Re: [btns] Q: How to deal with connection latch breaks?

"Laganier, Julien" <julienl@qualcomm.com> Thu, 30 July 2009 11:30 UTC

Return-Path: <julienl@qualcomm.com>
X-Original-To: btns@core3.amsl.com
Delivered-To: btns@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 16A533A67FE for <btns@core3.amsl.com>; Thu, 30 Jul 2009 04:30:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.799
X-Spam-Level:
X-Spam-Status: No, score=-103.799 tagged_above=-999 required=5 tests=[AWL=-1.200, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5rFDpBq-RZWx for <btns@core3.amsl.com>; Thu, 30 Jul 2009 04:30:38 -0700 (PDT)
Received: from wolverine02.qualcomm.com (wolverine02.qualcomm.com [199.106.114.251]) by core3.amsl.com (Postfix) with ESMTP id 087223A6FF5 for <btns@ietf.org>; Thu, 30 Jul 2009 04:30:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qualcomm.com; i=julienl@qualcomm.com; q=dns/txt; s=qcdkim; t=1248953440; x=1280489440; h=from:to:date:subject:thread-topic:thread-index: message-id:references:in-reply-to:accept-language: content-language:x-ms-has-attach:x-ms-tnef-correlator: acceptlanguage:content-type:content-transfer-encoding: mime-version:x-ironport-av; z=From:=20"Laganier,=20Julien"=20<julienl@qualcomm.com> |To:=20Mike=20Eisler=20<mre-ietf@eisler.com>,=20"btns@iet f.org"=20<btns@ietf.org>|Date:=20Thu,=2030=20Jul=202009 =2004:30:21=20-0700|Subject:=20RE:=20[btns]=20Q:=20How=20 to=20deal=20with=20connection=20latch=20breaks? |Thread-Topic:=20[btns]=20Q:=20How=20to=20deal=20with=20c onnection=20latch=20breaks?|Thread-Index:=20AcoRAkvtq3Ae/ ITzRDWwcEJJ4HpadgABmjkg|Message-ID:=20<BF345F63074F8040B5 8C00A186FCA57F1C22ACCED4@NALASEXMB04.na.qualcomm.com> |References:=20<e2cf27e98757db0c8561baadfb3ca335.squirrel @webmail.eisler.com>=0D=0A=09<20090726221331.GS1020@Sun.C OM>=09<9481.1248714083@marajade.sandelman.ca>=0D=0A=20<a0 459a6daa0f2f67ff64eb0b2e328a58.squirrel@webmail.eisler.co m>|In-Reply-To:=20<a0459a6daa0f2f67ff64eb0b2e328a58.squir rel@webmail.eisler.com>|Accept-Language:=20en-US |Content-Language:=20en-US|X-MS-Has-Attach: |X-MS-TNEF-Correlator:|acceptlanguage:=20en-US |Content-Type:=20text/plain=3B=20charset=3D"us-ascii" |Content-Transfer-Encoding:=20quoted-printable |MIME-Version:=201.0|X-IronPort-AV:=20E=3DMcAfee=3Bi=3D"5 300,2777,5692"=3B=20a=3D"21447015"; bh=wMzDqTWWYtcIX5xfU8e08+FV1pEuz/qguTX2O3VfN9I=; b=iU2C0COYGyZE98Vdpba9Wm4eehH9u1v5GCsM/xHyg9B37YtdArpkNvl8 wVrJkfbGI1BaX5Eep8lBoh1NYEbVl7lU66vJAa3mc3y/CLNRNXUyG3qqp AESRa6c8XJ1l0juDshZaB+EjoqanabDeNcDbBySFAESXlD1H8J3CL0v5e A=;
X-IronPort-AV: E=McAfee;i="5300,2777,5692"; a="21447015"
Received: from pdmz-ns-mip.qualcomm.com (HELO numenor.qualcomm.com) ([199.106.114.10]) by wolverine02.qualcomm.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Jul 2009 04:30:24 -0700
Received: from msgtransport03.qualcomm.com (msgtransport03.qualcomm.com [129.46.61.154]) by numenor.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n6UBUO7f000689 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 30 Jul 2009 04:30:24 -0700
Received: from nasanexhub01.na.qualcomm.com (nasanexhub01.na.qualcomm.com [10.46.93.121]) by msgtransport03.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n6UBUNj1017856 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Thu, 30 Jul 2009 04:30:23 -0700
Received: from nalasexhub04.na.qualcomm.com (10.47.130.55) by nasanexhub01.na.qualcomm.com (10.46.93.121) with Microsoft SMTP Server (TLS) id 8.1.358.0; Thu, 30 Jul 2009 04:30:23 -0700
Received: from NALASEXMB04.na.qualcomm.com ([10.47.7.114]) by nalasexhub04.na.qualcomm.com ([10.47.130.55]) with mapi; Thu, 30 Jul 2009 04:30:23 -0700
From: "Laganier, Julien" <julienl@qualcomm.com>
To: Mike Eisler <mre-ietf@eisler.com>, "btns@ietf.org" <btns@ietf.org>
Date: Thu, 30 Jul 2009 04:30:21 -0700
Thread-Topic: [btns] Q: How to deal with connection latch breaks?
Thread-Index: AcoRAkvtq3Ae/ITzRDWwcEJJ4HpadgABmjkg
Message-ID: <BF345F63074F8040B58C00A186FCA57F1C22ACCED4@NALASEXMB04.na.qualcomm.com>
References: <e2cf27e98757db0c8561baadfb3ca335.squirrel@webmail.eisler.com> <20090726221331.GS1020@Sun.COM> <9481.1248714083@marajade.sandelman.ca> <a0459a6daa0f2f67ff64eb0b2e328a58.squirrel@webmail.eisler.com>
In-Reply-To: <a0459a6daa0f2f67ff64eb0b2e328a58.squirrel@webmail.eisler.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [btns] Q: How to deal with connection latch breaks?
X-BeenThere: btns@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Better-Than-Nothing-Security Working Group discussion list <btns.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/btns>, <mailto:btns-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/btns>
List-Post: <mailto:btns@ietf.org>
List-Help: <mailto:btns-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/btns>, <mailto:btns-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 11:30:39 -0000

