Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)

"Naiming Shen (naiming)" <naiming@cisco.com> Wed, 29 November 2017 20:00 UTC

Return-Path: <naiming@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FF541293EC; Wed, 29 Nov 2017 12:00:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level:
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ACv28F7jcnvN; Wed, 29 Nov 2017 12:00:41 -0800 (PST)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D16912946C; Wed, 29 Nov 2017 12:00:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6874; q=dns/txt; s=iport; t=1511985630; x=1513195230; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=11e8OGFHJkEZxAntfIjuYm/jSsf8pcGxgbrT8vM43NY=; b=i6N7irlfqV7lippZQrimew4ZZEPMmqIPiKgdzCZRePMHG7HSPiF2GIXc 15Wk/RmQL3tHXmgreFwRbVpse6x1R2rtGHO9kmS6Kp8V6zyDjpoOEljh0 aMGEMt3VhMuEKqtHFPHJCZNj2ucWwGQiHdDbySMpoV+gpF04tZoaDMq61 Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DpAAAvER9a/4UNJK1cGQEBAQEBAQEBAQEBAQcBAQEBAYM8Zm4nB4N4iiCOUh6BVyaWdBCCAQojhRgCGoR6PxgBAQEBAQEBAQFrKIUfAQEBAQIBIxFFBQsCAQgYAgImAgICMBUQAgQOBYoaCBCnNoInimcBAQEBAQEBAQEBAQEBAQEBAQEBAQEYBYEPgjKBYCmDPykLgneDMoE7ARIBCRYHMQKCWzGCMgWKOpgTAodyjRqCFoYPiyyMeYkcAhEZAYE5AR85YVgYbxVkAYF+hFV3AYc+gSSBFAEBAQ
X-IronPort-AV: E=Sophos;i="5.45,339,1508803200"; d="scan'208";a="37541832"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Nov 2017 20:00:29 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id vATK0SrF001916 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 29 Nov 2017 20:00:28 GMT
Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 29 Nov 2017 14:00:28 -0600
Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Wed, 29 Nov 2017 14:00:28 -0600
From: "Naiming Shen (naiming)" <naiming@cisco.com>
To: Adam Roach <adam@nostrum.com>
CC: "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, The IESG <iesg@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>, "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>
Thread-Topic: Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
Thread-Index: AQHTaUsA/6Bd90PL80mKNi7ouvGrsqMsK2QA
Date: Wed, 29 Nov 2017 20:00:28 +0000
Message-ID: <CAF06B7C-2012-44E0-8016-82BC5ED1C349@cisco.com>
References: <151191903274.8045.11660427093374661131.idtracker@ietfa.amsl.com> <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com> <9b93c499-5c18-2474-415a-1303d9625252@nostrum.com>
In-Reply-To: <9b93c499-5c18-2474-415a-1303d9625252@nostrum.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.156.165.118]
Content-Type: text/plain; charset="utf-8"
Content-ID: <9A95C3A4E712CC4E828734A900A5C3CE@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/Sq51CkgKj90JhpJjX5_301g0u6c>
Subject: Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Nov 2017 20:00:43 -0000

Hi Adam,

> On Nov 29, 2017, at 11:48 AM, Adam Roach <adam@nostrum.com> wrote:
> 
> Naiming --
> 
> Thanks for your quick reply. I had to do a bit more reading about DHCP relay behavior to understand your response to my third point, but it all seems to make sense now. I appreciate your taking the time to clarify. It might be helpful to extend the final paragraph in the examples section to include getting the Relay-reply all the way back to Relay1.

Thanks. Yes, I just added a sentence to complete the whole thing in my updated
draft in 08.txt.

