Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - respond by Apr 26
"Bernie Volz (volz)" <volz@cisco.com> Tue, 25 April 2017 10:34 UTC
Return-Path: <volz@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44F5C12EB4F; Tue, 25 Apr 2017 03:34:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level:
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L7XThuye0DPH; Tue, 25 Apr 2017 03:33:58 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC35512EB4C; Tue, 25 Apr 2017 03:33:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=26198; q=dns/txt; s=iport; t=1493116437; x=1494326037; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=FFa0n8b908CCYu8FSNFgDDIE3qgNNdJgn2CGq7ky41A=; b=SnjuUH/V9c1t2c2x/9ywpPFXeZ1/K5FeC2fkqK2+S8PE3khJWMElsDHe 10TOV6MmbTtgK31RFKvUCDg6NXmAvAErOm7SY+DZuiDaqDDvMU1mPpiZy wPcu1admZWIkVimxjr66CG8SwYQZLpg5VOuLpOc0sVugGZ2srhZNsoFns 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DQAAD0JP9Y/5JdJa1bGQEBAQEBAQEBAQEBBwEBAQEBgm5mYXoSjXyRbpVlgg8hAQqFeAKEDz8YAQIBAQEBAQEBayiFFQEBAQEDAQFsCwwEAgEIEQMBAQEhBwcnCxQJCAIEDgUJihMOrF+LGgEBAQEBAQEBAQEBAQEBAQEBAQEBAR2IMCuCboE8gwU2gxSCMQWWSYZ4AYcWi2+CAIUziGeBPYhviykBHziBBmMVGioRAYRjgXN1iTYBAQE
X-IronPort-AV: E=Sophos;i="5.37,249,1488844800"; d="scan'208,217";a="235123095"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Apr 2017 10:33:56 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v3PAXupp017673 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 25 Apr 2017 10:33:56 GMT
Received: from xch-aln-003.cisco.com (173.36.7.13) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 25 Apr 2017 05:33:56 -0500
Received: from xch-aln-003.cisco.com ([173.36.7.13]) by XCH-ALN-003.cisco.com ([173.36.7.13]) with mapi id 15.00.1210.000; Tue, 25 Apr 2017 05:33:55 -0500
From: "Bernie Volz (volz)" <volz@cisco.com>
To: "Naiming Shen (naiming)" <naiming@cisco.com>
CC: Tomek Mrugalski <tomasz.mrugalski@gmail.com>, dhcwg <dhcwg@ietf.org>, "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>
Thread-Topic: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - respond by Apr 26
Thread-Index: AQHSrkJ4jGafpAaCIk+/kF5HBW5FkaHRyhDAgAQelgCAABm2Gw==
Date: Tue, 25 Apr 2017 10:33:55 +0000
Message-ID: <A699CC6A-7B19-493A-857F-B48E47A6540A@cisco.com>
References: <4cb9bdab-f3a2-a9d0-1056-302b5ecdeae7@gmail.com> <7ba7b94f31bb41dbb404ef1c33026431@XCH-ALN-003.cisco.com>, <A7E53EB4-4CBB-4E32-BDB4-F9C7CBDF0CB2@cisco.com>
In-Reply-To: <A7E53EB4-4CBB-4E32-BDB4-F9C7CBDF0CB2@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
Content-Type: multipart/alternative; boundary="_000_A699CC6A7B19493A857FB48E47A6540Aciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/aguj-R2ofqQvf3VhWrCgCjHXR6Y>
Subject: Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - respond by Apr 26
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 10:34:01 -0000
Sounds fine. - Bernie (from iPad) On Apr 25, 2017, at 12:02 AM, Naiming Shen (naiming) <naiming@cisco.com<mailto:naiming@cisco.com>> wrote: Hi Bernie, Thanks for the detailed comments. Replies inline: On Apr 22, 2017, at 11:31 AM, Bernie Volz (volz) <volz@cisco.com<mailto:volz@cisco.com>> wrote: Hi: I reviewed the 04 version. This document could use some updates. Below are my comments. I think these should be addressed before the document advances, but otherwise I think it should be mostly ready to move forward. 1. General - I would highly recommend this draft adopt and document the "DHCP" terminology as follows: DHCP means DHCPv4 and DHCPv6. DHCPv4 means the Dynamic Host Configuration Protocol for IPv4 as documented in RFC2131. DHCPv6 means the Dynamic Host Configuration Protocol for IPv6 as documented in RFC3315. And make use of these correctly. The document currently uses DHCP to mean DHCPv4 or both DHCPv4 and DHCPv6. Similarly, I 'd suggest using IPv4 and IPv6 (or IP when being general and apply to both or either). Sure. Makes sense. Will go through those and not to mix the DHCP and DHCPv4 usage. Some of the places, just IPv4 and IPv6 is fine. 2. Abstract - As currently written I don't see why this RFC is needed. Relay source ports in 2131/3315 are meaningless and the abstract "allows any valid number" which is already the case. It needs to be document that this provides the means for the relay to receive packets from a server or (upstream) relay on any port, not just the default port. Ok, what about this? This document proposes an extension to the DHCP protocols that allows a relay agent to receive packets from a server or an upstream relay agent on any UDP port, not just the default port 67 for IPv4 or default port 547 for IPv6. 3. Introduction (1) - The "to remember inbound" may cause some concern with regards to relay's -- since they actually do not remember anything (they are supposed to be stateless). I wonder if this text can be cleaned up -- servers need to "remember" while processing a packet; (cascading) relay's need to add this port information to the Relay-Forw packets. Ok, how about this? This extension requires a DHCP server to remember the inbound packet's UDP port number along with the IP/IPv6 address. The DHCP server when sending back replies MUST use the UDP port number that the incoming relay agent uses instead of the fixed DHCP port number. In the case of IPv6 cascaded relay agents [RFC3315], the upstream relay agent needs to use the "Relay Source Port Option" to record the downstream source port and it MUST use this recorded port number instead of the fixed DHCP port number when replaying the reply messages. 