https://datatracker.ietf.org/doc/draft-mizrahi-spring-l4-checksum-srv6/
> >>
> >> There was some discussion in the SPRING mailing list about this issue.
> >>
> >> The current thread is intended to allow a wider discussion that
> >> includes the 6MAN working group, and therefore the new draft includes
> >> a wider background.
> >>
> >> Feedback will be welcome.
> >>
> >> Cheers,
> >> Tal.
> >>
> >> --------------------------------------------------------------------
> >> IETF IPv6 working group mailing list
> >> i...@ietf.org
> >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >> --------------------------------------------------------------------
> >>
> >>
> >> --------------------------------------------------------------------
> >> IETF IPv6 working group mailing list
> >> i...@ietf.org
> >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >> --------------------------------------------------------------------
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > i...@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> > --------------------------------------------------------------------
>
_______________________________________________
spring mailing list
spring@ietf.org
https://www.ietf.org/mailman/listinfo/spring

Reply via email to