> -----Original Message-----
> From: btns-bounces@ietf.org [mailto:btns-bounces@ietf.org] On Behalf Of
> Mike Eisler
> Sent: Thursday, July 30, 2009 3:41 AM
> To: btns@ietf.org
> Subject: Re: [btns] Q: How to deal with connection latch breaks?
> 
> 
> On Mon, July 27, 2009 10:01 am, Michael Richardson wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> >
> >>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams@sun.com> writes:
> >     >> My conclusion is that the API ought to provide information for
> >     >> the application about the connection latching, and it just
> does
> >     >> not seem to be there.  If you can point me to a discussion of
> >     >> this topic on the WG mail list, then I'll clear.  I'm not
> trying
> >     >> to alter consensus, but I do want to make sure that this topic
> >     >> was considered.
> >
> >     Nicolas> APIs are nice, but existing apps won't use them until
> >     Nicolas> updated, and anyways, connection latching adds value
> even
> >     Nicolas> without adding APIs, which means we need a default
> response
> >     Nicolas> to latch breaks in the absence of new APIs (either
> because
> >     Nicolas> not implemented or not used).
> >
> >   So, errno value from write(2) is not a new API.
> >   A new errno value should provide enough information, I think.
> >
> >   However, an application might know what to do with ETIMEOUT, while
> it
> > would not know what to do with EUNLATCHED or some such....
> 
> Isn't the application the entity that decided to enable latching?  If
> so,
> the application (or its author) needs to be prepared to deal with new
> error indication.
> 
> If not, what is the model for enabling latching?

The current draft says " Implementations SHOULD create IPsec channels automatically by
default when the application does not explicitly request an IPsec channel.  Implemenations MAY provide a way to disable automatic creation of connection latches." Thus the application might not know what is EUNLATCHED.

Would it be possible that the application gets ETIMEOUT, unless it has used a BTNS connction latching API of some sort, in which case it presumably knows about latching and can be returned an EUNLATCHED?

--julien