Hi Ole,

> -----Original Message-----
> From: Ole Troan [mailto:[email protected]]
> Sent: Wednesday, September 04, 2019 7:37 AM
> To: Templin (US), Fred L <[email protected]>
> Cc: Bob Hinden <[email protected]>; Tom Herbert <[email protected]>; 
> Joel Halpern <[email protected]>; draft-
> [email protected]; [email protected]
> Subject: Re: [Int-area] Alissa Cooper's No Objection on 
> draft-ietf-intarea-frag-fragile-16: (with COMMENT)
> 
> Fred,
> 
> I removed the IESG from this list, as we seem to have drifted into a more 
> general fragmentation discussion as opposed to discussing
> the exact changes to this draft.
> 
> >>>> Why is that more useful than what is in 3.5? If it’s not making a 
> >>>> recommendation, why call this out in the introduction.  There are
> lot
> >> of
> >>>> other things it doesn’t make recommendations about that aren’t in the 
> >>>> Introduction either.
> >>>
> >>> Because it sets a more appropriate tone and lets the reader know from the 
> >>> onset that
> >>> fragmentation and encapsulation go hand in hand. And tunnel fragmentation 
> >>> avoids the
> >>> issues raised by others in this thread.
> >>
> >> While inner fragmentation ensures the fragment will reach the tunnel tail 
> >> end, a tunnel endpoint will typically not reassemble that
> >> fragment, so will generate fragments after the tunnel hop.
> >> Inner fragmentation is only available on IPv4.
> >
> > Not true. For IPv6 packets, simply insert a GUE header or an RFC2473 header 
> > and
> > fragment on that. The fragments will be reassembled by the tunnel tail end, 
> > then
> > passed to the next hop as a whole IPv6 packet. The fragmentation footprint 
> > is
> > therefore the same as the tunnel footprint.
> 
> Is that not the exact definition of outer fragmentation?

No. I am talking about outer header (OH) followed by tunnel header (TH) followed
by inner packet (IP). Recipe:

  1) wrap the IP in a TH to create a tunnel packet (TP)
  2) fragment the TP
  3) encapsulate each tunnel fragment in an independent OH
  4) send each outer packet (OP). These will look like ordinary
       unfragmented IP packets, but will contain a tunnel fragment

> >> Outer fragmentation will look like any other fragmented packet,
> >
> > I am not talking about outer fragmentation.
> 
> Ehm?

Above.

> >> albeit that the tunnel tail now has to reassemble. At speeds typically
> >> much higher than a typical end host.
> >
> > Using iperf3, I can show fragmentation and reassembly at near line-rate on 
> > 10Gbps
> > Ethernet gear. That seems pretty good to me. Which shows that implementers
> > have taken IP fragmentation seriously and put in the hard work necessary to
> > optimize the performance.
> 
> On what hardware?

Nothing special. I get good performance even in network emulations where the
(virtual) links do not have a maximum bandwidth restriction.

> 10G is not at all very much, and given fragmentation you have large packets 
> anyway.
> You need to compare the forwarding performance unfragmented versus fragmented.
> Then impact of out of order fragments. Fragment chains that don't reassemble, 
> etc etc.
> Proving that it performs (or not as I would claim) does require quite a bit 
> of work.

I have shown applications that get better performance by sending fragmented
large IP packets than by sending unfragmented small IP packets.

> >> Tunnels within a controlled domain may use fragmentation, although it 
> >> still will have problems.
> >> Which is why you see most tunnel specifications for controlled domains, 
> >> state that the network MTU must be "well managed".
> >
> > We should be able to tunnel within any domain, be it controlled or over the 
> > open Internet.
> > Inner fragmentation (with nested encapsulation if necessary) accomplishes 
> > that.
> 
> Sure, you can just slap a UDP header in between. It still be outer 
> fragmentation, but you have hidden it from the intermediate
> network.
> Then you might as well invent your own shim tunnel fragment header, and we 
> could deprecate the IPv6 one. (slight smiley on that
> idea:)

To make it clearer, I should be calling it tunnel fragmentation (not inner
fragmentation) - but it is clearly not outer fragmentation. All the network
sees are whole (outer) IP packets with no indication that a tunnel fragment
is being carried inside.

Fred

> Cheers,
> Ole
_______________________________________________
Int-area mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/int-area

Reply via email to