IETF/IRTF Chicago - July 2007 Dino Farinacci Dave Meyer Vince Fuller Darrel Lewis LISP Implementation Report

IETF/IRTF Chicago 2007Slide 2 Agenda Implementation Status Implementation Details Unit Testing System Testing Future Plans

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 3 Implementation Status cisco has an implementation –Started the week of IETF Prague (March 2007) OS platform is DC-OS –Linux underlying OS Hardware platforrm is Titanium –1 RU dual-core PC with 7 GEs Based on draft-farinacci-lisp-02.txt –LISP 1 and 1.5 variants Software switching only Supports both IPv4 and IPv6

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 4 Implementation Details Supports both ITR and ETR functionality ITR and ETR can be configured in different devices (and differently for IPv4 versus IPv6) Support for multiple EID-prefixes per site Support for static cache mappings Supports configuration of priorities and weights –For both database and cache entries –ITR uses priorities and load-splits hashed flows over equal weights

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 5 Implementation Details Forwarding config options {ip | ipv6} lisp itr drop-on-cache-miss {ip | ipv6} lisp itr forward-on-cache-miss {ip | ipv6} lisp itr incomplete-cache-rate {ip | ipv6} lisp etr glean-mapping Supports sending probes in a separate VRF to support LISP 1.5 –Therefore no routeable-IDs over global infrastructure

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 6 Implementation Details The IPv4, IPv6, and LISP processes are restartable Separate debug logging for –IPv4 and IPv6 forwarding –IPv4 and IPv6 mapping functions –Separate VRFs Various show commands

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 7 Unit Testing Started unit testing in May 2007 –For -00 draft Started unit testing in June 2007 –For -02 draft –Change from IP-in-IP to UDP encapsulation –As well as noncing and loc-reach-bits For both IPv4 and IPv6

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 8 Unit Test Topology /24 dfdf:0:8::/ | | | | 7 4 | dr1 | | dr | | | / | dfdf:10::/32 | 2 | | | | /24 | | dfdf:1:2::/32 | | | | 1 | | dr | | 8 | /8 | dr2 | | dfdf:11::/32 | | | | Site Internet Core

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 9 System Testing Titaniums to Dave Meyer & Vince Fuller –July 2007 Appeared LISP was easy to configure –It’s not that complicated Added Darrel Lewis to the mix –Titanium received mid-July 2007

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 10 System Test Topology Dave’s Lab at UofO ITR/ETR PI EID-prefix /8 PA-only Internet Vince’s Lab at cisco ITR/ETR PI EID-prefix / /8 Darrel’s Lab behind Comcast ITR/ETR PI EID-prefix / /8 Dino’s Lab at cisco LISP site no firewall non-LISP site corporate firewall LISP site corporate firewall LISP site retail firewall

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 11 System Test Topology Dave’s Lab at UofO ITR/ETR PI EID-prefix /8 PA-only Internet Vince’s Lab at cisco ITR/ETR PI EID-prefix / /8 Darrel’s Lab behind Comcast ITR/ETR PI EID-prefix / /8 Dino’s Lab at cisco ip lisp itr ip lisp etr ip lisp itr forward-on-cache-miss ip lisp etr database-mapping /8 uo.uo.uo.uo priority 0 weight 0 ip lisp itr cache-mapping /8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping /8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping /8 v.v.v.v priority 0 weight 0 ip lisp itr cache-mapping /8 d.d.d.d priority 0 weight 0 ip lisp itr cache-mapping /8 d.d.d.d priority 0 weight 0

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 12 Lessons Learned Using firewalls gives you another layer of addressing –One layer of EID namespace –Two layers of Locator namespace Firewalls muck with UDP headers –The ETR really didn’t care

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 13 Lessons Learned ITR shouldn’t encap all packets –I couldn’t ssh/telnet into Dave’s box! –Fix: don’t encapsulate when there is no mapping Packet through a LISP ETR simpler than to a LISP ETR –Packets address to ETR can be the Locator address or the EID address of the ETR –When addressed to EID, careful for internal-to- router looping ;-)

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 14 Future Plans - Testing Get system test-bed to be dual-homed –Test locator reachability logic –Test switchover logic and convergence time Run IPv6 concurrently with IPv4 Mix PI and PA addressing for EIDs –Spend time on transition configurations LISP 1.5 testing with BGP

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 15 Future Plans - Development Implementation plans –Implement CONS –Implement NERD IGP interaction with loc-reach-bits Experiment with mobility gleaning (in a secure way)

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 16 Future Plans - Interop Testing Any interested implementors? –UCL Belgium research (Olivier and Luigi) FreeBSD for -02 draft Recommend starting with -02 draft Contact LISP authors if interested

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 17 Future Plans - Pilot Testing Start thinking about opening up for pilot deployment Contact LISP authors if interested

LISP Implementation ReportIETF/IRTF Chicago 2007Slide 18