Re: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

"TROTTIN, JEAN-JACQUES (JEAN-JACQUES)" <jean-jacques.trottin@alcatel-lucent.com> Fri, 12 September 2014 06:48 UTC

Return-Path: <jean-jacques.trottin@alcatel-lucent.com>
X-Original-To: dime@ietfa.amsl.com
Delivered-To: dime@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 351AD1A0481 for <dime@ietfa.amsl.com>; Thu, 11 Sep 2014 23:48:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.752
X-Spam-Level:
X-Spam-Status: No, score=-1.752 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_25=0.6, J_CHICKENPOX_36=0.6, J_CHICKENPOX_52=0.6, RP_MATCHES_RCVD=-1.652] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yncMzHxEwtJl for <dime@ietfa.amsl.com>; Thu, 11 Sep 2014 23:48:14 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpgre-esg-02.alcatel-lucent.com [135.245.210.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B06AD1A0661 for <dime@ietf.org>; Thu, 11 Sep 2014 23:48:13 -0700 (PDT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (unknown [135.239.2.122]) by Websense Email Security Gateway with ESMTPS id 251E04AB79484; Fri, 12 Sep 2014 06:48:10 +0000 (GMT)
Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id s8C6mB25001907 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 12 Sep 2014 08:48:11 +0200
Received: from FR712WXCHMBA12.zeu.alcatel-lucent.com ([169.254.8.220]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.02.0247.003; Fri, 12 Sep 2014 08:48:11 +0200
From: "TROTTIN, JEAN-JACQUES (JEAN-JACQUES)" <jean-jacques.trottin@alcatel-lucent.com>
To: "Wiehe, Ulrich (NSN - DE/Munich)" <ulrich.wiehe@nsn.com>, Maria Cruz Bartolome <maria.cruz.bartolome@ericsson.com>, "dime@ietf.org" <dime@ietf.org>, "draft-ietf-dime-ovli@tools.ietf.org" <draft-ietf-dime-ovli@tools.ietf.org>
Thread-Topic: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example
Thread-Index: AQHPyN4B9soJ86/RAkCPYLHsUJaF65v3LPWAgAFYMUCAABzR0P//6bIAgAG/6ICAAEWLcIABAywAgABgtQA=
Date: Fri, 12 Sep 2014 06:48:10 +0000
Message-ID: <E194C2E18676714DACA9C3A2516265D2026C2F6F@FR712WXCHMBA12.zeu.alcatel-lucent.com>
References: <075.932a395897d769fbc9cf22116adcb797@trac.tools.ietf.org> <5BCBA1FC2B7F0B4C9D935572D90006681520A0BF@DEMUMBX014.nsn-intra.net> <E194C2E18676714DACA9C3A2516265D2026C2A8B@FR712WXCHMBA12.zeu.alcatel-lucent.com> <E194C2E18676714DACA9C3A2516265D2026C2AB4@FR712WXCHMBA12.zeu.alcatel-lucent.com> <5BCBA1FC2B7F0B4C9D935572D90006681520A2CF@DEMUMBX014.nsn-intra.net> <087A34937E64E74E848732CFF8354B920981208A@ESESSMB101.ericsson.se> <E194C2E18676714DACA9C3A2516265D2026C2D5C@FR712WXCHMBA12.zeu.alcatel-lucent.com> <5BCBA1FC2B7F0B4C9D935572D90006681520A68C@DEMUMBX014.nsn-intra.net>
In-Reply-To: <5BCBA1FC2B7F0B4C9D935572D90006681520A68C@DEMUMBX014.nsn-intra.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [135.239.27.39]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/dime/7JJ4UIXXE7Q9olwEUkK2OVEUU6k
Subject: Re: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime/>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Sep 2014 06:48:16 -0000

Hi Ulrich 

Effectively there is a logic for the DA generating the unsuccessful answer (which will not contain any OLR as Ulrich reminded) to put its own Diameter identity (host and realm)as Origin Host /Realm. There is a small difference with the existing (when no DOIC at all) case, where a DA may also try to redirect an unsuccessful request to other servers, and if the last  one also rejects the request, it would normally be the Origin Host Realm  of the last server that DA will send back to the existing client. I would  not think this difference has particular consequences for the existing client. 

Best regards

JJacques 

-----Message d'origine-----
De : Wiehe, Ulrich (NSN - DE/Munich) [mailto:ulrich.wiehe@nsn.com] 
Envoyé : jeudi 11 septembre 2014 11:36
À : TROTTIN, JEAN-JACQUES (JEAN-JACQUES); Maria Cruz Bartolome; dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Objet : RE: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Hi Jean-Jacques

It is my understanding that the agent that throttles a request on behalf of a non-DOIC supporting client populates the Origin-Host AVP in the unsuccessful answer with its own Diameter Identity and the Origin-Realm AVP with the realm the agent belongs to. 

