IETF Logo Mail Archive

Re: [Anima-signaling] Concern about GRASP Flood message

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 21 July 2016 07:31 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: anima-signaling@ietfa.amsl.com
Delivered-To: anima-signaling@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EE3412DAA7 for <anima-signaling@ietfa.amsl.com>; Thu, 21 Jul 2016 00:31:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XKbLjMbOspuV for <anima-signaling@ietfa.amsl.com>; Thu, 21 Jul 2016 00:31:15 -0700 (PDT)
Received: from mail-wm0-x244.google.com (mail-wm0-x244.google.com [IPv6:2a00:1450:400c:c09::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA7B612DA9B for <anima-signaling@ietf.org>; Thu, 21 Jul 2016 00:31:14 -0700 (PDT)
Received: by mail-wm0-x244.google.com with SMTP id x83so1464265wma.3 for <anima-signaling@ietf.org>; Thu, 21 Jul 2016 00:31:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=c62fgOLwsXrw9za8rBfcnK+6w5zDzrq/SALSCSsgMW0=; b=aFTwLhzkUf5xveyT9POwrFXURv+jeHhNRVCZeLLvrTq7gwptQwUlhSLzSsvn171AUx Tx13S8RqZ+YVk+vnNwCwbl1afXm2+7TGZZ3Ii9IG+jUufqvQ35L48t11K6RM06EEZdAB 4DzRzKID0/bQWRHgznYa2I+5CnkAZUEbj9tx12Y0S3qsqkcs96JjB1ANpr7nL0fhSIPO Q1awKPmh54wfA//jhmBtu8aKR6qDF/dMS5HuMTvd6BAgqA/Dl+8hu8U+xDNnfF9eePcr R4Ww54h9zTRTulRoImQxzbw5x/FBO1X5/VT+yRQ55l0lNj14MJEjam2MfhaBmB1j/iPc ZlwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=c62fgOLwsXrw9za8rBfcnK+6w5zDzrq/SALSCSsgMW0=; b=SO6794vSEpEfYimFDTa34GdPPDyUjtuoDJdRht9UUA/Xl1utdTyH9xMp2fTFJNRy5x 7cUyuaomXop3onfM1bJDuexJaokw97KiSfGw4KNhWx9Ed4cLjMmUCcZ1eb2hGaQs4U4O Fbpcqh2BX0OtxWU9Sqq/do3MWPre+ZMFpFArQro87DALt9yc5OD1KtrHvQe3J+Z3HD3d CWhdj5BvZp2yaNb3g+qwn9ag4m45tN3XgfO7d/fQ88vwngD6bYMDg3PsT64LixLmsQOK 84Sg1QndrG8pQciuCRydznGSpeBowsrRPq29fEfbDqeNtNPMNAQp44oYDIwu8jQyBoMX T1xg==
X-Gm-Message-State: ALyK8tJfOTLnSFlWVD/uyRyt8/52wj42KukBHNtEF8CMrsDG2terhxKHX8EAuRGh16mGrA==
X-Received: by 10.194.147.79 with SMTP id ti15mr5569354wjb.89.1469086273140; Thu, 21 Jul 2016 00:31:13 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:152:28cc:dc4c:9703:6781? ([2001:67c:370:152:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id k2sm4965362wjl.35.2016.07.21.00.31.12 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Jul 2016 00:31:12 -0700 (PDT)
To: Carsten Bormann <cabo@tzi.org>
References: <77afcc64-ca15-003d-661b-a31ed4866149@gmail.com> <579073DB.50505@tzi.org>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <00b894f9-61ca-c5cf-b8d8-aae1a8262c04@gmail.com>
Date: Thu, 21 Jul 2016 19:31:19 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <579073DB.50505@tzi.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima-signaling/s1CLpNTY_V_VFve3SdkGSt-A880>
Cc: Anima signaling DT <anima-signaling@ietf.org>
Subject: Re: [Anima-signaling] Concern about GRASP Flood message
X-BeenThere: anima-signaling@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Mailing list for the signaling design team of the ANIMA WG <anima-signaling.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-signaling>, <mailto:anima-signaling-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-signaling/>
List-Post: <mailto:anima-signaling@ietf.org>
List-Help: <mailto:anima-signaling-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-signaling>, <mailto:anima-signaling-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jul 2016 07:31:16 -0000

On 21/07/2016 19:03, Carsten Bormann wrote:
> Is there going to be any security?
> Or is a flood message authenticated by the group key protecting the ASA?

No, it will be implicitly authenticated by arriving via the ACP.
(Unless used in a insecure instance of GRASP, but I don't think we will
want that.)

> If there is data origin authentication, this already provides a source.

Right, we had that sort of approach in the old TLV version of the protocol,
but removed it when the ACP came along.

Regards
  Brian

> 
> Grüße, Carsten
> 
> 
> Brian E Carpenter wrote:
>> During various discussions this week, I decided there is an issue to decide
>> around the GRASP Flood message.
>>
>> As it's currently defined, the node/ASA that receives a flooded objective
>> doesn't know where it came from; the flood relaying mechanism simply
>> loses the original source locator.
>>
>> Is this a problem? Does the recipient of a flooded objective sometimes
>> need to know the source?
>>
>> If so, we'd have to add a field to the Flood message. For example, we could
>> allow it to carry a Locator option.
>>
>> BTW, flooded objectives have no lifetime - they are valid until overwritten
>> by a subsequent Flood message.
>>
>> Comments?
>>
>

v2.8.7 | Report a Bug | By Email