Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)

Adam Roach <adam@nostrum.com> Wed, 29 November 2017 19:48 UTC

Return-Path: <adam@nostrum.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D97E11289B5; Wed, 29 Nov 2017 11:48:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.88
X-Spam-Level:
X-Spam-Status: No, score=-1.88 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FPxUx_sHWfP; Wed, 29 Nov 2017 11:48:45 -0800 (PST)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F74D129353; Wed, 29 Nov 2017 11:48:30 -0800 (PST)
Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id vATJmNYR031433 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 29 Nov 2017 13:48:24 -0600 (CST) (envelope-from adam@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local
To: "Naiming Shen (naiming)" <naiming@cisco.com>
Cc: "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, The IESG <iesg@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>, "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>
References: <151191903274.8045.11660427093374661131.idtracker@ietfa.amsl.com> <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com>
From: Adam Roach <adam@nostrum.com>
Message-ID: <9b93c499-5c18-2474-415a-1303d9625252@nostrum.com>
Date: Wed, 29 Nov 2017 13:48:18 -0600
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:52.0) Gecko/20100101 Thunderbird/52.4.0
MIME-Version: 1.0
In-Reply-To: <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/51FnmW-Be07W7q1OHvOgDp19b50>
Subject: Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Nov 2017 19:48:50 -0000

Naiming --

Thanks for your quick reply. I had to do a bit more reading about DHCP 
relay behavior to understand your response to my third point, but it all 
seems to make sense now. I appreciate your taking the time to clarify. 
It might be helpful to extend the final paragraph in the examples 
section to include getting the Relay-reply all the way back to Relay1.

Your answers for the other two points seem reasonable.

Thanks!

/a

On 11/28/17 8:00 PM, Naiming Shen (naiming) wrote:
> Hi Adam,
>
> Thanks for the comments, replies inline <NS> … </NS>
>
>> On Nov 28, 2017, at 5:30 PM, Adam Roach <adam@nostrum.com> wrote:
>>
>> Adam Roach has entered the following ballot position for
>> draft-ietf-dhc-relay-port-07: No Objection
>>
>> When responding, please keep the subject line intact and reply to all
>> email addresses included in the To and CC lines. (Feel free to cut this
>> introductory paragraph, however.)
>>
>>
>> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
>> for more information about IESG DISCUSS and COMMENT positions.
>>
>>
>> The document, along with other ballot positions, can be found here:
>> https://datatracker.ietf.org/doc/draft-ietf-dhc-relay-port/
>>
>>
>>
>> ----------------------------------------------------------------------
>> COMMENT:
>> ----------------------------------------------------------------------
>>
>> Thanks for your time on this document. I have one minor correction and two
>> questions.
>>
>> The introduction says: "...for IPv6 the server port is (546) and the client
>> port is (547)."  I believe this is backwards.
>>
> Yes. Will fix.
>
>> Section 5.2 says:
>>
>>    If this option is included to
>>    indicate only the local non-DHCP UDP port usage and there is no
>>    downstream relay agent's non-DHCP UDP port usage, the field
>>    Downstream Source Port field MUST be set to zero.
>>
>> Was the use of length=0 considered rather that port=0 here? The reason I ask is
>> that UDP port 0 is *reserved*, but not technically *invalid*, and the use of
>> "length=0" would distinguish between the flag usage and the port usage while
>> not precluding the valid (if admittedly rare) use of port=0.
>>
> Although it’s valid, but should not be used. Or here this draft saying an
> alternative relay-port is a non-zero number. Will mention that.
>
>> Finally, I have a question about DHCPv6 relay agent chains that arose in
>> reading the document. The example section actually gives a pretty good jumping
>> off point to ask the question, so I'll quote an excerpt here:
>>
>>    Similar to the above example, now assume that Relay2 uses the UDP
>>    source port of 2000 instead of 547 as in the diagram.  The Relay3
>>    device needs to support this DHCP extension and it will set 2000 in
>>    its "Downstream Source Port" field of the option in the Relay-forward
>>    message.  When DHCP server sends the DHCP Relay-reply to Relay3,
>>    Relay3 finds its own relay option has this "Downstream Source Port"
>>    with the value of 2000.  Relay3 will use this UDP port when sending
>>    the Relay-reply message to Relay2.
>>
>> If we were to continue this paragraph all the way back to Relay1, it's not
>> clear how Relay2 would know to use port 1000 when sending its Relay-reply
>> message to Relay1. Does this mechanism have a limitation that only one Relay
>> Agent in the forwarding chain is allowed to use a Non-DHCP UDP Port?
>>
> No, there is no limitation on how many relay-agents in the chain to use the Non-DHCP
> UDP port.
>
> The rule is that, a relay-agent needs to use this relay-port option either
> this agent itself uses a Non-DHCP port, or it’s downstream agent uses
> a Non-DHCP port.
>
> So, in the above example quoted,
> - Relay1 will include the relay-port option in its relay-forward message
> - Relay2 will include the relay-port option (also set the downstream port to 1000) in
>    ins relay-forward message
>
> when the relay-relay message comes to Relay2, it checks it’s own
> relay-port option is included, and it gets the 1000 port number to use.
> this is no different when Relay2 itself does not use a Non-DHCP port.
>
> thanks.
> - Naiming
>