Re: [Anima] Use of M_FLOOD for discovery of Proxy

Toerless Eckert <tte@cs.fau.de> Sat, 08 July 2017 00:39 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0245129503 for <anima@ietfa.amsl.com>; Fri, 7 Jul 2017 17:39:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jN32B9VXbzsy for <anima@ietfa.amsl.com>; Fri, 7 Jul 2017 17:39:14 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [131.188.34.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90A7D12762F for <anima@ietf.org>; Fri, 7 Jul 2017 17:39:14 -0700 (PDT)
Received: from faui40p.informatik.uni-erlangen.de (faui40p.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:77]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 6462E58C4AE; Sat, 8 Jul 2017 02:39:10 +0200 (CEST)
Received: by faui40p.informatik.uni-erlangen.de (Postfix, from userid 10463) id 4B434B0C502; Sat, 8 Jul 2017 02:39:10 +0200 (CEST)
Date: Sat, 08 Jul 2017 02:39:10 +0200
From: Toerless Eckert <tte@cs.fau.de>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, anima@ietf.org
Message-ID: <20170708003910.GA28540@faui40p.informatik.uni-erlangen.de>
References: <149566389334.8737.940293315082013190@ietfa.amsl.com> <e24d09bd-9497-3066-7659-895c664bb248@gmail.com> <2540.1497281932@obiwan.sandelman.ca> <20170617000102.GI20021@faui40p.informatik.uni-erlangen.de> <28650.1497805133@obiwan.sandelman.ca> <1dc4daff-5e31-c918-0db4-071f43f3ef9d@gmail.com> <24980.1497879364@obiwan.sandelman.ca>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <24980.1497879364@obiwan.sandelman.ca>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/4HuSJuoaFIaUTn0Npmka4D74wsE>
Subject: Re: [Anima] Use of M_FLOOD for discovery of Proxy
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 08 Jul 2017 00:39:17 -0000

Seems i dropped the ball on these:

I am not sure i see the crucial need to be able to optimize the number of packets of periodic ACP and BRSKI announcements. 

Assume BRSKI, ACP and GRASP are diferent ASAs. We'd need a GRASP API feature to request coalescion of announcement. How would you define that API feature...

The idea was to use M_FLOOD for BRSKI because that would allow the pledge to be quiet. Which is more secure because pledge is potentially easy to attack.

For ACP i also have M_FLOOD in the text because thats the solution with just one message. No need for two-way handshake. 

Check out brians ani-objective. The alternative to M_FLOOD he lines out are more complicated.

Cheers
    Toerless

On Mon, Jun 19, 2017 at 09:36:04AM -0400, Michael Richardson wrote:
> 
> Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>     >> If a node doesn't want to announce itself as a proxy, it would omit that
>     >> objective.
>     >>
>     >> As for implementation, I've done it. It's a question of about a page
>     >> of C
>     >> code (given a cbor library), or about ten lines of ruby. Probably a
>     >> similar
>     >> number of lines of python.
> 
>     > I'm thinking that if we want to make a tiny extension to GRASP syntax for
>     > this special purpose, we can do so in the BRSKI document. That's yet
>     > another benefit of using CBOR.
> 
>      flood-message = [M_FLOOD, session-id, initiator, ttl,
>                      +[objective, (locator-option / [])]]
> 
> You added the +[] there so that we can announce multiple objectives.
> I don't think that there is anything more to do in GRASP.
> 
> All we need to do is define the AN_Proxy objective, and ACP has to
> define the AN_ACP objective.  I just don't see any problem here.
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
>