IETF Logo Mail Archive

Re: [anonsec] I-D Action:draft-ietf-btns-connection-latching-06.txt

Nicolas Williams <Nicolas.Williams@sun.com> Thu, 10 April 2008 15:36 UTC

Return-Path: <anonsec-bounces@postel.org>
X-Original-To: ietfarch-btns-archive-waDah9Oh@core3.amsl.com
Delivered-To: ietfarch-btns-archive-waDah9Oh@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B52E03A68F7 for <ietfarch-btns-archive-waDah9Oh@core3.amsl.com>; Thu, 10 Apr 2008 08:36:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.475
X-Spam-Level:
X-Spam-Status: No, score=-2.475 tagged_above=-999 required=5 tests=[AWL=0.124, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yKkQa2tN7kwE for <ietfarch-btns-archive-waDah9Oh@core3.amsl.com>; Thu, 10 Apr 2008 08:36:26 -0700 (PDT)
Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by core3.amsl.com (Postfix) with ESMTP id 5A38C3A698C for <btns-archive-waDah9Oh@lists.ietf.org>; Thu, 10 Apr 2008 08:36:26 -0700 (PDT)
Received: from boreas.isi.edu (localhost [127.0.0.1]) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id m3AFKGEh008243; Thu, 10 Apr 2008 08:20:17 -0700 (PDT)
Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id m3AFJm6H008130 for <anonsec@postel.org>; Thu, 10 Apr 2008 08:19:49 -0700 (PDT)
Received: from dm-central-01.central.sun.com ([129.147.62.4]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3AFJlWI026633 for <anonsec@postel.org>; Thu, 10 Apr 2008 15:19:47 GMT
Received: from binky.Central.Sun.COM (binky.Central.Sun.COM [129.153.128.104]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL, v2.2) with ESMTP id m3AFJk1D029901 for <anonsec@postel.org>; Thu, 10 Apr 2008 09:19:47 -0600 (MDT)
Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m3AFJllT008660; Thu, 10 Apr 2008 10:19:47 -0500 (CDT)
Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m3AFJgNk008659; Thu, 10 Apr 2008 10:19:42 -0500 (CDT)
X-Authentication-Warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f
Date: Thu, 10 Apr 2008 10:19:42 -0500
From: Nicolas Williams <Nicolas.Williams@sun.com>
To: Daniel Migault <mglt.biz@gmail.com>
Message-ID: <20080410151942.GH8027@Sun.COM>
Mail-Followup-To: Daniel Migault <mglt.biz@gmail.com>, Daniel Migault <daniel.migault@orange-ftgroup.com>, anonsec@postel.org
References: <20080407180003.GB16998@Sun.COM> <20080408173036.GS16998@Sun.COM> <47FCD94F.6040108@orange-ftgroup.com> <20080409155138.GC16998@Sun.COM> <20080409170021.GE16998@Sun.COM> <47FCFFEA.7020004@orange-ftgroup.com> <20080409173633.GF16998@Sun.COM> <20080409181238.GG16998@Sun.COM> <20080410042555.GF8027@Sun.COM> <c17ec2f80804100722l1104b370vd55d91ee5792039d@mail.gmail.com>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <c17ec2f80804100722l1104b370vd55d91ee5792039d@mail.gmail.com>
User-Agent: Mutt/1.5.7i
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: nicolas.williams@sun.com
Cc: Daniel Migault <daniel.migault@orange-ftgroup.com>, anonsec@postel.org
Subject: Re: [anonsec] I-D Action:draft-ietf-btns-connection-latching-06.txt
X-BeenThere: anonsec@postel.org
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: "Discussions of anonymous Internet security." <anonsec.postel.org>
List-Unsubscribe: <http://mailman.postel.org/mailman/listinfo/anonsec>, <mailto:anonsec-request@postel.org?subject=unsubscribe>
List-Archive: <http://mailman.postel.org/pipermail/anonsec>
List-Post: <mailto:anonsec@postel.org>
List-Help: <mailto:anonsec-request@postel.org?subject=help>
List-Subscribe: <http://mailman.postel.org/mailman/listinfo/anonsec>, <mailto:anonsec-request@postel.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: anonsec-bounces@postel.org
Errors-To: anonsec-bounces@postel.org

On Thu, Apr 10, 2008 at 04:22:02PM +0200, Daniel Migault wrote:
> Maybe there is a solution to drop the  SUSPEND state and merge it with the
> BROKEN state by  considering different transition condition from ESTABLISHED
> to BROKEN.

That's exactly what I did:

   <CREATE_LISTENER_LATCH(3-tuple, ...)>
                  :
                  v    <CREATE_CONNECTION_LATCH(5-tuple, ...)>
             /--------\           :   :
      +------|LISTENER|......     :   :
      |      \--------/     :     :   :   +--------------------+
      |        :            :     :   :   |Legend:             |
      |        :            :     :   :   | dotted lines denote|
      |  <conn. trigger event>    :   :   |    latch creation  |
      |      (e.g., TCP SYN :     :   :   |                    |
      |       received,     :     :   :   | solid lines denote |
      |       connect()     :     :   :   |    state transition|
      |       called, ...)  v     v   :   |                    |
      |        :        /-----------\ :   | semi-solid lines   |
      |        :        |ESTABLISHED| :   |    denote async    |
      |    <conflict>   \-----------/ :   |    notification    |
      |        :         ^       |    :   +--------------------+
      |        :         |      <conflict>
      |        :    <conflict    |    :
      |        :     cleared>    |    :
      |        :    (OPTIONAL)   |    :
      |        :         |       v    v
      |        :      /----------------\
      |        :.....>|     BROKEN     |.-.-.-.-.-> <ALERT()>
      |               \----------------/
      |                       |
   <RELEASE_LATCH()>   <RELEASE_LATCH()>
      |                       |
      |                       v
      |                    /------\
      +------------------->|CLOSED|
                           \------/

> I don't think we have too many states, and I eventually would add  CONECTION
> larval state for LC objects. On the other hand, if I really had to drop one
> state I would rather drop larval state like the LISTEN state.

Check out the above diagram.  I think it's simple enough now.

Nico
-- 
_______________________________________________

v2.23.0 | Report a Bug | By Email