Re: [babel] Work to do (IHU TLV AE 0)

Toke Høiland-Jørgensen <toke@toke.dk> Mon, 26 March 2018 21:47 UTC

Return-Path: <toke@toke.dk>
X-Original-To: babel@ietfa.amsl.com
Delivered-To: babel@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1499F12DA12 for <babel@ietfa.amsl.com>; Mon, 26 Mar 2018 14:47:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.011
X-Spam-Level:
X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=toke.dk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d_hU4VynYwmN for <babel@ietfa.amsl.com>; Mon, 26 Mar 2018 14:47:09 -0700 (PDT)
Received: from mail.toke.dk (mail.toke.dk [52.28.52.200]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 369DA12D810 for <babel@ietf.org>; Mon, 26 Mar 2018 14:47:09 -0700 (PDT)
From: Toke Høiland-Jørgensen <toke@toke.dk>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=20161023; t=1522100827; bh=A9+dBNFEffsxV9Drhsy5IMhFIa3TPLOTPxJ3OBBkWj8=; h=From:To:Subject:In-Reply-To:References:Date:From; b=VQRaKhrmtsuAiCG0WiMpSU3fCM7y4FCwXm/3LbFpLVnh+OT6XJm1w9rnwJu+A4nSY nYm3Ks0IRnWLAox9MvCz51AnMakyvvDefDnzCd46dlt/Tzt/88x2x3rBswJp6D+RwL /A2flirp3/L4OnWPDZKM0lFYN3GqQ9LQGa7Jw88AobZ9AbEqOlcPmZmXC9pb6CI/Hb PGma5FanHs5SYWqeh5/Mv3bNK3whJxMLrKKx6JlQNWQ6pIDTiQLd0Jl0Gm3LUEIGA3 GkLsT1qa0yuwqj2jxYN/clwQwQOvKMKlwpoLudH3DsStzSr1cQADLNcDrKwzrucPMk PRHOiE1iONvSQ==
To: Denis Ovsienko <denis@ovsienko.info>, Babel at IETF <babel@ietf.org>
In-Reply-To: <162642bbd2f.1266904f2130878.513114391174006256@ovsienko.info>
References: <87k1u1uekt.wl-jch@irif.fr> <16263df4d35.c134482a130573.7360272675488949721@ovsienko.info> <87r2o6k2jm.wl-jch@irif.fr> <162642bbd2f.1266904f2130878.513114391174006256@ovsienko.info>
Date: Mon, 26 Mar 2018 23:47:06 +0200
X-Clacks-Overhead: GNU Terry Pratchett
Message-ID: <87po3qech1.fsf@toke.dk>
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/babel/BrQvx9JoLySRrDhUrpG071un2Ms>
Subject: Re: [babel] Work to do (IHU TLV AE 0)
X-BeenThere: babel@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "A list for discussion of the Babel Routing Protocol." <babel.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/babel>, <mailto:babel-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/babel/>
List-Post: <mailto:babel@ietf.org>
List-Help: <mailto:babel-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/babel>, <mailto:babel-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Mar 2018 21:47:16 -0000

Denis Ovsienko <denis@ovsienko.info> writes:

> ---- On Mon, 26 Mar 2018 21:25:01 +0100 Juliusz Chroboczek  wrote ---- 
>>> There is one more important thing to check before setting 6126bis in 
>>> stone. The current revision of 6126bis says an IHU TLV may omit Address 
>>> (AE = 0). The current revision of 7298bis needs Address meaningfully set 
>>> so that the receiving node can pick the TS/PC sub-TLV from the IHU TLV 
>>> and translate that to the age threshold in units of seconds. 
>> 
>>I need to think that over. 
>> 
>>> 1. 6126bis and 7298bis coordinate to have IHU AE 1 or 3 when 7298bis is 
>>> enabled 
>>> 2. 6126bis simply mandates Address in IHU (AE = 1 or 3) 
>> 
>>I'm fine with either of these. 
>
> Alright. Then 2 would be straightforward if the problem does not require 3 (see below).
>
>>> 3. 7298bis does destination address protection too for all packets (7298 
>>> did only source, as 6126 is multicast-only). 
>> 
>>Please clarify. 6126 already allows unicast operation, except for Hello 
>>TLVs (Section 3.1 of RFC 6126). 
>
> I am sorry, a more correct wording would be: the destination address
> was not meaningful in 6126 (I remember discussing this with you at
> some point). Do the new unicast provisions in 6126bis make the
> destination address meaningful? I.e. can a man in the middle change it
> and cause any damage beyond ignored Babel packets?

The packet destination address is not checked on the receiver,
regardless of whether the packet was sent over unicast or multicast. At
least, that's the case with Bird and (I think) babeld.

-Toke