BTW, for the length=0 part, one more note:-)
I initially was going to do that, but when I implemented this draft in the
ISC DHCP code base, I found that the DHCPv6 option does not support
variable size structure;-) and I also searched for all the other v6 options,
none of them are variable sized; thus the choice to use fixed size and
make the ‘downstream port’ = 0 is the choice. just FYI.

thanks.
- Naiming

> 
> Your answers for the other two points seem reasonable.
> 
> Thanks!
> 
> /a
> 
> On 11/28/17 8:00 PM, Naiming Shen (naiming) wrote:
>> Hi Adam,
>> 
>> Thanks for the comments, replies inline <NS> … </NS>
>> 
>>> On Nov 28, 2017, at 5:30 PM, Adam Roach <adam@nostrum.com> wrote:
>>> 
>>> Adam Roach has entered the following ballot position for
>>> draft-ietf-dhc-relay-port-07: No Objection
>>> 
>>> When responding, please keep the subject line intact and reply to all
>>> email addresses included in the To and CC lines. (Feel free to cut this
>>> introductory paragraph, however.)
>>> 
>>> 
>>> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
>>> for more information about IESG DISCUSS and COMMENT positions.
>>> 
>>> 
>>> The document, along with other ballot positions, can be found here:
>>> https://datatracker.ietf.org/doc/draft-ietf-dhc-relay-port/
>>> 
>>> 
>>> 
>>> ----------------------------------------------------------------------
>>> COMMENT:
>>> ----------------------------------------------------------------------
>>> 
>>> Thanks for your time on this document. I have one minor correction and two
>>> questions.
>>> 
>>> The introduction says: "...for IPv6 the server port is (546) and the client
>>> port is (547)."  I believe this is backwards.
>>> 
>> Yes. Will fix.
>> 
>>> Section 5.2 says:
>>> 
>>>   If this option is included to
>>>   indicate only the local non-DHCP UDP port usage and there is no
>>>   downstream relay agent's non-DHCP UDP port usage, the field
>>>   Downstream Source Port field MUST be set to zero.
>>> 
>>> Was the use of length=0 considered rather that port=0 here? The reason I ask is
>>> that UDP port 0 is *reserved*, but not technically *invalid*, and the use of
>>> "length=0" would distinguish between the flag usage and the port usage while
>>> not precluding the valid (if admittedly rare) use of port=0.
>>> 
>> Although it’s valid, but should not be used. Or here this draft saying an
>> alternative relay-port is a non-zero number. Will mention that.
>> 
>>> Finally, I have a question about DHCPv6 relay agent chains that arose in
>>> reading the document. The example section actually gives a pretty good jumping
>>> off point to ask the question, so I'll quote an excerpt here:
>>> 
>>>   Similar to the above example, now assume that Relay2 uses the UDP
>>>   source port of 2000 instead of 547 as in the diagram.  The Relay3
>>>   device needs to support this DHCP extension and it will set 2000 in
>>>   its "Downstream Source Port" field of the option in the Relay-forward
>>>   message.  When DHCP server sends the DHCP Relay-reply to Relay3,
>>>   Relay3 finds its own relay option has this "Downstream Source Port"
>>>   with the value of 2000.  Relay3 will use this UDP port when sending
>>>   the Relay-reply message to Relay2.
>>> 
>>> If we were to continue this paragraph all the way back to Relay1, it's not
>>> clear how Relay2 would know to use port 1000 when sending its Relay-reply
>>> message to Relay1. Does this mechanism have a limitation that only one Relay
>>> Agent in the forwarding chain is allowed to use a Non-DHCP UDP Port?
>>> 
>> No, there is no limitation on how many relay-agents in the chain to use the Non-DHCP
>> UDP port.
>> 
>> The rule is that, a relay-agent needs to use this relay-port option either
>> this agent itself uses a Non-DHCP port, or it’s downstream agent uses
>> a Non-DHCP port.
>> 
>> So, in the above example quoted,
>> - Relay1 will include the relay-port option in its relay-forward message
>> - Relay2 will include the relay-port option (also set the downstream port to 1000) in
>>   ins relay-forward message
>> 
>> when the relay-relay message comes to Relay2, it checks it’s own
>> relay-port option is included, and it gets the 1000 port number to use.
>> this is no different when Relay2 itself does not use a Non-DHCP port.
>> 
>> thanks.
>> - Naiming
>> 
>