Re: [Dime] Ulrich's suggested change @12

Ben Campbell <ben@nostrum.com> Tue, 16 December 2014 15:35 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: dime@ietfa.amsl.com
Delivered-To: dime@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96EA61A1BB1 for <dime@ietfa.amsl.com>; Tue, 16 Dec 2014 07:35:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qGvGxProp7F for <dime@ietfa.amsl.com>; Tue, 16 Dec 2014 07:35:43 -0800 (PST)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48A521A1BAC for <dime@ietf.org>; Tue, 16 Dec 2014 07:35:43 -0800 (PST)
Received: from [10.0.1.23] (cpe-173-172-146-58.tx.res.rr.com [173.172.146.58]) (authenticated bits=0) by nostrum.com (8.14.9/8.14.7) with ESMTP id sBGFZgUj051864 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 16 Dec 2014 09:35:42 -0600 (CST) (envelope-from ben@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host cpe-173-172-146-58.tx.res.rr.com [173.172.146.58] claimed to be [10.0.1.23]
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\))
From: Ben Campbell <ben@nostrum.com>
In-Reply-To: <54904C5A.2070502@usdonovans.com>
Date: Tue, 16 Dec 2014 09:35:41 -0600
X-Mao-Original-Outgoing-Id: 440436941.800051-ebc7063d76a6b4b0c236f5e8061ee125
Content-Transfer-Encoding: quoted-printable
Message-Id: <4C4C3C8F-3A9B-4062-98FE-F980F170AD3D@nostrum.com>
References: <5486FCBF.4000707@usdonovans.com> <5BCBA1FC2B7F0B4C9D935572D9000668152351D9@DEMUMBX014.nsn-intra.net> <54883F5C.1060603@usdonovans.com> <5BCBA1FC2B7F0B4C9D935572D900066815235675@DEMUMBX014.nsn-intra.net> <5489A416.2000403@usdonovans.com> <64AB1BC6-8D34-4DEB-B801-C5C127047C8C@nostrum.com> <54904C5A.2070502@usdonovans.com>
To: Steve Donovan <srdonovan@usdonovans.com>
X-Mailer: Apple Mail (2.1993)
Archived-At: http://mailarchive.ietf.org/arch/msg/dime/F07OzZVvk6x1P_DDTN7anenC3RY
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] Ulrich's suggested change @12
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime/>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Dec 2014 15:35:45 -0000

> On Dec 16, 2014, at 9:14 AM, Steve Donovan <srdonovan@usdonovans.com> wrote:
> 
> Ben,
> 
> I see a two or three options here:
> 
> 1) We add a new attribution AVP and all of the text associated with it.  This has obvious schedule implications.

Agreed that it has schedule implications. Schedule is important, but a workable solution is more important. (I concede that we have not yet established consensus that this is non-workable--see below)

> 
> 2) We treat this the same way as we treated the issue with multiple sources of OC-OLR AVPs and add text somewhere in the draft saying that if agents are selecting abatement algorithms then care must be taken to make sure that all agents that handle traffic for the same Diameter node must select the same algorithm for all transactions involving that Diameter node.

On reflection, this is a more general problem than just algorithm choices. It's a generalization of the problem with multiple realm-report sources for a single realm. Basically we have a problem when you have more than one reporting node for a given overload scope. (The problem of multiple algorithms for the same "scope" would also apply to the multiple realm-report source issue.)

Basically, I think we've discovered the scope of the multiple reporting-node problem is considerably larger than we thought. That means we at least need to consider whether the decision to defer that solution is still reasonable. Remember that we made that decision at least partly because we thought the problem would not be that common.

> 
> 3) Number two plus reacting node behavior statements saying that the reacting node SHOULD ignore overload reports for a node that has an active OCS if the received overload report is of a different type then stored in the active OCS.

Do you mean different OLR type, or different algorithm for the same OLR type?

