[Anima] Re: pls comment: “Lightweight GeneRic Autonomic Signaling Protocol”(draft-zhu-anima-lightweight-grasp-00)
Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 11 July 2024 03:30 UTC
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79A77C14F739 for <anima@ietfa.amsl.com>; Wed, 10 Jul 2024 20:30:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u3B3taftgoXU for <anima@ietfa.amsl.com>; Wed, 10 Jul 2024 20:30:38 -0700 (PDT)
Received: from mail-oi1-x233.google.com (mail-oi1-x233.google.com [IPv6:2607:f8b0:4864:20::233]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACA28C14F705 for <anima@ietf.org>; Wed, 10 Jul 2024 20:30:38 -0700 (PDT)
Received: by mail-oi1-x233.google.com with SMTP id 5614622812f47-3d9dfc7c5f6so181402b6e.0 for <anima@ietf.org>; Wed, 10 Jul 2024 20:30:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1720668637; x=1721273437; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:cc:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=5+gfwtdI/yOtP3YXO+SGPpfhJKxF2KUcg/G2naBZJ1w=; b=Z9rir9bLiGwKJhovOqsGsOO/yGovM2RJQQn+eEylcCQl4MzDSiOot6H/K56GgzNBk5 4Lpw6rLZQLleSnFwE/zFpvcPNS5LxcxO3DJ+RvtmAUvzHTAnhV30o8nX8JfXze/90TLO icg0pwCVgi7ayNNk+KxNhldPvivIrKJVqtUzKD2r24p/yNhdmZ09r6AmRxCutHcFufkU SBi0ud6ihAt3keZ36QPz9Z4advGHMGe5RpLN1PE7AKQBggfzx5AV8G0Z++Wb0A0zviDV pwJ+pblJNnlRVYv+dIvhrKArDpiLa/Oo9PkIdAT9F1AF+TngLzklw9ty9U9nfuzvqBNf iJWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1720668637; x=1721273437; h=content-transfer-encoding:in-reply-to:from:cc:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=5+gfwtdI/yOtP3YXO+SGPpfhJKxF2KUcg/G2naBZJ1w=; b=rsI74+IoR9Ux8vCP5lO30/HZZc6cwpAbulIwzqFBdsYtTXg5H9cs6E+sr1r0KQqvgI 3GVStqIb9WvH8ULSPXeObUH1MfB53vF/ZHl+CdpyxmRB1CcJusaXMyQHEhcY3/HcdB1Y mejEJci9RcQjhnRO8uJ/ZAaIkLe4c5D1WPCUcVN+jt3X90K+BVEuJ9yEPg0/DElFiASR t/nNKKAQwe28oSamRtCjHZ30+wr1JiugcnHQ/iubQKShkG3ZHxTa0PXS72YyTSAt6U3D ss/90EPWrDZ0cuKuJ5hk8HXa9vGBqP0CmtNprR+npHH2epZ2SqU110B3DlWGmzJqtznV F4Bw==
X-Gm-Message-State: AOJu0YzhxSxeEHt2pOmS4Zlm3Wi/vWPF8rFian4xfNcUqj123prQB8W/ lCXAHT4yTpbE8dM1bqt2hcHaHiI7EDaikwT5i4hLRLVvz16O5Zc5
X-Google-Smtp-Source: AGHT+IFCN7iZhOYucb/xQtQVUBg8CmKukeZ/T0p4anzK5+zq4Qn81VnQE54LXqt5fdL2YwvyBUFpUw==
X-Received: by 2002:a05:6808:3a91:b0:3d9:3016:d632 with SMTP id 5614622812f47-3d93c0c41d4mr7040685b6e.50.1720668637506; Wed, 10 Jul 2024 20:30:37 -0700 (PDT)
Received: from ?IPV6:2404:4400:541d:a600:44b7:2c2e:2bc6:8707? ([2404:4400:541d:a600:44b7:2c2e:2bc6:8707]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-70b439e8ebbsm4546993b3a.207.2024.07.10.20.30.35 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 10 Jul 2024 20:30:37 -0700 (PDT)
Message-ID: <da9f05da-3174-46ec-8ca3-274fec457698@gmail.com>
Date: Thu, 11 Jul 2024 15:30:32 +1200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: 朱龙薇 <lwzhu@bupt.edu.cn>
References: <tencent_33CBF5A4183363DB76625258@qq.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <tencent_33CBF5A4183363DB76625258@qq.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: base64
Message-ID-Hash: HOQDT3AVIY4JMF3ZUROOON5Y5NNMQPRC
X-Message-ID-Hash: HOQDT3AVIY4JMF3ZUROOON5Y5NNMQPRC
X-MailFrom: brian.e.carpenter@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-anima.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: anima <anima@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [Anima] Re: pls comment: “Lightweight GeneRic Autonomic Signaling Protocol”(draft-zhu-anima-lightweight-grasp-00)