4. Section 4.2 - there are several places where "non-DHCP UDP port" is used. I wonder whether we could just say "port other than 547. I know this is in the terminology, but in this case it is DHCPv6 specific text so why make someone look it up? I guess you could use: "non-DHCP UDP Port (not 547)" or similar if you wanted to keep the reference to that term? This same comment applies to section 5.1 and 5.2 (though in 5.1 port 67 applies). In the end, it may be that the definition isn't that useful and perhaps that would even be better to remove it and just use the explicit port numbers? I think this would help readability. But review and consider. I still think it’s just too many places we are talking about both IPv4 and IPv6 and have to say both of the ports explicitly. But those some of the places is only for IPv4 or only for IPv6, I’ll do what you suggested, to use the (not 67) or to use the (not 547) in those places. 5. Section 7 (IANA). Please look at a document such as https://tools.ietf.org/html/rfc7839#section-8. To avoid confusion, we have put the URL of the tables in the IANA considerations. This practice should be followed here to that it is clear to IANA exactly which set of tables to update. Ok, sure. But the example you sited, it already had the IANA number assigned. For this one, we have not so far, how about these sentences? A new sub-option, DHCPv4 Relay Source Port, is defined in this document within the IPv4 Relay Agent Information Option. It needs to be assigned by IANA in the "DHCP Relay Agent Sub-Option Codes" registry, http://www.iana.org/assignments/bootp-dhcp-parameters as specified in [RFC3046]. A new option, DHCPv6 Relay Source Port, is defined in this document for DHCPv6 and it needs to be assigned by IANA for the DHCPv6 option code, in the "Option Codes" registry for DHCPv6, http://www.iana.org/assignments/dhcpv6-parameters as specified in [RFC3315]. 6. Section 8 (Security Considerations). This should reference the security considerations of RFC 2131 and 3315. The text that is there is more of an operational consideration rather than what security issues this new work might expose - which may be nothing new over 2131/3315. But pointing out that firewalls need to be adjusted is a good thing. Ok, I added this paragraph in the front, and a ‘Although’ to start the original sentence: [RFC3118] and [RFC3315] described many of the threats in using DHCP. This extension does not raise addition security issues. Although if the network uses firewall to block or allow DHCP packets …. 7. Section 10 (Document Change Log). Usually an RFC Editor note is added to request that they REMOVE this material in the RFC publication process. Sure. Will remove these in the next version. thanks. - Naiming - Bernie -----Original Message----- From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Tomek Mrugalski Sent: Wednesday, April 05, 2017 3:26 PM To: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>> Subject: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - respond by Apr 26 Hi, draft-ietf-dhc-relay-port-02 defines a small extension to the DHCPv4 and DHCPv6 protocols that allows usage of other UDP source ports to be used by relay agents. Authors believe this document is ready. The discussions so far on the mailing list were a bit modest, but the concept is simple, the draft was presented twice (in Buenos Aires and Berlin) and enjoyed a favourable reception in the room. As such, we announce a working group last call on this document. Please review and comment. This is a very short document. It has around 6 pages of actual text. Many WG participants may celebrate upcoming Easter and take some days off, therefore this WGLC is a bit longer than typical two weeks. Title: Generalized UDP Source Port for DHCP Relay Authors: N. Shen, E. Chen Filename: draft-ietf-dhc-relay-port-02 Pages: 10 (around 6 of actual technical text) Date: 2017-02-28 Link: https://tools.ietf.org/html/draft-ietf-dhc-relay-port-02 Responses by April 26th are appreciated. Thanks, Bernie and Tomek _______________________________________________ dhcwg mailing list dhcwg@ietf.org<mailto:dhcwg@ietf.org> https://www.ietf.org/mailman/listinfo/dhcwg
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Bernie Volz (volz)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Naiming Shen (naiming)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Bernie Volz (volz)
- [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - Pa… Tomek Mrugalski
- [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 - re… Tomek Mrugalski
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Naiming Shen (naiming)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Fang, Luyuan
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Ted Lemon
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Naiming Shen (naiming)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Ted Lemon
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Naiming Shen (naiming)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Naiming Shen (naiming)
- Re: [dhcwg] WGLC on draft-ietf-dhc-relay-port-02 … Peter Arberg