> 
> I vote for number 3.
> 
> Regards,
> 
> Steve
> 
> On 12/11/14, 12:38 PM, Ben Campbell wrote:
>>> On Dec 11, 2014, at 8:03 AM, Steve Donovan <srdonovan@usdonovans.com> wrote:
>>> 
>>> Ulrich,
>>> 
>>> I see your concern.  To summarize, if we have the following configuration:
>>> 
>>>    ----A1----
>>>   /          \
>>>  C            S
>>>   \          /
>>>    ----A2----
>>> 
>>> And A1 indicates loss in in the OC-S-F AVP in answer messages and A2 indicates rate then there is ambiguity.
>>> 
>>> I agree, this warrants a warning statement somewhere in the document.
>>> 
>>> If there is general agreement on this then I'll propose wording and location.
>>> 
>> What sort of guidance should we give here? IMO, this is a worse problem than for realm reports, or at least having it for both realm and host reports makes it considerably worse than before. I think variations on this will happen for almost any Diameter network of non-trivial size.
>> 
>> I also think it's reasonable that A1 and A2 might select different algorithms towards C. For example, lets say C, A1, and S all support rate, but A2 does not. S might select rate towards A1, but loss towards A2.
>> 
>> If we can't handle this, I think the entire solution breaks down.
>> 
>> I propose that the best way to handle this is to add source-attribution into OLRs, and guidance for what C should do if it gets different capabilities for the same host or realm from different paths. This _might_ also help solve the "different reports for same realm" problem and the "can't tell if an intervening agent supports DOIC" problem.
>> 
>> 
>>> Steve
>>> 
>>> On 12/11/14, 7:31 AM, Wiehe, Ulrich (NSN - DE/Munich) wrote:
>>>> Steve,
>>>>  yes, it’s about capability announcement, and my concern in with announcing the selected algorithm in answer messages (while no OLRs are sent). Multiple  agents modifying the selected algorithm in the Supported-Features AVPs in answer messages may  result in ambiguity in DOIC behaviour for downstream DOIC nodes.
>>>>  Ulrich
>>>>  From: ext Steve Donovan [mailto:srdonovan@usdonovans.com]
>>>> Sent: Wednesday, December 10, 2014 1:41 PM
>>>> To: Wiehe, Ulrich (NSN - DE/Munich); dime@ietf.org
>>>> Subject: Re: [Dime] Ulrich's suggested change @12
>>>>  Ulrich,
>>>> 
>>>> This paragraph is talking about capability announcement.  We deal with the issues related to multiple sources of overload reports already elsewhere in the document.
>>>> 
>>>> I still do see the need for a change.
>>>> 
>>>> Steve
>>>> 
>>>> On 12/9/14, 10:46 AM, Wiehe, Ulrich (NSN - DE/Munich) wrote:
>>>> Steve,
>>>> I agree, my comment and proposal do not hit the mark.
>>>>  The intention was to say that known issues exist if there are multiple agents on multiple paths between client and server. The agents may not be able to ensure that there is no ambiguity in DOIC behaviour for the client. E.g. from the client’s point of view the answer to a first request (which was modified by agent A1) could indicate: DOIC is supported, currenty no overload, once in overload loss will be selected; and the answer to the next request (which was modified by agent A2) could indicate: DOIC is supported, some?? reduction is requested using rate. The client, however, may not be prepared for rate.
>>>>  Maybe a warning note could be added to say that the agent may not always be able to ensure that there is no ambiguity.
>>>>  Ulrich
>>>>      From: DiME [mailto:dime-bounces@ietf.org] On Behalf Of ext Steve Donovan
>>>> Sent: Tuesday, December 09, 2014 2:45 PM
>>>> To: dime@ietf.org
>>>> Subject: [Dime] Ulrich's suggested change @12
>>>>  Ulrich,
>>>> 
>>>> For your suggested change #12:
>>>> 
>>>> Section 4.1.3, last paragraph:
>>>> Existing text:
>>>>    When making changes to the OC-Supported-Features AVP the Diameter
>>>>    Agent needs to ensure that there is no ambiguity in DOIC behavior for
>>>>    both upstream and downstream DOIC nodes.
>>>>  Comment: while that is true, in addition problems similar to those
>>>> identified in the note in section 3.3 may result from making changes.
>>>>  Proposal: Add the note:
>>>>       Note: Known issues exist if multiple sources for overload reports
>>>>       which apply to the same Diameter entity exist.  Reacting nodes
>>>>       have no way of determining the source and, as such, will treat
>>>>       them as coming from a single source.  Variance in sequence numbers
>>>>       between the two sources can then cause incorrect overload
>>>>       abatement treatment to be applied for indeterminate periods of
>>>>       time.
>>>> I don't understand how these are related.  The change to the OC-Supported-Features AVP made by the agent apply only to the transaction.  In addition, this paragraph doesn't mention overload reports.
>>>> 
>>>> Regards,
>>>> 
>>>> Steve
>>>> 
>>>> 
>>>> 
>>>>  
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>> 
>