Re: [Dime] WG adoption call for draft-zorn-dime-rfc4005bis-01

Sebastien Decugis <sdecugis@nict.go.jp> Mon, 09 August 2010 01:34 UTC

Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 687F33A6A06 for <dime@core3.amsl.com>; Sun, 8 Aug 2010 18:34:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.827
X-Spam-Level:
X-Spam-Status: No, score=-0.827 tagged_above=-999 required=5 tests=[AWL=-0.992, BAYES_40=-0.185, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VBEIdH0zJnXq for <dime@core3.amsl.com>; Sun, 8 Aug 2010 18:34:18 -0700 (PDT)
Received: from sd-11965.dedibox.fr (sd-11965.dedibox.fr [88.191.67.190]) by core3.amsl.com (Postfix) with ESMTP id 3C43A3A69DB for <dime@ietf.org>; Sun, 8 Aug 2010 18:34:18 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by sd-11965.dedibox.fr (Postfix) with ESMTP id ADCDE27DD0; Mon, 9 Aug 2010 03:34:51 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at sd-11965.dedibox.fr
Received: from sd-11965.dedibox.fr ([127.0.0.1]) by localhost (sd-11965.dedibox.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kFoNpTYhA1DI; Mon, 9 Aug 2010 03:34:48 +0200 (CEST)
Received: from [202.249.37.5] (morbier.koganei.wide.ad.jp [202.249.37.5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by sd-11965.dedibox.fr (Postfix) with ESMTPSA id 5E7D327DCE; Mon, 9 Aug 2010 03:34:47 +0200 (CEST)
Message-ID: <4C5F5B28.7070900@nict.go.jp>
Date: Mon, 09 Aug 2010 10:34:32 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; fr; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2
MIME-Version: 1.0
To: Glen Zorn <gwz@net-zen.net>
References: <A0A5F8D2-62B7-40BF-A9C2-8ED231D6323E@gmail.com> <4C5A5F2D.20508@nict.go.jp> <001c01cb346e$d7f9a460$87eced20$@net> <4C5A6DA9.30309@nict.go.jp> <003201cb347a$0fb844a0$2f28cde0$@net> <4C5B65DB.3040006@nict.go.jp> <003401cb3554$3ce0c6c0$b6a25440$@net>
In-Reply-To: <003401cb3554$3ce0c6c0$b6a25440$@net>
X-Enigmail-Version: 1.1.1
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] WG adoption call for draft-zorn-dime-rfc4005bis-01
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Aug 2010 01:34:19 -0000

 Hi again Glen,

> Precisely the problem: the necessity to provide for RADIUS compatibility
> unnecessarily constrains the content of the Diameter AVPs.  In fact, NASREQ
> is not so much a Diameter application as RADIUS in a Diameter wrapper.
This holds only when the Origin-AAA-Protocol AVP is present; otherwise
there is no such limitation in the RFC, as far as I know.

> Removing the need to artificially limit the length of the NASREQ AVP
> payloads to 253 (or even 4073) octets would make NASREQ into a _real_
> Diameter application.
(see previous comment)

>>> In any case, if they decided to migrate to Diameter they could use the
>>> pointless tunneling protocol, retiring their RADIUS server when the
>>> transition was complete.
>> You are implying that each domain can retire its RADIUS server only when
>> *all* the domains have moved all their clients to Diameter... This
>> reasoning may be possible in a single-domain context, but it does not
>> hold in a multi-domain roaming consortium case.
> Care to give some sort of rationale for this statement?
Well, assume domain A is still using RADIUS and domain B has moved all
its equipment to Diameter.
Now a user from domain B is accessing the network through a NAS in domain A.

NAS-A -> RADIA agent (in RADIUS)
RDR -> domain B in Diameter.
Now, one needs to de-tunnel the RADIUS message from the RDR and then
have a RADIUS stack to interpret this message, right?
Hence my comment that we cannot get rid of RADIUS in domain B until all
domains in the consortium have moved to Diameter...
In addition, with RADIA you loose the benefit of Diameter applications
allowing to route different applications to different servers.

Best regards,
Sebastien.

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)