Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)

"Naiming Shen (naiming)" <naiming@cisco.com> Wed, 29 November 2017 02:47 UTC

Return-Path: <naiming@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4136F126BF7; Tue, 28 Nov 2017 18:47:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.52
X-Spam-Level:
X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bKpRzKlgXhxy; Tue, 28 Nov 2017 18:47:45 -0800 (PST)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B92031200C1; Tue, 28 Nov 2017 18:47:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=36526; q=dns/txt; s=iport; t=1511923664; x=1513133264; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=0cTu19LVPGIBAsyCC3ZcIEzP2pVmlgqfuMmW2VccA6I=; b=DH+mpkDr2bbqIt0Nm3dtgRhczy2u3c8suprYNSGstFoXd6kWSAXFAGp4 UVSU5czG1mkGsEWioT773Ptfb+TwWoWEyQLAdBYW5fX49YmDSr8K6yogj hpugwiAH3KJbC2mFkkTlgLf1b43CSGrEWiRS4nsr2iDVQ819cHKY7sbCR k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0ADAQBvHx5a/5ldJa1cGQEBAQEBAQEBAQEBAQcBAQEBAYJKcmZuJweDeIogjnsegVeXGhCCAQojhRgCGoRsPxgBAQEBAQEBAQFrKIUgBiNWEAIBCDgBBgMCAgIwFBECBA4FiT5kEKZJgieKaQEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgz2BYCmDPykLgneEbAESAQkdMYJdMYIyBYo6jnCJIwKHcY0aghaGD4ssjHmJHAIRGQGBOQEfOWFYGG8VZAGBfoRVdwGHa4EkgRQBAQE
X-IronPort-AV: E=Sophos; i="5.44,470,1505779200"; d="scan'208,217"; a="37158372"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Nov 2017 02:47:22 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id vAT2lMZB003996 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 29 Nov 2017 02:47:22 GMT
Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 28 Nov 2017 20:47:21 -0600
Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Tue, 28 Nov 2017 20:47:21 -0600
From: "Naiming Shen (naiming)" <naiming@cisco.com>
To: Adam Roach <adam@nostrum.com>
CC: The IESG <iesg@ietf.org>, "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>
Thread-Topic: Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
Thread-Index: AQHTaLGo/6Bd90PL80mKNi7ouvGrsqMq/sWAgAANLQA=
Date: Wed, 29 Nov 2017 02:47:21 +0000
Message-ID: <23744FF5-C543-4157-AD9E-574F98F8D65D@cisco.com>
References: <151191903274.8045.11660427093374661131.idtracker@ietfa.amsl.com> <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com>
In-Reply-To: <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.156.165.175]
Content-Type: multipart/alternative; boundary="_000_23744FF5C5434157AD9E574F98F8D65Dciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/hFO7lV8yq3ZOBkMZ-9boUVQEJaY>
Subject: Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Nov 2017 02:47:47 -0000

Just to add that, every relay-agent will add its ‘downstream’ non-dhcp port,
not its own non-dhcp port. So, relay2 sets relay1’s port, relay3 sets relay2’s
port, that how the upstream relay device know how to reach the downstream
relay non-dhcp port when relay the relay-reply message by looking at its own option.

thanks.
- Naiming

On Nov 28, 2017, at 6:00 PM, Naiming Shen (naiming) <naiming@cisco.com<mailto:naiming@cisco.com>> wrote:


Hi Adam,

Thanks for the comments, replies inline <NS> … </NS>

On Nov 28, 2017, at 5:30 PM, Adam Roach <adam@nostrum.com<mailto:adam@nostrum.com>> wrote:

Adam Roach has entered the following ballot position for
draft-ietf-dhc-relay-port-07: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-dhc-relay-port/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for your time on this document. I have one minor correction and two
questions.

The introduction says: "...for IPv6 the server port is (546) and the client
port is (547)."  I believe this is backwards.


Yes. Will fix.

Section 5.2 says:

 If this option is included to
 indicate only the local non-DHCP UDP port usage and there is no
 downstream relay agent's non-DHCP UDP port usage, the field
 Downstream Source Port field MUST be set to zero.

Was the use of length=0 considered rather that port=0 here? The reason I ask is
that UDP port 0 is *reserved*, but not technically *invalid*, and the use of
"length=0" would distinguish between the flag usage and the port usage while
not precluding the valid (if admittedly rare) use of port=0.


Although it’s valid, but should not be used. Or here this draft saying an
alternative relay-port is a non-zero number. Will mention that.

Finally, I have a question about DHCPv6 relay agent chains that arose in
reading the document. The example section actually gives a pretty good jumping
off point to ask the question, so I'll quote an excerpt here:

 Similar to the above example, now assume that Relay2 uses the UDP
 source port of 2000 instead of 547 as in the diagram.  The Relay3
 device needs to support this DHCP extension and it will set 2000 in
 its "Downstream Source Port" field of the option in the Relay-forward
 message.  When DHCP server sends the DHCP Relay-reply to Relay3,
 Relay3 finds its own relay option has this "Downstream Source Port"
 with the value of 2000.  Relay3 will use this UDP port when sending
 the Relay-reply message to Relay2.

If we were to continue this paragraph all the way back to Relay1, it's not
clear how Relay2 would know to use port 1000 when sending its Relay-reply
message to Relay1. Does this mechanism have a limitation that only one Relay
Agent in the forwarding chain is allowed to use a Non-DHCP UDP Port?


No, there is no limitation on how many relay-agents in the chain to use the Non-DHCP
UDP port.

The rule is that, a relay-agent needs to use this relay-port option either
this agent itself uses a Non-DHCP port, or it’s downstream agent uses
a Non-DHCP port.

So, in the above example quoted,
- Relay1 will include the relay-port option in its relay-forward message
- Relay2 will include the relay-port option (also set the downstream port to 1000) in
 ins relay-forward message

when the relay-relay message comes to Relay2, it checks it’s own
relay-port option is included, and it gets the 1000 port number to use.
this is no different when Relay2 itself does not use a Non-DHCP port.

thanks.
- Naiming