Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)

"Naiming Shen (naiming)" <naiming@cisco.com> Wed, 29 November 2017 02:00 UTC

Return-Path: <naiming@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1611128CFF; Tue, 28 Nov 2017 18:00:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level:
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tyR5cuEz8VMB; Tue, 28 Nov 2017 18:00:15 -0800 (PST)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E311B126E7A; Tue, 28 Nov 2017 18:00:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5058; q=dns/txt; s=iport; t=1511920815; x=1513130415; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=QJeipD/eGZrN2LclZZ0pRurWcBNXRWXt+O2jz29bJuY=; b=KzdLyJK7TVWUDYa9gbtHUn+TKTRIp8D3k6/PxmBWrzplbjmGt2AsTXEH eU6/1uCFGxJDlcQqC1/N6jlPqhqED+pJNQqXv02O+SQV2NokeFIiNOmHh cQ9yEc3EOXkXJB92gZrv3fJ1CNlxqFiiq0lDsXsf/rjsj6Qb3uZRXPPbU E=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DJAAB9Ex5a/4YNJK1cGQEBAQEBAQEBAQEBAQcBAQEBAYM8Zm4nB4N4iiCOex6BfZZzEIIBCiOFGAIahGw/GAEBAQEBAQEBAWsohR8BAQEBAgEjEUUFCwIBCBgCAiYCAgIwFRACBA4FihoIEKZJgieKaAEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQ+CLoFgKYM/KYMChGwBEgEJFgcxAoJbMYIyBYo6mBICh3GNGoIWhg6LLIx4iRsCERkBgTkBHzlhWBhvFWQBgX6EVXcBiDGBJIEUAQEB
X-IronPort-AV: E=Sophos;i="5.44,470,1505779200"; d="scan'208";a="326191422"
Received: from alln-core-12.cisco.com ([173.36.13.134]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Nov 2017 02:00:13 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id vAT20Dla013027 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 29 Nov 2017 02:00:13 GMT
Received: from xch-rcd-004.cisco.com (173.37.102.14) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Tue, 28 Nov 2017 20:00:13 -0600
Received: from xch-rcd-004.cisco.com ([173.37.102.14]) by XCH-RCD-004.cisco.com ([173.37.102.14]) with mapi id 15.00.1320.000; Tue, 28 Nov 2017 20:00:12 -0600
From: "Naiming Shen (naiming)" <naiming@cisco.com>
To: Adam Roach <adam@nostrum.com>
CC: The IESG <iesg@ietf.org>, "draft-ietf-dhc-relay-port@ietf.org" <draft-ietf-dhc-relay-port@ietf.org>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>
Thread-Topic: Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
Thread-Index: AQHTaLGo/6Bd90PL80mKNi7ouvGrsqMq/sWA
Date: Wed, 29 Nov 2017 02:00:12 +0000
Message-ID: <5E426AD9-AB42-4C89-93F0-4495A4164C0D@cisco.com>
References: <151191903274.8045.11660427093374661131.idtracker@ietfa.amsl.com>
In-Reply-To: <151191903274.8045.11660427093374661131.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.156.165.175]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0C3D718869BF5E46A57FA7772D96D7C3@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/vXsBlxvRy37FKmB4L3mHz26QFc8>
Subject: Re: [dhcwg] Adam Roach's No Objection on draft-ietf-dhc-relay-port-07: (with COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Nov 2017 02:00:17 -0000

Hi Adam,

Thanks for the comments, replies inline <NS> … </NS>

> On Nov 28, 2017, at 5:30 PM, Adam Roach <adam@nostrum.com> wrote:
> 
> Adam Roach has entered the following ballot position for
> draft-ietf-dhc-relay-port-07: No Objection
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-dhc-relay-port/
> 
> 
> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> Thanks for your time on this document. I have one minor correction and two
> questions.
> 
> The introduction says: "...for IPv6 the server port is (546) and the client
> port is (547)."  I believe this is backwards.
> 

Yes. Will fix.

> Section 5.2 says:
> 
>   If this option is included to
>   indicate only the local non-DHCP UDP port usage and there is no
>   downstream relay agent's non-DHCP UDP port usage, the field
>   Downstream Source Port field MUST be set to zero.
> 
> Was the use of length=0 considered rather that port=0 here? The reason I ask is
> that UDP port 0 is *reserved*, but not technically *invalid*, and the use of
> "length=0" would distinguish between the flag usage and the port usage while
> not precluding the valid (if admittedly rare) use of port=0.
> 

Although it’s valid, but should not be used. Or here this draft saying an
alternative relay-port is a non-zero number. Will mention that.

> Finally, I have a question about DHCPv6 relay agent chains that arose in
> reading the document. The example section actually gives a pretty good jumping
> off point to ask the question, so I'll quote an excerpt here:
> 
>   Similar to the above example, now assume that Relay2 uses the UDP
>   source port of 2000 instead of 547 as in the diagram.  The Relay3
>   device needs to support this DHCP extension and it will set 2000 in
>   its "Downstream Source Port" field of the option in the Relay-forward
>   message.  When DHCP server sends the DHCP Relay-reply to Relay3,
>   Relay3 finds its own relay option has this "Downstream Source Port"
>   with the value of 2000.  Relay3 will use this UDP port when sending
>   the Relay-reply message to Relay2.
> 
> If we were to continue this paragraph all the way back to Relay1, it's not
> clear how Relay2 would know to use port 1000 when sending its Relay-reply
> message to Relay1. Does this mechanism have a limitation that only one Relay
> Agent in the forwarding chain is allowed to use a Non-DHCP UDP Port?
> 

No, there is no limitation on how many relay-agents in the chain to use the Non-DHCP
UDP port.

The rule is that, a relay-agent needs to use this relay-port option either
this agent itself uses a Non-DHCP port, or it’s downstream agent uses
a Non-DHCP port.

So, in the above example quoted, 
- Relay1 will include the relay-port option in its relay-forward message
- Relay2 will include the relay-port option (also set the downstream port to 1000) in
  ins relay-forward message

when the relay-relay message comes to Relay2, it checks it’s own
relay-port option is included, and it gets the 1000 port number to use.
this is no different when Relay2 itself does not use a Non-DHCP port.

thanks.
- Naiming

>