This is independend from the request being host-routed or realm-routed. Anyway, the unsuccessful answer (in this case) shall not contain an OLR as
a) the client does not support DOIC and
b) it is not the agent that is overloaded

Can people please confirm.

Best regards
Ulrich 

-----Original Message-----
From: ext TROTTIN, JEAN-JACQUES (JEAN-JACQUES) [mailto:jean-jacques.trottin@alcatel-lucent.com]
Sent: Wednesday, September 10, 2014 6:18 PM
To: Maria Cruz Bartolome; Wiehe, Ulrich (NSN - DE/Munich); dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Subject: RE: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Hi MCruz, Ulrich

I agree this is not related to  #70 as the DA does not do throttling , but my question still applies for a DOIC DA acting on behalf of clients not supporting DOIC. This DA  throttles a Realm routed  request. What does it send as Origin Host in the unsuccesfull answer to the client. This question may be more a RFC 6733 one.

I may generate a ticket if this generates discussion.

Best regards

JJacques 


-----Message d'origine-----
De : Maria Cruz Bartolome [mailto:maria.cruz.bartolome@ericsson.com]
Envoyé : mercredi 10 septembre 2014 15:59 À : Wiehe, Ulrich (NSN - DE/Munich); TROTTIN, JEAN-JACQUES (JEAN-JACQUES); dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Objet : RE: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Dear JJ,
I agree with Ulrich comments below.
But this is not related to #70

Cheers
/MCruz

-----Original Message-----
From: Wiehe, Ulrich (NSN - DE/Munich) [mailto:ulrich.wiehe@nsn.com]
Sent: martes, 09 de septiembre de 2014 13:16
To: ext TROTTIN, JEAN-JACQUES (JEAN-JACQUES); Maria Cruz Bartolome; dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Subject: RE: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Jacques,

in this scenario where the client supports DOIC my understanding is:
If there is a realm overload, the agent will receive only those realm routed requests that survived a throttling at the client. There is no point for the agent to throttle again.

Anyway this seems not to be related to #70.

See also inline.

Ulrich

-----Original Message-----
From: ext TROTTIN, JEAN-JACQUES (JEAN-JACQUES) [mailto:jean-jacques.trottin@alcatel-lucent.com]
Sent: Tuesday, September 09, 2014 12:48 PM
To: maria.cruz.bartolome@ericsson.com; Wiehe, Ulrich (NSN - DE/Munich); dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Subject: RE: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Dear all

 Question Another remark on this type of use cases.

There is a realm overload, the DA receives a realm routed request and decide to throttle it and generates a Diameter error (congestion or too busy under discussion). The request was not sent to any server; which Origin-Host AVP does the DA puts in the unsuccessful answer to the client. RFC6733 6.3 states that "Origin-Host AVP MUST be present in all Diameter messages. This AVP identifies the endpoint that originated the Diameter message". 

Another clarification, in our discussions, we speak of OLRs put in successful answers;  my understanding is that OLRs may also be present in unsuccessful answers (with a Diameter error). Do we agree on this?
[Wiehe, Ulrich (NSN - DE/Munich)] I agree.

Best regards

Jacques    

-----Message d'origine-----
De : DiME [mailto:dime-bounces@ietf.org] De la part de TROTTIN, JEAN-JACQUES (JEAN-JACQUES) Envoyé : mardi 9 septembre 2014 12:01 À : maria.cruz.bartolome@ericsson.com; Wiehe, Ulrich (NSN - DE/Munich); dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org
Objet : Re: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Hi MCruz, Ulrich

I think we already had some discussion on the OLRs to be reported by DA to clients in this type of use cases.

a) In step 4), in the existing draft wording, the DA sends a successful answer to the client with origin host = S1 and an Host type OLR related to S1. As the client will have further Host routed requests to this S1 host, it seemed good for the client to be immediately informed of the S1 host overload, so to apply throttling to further S1 host requests. This has no impact on Realm routed requests.

In Step 8), the DA has determined a realm overload and send a realm type OLR in the answer and also, as in step 4) the Host type OLR related to the Origin Host S2. This works. The point that was discussed in our previous discussions, is that the answer will contains two OLRs  a realm type one and a host type one, which was accepted at this time. Is it this point you consider as an issue, and why? 

b) this drives to some other remarks. The IETF draft indicates that, in 5.3, when a reporting node requests traffic reduction, it sends OLRs in all answer messages (with the additional MCRuz proposal that if not present this means no change), so this drives to have a realm type  OLR  related to the Origin-Realm AVP (when overloaded) of an answer and a Host type OLR related to the Origin-Host  AVP (when overloaded) of the same answer. The example in a) is one such case. Do you want to modify 5.3 to introduce additional rules, which ones?

