Re: [dhcwg] Ben Campbell's Discuss on draft-ietf-dhc-relay-port-08: (with DISCUSS and COMMENT)

"Naiming Shen (naiming)" <naiming@cisco.com> Thu, 30 November 2017 00:10 UTC

Return-Path: <naiming@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 178921286B1; Wed, 29 Nov 2017 16:10:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.52
X-Spam-Level:
X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DWdAkxeEpDYf; Wed, 29 Nov 2017 16:10:21 -0800 (PST)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E12A112773A; Wed, 29 Nov 2017 16:10:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2580; q=dns/txt; s=iport; t=1512000620; x=1513210220; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=0xMyzqEedJRElxzIxSmEOHg/cm93pkaliJO8tCQfYw8=; b=lG0/wvVRY+n9wRoKpijQ3KotJM9m7f+eRKSmvGlmVLUIsSrWbcjzs1AP fr5AGecgSSC7FYIXiv8/3oHmIxY3xNMQ3lK+5zX/TRyWoLcfPgDKEQgwH LMylGxLdKVk+VKeG2of/QxdgfDKfEdU3iQT0T8hK3cDQgraiTSBGhEbwg Q=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CpAACmSx9a/4QNJK1cGQEBAQEBAQEBAQEBAQcBAQEBAYM8gVQnB4N4iiCOcYF9lnSCEQqCAYM6AhqEez8YAQEBAQEBAQEBayiFHwEBAQECASMRRQULAgEIGAICJgICAjAVEAIEDgWKGginS4InimYBAQEBAQEBAQEBAQEBAQEBAQEBAQEdgQ+CMoIJg2iDAoUKCYMiMYIyAQSZKokjApUMghaRO4o5i1wCERkBgTkBHzmBUW8VZAGBfoMHgU53hzKBMYEUAQEB
X-IronPort-AV: E=Sophos;i="5.45,339,1508803200"; d="scan'208";a="326622267"
Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Nov 2017 00:10:19 +0000
Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id vAU0AJms031849 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 30 Nov 2017 00:10:19 GMT
Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 29 Nov 2017 18:10:19 -0600
Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Wed, 29 Nov 2017 18:10:19 -0600
From: "Naiming Shen (naiming)" <naiming@cisco.com>
To: Ben Campbell <ben@nostrum.com>
CC: The IESG <iesg@ietf.org>, "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>, dhcwg <dhcwg@ietf.org>, "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>, Ted Lemon <mellon@fugue.com>
Thread-Topic: [dhcwg] Ben Campbell's Discuss on draft-ietf-dhc-relay-port-08: (with DISCUSS and COMMENT)
Thread-Index: AQHTaVYtuZUuArhG2US4SOjv69UZUKMsQUWAgAAv14A=
Date: Thu, 30 Nov 2017 00:10:19 +0000
Message-ID: <A4518EC4-CA1D-470B-BEAF-3CBA46764B41@cisco.com>
References: <151198969282.31355.16877065112899804068.idtracker@ietfa.amsl.com> <200CE2CC-D6D1-40BA-843A-1193DFFDEE74@fugue.com>
In-Reply-To: <200CE2CC-D6D1-40BA-843A-1193DFFDEE74@fugue.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.156.165.118]
Content-Type: text/plain; charset="utf-8"
Content-ID: <884C3E12115DBC45A3B20BCAB55190F2@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/jMhUCWWfvr1vubPxHandeq8prGw>
Subject: Re: [dhcwg] Ben Campbell's Discuss on draft-ietf-dhc-relay-port-08: (with DISCUSS and COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Nov 2017 00:10:22 -0000

Hi Ben,

Thanks for the review.

I agree with Ted’s comment on this. This is targeted mainly in a single admin domain.
If an operator wants to turn on this feature on a relay(s), he/she can find out if the
server or upstream relay supports this or not, and it’s easy to disable this feature
if it does not work (could also be bugs in software).

Also, the configuration of the feature is on the relay, the upstream relays and
server as long as has the software upgraded, they don’t need configuration. This
is similar to other DHCP relay options, for example, the ‘Agent Cirucit ID’ or
the ’Subscriber-ID” sub-option, which does not require relay do discovery to find
out if server supports that or not, and as soon as the server has the updated software,
it would automatically supports this.

For the other "UPDATES..” tag. I’m quoting Bernie’s comment in another thread:

	"We’ve already had this discussion and debate. It only UPDATES if you want to
	use this new capabilities, we don’t have a flag for that. UPDATES usually implies
	that you must do that."


Best Regards,
- Naiming

> On Nov 29, 2017, at 1:19 PM, Ted Lemon <mellon@fugue.com> wrote:
> 
> Ben, the idea is that this is a very targeted approach for SDNs, not something that makes sense as a general update to the DHCP base specifications.   Since relays and servers are generally within the same administrative domain, there is little danger of actual interop issues—the operator is going to be customizing these settings very deliberately.   We also tend to assume that the DHCP server is pretty easy to update compared to relays or clients, so the fact that an updated relay might not work with a non-updated server isn't a major issue.   This isn't like TLS 1.3 where the server and the middleboxes are operated by agencies unknown to each other.
>