Re: [core] Anycast and CoRE

Jim Schaad <ietf@augustcellars.com> Wed, 12 December 2018 22:58 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2606E130F29 for <core@ietfa.amsl.com>; Wed, 12 Dec 2018 14:58:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcPkEU8XMPQL for <core@ietfa.amsl.com>; Wed, 12 Dec 2018 14:58:36 -0800 (PST)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 442D0130F24 for <core@ietf.org>; Wed, 12 Dec 2018 14:58:36 -0800 (PST)
Received: from Jude (50.252.25.182) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 12 Dec 2018 14:53:27 -0800
From: Jim Schaad <ietf@augustcellars.com>
To: 'Christian Amsüss' <christian@amsuess.com>
CC: core@ietf.org
References: <017201d48f49$99516560$cbf43020$@augustcellars.com> <20181212205851.GB665@hephaistos.amsuess.com>
In-Reply-To: <20181212205851.GB665@hephaistos.amsuess.com>
Date: Wed, 12 Dec 2018 14:58:24 -0800
Message-ID: <04f401d4926e$313c4bc0$93b4e340$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQGaQDm3ahWv+IpE48JP95kmLAjOJQC6+azTpeqDdvA=
Content-Language: en-us
X-Originating-IP: [50.252.25.182]
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/zjGwhrrQaJSnpfw5GAXZo-RUkbI>
Subject: Re: [core] Anycast and CoRE
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Dec 2018 22:58:38 -0000


> -----Original Message-----
> From: Christian Amsüss <christian@amsuess.com>
> Sent: Wednesday, December 12, 2018 12:59 PM
> To: Jim Schaad <ietf@augustcellars.com>
> Cc: core@ietf.org
> Subject: Re: [core] Anycast and CoRE
> 
> On Sat, Dec 08, 2018 at 02:58:54PM -0800, Jim Schaad wrote:
> > I am trying to figure out if Anycast is supposed to have the response
> > on the Anycast address like Unicast does, or if it should be returned
> > on a Unicast address.
> 
> I can't offer guidence, just my .02€:
> 
> The client may not know that it's talking to a multicast server.
> Therefore, the client would not correlate any messages from a unicast address.
> 
> As for the block-wise transport, the effects would not be too bad:
> If it's a stateless transfer, all is fine. If the anycast servers have a magic
> backplane that distributes incomplete transfer states, likewise.
> Otherwise, the transmission needs to be restarted.

Would this potentially have a problem if one is using ETag for correlation?  I would not assume that the ETag values would be the same on both servers.  I think you might be in a situation where you need to restart the block transfer from scratch.

> 
> Can't say much about DTLS, but in OSCORE that'd be an ideal use case for the
> appendix B2 protocol. When the route flips, the client will get a
> 4.01 once and continue exchanging data with the protocol's Req2 message.

I guess this is a case where one would expect that the same credentials would be on all of the anycast machines since otherwise one would not be able to do this roll over.  You might get a 4.01 and need to get a new token from the AS instead.

Jim

> 
> Best regards
> Christian
> 
> --
> There's always a bigger fish.
>   -- Qui-Gon Jinn