RARE user and assistance email list

[mc36 <>]

documenting...


-------- Forwarded Message --------
Subject: Re: SD-WHAT?
Date: Fri, 1 Apr 2022 14:21:19 +0200
From: mc36 <>
Reply-To: 
To: Moises R. N. Ribeiro <>
CC: Fr  d  ric LOUI <>, rafaelsg <>, Everson 
Borges <>, Magnos Martinello <>

hi,

On 4/1/22 14:04, Moises R. N. Ribeiro wrote:
> Csaba,
>
> That's brilliant. This maybe indeed be just a "small discovery + peer distribution 
> (text) protocol" for a man, but a giant leap for mankind. :-)
>
> So, it seems to me that most of the enabling technologies for our (dynamically routed 
> driven by twamp) overlay topology was already there. Now, the CPEs can find their peers 
> (or gateways when hub-spoke) to connect. This is a step toward "zero-touch" 
> we aim at too, right?
well, for confidentiality, one needs at least a trusted key plus an endpoint 
credentials for this to work....
(btw it's the same for cisco's viptela too...)


> The ping tests seem great!
>
> As far as performance is concerned, any chance of using/exploiting (whenever 
> it makes sense) link aggregation (e.g. trunk aggregation, dlmp, trill etc) 
> and load balancing at higher layer (at least ecmp)? I ask that because we 
> look forward on using this overlay network for multipath transport (e.g. 
> mptcp, dctcp) too. In addition, we would like to hear you views on how to 
> coordinate/obviate the multipath (and multilayer) features for end 
> applications.
dlmp is quite new to me, but after a quick look, it's somewhat cisco's 
mlacp...
so yess, we do support mlacp even in active-active, or even better, we do 
evpn active-active...
regarding trill, that's something that short lived from the past, it died 
before we had it :)
and finally yess we do support ecmp, ucmp (wcmp) and friends...


> Oh, we should bother you soon on the openWRT AP integration/authorization 
> demo you did. We want to reproduce them here. To be frank with you, we don't 
> believe in your live demonstrations. You can prove me wrong, but I tell the 
> guys here that they are previously recorded and played in 2X during the 
> meeting just to impress us. :-)

:)

here is a sample openwrt for that:

root@apl:~# cat /etc/config/network

[..]

config interface 'mc36'
        option proto 'none'
        option ipv6 '0'
        option auto '1'
        option delegate '0'
        option device 'br-mc36'

config interface 'g1'
        option proto 'gretap'
        option peeraddr '10.1.11.1'
        option network 'mc36'
        option ipv6 '0'
        option mtu '1400'

config device
        option name 'br-mc36'
        option type 'bridge'
        list ports 'gre-g1'


the freerouter side to catch the tunnels from the aps:
http://sources.freertr.net/cfg/p4lang-rout083.tst

ps: in the latest openwrts, they added support for luci-gre so if you're 
lazy, you can configure the aps from the ui...

br,
cs



> Regards,
> Moises
> ----- Mensagem original -----
> De: "cs" <>
> Para: "Moises Renato Nunes Ribeiro" <>
> Cc: "Fr  d  ric LOUI" <>, "rafaelsg" <>, "Everson Borges" 
> <>, "Magnos Martinello" <>
> Enviadas: Sexta-feira, 1 de abril de 2022 1:55:11
> Assunto: Re: SD-WHAT?
>
> :) it's just a small discovery + peer distribution (text) protocol,
> all the rest is fully rfc complaint: ssh, pki, l2tp, mpls, macsec,
> a routing protocol of your choice and twamp...
> so it works well with the dataplanes
> but it outperforms clearnet, by feeding twamp to the igp, and
> then it could use intermediate nodes instead of direct ones...
> look at the rtts below...
> br,
> cs
>
> noti#ping vpn.nop.hu
> info userReader.cmdEnter:userReader.java:1032 command noti#ping vpn.nop.hu  from 
> local:telnet <loop> 23 -> 127.0.0.1 36366
> 2022-04-01 06:49:32
> resolving vpn.nop.hu for ipv6 ok!
> pinging 2a03:a140:10:2961::dead:babe, src=2001:db8:1101::11, vrf=inet, cnt=5, 
> len=64, tim=1000, gap=0, ttl=255, tos=0, sgt=0, flow=0, fill=0, sweep=false, 
> multi=false, detail=false
> !!!!!
> result=100%, recv/sent/lost/err=5/5/0/0, rtt min/avg/max/sum=36/38/45/198, 
> ttl min/avg/max=238/238/238, tos min/avg/max=0/0/0
> noti#ping vpn.net.nop.hu
> info userReader.cmdEnter:userReader.java:1032 command noti#ping vpn.net.nop.hu  from 
> local:telnet <loop> 23 -> 127.0.0.1 36366
> 2022-04-01 06:49:35
> resolving vpn.net.nop.hu for ipv6 ok!
> pinging 2001:db8:1101::180, src=2001:db8:1101::11, vrf=inet, cnt=5, len=64, 
> tim=1000, gap=0, ttl=255, tos=0, sgt=0, flow=0, fill=0, sweep=false, 
> multi=false, detail=false
> !!!!!
> result=100%, recv/sent/lost/err=5/5/0/0, rtt min/avg/max/sum=21/21/22/107, 
> ttl min/avg/max=254/254/254, tos min/avg/max=0/0/0
> noti#
>
>
> On 3/31/22 23:06, Moises R. N. Ribeiro wrote:
> > Csaba,
> > A bird told me today about something you've been hiding from us:
> > http://sdwan.freertr.net/ <http://sdwan.freertr.net/>
> > It seems like you're grasping ideas out of thin air and transforming them 
> > into concrete free code lines for the masses...
> > Very kind of you, but expect a visit of our corporate lawyers soon. :-)
> > Thanks a lot!
> > Moises