Re: [Dime] NAPTR fix for 3588bis

jouni korhonen <jouni.nospam@gmail.com> Wed, 31 March 2010 18:46 UTC

Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2AD0E3A67B1 for <dime@core3.amsl.com>; Wed, 31 Mar 2010 11:46:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.269
X-Spam-Level:
X-Spam-Status: No, score=-0.269 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, J_CHICKENPOX_83=0.6, J_CHICKENPOX_84=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J6lwYBxAB3Kv for <dime@core3.amsl.com>; Wed, 31 Mar 2010 11:46:40 -0700 (PDT)
Received: from mail-fx0-f227.google.com (mail-fx0-f227.google.com [209.85.220.227]) by core3.amsl.com (Postfix) with ESMTP id 7C3E03A6A2F for <dime@ietf.org>; Wed, 31 Mar 2010 11:46:40 -0700 (PDT)
Received: by fxm27 with SMTP id 27so351440fxm.28 for <dime@ietf.org>; Wed, 31 Mar 2010 11:47:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:cc:content-transfer-encoding :message-id:references:to:x-mailer; bh=dwQhsAtCEolmGg47LqCHB2UlcJTi7Y3idY9o1kkk0xU=; b=rSAztFj9J3+dExnYuZZqspQHwrA8AvGAbhePXWLXK5NKdSubEYLi1r7oZ6OqHSSlKC paKMWlBNm5090WZzXKGvzb6KJTUUwwEwsUE/t4v5TbVOosMpRX/jc2Me/Rhlt5hdRSCH 35DBvoQdx8byp9aYrgabrqA9f72jTuh7Fss6Y=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; b=MYpnxvQZeuKmogI5+NiKlfQxqy8C1oVuYHv+8Ih/WFdPPCKrucDWai6AMt4pmIjzdx UC6+B9imSrksHlR0lHz9A2QBTymklixdgQHMAXUlg8ft4LbQaLDClqv4S1BvFNLQs84N lYCrti7FjewJsrh6dw22kAff6DUA+FU+rxVZE=
Received: by 10.223.7.91 with SMTP id c27mr8888001fac.19.1270061220843; Wed, 31 Mar 2010 11:47:00 -0700 (PDT)
Received: from a88-114-167-158.elisa-laajakaista.fi (a88-114-167-158.elisa-laajakaista.fi [88.114.167.158]) by mx.google.com with ESMTPS id 18sm560603fks.5.2010.03.31.11.46.58 (version=TLSv1/SSLv3 cipher=RC4-MD5); Wed, 31 Mar 2010 11:46:59 -0700 (PDT)
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
From: jouni korhonen <jouni.nospam@gmail.com>
In-Reply-To: <B4B762B06D90774E9E8016C89B66AF8756131DA2@m679t05.fpmis.bridgewatersys.com>
Date: Wed, 31 Mar 2010 21:46:57 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <619BD781-223A-433C-BCE0-2B8803D2193B@gmail.com>
References: <B4B762B06D90774E9E8016C89B66AF8756131D63@m679t05.fpmis.bridgewatersys.com> <082F9E86-364B-4535-A54D-F6759B33E023@gmail.com> <B4B762B06D90774E9E8016C89B66AF8756131DA2@m679t05.fpmis.bridgewatersys.com>
To: Mark Jones <mark.jones@bridgewatersystems.com>
X-Mailer: Apple Mail (2.1077)
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] NAPTR fix for 3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Mar 2010 18:46:42 -0000

Hi,


On Mar 31, 2010, at 9:32 PM, Mark Jones wrote:

> Thanks for the feedback, Jouni. Responses inline.
> 
>> -----Original Message-----
>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
>> Sent: March 31, 2010 12:20 PM
>> To: Mark Jones
>> Cc: dime@ietf.org
>> Subject: Re: [Dime] NAPTR fix for 3588bis
>> 
>> Hi,
>> 
>> Thanks Mark for initiating the discussion and proposing text. My
>> initial comments inline.
>> 
>> On Mar 31, 2010, at 4:48 PM, Mark Jones wrote:
>> 
>>> Here are the proposed changes to 3588bis to implement the fix for the
>> NAPTR issues discussed at IETF#77 (see
>> http://www.ietf.org/proceedings/10mar/slides/dime-5.pdf)
>>> 
>>> Comments appreciated.
>>> 
>>> There was some discussion at the meeting of creating S-NAPTR
>> Application Service Tag entries for the unregistered NAPTR values in
>> RFC3588 ("AAA+D2x"). No consensus was reached but my impression was
>> that we were leaning towards NOT creating these entries. That would be
>> my preference too but are there any objections on the list?
>> 
>> Would be ok I think.. However, I really would like to see even some
>> discussion related to them _somewhere_. Any ideas? Would an errata be
>> enough to cover that?
>> 
> 
> I do agree this change needs to be discussed but I assumed we were going to have that discussion _here_ on this list. If the errata review procedure is likely to generate more discussion then I'm all for it.