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/qkY-f2NTjfJSs4-45cp11Y7Cpdw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Owner: <mailto:anima-owner@ietf.org>
List-Post: <mailto:anima@ietf.org>
List-Subscribe: <mailto:anima-join@ietf.org>
List-Unsubscribe: <mailto:anima-leave@ietf.org>
Hi Longwei,
I have a few questions:
#1:
>> 3.1. Reliable transmission for confirmable LW-GRASP messages
...
>> If the LW-GRASP confirmable message does not get an acknowledgment within the retransmission timeout, then the message MUST be retransmitted, but there is no need to regenerate the Nonce, just keep it the same as the original message.
What happens if the recipient has accepted the message and processed it, but the acknowledgment is lost? Some GRASP messages (especially M_NEGOTIATE) are not idempotent, so simply repeating a message could be dangerous.
I think this requires some extra specification - the recipient must also cache the nonce in order to detect repeats. I think a repeat needs to be acknowledged, but not processed a second time.
#2:
I don't see a discussion of message integrity (i.e. the replacement for the TCP checksum). Are you relying on the UDP checksum? Is there a negative acknowledgment if there is a checksum error?
#3:
>> 4.2.1. LW-Objective option
...
>> objective-num = 0..255
CBOR does not require you to limit this to 8 bits. So you could define it as larger, e.g. 16 bits, but start assigning from zero; that would make no difference on the wire unless you actually *needed* more than 256 values.
Also, do you expect the objectives to be standardised and registered like normal GRASP objectives, or will they be local? This needs to be explained. For example, if you wanted to use "PrefixManager" and "PrefixManager.Params" from RFC8992, would you give them numbers in addition? ("PrefixManager" = 10, "PrefixManager.Params" = 11)
#4:
>> 7. Security Considerations
The security people insisted that in RFC 8990, we specified use of TLS even over the ACP. This was for defence against internal attackers. (I did implement an alternative, draft-carpenter-anima-quads-grasp, but it still needs a full crypto library.)
Regards
Brian
On 05-Jul-24 01:29, 朱龙薇 wrote:
> Dear ANIMA WG members,
>
> We have proposed the draft “Lightweight GeneRic Autonomic Signaling Protocol”(draft-zhu-anima-lightweight-grasp-00, https://datatracker.ietf.org/doc/draft-zhu-anima-lightweight-grasp/)
>
> The draft aims to design a lightweight version of GRASP, i.e., LW-GRASP, with shortened messages and a message-oriented built-in reliability mechanism with the acknowledgment and retransmission capability based on Nonce. The LW-GRASP can work reliably over UDP, which avoids additional overhead caused by TCP,thus can be more suitable for resource-constrained IoT nodes. Furthermore, the possible IP-independent method for LW-GRASP is also discussed.
>
> We would like to hear opinions from the WG. All kinds of comments are welcome.
>
> Thanks
>
> Longwei Zhu
>
>
> _______________________________________________
> Anima mailing list -- anima@ietf.org
> To unsubscribe send an email to anima-leave@ietf.org