openconfig
Add policy forwarding for next hop match and GUE encapsulation action
Change Scope
- Add support for policy forwarding match on next hop and GUE encapsulation action.
- Move the encapsulation-header-type to a common module so it can be used more generally.
Major YANG version changes in commit dc39a8e6144a45a3c336330ee475c4c1d838cb83:
openconfig-aft-types.yang: 1.2.0 -> ``
Regarding implementations for this policy language, we are pursing support for this from multiple vendors.
Can we link another implementation here?
There is only one known implementation. We are actively engaged with multiple vendors who have agreed that this is feasible to implement on their platforms. Finalizing the OC model helps complete the specification.
A few comments that I mentioned during the call today:
- arista reference does not describe the policy-based implementation with the NH match criteria
- it does, however, describe the encap based on statically configured NHG.
It would be good to a) find a correct reference if one exists b) explain the motivation of why do you want to do this via the policy instead of static config of NH/NHGs. From the current description it is not clear if there's a reason for it. (perhaps there is, something like a dependency on dynamic routing protocols?)
In addition, could you please elaborate on possible combinations of match/action rules? Some of the PF actions can affect the egress lookup (e.g. next-hop or network-instance actions), so I think we should clearly indicate which combinations are illegal (can i combine next-hop match with next-hop action?). Would be nice to add (to the PR description) a few typical combinations to illustrate how this is supposed to be used as well.
Last but not least, I'm a slightly perplexed by the mix of NH and NHG constructs in the proposal. If there's a desire to match on a next-hop IP address, what is the role of the NHG construct there? This doesn't seem to be well explained
I discussed offline with @danameme and this will receive a major refactor. Please standby while Dan prepares it.
hello dan just following up on discussion regarding prefix. please refractor IP to prefix" dest-ip for udp, gre and ip containers to use a ip-prefix instead of ip-address ". thx
Hi All,
Based on feedback, a new https://github.com/openconfig/public/pull/1234 has been created to use static route with next hop groups approach to configure this. Closing this PR so all discussions can happen in the new PR.
Thanks.