Re: [Dime] [RFC3588bis-34] - Host-IP-Address AVP

"VITON HORCAJO, Pedro (Pedro)" <pedro.viton@alcatel-lucent.com> Tue, 18 September 2012 06:43 UTC

Return-Path: <pedro.viton@alcatel-lucent.com>
X-Original-To: dime@ietfa.amsl.com
Delivered-To: dime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCE2B11E808D for <dime@ietfa.amsl.com>; Mon, 17 Sep 2012 23:43:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.149
X-Spam-Level:
X-Spam-Status: No, score=-10.149 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2l9Mn6+yG3E for <dime@ietfa.amsl.com>; Mon, 17 Sep 2012 23:43:34 -0700 (PDT)
Received: from smail3.alcatel.fr (smail3.alcatel.fr [64.208.49.56]) by ietfa.amsl.com (Postfix) with ESMTP id AC99C11E808A for <dime@ietf.org>; Mon, 17 Sep 2012 23:43:33 -0700 (PDT)
Received: from FRMRSSXCHHUB03.dc-m.alcatel-lucent.com (FRMRSSXCHHUB03.dc-m.alcatel-lucent.com [135.120.45.63]) by smail3.alcatel.fr (8.14.3/8.14.3/ICT) with ESMTP id q8I6e2dA017552 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Tue, 18 Sep 2012 08:43:30 +0200
Received: from FRMRSSXCHMBSC1.dc-m.alcatel-lucent.com ([135.120.45.46]) by FRMRSSXCHHUB03.dc-m.alcatel-lucent.com ([135.120.45.63]) with mapi; Tue, 18 Sep 2012 08:43:11 +0200
From: "VITON HORCAJO, Pedro (Pedro)" <pedro.viton@alcatel-lucent.com>
To: jouni korhonen <jouni.nospam@gmail.com>
Date: Tue, 18 Sep 2012 08:43:09 +0200
Thread-Topic: [Dime] [RFC3588bis-34] - Host-IP-Address AVP
Thread-Index: Ac2VEANlKuDiJ/SKSKGWNePHoxgg4QAU2GCw
Message-ID: <5F42DFF905CBA544A7BBB0909003E1A3148F14FCDB@FRMRSSXCHMBSC1.dc-m.alcatel-lucent.com>
References: <5F42DFF905CBA544A7BBB0909003E1A3148F14F7C6@FRMRSSXCHMBSC1.dc-m.alcatel-lucent.com> <50570410.9000708@gmail.com> <5F42DFF905CBA544A7BBB0909003E1A3148F14F987@FRMRSSXCHMBSC1.dc-m.alcatel-lucent.com> <E4A11012-4F89-455F-AC98-57F188456D91@gmail.com>
In-Reply-To: <E4A11012-4F89-455F-AC98-57F188456D91@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Scanned-By: MIMEDefang 2.69 on 155.132.188.83
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] [RFC3588bis-34] - Host-IP-Address AVP
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Sep 2012 06:43:34 -0000

Thanks for your replies,

These questions came due to some interoperability small issue found with another vendor Diameter implementation.

I fully agree with your answers and interpretation, but sometimes in IOT's between different vendors, I think these little details are important.

Extra comments inline:

Thanks,
  Pedro


>> -----Original Message-----
>> From: jouni korhonen [mailto:jouni.nospam@gmail.com] 
>> Sent: Monday, September 17, 2012 10:07 PM
>> To: VITON HORCAJO, Pedro (Pedro)
>> Cc: Glen Zorn; dime@ietf.org
>> Subject: Re: [Dime] [RFC3588bis-34] - Host-IP-Address AVP
>> 
>> 
>> Hi,
>> 
>> Few quick comments inline.
>> 
>> On Sep 17, 2012, at 3:09 PM, VITON HORCAJO, Pedro (Pedro) wrote:
>> 
>> > Glen,
>> > 
>> > Thanks for answering.
>> > Maybe my original mail was too long, and I  might have not 
>> have been clear enough.
>> > 
>> > Let me rephase my questions, in a shorter way:
>> > 
>> > 1.- The current text for Host-IP-Address AVP indicates the 
>> value to send when transporting over SCTP.
>> > But which value should be sent when transporting over TCP?
>> 
>> RFC3588bis says:
>> 
>>    The Host-IP-Address AVP (AVP Code 257) is of type Address 
>> and is used
>>    to inform a Diameter peer of the sender's IP address. 

>> 
>> This part is not SCTP specific. So at minimum you include 
>> the address the
>> very TCP connection comes from. Repetition but acceptable. 
>> Also, Diameter
>> host's DiameterIdentity may resolve to one or more IP 
>> addresses but not
>> necessarily to all of those. It is a DNS provisioning 
>> matter. The Diameter
>> node would know all its addresses it can use, so those 
>> additional addresses
>> would be included.


