Re: [dhcwg] Tsvart Last Call/telechat review of draft-ietf-dhc-rfc3315bis-10

Allison Mankin <allison.mankin@gmail.com> Thu, 25 January 2018 21:08 UTC

Return-Path: <allison.mankin@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D40FA12EAB5; Thu, 25 Jan 2018 13:08:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a8idaIybYSiB; Thu, 25 Jan 2018 13:08:52 -0800 (PST)
Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34F0312EAB1; Thu, 25 Jan 2018 13:08:52 -0800 (PST)
Received: by mail-pg0-x22c.google.com with SMTP id 136so5855643pgd.8; Thu, 25 Jan 2018 13:08:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=x5AI7rtk4XYO/yK+TGuCD3QNyxPg2tTc85t26Vz0YNs=; b=GjgbpNthI8Ex3LI6uZ1ofksutSp/Jlymgv5SVWD/SlkZxIy36mEm20R/nrAwmOo/DY xHDTfQ+0LzPYXp+mC8wNAa7rxjO8JSmyKd6UysO445y9jBadPSh4ZRWNib4rwhuc1xs9 s8t5Dg25pjoI/6UgyL/iAFCjsUpirQCdwtgivs8sLcnhzkOpePkKle8RzmlFl5P9b82e Jt+xDdhVUZr0Duv1RVFfm5lEcbgxOE0bg5cP1QktySU598CLSVOMRp+Mau6iU9HDdt43 wpoj0rDaD1N34nef14RTZ6czd+UaOlIfO4xueWN7rB997xIPruYMVKEZ/tLCeqyJ1KQA qcug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=x5AI7rtk4XYO/yK+TGuCD3QNyxPg2tTc85t26Vz0YNs=; b=mWim5n3h9w39EqHA75LA953Xy67aFZAFFMLVTkr4KastaDjFtOF5Okw8MOEbKizuKt sh0Dur6pqY+e52Od8tqvwBdHLOtLJD5e2eo+cUh6RbabtKAfr3tBn0MMyKUg/vK6lJSN KmNJTmWF4sy6S5BdKc1skuXJ481g5VxpEUvel8VG0+/u6ombuOx5eO21xVGsQS5evDjw te7jE1zbOgm9c3FQ8KGl3xT4Y4MmtJsnDDL6a57t3YMaBY+vT76zqYalBqtkJ2anZ7xm tZeqlwEEtBCAnUxJ8Qs+zS7Wa/ca1lI1a9tfhtv0yEvRwixIEDbALRzbuoKTrz3Ihw0j CWPQ==
X-Gm-Message-State: AKwxyteKChgP86CncDi4Coxz8XAAHkvEW5QJxQDPCnxX0s8EUquOKJFQ TrlanIQR+GHhyVMh+EU4aW77Qc2dZWFcPEBoSv0=
X-Google-Smtp-Source: AH8x225h4WDhIjNkyEqvViPu39FJEG4ATM82aownp1DKOR7ZSivE5IQQ8Udvj+GUmdLoLn8yuHAkmyGB9/N1Nu+RAEY=
X-Received: by 2002:a17:902:b70e:: with SMTP id d14-v6mr12694587pls.224.1516914531356; Thu, 25 Jan 2018 13:08:51 -0800 (PST)
MIME-Version: 1.0
Received: by 10.236.177.6 with HTTP; Thu, 25 Jan 2018 13:08:50 -0800 (PST)
Received: by 10.236.177.6 with HTTP; Thu, 25 Jan 2018 13:08:50 -0800 (PST)
In-Reply-To: <63e2bfcda69744218b218b104483e5f4@XCH-ALN-003.cisco.com>
References: <CAP8yD=veyDjwbkHVJUjrk8Ejy+yGXoENco4fR9QEsQO2OSABwg@mail.gmail.com> <63e2bfcda69744218b218b104483e5f4@XCH-ALN-003.cisco.com>
From: Allison Mankin <allison.mankin@gmail.com>
Date: Thu, 25 Jan 2018 16:08:50 -0500
Message-ID: <CAP8yD=tqtzRVVr_zxxssKiYhZFHTMyn1-8wBSekoeK4FQKYenw@mail.gmail.com>
To: "Bernie Volz (volz)" <volz@cisco.com>
Cc: dhcwg@ietf.org, IETF Discussion <ietf@ietf.org>, draft-ietf-dhc-rfc3315bis.all@ietf.org, tsv-art@ietf.org, ajm <allison.mankin@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000cbd51a0563a02fbb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/1VO_kqrZwkU1SqeFVlquQLCe2wQ>
Subject: Re: [dhcwg] Tsvart Last Call/telechat review of draft-ietf-dhc-rfc3315bis-10
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Jan 2018 21:08:55 -0000

