The MPLS WG Archive

Cell Relay Retreat>MPLS WG Archive>month:2000-Oct> msg00457



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

VPN solution

  • From: Eric Rosen <erosen@cisco.com>
  • Date: Wed, 25 Oct 2000 13:29:27 -0400
  • cc: Yakov Rekhter <yakov@cisco.com>, "Newcomb, Robert" <rnewcomb@ennovatenetworks.com>, "'Juan Diego Otero'" <diego@estos.upc.es>, "'mpls@uu.net'" <mpls@UU.NET>
  • User-Agent: EMH/1.10.0 WEMI/1.13.2 (Mochimune) FLIM/1.12.1(Nishinokyō) Emacs/20.6 (sparc-sun-solaris2.5.1)MULE/4.0 (HANANOEN)

Paul> Mail works  as well as it  does because of the  reliability built into
Paul> the application

Having  had several years'  experience managing  a large  world-wide mailing
list, I will never again speak of the "reliability" of the mail application.
If you  could only  see the  hundreds of error  messages that  are generated
every time someone  sends a message to the MPLS  list!  The Internet routing
is one  of the  most reliable  components of the  whole operation,  far more
reliable than the operations that occur at the mail servers.

Paul> and transfer protocols. 

It may be  comforting to think of TCP as maintaining  an open connection for
weeks while the  operators work heroically to restore  the connectivity that
has been  lost due to the plethora  of major routing failures.   But I don't
think  this  happens  much.   A  lack  of connectivity  will  result  in  an
application-layer retry at some later time.  In any event, the vast majority
of the connectivity problems (from my experience managing the MPLS list) are
due to  problems at the mail  servers.  DNS problems are  probably a distant
second.

Paul> That reliability is  provided because of the unreliable  nature of the
Paul> underlying network layer which can be attributed to a number of causes
Paul> including failures in IDR.

TCP provides  reliability not because  the underlying network  is unreliable
(in any common  sense of the word), but because  the underlying network does
not  provide a service  which guarantees  against loss.   "Doesn't guarantee
against  loss"  is  perhaps  the  technical  meaning  of  "unreliable",  but
rhetorically sliding from the  technical meaning ("IP provides an unreliable
service")  to  the  common  meaning  ("the Internet  is  unreliable")  is  a
fallacy. 

The various TCP  optimizations which presume in-order packet  delivery to be
the normal case are in fact  testimony to the reliability in practice of the
underlying network layer service.

Paul> As an aside I'm not aware of anyone who is suggesting building VPNs to
Paul> deliver email. 

I think that close to 100% of those who have VPNs use them for email.

Anyway, I'm sure you realize that  when Yakov said "email" he was just using
it  as an  example of  a  commonly used  Internet application.   The set  of
commonly used Internet  applications does bear a passing  resemblance to the
set of commonly used intranet applications. 

People build  VPNs to  support the entire  set of network  applications that
they need to run, email being one of them, of course.  

Paul> BGP helps the IP internetwork deliver email ergo it's good for VPNs ? 

I don't think Yakov said that, what he was saying is that if BGP is scalable
enough to handle Internet email, why should we think that it is not scalable
enough to handle VPNs.

Recognizing that "deliver email" is  really placeholder for "support a large
and  varied set  of  networking  applications", let's  rephrase:  if BGP  is
scalable enough to  handle a large and varied  set of Internet applications,
why should we think it is not scalable enough to handle VPNs."

Of course, the fact  that BGP is scalable enough to handle  VPNs does not by
itself imply  that VPNs  should be built  according to RFC2547,  because the
scalability of BGP is only one of the issues.

Paul> What does FUD stand for by the way

Fear, uncertainty, and doubt.  (I.e., marketing.) 







  • References:
    • VPN solution
      • From: Paul Doolan <pdoolan@ennovatenetworks.com>