[dhcwg] WG meeting follow-up - draft-ietf-dhc-rfc3315bis (1/3) - Raise objections by 12/1/2017

"Bernie Volz (volz)" <volz@cisco.com> Wed, 23 November 2016 19:44 UTC

Return-Path: <volz@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4423A129E46 for <dhcwg@ietfa.amsl.com>; Wed, 23 Nov 2016 11:44:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.018
X-Spam-Level:
X-Spam-Status: No, score=-16.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z1MTUxuL21-K for <dhcwg@ietfa.amsl.com>; Wed, 23 Nov 2016 11:44:32 -0800 (PST)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 427E7129E2A for <dhcwg@ietf.org>; Wed, 23 Nov 2016 11:44:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10889; q=dns/txt; s=iport; t=1479930272; x=1481139872; h=from:to:subject:date:message-id:mime-version; bh=hWEnJlCbEITIaTqjqKuTqhVLxw7krtif7tNRgTxKVyk=; b=FknXWo/HlpQJWb35ln/g24fbrDm9P4YFHOQOg/dXCprMfaus9StzR5Ar 0Mixs857Gll0ryX5qbGvAeHH4yiYHQgPxHwkG03pAsQrs+bb/0JBQ0tXY mQcg/Gc3lT6Bb6x33zL7w/dtPceY2N/purW597v7+lui6BiLXehApxH+M 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BvAQAj8TVY/5hdJa1eGgEBAQECAQEBAQgBAQEBgnNFAQEBAQEfWIECB405pm6FH4IHKogWPxQBAgEBAQEBAQFiHQuEbQItXgGBACYBBBuIZQ6eHZIli1UBAQEBAQEEAQEBAQEBARsFjzQRAQaCYoMVBZpPAZB3kDmRdQEeN142HoNlgUVyAYYWgSGBDQEBAQ
X-IronPort-AV: E=Sophos;i="5.31,539,1473120000"; d="scan'208,217";a="350776782"
Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Nov 2016 19:44:31 +0000
Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id uANJiVpn026254 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL) for <dhcwg@ietf.org>; Wed, 23 Nov 2016 19:44:31 GMT
Received: from xch-aln-003.cisco.com (173.36.7.13) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 23 Nov 2016 13:44:30 -0600
Received: from xch-aln-003.cisco.com ([173.36.7.13]) by XCH-ALN-003.cisco.com ([173.36.7.13]) with mapi id 15.00.1210.000; Wed, 23 Nov 2016 13:44:30 -0600
From: "Bernie Volz (volz)" <volz@cisco.com>
To: "dhcwg@ietf.org" <dhcwg@ietf.org>
Thread-Topic: WG meeting follow-up - draft-ietf-dhc-rfc3315bis (1/3) - Raise objections by 12/1/2017
Thread-Index: AdJFwM5vhF36djpVRHyUWmOuS8VEHw==
Date: Wed, 23 Nov 2016 19:44:30 +0000
Message-ID: <b059e3c62d9b42eeb8a74a1e004e607d@XCH-ALN-003.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.98.1.195]
Content-Type: multipart/alternative; boundary="_000_b059e3c62d9b42eeb8a74a1e004e607dXCHALN003ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/IqN7HRO1jW9qyfnrEmr38acO2s0>
Subject: [dhcwg] WG meeting follow-up - draft-ietf-dhc-rfc3315bis (1/3) - Raise objections by 12/1/2017
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Nov 2016 19:44:34 -0000

Hi:

At IETF-97 (Seoul) I presented several issues that had been raised by reviewers during the WGLC of draft-ietf-dhc-rfc3315bis-05.

The first was regarding RFC 7083 SOL_MAX_RT/INF_MAX_RT:

Here are the Etherpad notes taken by Tim Chown and others:

  Proposal is to use "smallest" legal value across the received options
  In principle, all servers should be configured the same.
Ted Lemon: good idea to take the smallest length that you hear, to avoid bad guy sending long values.
Suresh: idea was to allow changes to default, including reducing traffic from it. Perhaps use default in cases of conflict?
Bernie: Sounds plausible.
Bernie: Also, when do you ever set it back to the default?  RFC 7083 doesn't talk about that.  Should we address that?
Suresh: Do you keep track of which value comes from which server?
Tomek: Implementation-specific.
Tim Winters: We only see it in home gateways; most lose it when you reboot. A couple keep it forever - interesting!  So might want to say something about this to avoid applying a value for ever.
Ted: I like Suresh's suggestion. Not likely to be a problem in typical use case; if cable modem sends a solicit, it's on the cable network, so unlikely to get a 3rd party attack is slim.  So, good idea, but not a serious issue. I suggest you discard values on link state transition.
Bernie: Should these options be allowed in confirm/rebind case?  Maybe doesn't matter.

Action: will confirm on list (inc. Suresh's suggestion?)

So, this email is to confirm that we use Suresh's suggested mechanism which is that when a Client is receiving responses for Solicits (or Information-Requests) it track the SOL_MAX_RT/INF_MAX_RT values that are received. If the values returned DIFFER between responses, the client should then use the default values.

Note: The assumption here is that only the values received while normally waiting to receive a response for a transmitted request are compared; values from previous attempts are ignored. If only one response is received, its value can be used.

We will assume that everyone supports this approach UNLESS someone raises an objection. You have until 12/1/2017 to raise an objection.

See slide #4 at https://www.ietf.org/proceedings/97/slides/slides-97-dhc-dhcpv6bis-open-issues-discussion-01.pdf.


-          Bernie (for the bis team)