Bernie,

Thank you for the very responsive reply. I just went through it carefully
and I like all of your suggestions for handling my comments.

If it is possible to lower the maximum number of relays now rather than
when going from PS to Full, as you mentioned,  that too would be great.

Best,

Allison
On Jan 25, 2018 12:01 PM, "Bernie Volz (volz)" <volz@cisco.com> wrote:

> Hi:
>
>
>
> Thanks much for the review.
>
>
>
> See the comments inline below (BV>).
>
>
>
> -          Bernie
>
>
>
> *From:* Allison Mankin [mailto:allison.mankin@gmail.com]
> *Sent:* Wednesday, January 24, 2018 5:44 PM
> *To:* tsv-art@ietf.org
> *Cc:* IETF Discussion <ietf@ietf.org>; draft-ietf-dhc-rfc3315bis.all@
> ietf.org; dhcwg@ietf.org
> *Subject:* Tsvart Last Call/telechat review of
> draft-ietf-dhc-rfc3315bis-10
>
>
>
> Reviewer: Allison Mankin
>
> Reviewer Result: Ready with Issues
>
>
>
> I've reviewed this document as part of TSV-ART's ongoing effort to review
> key
> IETF documents. These comments were written primarily for the transport
> area
> directors, but are copied to the document's authors for their information
> and
> to allow them to address any issues raised.  When done at the time of IETF
> Last
> Call, the authors should consider this review together with any other
> last-call
> comments they receive. Please always CC tsv-art@ietf.org if you reply to
> or
> forward this review.
>
>
>
> The draft brings together and updates multiple RFCs in order to provide a
> cleaned-up version of the DHCPv6 specification.
>
>
>
> It is good to see that this Bis document for DHCPv6 has done some new work
> on congestion control and towards packet storm controls.  This is noted in
> items 12 of Appendix A (the summary of changes) and the sections on Rate
> Limiting (14.1) and Reliability (15) are basically in good shape, which is
> why the summary is Ready with issues.
>
>
>
> The following  transport-related comments should be considered for fixing
> before publication
>
>
>
> 1. In Section 5, which defines that the transport is UDP, add a normative
> reference to BCP 145, UDP Usage Guidelines.
>
>
>
> BV> OK, we can add.
>
>
>
> 2. There are several small issues about retransmissions:
>
>
>
> a) there's a transmit parameters table 7.6 and it would be good for this
> to reference that these parameters are also controlled by the RND factor
> parameter and the backoffs in section 14.1
>
>
>
> BV> OK, we’ll see what text we can craft for this. Perhaps something like
> “Some of the values are adjusted by a randomization factor and backoffs
> (see Section 15) and transmissions may be influenced by rate limiting (see
> Section 14.1).”
>
>
>
> b) The REC_TIMEOUT parameter in the table in section 7.6 is in seconds,
> but it is described as milliseconds in section 18.3
>
>
>
> BV> OK, we will rework the text in 18.3.11. Perhaps replace:
>
>
>
>    If the server does not receive a Renew, Rebind, or Information-
>
>    request message from the client in REC_TIMEOUT milliseconds, the
>
>    server retransmits the Reconfigure message, doubles the REC_TIMEOUT
>
>    value and waits again.  The server continues this process until
>
>    REC_MAX_RC unsuccessful attempts have been made, at which point the
>
>    server SHOULD abort the reconfigure process for that client.
>
>
>
> With:
>
>
>
> When transmitting the Reconfigure message, the server sets the
> retransmission time (RT) to REC_TIMEOUT. If the server does not receive a
> Renew, Rebind, or Information-request message from the client before the RT
> elapses, the server retransmits the Reconfigure message, doubles the RT
> value, and waits again. The server continues this process until REC_MAX_RC
> unsuccessful attempts have been made, at which point the server SHOULD
> abort the reconfigure process for that client.
