180 likes | 372 Views
LISP Implementation Report. IETF/IRTF Chicago - July 2007 Dino Farinacci Dave Meyer Vince Fuller Darrel Lewis. Agenda. Implementation Status Implementation Details Unit Testing System Testing Future Plans. Implementation Status. cisco has an implementation
E N D
LISP Implementation Report IETF/IRTF Chicago - July 2007 Dino Farinacci Dave Meyer Vince Fuller Darrel Lewis
Agenda • Implementation Status • Implementation Details • Unit Testing • System Testing • Future Plans IETF/IRTF Chicago 2007
Implementation Status • cisco has an implementation • Started the week of IETF Prague (March 2007) • OS platform is DC-OS • Linux underlying OS • Hardware platforrm is Titanium • 1 RU dual-core PC with 7 GEs • Based on draft-farinacci-lisp-02.txt • LISP 1 and 1.5 variants • Software switching only • Supports both IPv4 and IPv6 IETF/IRTF Chicago 2007
Implementation Details • Supports both ITR and ETR functionality • ITR and ETR can be configured in different devices (and differently for IPv4 versus IPv6) • Support for multiple EID-prefixes per site • Support for static cache mappings • Supports configuration of priorities and weights • For both database and cache entries • ITR uses priorities and load-splits hashed flows over equal weights IETF/IRTF Chicago 2007
Implementation Details • Forwarding config options {ip | ipv6} lisp itr drop-on-cache-miss {ip | ipv6} lisp itr forward-on-cache-miss {ip | ipv6} lisp itr incomplete-cache-rate <pps> {ip | ipv6} lisp etr glean-mapping • Supports sending probes in a separate VRF to support LISP 1.5 • Therefore no routeable-IDs over global infrastructure IETF/IRTF Chicago 2007
Implementation Details • The IPv4, IPv6, and LISP processes are restartable • Separate debug logging for • IPv4 and IPv6 forwarding • IPv4 and IPv6 mapping functions • Separate VRFs • Various show commands IETF/IRTF Chicago 2007
Unit Testing • Started unit testing in May 2007 • For -00 draft • Started unit testing in June 2007 • For -02 draft • Change from IP-in-IP to UDP encapsulation • As well as noncing and loc-reach-bits • For both IPv4 and IPv6 IETF/IRTF Chicago 2007
Site Internet Core Unit Test Topology 1.0.8.0/24 dfdf:0:8::/32 +-----+ 8 | | |--------------------| 7 4 | dr1 | | dr22 ----------------| | | 10.0.0.0/8 +-----+ | dfdf:10::/32 | 2 | | | | 1.1.2.0/24 | | dfdf:1:2::/32 | | | | 1 | 7 7 +-----+ | dr23 --------------- | | 8 | 11.0.0.0/8 | dr2 |--------------------| dfdf:11::/32 | | | +-----+ | IETF/IRTF Chicago 2007
System Testing • Titaniums to Dave Meyer & Vince Fuller • July 2007 • Appeared LISP was easy to configure • It’s not that complicated • Added Darrel Lewis to the mix • Titanium received mid-July 2007 IETF/IRTF Chicago 2007
PA-only Internet ITR/ETR ITR/ETR ITR/ETR System Test Topology PI EID-prefix 1.0.0.0/8 PI EID-prefix 2.0.0.0/8 3.0.0.0/8 Dave’s Lab at UofO Vince’s Lab at cisco LISP site no firewall LISP site corporate firewall LISP site retail firewall Darrel’s Lab behind Comcast Dino’s Lab at cisco non-LISP site corporate firewall PI EID-prefix 4.0.0.0/8 5.0.0.0/8 IETF/IRTF Chicago 2007
PA-only Internet ip lisp itr ip lisp etr ip lisp itr forward-on-cache-miss ip lisp etr database-mapping 1.0.0.0/8 uo.uo.uo.uo priority 0 weight 0 ip lisp itr cache-mapping 2.0.0.0/8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping 3.0.0.0/8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping 4.0.0.0/8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping 5.0.0.0/8 d.d.d.d priority 0 weight 0 ip lisp itr cache-mapping 6.0.0.0/8 d.d.d.d priority 0 weight 0 ITR/ETR ITR/ETR ITR/ETR System Test Topology PI EID-prefix 1.0.0.0/8 PI EID-prefix 2.0.0.0/8 3.0.0.0/8 Dave’s Lab at UofO Vince’s Lab at cisco Darrel’s Lab behind Comcast Dino’s Lab at cisco PI EID-prefix 4.0.0.0/8 5.0.0.0/8 IETF/IRTF Chicago 2007
Lessons Learned • Using firewalls gives you another layer of addressing • One layer of EID namespace • Two layers of Locator namespace • Firewalls muck with UDP headers • The ETR really didn’t care IETF/IRTF Chicago 2007
Lessons Learned • ITR shouldn’t encap all packets • I couldn’t ssh/telnet into Dave’s box! • Fix: don’t encapsulate when there is no mapping • Packet through a LISP ETR simpler than to a LISP ETR • Packets address to ETR can be the Locator address or the EID address of the ETR • When addressed to EID, careful for internal-to-router looping ;-) IETF/IRTF Chicago 2007
Future Plans - Testing • Get system test-bed to be dual-homed • Test locator reachability logic • Test switchover logic and convergence time • Run IPv6 concurrently with IPv4 • Mix PI and PA addressing for EIDs • Spend time on transition configurations • LISP 1.5 testing with BGP IETF/IRTF Chicago 2007
Future Plans - Development • Implementation plans • Implement CONS • Implement NERD • IGP interaction with loc-reach-bits • Experiment with mobility gleaning (in a secure way) IETF/IRTF Chicago 2007
Future Plans - Interop Testing • Any interested implementors? • UCL Belgium research (Olivier and Luigi) • FreeBSD for -02 draft • Recommend starting with -02 draft • Contact LISP authors if interested IETF/IRTF Chicago 2007
Future Plans - Pilot Testing • Start thinking about opening up for pilot deployment • Contact LISP authors if interested IETF/IRTF Chicago 2007