Re: [Dime] Questions regarding RFC 6733

<lionel.morand@orange.com> Wed, 08 March 2017 11:01 UTC

Return-Path: <lionel.morand@orange.com>
X-Original-To: dime@ietfa.amsl.com
Delivered-To: dime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C80A129556 for <dime@ietfa.amsl.com>; Wed, 8 Mar 2017 03:01:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.62
X-Spam-Level:
X-Spam-Status: No, score=-2.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yfhtcxcKxFYV for <dime@ietfa.amsl.com>; Wed, 8 Mar 2017 03:01:05 -0800 (PST)
Received: from relais-inet.orange.com (mta136.mail.business.static.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF9641270B4 for <dime@ietf.org>; Wed, 8 Mar 2017 03:01:04 -0800 (PST)
Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) by opfednr20.francetelecom.fr (ESMTP service) with ESMTP id 7180E404E6; Wed, 8 Mar 2017 12:01:02 +0100 (CET)
Received: from Exchangemail-eme2.itn.ftgroup (unknown [xx.xx.31.24]) by opfednr01.francetelecom.fr (ESMTP service) with ESMTP id 33A111A008A; Wed, 8 Mar 2017 12:01:02 +0100 (CET)
Received: from OPEXCLILM43.corporate.adroot.infra.ftgroup ([fe80::ec23:902:c31f:731c]) by OPEXCLILM7D.corporate.adroot.infra.ftgroup ([fe80::9044:c5ee:4dd2:4f16%19]) with mapi id 14.03.0319.002; Wed, 8 Mar 2017 12:01:02 +0100
From: lionel.morand@orange.com
To: Yuval Lifshitz <ylifshitz@sandvine.com>, "jouni.nospam" <jouni.nospam@gmail.com>, Ajinkya Joshi <ajoshi@definitionnetworks.com>
Thread-Topic: [Dime] Questions regarding RFC 6733
Thread-Index: AQHSl1U+rua+IhzsXUSySTVeMQxEMKGJgfoAgAD3IgCAAE3uwA==
Date: Wed, 08 Mar 2017 11:01:01 +0000
Message-ID: <24907_1488970862_58BFE46E_24907_189_2_6B7134B31289DC4FAF731D844122B36E0C06F1D5@OPEXCLILM43.corporate.adroot.infra.ftgroup>
References: <CAFUT_s1krzosCpmYB=nYd7DiU+MsQOyofJEb8-m-qcgA6-w35w@mail.gmail.com> <70007418-7349-4560-828C-3FDD8894C239@gmail.com> <C43C255C7106314F8D13D03FA20CFE497004DCB6@wtl-exchp-1.sandvine.com>
In-Reply-To: <C43C255C7106314F8D13D03FA20CFE497004DCB6@wtl-exchp-1.sandvine.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.168.234.3]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dime/6eiZGJS42aqdjGMM6tbIiXAVK-c>
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] Questions regarding RFC 6733
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dime/>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Mar 2017 11:01:07 -0000

Hi Yuval,

Per connection, you will be able to test the liveness of the connection (SCTP, DW, etc.). If something is wrong, you will be able to detect it and tear down the connection.
And then accept the new CER if received.

Regards,

Lionel

> -----Message d'origine-----
> De : DiME [mailto:dime-bounces@ietf.org] De la part de Yuval Lifshitz
> Envoyé : mercredi 8 mars 2017 08:19
> À : jouni.nospam; Ajinkya Joshi
> Cc : dime@ietf.org
> Objet : Re: [Dime] Questions regarding RFC 6733
> 
> Regarding (1), another possible implementation would be that upon receiving a
> new connection from the same host, you would tear down the existing
> connection and allow the new one. This would be useful in the case that a client
> became deadlocked or didn't shutdown properly, and a new client tries to take
> over and continue the work of the stalled ones.
> 
> -----Original Message-----
> From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of jouni.nospam
> Sent: Tuesday, March 07, 2017 6:35 PM
> To: Ajinkya Joshi
> Cc: dime@ietf.org
> Subject: Re: [Dime] Questions regarding RFC 6733
> 
> hi,
> 
> > On Mar 7, 2017, at 3:01 AM, Ajinkya Joshi <ajoshi@definitionnetworks.com>
> wrote:
> >
> > Hello,
> >
> > I have following questions regarding diameter RFC 6733, I would really
> appreciate if someone can help me with these.
> >
> > 1. Regarding diameter peer state machine -
> >
> >     Section 5.6.1 (Peer State Machine --> Incoming connections) mentions that
> Origin-host is used for     identifying peer state machine and as per state
> machine, once it moves into I-Open, new CER is       rejected. This concludes,
> that there can't be more than one transport connections with same
> diameter host (as specified by Origin-host).
> >
> >     Section 2.1 (Transport) mentions that "A given Diameter instance of the peer
> state machine MUST      NOT use more than one transport connection to
> communicate with a given peer, unless multiple        instances exist on the peer,
> in which, case a separate connection per process is allowed."
> >
> >      Questions --
> > 	• Does section 2.1 implicitly assumes that multiple diameter instances
> (within a peer) would correspond to different diameter host ? Otherwise, it
> could contradict with section 5.6.1
> 
> it assumes one peer connection per peer state machine. so if you have a way to
> ‘fork’ a new peer instance with its own peer state machine per incoming
> connection then having “multiple instances’ is possible even if the
> diameteridentity is the same.
> 
> > 	• If multiple transport connections (towards the same peer) are allowed
> per diameter host, is it expected that peer would do load balancing between
> them? (There is a connection load balancing section in RFC 3539 - Section 3.4.3)
> 
> what you do and how you manage ‘multiple instances’ if more or less left for
> implementation to decide. i always considered it as a node internal compute
> load balancing mechanism i.e., to distribute the compute to separate
> cores/blades etc.
> 
> 
> > 2. Regarding diameter peer failback procedure -
> >
> >       Section 5.5.4 mentions "a connection request should be periodically
> attempted with the failed              peer in order to re-establish the transport
> connection"
> >
> >       Question --
> >
> > 	• If the failed peer is dynamically discovered via DNS lookup, is it
> expected that peer would perform DNS query before trying to establish the
> connection again? Or DNS lookup is driven only by TTL field received in the prior
> DNS answer ?
> 
> up to your implementation and dns resolver implementation.
> 
> - jouni
> 
> 
> > --
> > Regards,
> > Ajinkya Joshi
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> 
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.