>
>
>
> c) does the rate-limit per device per interface  (a MUST in Section 14.1)
> explicltly include retransmissions?  This should probably be stated earlier
> on in the section.
>
>
>
> BV> Yes, any transmission by the client. Note that section 14.1 doesn’t
> generally need to apply to retransmission timers because those would not
> trigger the rate limiting. The rate limiting is more to deal with “possible
> logic loops”.
>
>
>
> We can change 14.1’s first sentence to add “or retransmits” to the end to
> clarify that this applies to all DHCP transmissions.
>
>
>
> 3. The following addition to the spec in Section 15 seems likely to cause
> excess retransmissions:
>
>
>
>   A client is not expected to listen for a response during the entire
>    RT period and may turn off listening capabilities after a certain
>    time due to power consumption saving or other reasons.  Of course, a
>    client MUST listen for a Reconfigure if it has negotiated for its use
>    with the server.
>
>
>
> If this congestion avoidance is working, then the clients may need to
> retransmit mostly in cases where the round-trip time isn't very variable.
> So I'd be tempted to say "after a certain time" should be after the initial
> round-trip timeout, so as not to have too many near-misses.
>
>
>
> BV> OK, this was to address the LONG RTs for Solicit/Information-Request
> when no DHCPv6 server is present – as the RT period here can an hour
> (SOL_MAX_RT/INF_MAX_RT) or perhaps longer if the SOL_MAX_RT / INF_MAX_RT
> had previously been received by the client. Perhaps we should recommend
> that this be at least some minimum time, such as 60 seconds? (Not sure if
> there’s a good general system parameter to use, such as ipReasmTimeout?)
> Or, could add a new entry to the section 7 table (MAX_WAIT_TIME, 60 secs,
> Maximum required time to wait for a response) and then change the text to
> use it?
>
>
>
>    A client is not expected to listen for a response during the entire
>
>    RT period and may turn off listening capabilities after waiting at
>
>    least the shorter of RT and MAX_WAIT_TIME due to power
>
>    consumption saving or other reasons.  Of course, a client MUST
>
>    listen for a Reconfigure if it has negotiated for its use with the
>
>    server.
>
>
>
> There’s a lot of text in BCP 145, UDP Usage Guidelines, but there’s no
> direct recommendation (at least that I found).
>
>
>
> And, perhaps there is a good argument to make MAX_WAIT_TIME smaller (30
> seconds)?
>
>
>
> Not transport related, but should be fixed:
>
>
>
>  In Section 6.5, don't cite both RFC 3041 and RFC 4941 (about IPv6 privacy
> addresses), because RFC 4941 obsoletes RFC 30410.
>
>
>
> BV> Yes, this has been recommended by others and we will remove 3041.
>
>
>
> ---------------
>
>
>
> I expect there are some risks in the space of congestion avoidance when
> the up-to-32 transparent relays are in place, and I'd want to see (for
> future reference, not requesting a change here) some consideration about
> this before this spec moves from PS to Full Standard.
>
>
>
> BV> OK, we can ignore for now. However, it may just be appropriate to
> reduce the HOP_COUNT_LIMIT value (in 3315bis). I think a value of 8 would
> be far more reasonable and still be much more than anyone would ever need
> (and if it becomes an issue, then write an Internet-Draft to increase and
> address any congestion avoidance issues). I think that would also address
> your concern now, which is better than to do changes later (especially if
> not needed).
>
>
>
> All networks I’m aware of have only used 1 relay agent. I think RFC 6221
> (Lightweight DHCPv6 Relay Agent), in some deployments, might have 2.
> Setting limit to 8 would still provide plenty of headroom.
>
>
>
>
>
> ​
>
>
>