Right. I have no idea how the errata stuff actually works in practice but we should, of course, first have a common agreement on the list.



> 
>> 
>>> 
>>> Regards
>>> Mark
>>> 
>>> ************************* FIRST CHANGE *************************
>>> 
>>> Section 5.2 Diameter Peer Discovery
>>> 
>>> => Replace step 2 with the following text:
>>> 
>>>  2.  The Diameter implementation performs a NAPTR query for a server
>>>      in a particular realm.  The Diameter implementation has to know
>>>      in advance which realm to look for a Diameter agent in.  This
>>>      could be deduced, for example, from the 'realm' in a NAI that a
>>>      Diameter implementation needed to perform a Diameter operation
>>>      on.
>>> 
>>>      The NAPTR usage in Diameter follows the S-NAPTR DDDS
>> application
>>>      [RFC3958] which means that the SERVICE field includes tags for
>> the
>>>      desired application and supported application protocol.
>>>      The application service tag for a Diameter application is 'aaa'
>> and
>>>      the supported  application protocol tags are 'diameter.tcp',
>>>      'diameter.sctp' or 'diameter.tls'.
>> 
>> RFC3958 ABNF does not allow "." in iana-registered-protocol, so the
>> application protocol has to be changed, like "diametertcp" or "dtcp"
>> etc..
>> 
> 
> Lucky for us that IANA is ignoring the RFC3958 ABNF then :)
> 
> http://www.iana.org/assignments/s-naptr-parameters/s-naptr-parameters.xhtml
> 
> Another errata perhaps?
> 
>   iana-registered-protocol  = ALPHA *31ALPHANUMSYM

Great to see even RFC3958 authors do not follow the ABNF they created in later RFCs. RFC3958 already has an errata that says the ALPHANUM definition for iana-registered-protocol is missing and proposes one as a solution. Maybe we just have to carry on the  tradition of dodgy IANA DNS definitions in Diameter ;)

- Jouni

> 
>>> 
>>>      The client follows the resolution process defined by the S-
>> NAPTR
>>>      DDDS [RFC3958] application to find a matching SRV or A record
>> of
>>>      a suitable peer.  The domain suffixes in the NAPTR replacement
>> field
>>>      SHOULD match the domain of the original query.
>>> 
>>> 
>>> ************************* SECOND CHANGE *************************
>>> 
>>> Section 11.6 NAPTR Service Fields
>>> 
>>> => Rename this section to S-NAPTR Parameters and replace content
>> with:
>>> 
>>> This document registers a S-NAPTR Application Service Tag value of
>> "aaa".
>>> 
>>> This document also registers the following S-NAPTR Application
>> Protocol Tags:
>>> 
>>>  Tag            | Protocol
>>>  ---------------|---------
>>>  diameter.tcp   | TCP
>>>  diameter.sctp  | SCTP
>>>  diameter.tls   | TLS
>> 
>> See my note above regarding the application protocol.
>> 
>> 
>>> 
>>> ************************* THIRD CHANGE **************************
>>> 
>>> Appendix B.  NAPTR Example
>>> 
>>> => Rename section to S-NAPTR Example and modify as follows.
>>> 
>>>  As an example, consider a client that wishes to resolve aaa:
>>>  example.com.  The client performs a NAPTR query for that domain,
>> and
>>>  the following NAPTR records are returned:
>>> 
>>> ;;        order pref flags service             regexp replacement
>>> IN NAPTR  50    50   "s"   "aaa:diameter.tls"  ""
>> _diameter._tls.example.com
>>> IN NAPTR  100   50   "s"   "aaa:diameter.tcp"  ""
>> _aaa._tcp.example.com
>>> IN NAPTR  150   50   "s"   "aaa:diameter.sctp" ""
>> _diameter._sctp.example.com
>> 
>> And lets have an example of "a" flag as well:
>> 
>> IN NAPTR  150   50   "a"   "aaa:diametertls" ""     server1.example.com
>> IN NAPTR  150   50   "a"   "aaa:diametertls" ""     server2.example.com
>> 
> 
> Fine by me.
> 
>> 
>>> 
>>>  This indicates that the server supports TLS, TCP and SCTP in that
>>>  order.  If the client supports TLS, TLS will be used, targeted to a
>>>  host determined by an SRV lookup of _diameter._tls.example.com.
>> That
>>>  lookup would return:
>>> 
>>>   ;;       Priority  Weight  Port    Target
>>>   IN SRV   0         1       5060    server1.example.com
>>>   IN SRV   0         2       5060    server2.example.com
>>> 
>>> 
>>> ************************* FOURTH CHANGE **************************
>>> 
>>> 14.1.  Normative References
>>> 
>>> => Add new reference to S-NAPTR DDDS RFC3958.
>>> 
>>> ************************* END OF CHANGES ***********************
>> 
>> - Jouni
>> 
>> 
>> 
>>> 
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>