I agree with this point, and all the possible addresses should also be sent with TCP, as well as with SCTP.
But then, 
what's the difference with respect to SCTP?
Why does the RFC explicitely indicates SCTP for sending all possible IP addresses?





>> 
>> > 2.- What should a Diameter implementation do when 
>> receiving the Host-IP-Address AVP?
>> 
>> In case of TCP.. that is more like FYI (unless someone plans 
>> to hack MPTCP into
>> Diameter some day). Or in case of transport failure, the 
>> peer can select other
>> IP for retrying the transport connection.

This retrying of the transport connection to the other advertised Host-IP-Address(es) sounds really interesting.
But the current RFC text, doesn't even say that a peer MAY retry the transport connection to any of the other advertised Host-IP-Addresses.



>> 
>> With SCTP, there is always RFC5061. Addresses can be added 
>> to and deleted from
>> an existing association. So for the responder it is good to 
>> know that some IP 
>> address maps to a DiameterIdentity of the initiator as those 
>> might be added
>> later on.

Sounds reasonable. 
But as 3588bis doesn't say anything of doing any of this, an implementation doing nothing with the received Host-IP-Address values would be perfectly valid and compliant, I suppose.

Thanks,
  Pedro

>> 
>> - JOuni
>> 
>> 
>> > 
>> > Best Regards,
>> >  Pedro
>> > 
>> >>> -----Original Message-----
>> >>> From: Glen Zorn [mailto:glenzorn@gmail.com] 
>> >>> Sent: Monday, September 17, 2012 1:06 PM
>> >>> To: VITON HORCAJO, Pedro (Pedro)
>> >>> Cc: dime@ietf.org; glenzorn@gmail.com
>> >>> Subject: Re: [Dime] [RFC3588bis-34] - Host-IP-Address AVP
>> >>> 
>> >>> 
>> >>> On 09/17/2012 04:02 PM, VITON HORCAJO, Pedro (Pedro) wrote:
>> >>>> Hi:
>> >>>> After reviewing original RFC3588 and the lastest draft for 
>> >>> 3588bis-34, 
>> >>>> I have a couple of comments/questions related to the 
>> >>> Host-IP-Address AVP
>> >>>> 1.- I don't have clear the behavior of a diameter peer 
>> >>> when SENDING 
>> >>>> the Host-IP-Address AVP in the CER/CEA messages, if 
>> using TCP to 
>> >>>> transport Diameter.
>> >>>> In sections 5.3.1 (CER), 5.3.2(CEA) and 5.3.5 
>> >>> (Host-IP-Address AVP), 
>> >>>> it indicates the behavior with respect to that AVP when 
>> >>> using SCTP or 
>> >>>> DTLS/SCTP as transport mechanism.
>> >>>>    The Host-IP-Address AVP (AVP Code 257) is of type 
>> >>> Address and is used
>> >>>>    to inform a Diameter peer of the sender's IP address.  
>> >>> All source
>> >>>>    addresses that a Diameter node expects to use with 
>> >>> SCTP [RFC4960] or
>> >>>>    DTLS/SCTP [RFC6083] MUST be advertised in the CER and 
>> >>> CEA messages by
>> >>>>    including a Host-IP-Address AVP for each address.
>> >>>>    When Diameter is run over SCTP [RFC4960] or DTLS/SCTP 
>> >>> [RFC6083],
>> >>>>    which allow connections to span multiple interfaces, 
>> >>> hence, multiple
>> >>>>    IP addresses, the Capabilities-Exchange-Answer message 
>> >>> MUST contain
>> >>>>    one Host-IP-Address AVP for each potential IP address 
>> >>> that MAY be
>> >>>>    locally used when transmitting Diameter messages.
>> >>>> That might lead to think that if using TCP, that AVP 
>> >>> might/needs not 
>> >>>> be sent.
>> >>>> However, not sending it would be a contradiction with the 
>> >>> CER/CEA ABNF 
>> >>>> message format, that states that the Host-IP-Address AVP is a 
>> >>>> mandatory AVP with at least 1 ocurrence :
>> >>>> <CER> ::= < Diameter Header: 257, REQ >
>> >>>>                   { Origin-Host }
>> >>>>                   { Origin-Realm }
>> >>>>                1* { Host-IP-Address } <------------
>> >>>> ...
>> >>>> I think it would be a good idea to clarify:
>> >>>> A.- whether Host-IP-Address MUST/SHOULD/MAY included in CER/CEA 
>> >>>> messages if using TCP
>> >>> 
>> >>> As you point out, the command definition for the CER 
>> >>> requires at least 
>> >>> on instance of the AVP.  What is unclear?
>> >>> 
>> >>> ...
>> >>> 
>> >>> 
>> > _______________________________________________
>> > DiME mailing list
>> > DiME@ietf.org
>> > https://www.ietf.org/mailman/listinfo/dime
>> 
>>