Best regards

JJacques 

-----Message d'origine-----
De : DiME [mailto:dime-bounces@ietf.org] De la part de Wiehe, Ulrich (NSN - DE/Munich) Envoyé : lundi 8 septembre 2014 16:21 À : dime@ietf.org; draft-ietf-dime-ovli@tools.ietf.org; maria.cruz.bartolome@ericsson.com Objet : Re: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

Maria Cruz,

I share your concern.

Please find some comments attached.

Best regards
Ulrich

-----Original Message-----
From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of ext dime issue tracker
Sent: Friday, September 05, 2014 9:50 AM
To: draft-ietf-dime-ovli@tools.ietf.org; maria.cruz.bartolome@ericsson.com
Cc: dime@ietf.org
Subject: [Dime] [dime] #70 (draft-ietf-dime-ovli): Appendix B - Example

#70: Appendix B - Example

 In the example included in Appendix B, it is considered that the Agent  reports Host overload directly back to the Client, when the Client request  was for the Realm, withouth Destination Host (or direct connection).
 I do not agree about this behaviour.
 Agent will provide Host overload to the Client only when the request was  sent to one specific host.

 Example shall be modified.

 Proposed modification:


         Client     Agent      S1        S2        S3
            |         |         |         |         |
            |(1) Request (DR:realm)       |         |
            |-------->|         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |Agent selects S1   |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |(2) Request (DR:realm)       |
            |         |-------->|         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |S1 overloaded, returns OLR
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |(3) Answer (OH:S1,OLR:RT=DH)
            |         |<--------|         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |sees OLR,routes next DR traffic to S2&S3
            |         |         |         |         |
            |(5) Request (DR:realm)       |         |
            |-------->|         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |Agent selects S2   |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |(6) Request (DR:realm)       |
            |         |------------------>|         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |S2 is overloaded...
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |(7) Answer (OH:S2, OLR:RT=DH)|
            |         |<------------------|         |
            |         |         |         |         |
            |         |         |         |         |
            |         |Agent sees OLR, realm now overloaded
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |(8) Answer (OLR: RT=R)
            |<--------|         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |Client throttles DR:realm
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |
            |         |         |         |         |



       Figure 8: Mix of Destination-Host and Destination-Realm Routed
                                  Requests

    1.  The client sends a request with no Destination-Host AVP (that is,
        a Destination-Realm routed request.)

    2.  The agent follows local policy to select a server from its peer
        table.  In this case, the agent selects S2 and forwards the
        request.

    3.  S1 is overloaded.  It sends an answer indicating success, but also
        includes an overload report.  Since the overload report only
        applies to S1, the ReportType is "Destination-Host".

    4.  The agent sees the overload report, and records that S1 is
        overloaded by the value in the Reduction-Percentage AVP.  It
        begins diverting the indicated percentage of realm-routed traffic
        from S1 to S2 and S3.

    5.  The client sends another Destination-Realm routed request.

    6.  The agent selects S2, and forwards the request.

    7.  It turns out that S2 is also overloaded, perhaps due to all that
        traffic it took over for S1.  S2 returns an successful answer
        containing an overload report.  Since this report only applies to
        S2, the ReportType is "Destination-Host".

    8.  The agent sees that S2 is also overloaded by the value in
        Reduction-Percentage.  This value is probably different than the
        value from S1's report.  The agent diverts the remaining traffic
        to S3 as best as it can, but it calculates that the remaining
        capacity across all three servers is no longer sufficient to
        handle all of the realm-routed traffic.  This means the realm
        itself is overloaded.  The realm's overload percentage is most
        likely different than that for either S1 or S2.
        The agent generates a new report for the realm of
        "realm", and inserts that report into the answer.  The client
        throttles requests with no
        Destination-Host AVP at requested rate.

-- 
-------------------------------------+----------------------------------
-------------------------------------+---
 Reporter:                           |      Owner:  draft-ietf-dime-
  maria.cruz.bartolome@ericsson.com  |  ovli@tools.ietf.org
     Type:  defect                   |     Status:  new
 Priority:  minor                    |  Milestone:
Component:  draft-ietf-dime-ovli     |    Version:
 Severity:  Active WG Document       |   Keywords:
-------------------------------------+----------------------------------
-------------------------------------+---

Ticket URL: <http://trac.tools.ietf.org/wg/dime/trac/ticket/70>
dime <http://tools.ietf.org/wg/dime/>

_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime