Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Thu, 17 January 2019 10:35 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 992AD130E0A; Thu, 17 Jan 2019 02:35:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.554
X-Spam-Level:
X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Xfjhpyp9DwY; Thu, 17 Jan 2019 02:35:43 -0800 (PST)
Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A356130DD8; Thu, 17 Jan 2019 02:35:42 -0800 (PST)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547721268; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=n ZcYfIDT4JdmudE/CwZwkMgmXQFpRV0wm2/E3Ar6Dm o=; b=MIQ09YBkSBngUtw+xQLlx1hw/FceXK65QdckA4mihGH8 VHYlxnvqofUBNONQDP04evHCpQUI4SYMKy6pV3c9Vk/C9+jw5H nAmAZOXj29HOrFGzEwdsRahopHMTIf2NOU2I5RL1XJQSNhF2+D RUAgdHpc964Q3KWyJvgGf5Zc1ME=
Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682c_791e_d04f37b4_b0fa_465e_8de5_b7a813c6a606; Thu, 17 Jan 2019 04:34:27 -0600
Received: from DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:32:13 -0700
Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 03:32:13 -0700
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 03:32:12 -0700
Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2808.namprd16.prod.outlook.com (20.178.233.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 10:32:12 +0000
Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 10:32:11 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: Jon Shallow <supjps-ietf@jpshallow.com>, "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "dots@ietf.org" <dots@ietf.org>, 'Benjamin Kaduk' <kaduk@mit.edu>, "draft-ietf-dots-signal-channel@ietf.org" <draft-ietf-dots-signal-channel@ietf.org>
Thread-Topic: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)
Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYAABML0AAAOinHAAAVY/AAAAzJ1A
Date: Thu, 17 Jan 2019 10:32:11 +0000
Message-ID: <BYAPR16MB2790CA4E8FE5BDAC93710D8AEA830@BYAPR16MB2790.namprd16.prod.outlook.com>
References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB2790F718420DF7D6C1061870EA820@BYAPR16MB2790.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB2790BB23E26F2B213F8C388FEA830@BYAPR16MB2790.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB279093FB1F979E9D76E5933EEA830@BYAPR16MB2790.namprd16.prod.outlook.com> <06d301d4ae4c$9f60b650$de2222f0$@jpshallow.com>
In-Reply-To: <06d301d4ae4c$9f60b650$de2222f0$@jpshallow.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.1.100.18
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [103.245.47.20]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BYAPR16MB2808; 6:Xe/NV7GVcNfWB33KFoUu4DlEyKuwuNwvHuwDHlm3tCm4D18lnDdeby8IjRM2hxMeDGSINJ9U9tz2X9ZJNeye5gSXW+kk1Dz+phS+7WZ5VgAGQaEVp6pWgPkKIChXsOajnom5dd1zpbJKRgyBNzUjPsB5UMhd7SYjyiqQJBNrJgGrC0ZZkIg0Wk68QoQjV+1V0see4/Z14W5D0dhEDA2IIlFN/uqmCktxk1Xmhp/CVUdj2qQbJrUh4tOhYPCgHAi/q1Gk4bBP+u7Wo2W/ntDi+0CLyisarWvqxDwvTcDT4V6Z5uaR4WhNMmHOOzxHDbKLXLkMmrmcBAcyMaT/AxLqmir+XGvgallG3v+HiWnTqvccCdDSbdgmsjPGxcnqIBNZ5/oTFoS70dc7D7AogSKujk1+Cw32Wgf2L1rzrCa0U0dK2x7+QXxmhPznSvbzUiYo3wMDjY7iSJaBw6f9aCQoVA==; 5:hG2oOy1kZQ2wV9zMDw0Wfi3Z0xcy/AEP34vnSKvFk0E+97Ua4LRCwHrXT9nvzlmq/9XS535T6jGTlnr7ceGw4ptTH5s4kNFeHmDl0rih6jNken8KbXJw8BkXdA2Bro56xcbz7Z6qwnFcCJndqgL9tdWr6tg5KjzxnJgaa5ubyuHpB86owoU2Bmp7pmlQqWbScwbu7nQp1FnVfP6GKRlkRw==; 7:+MDyo3/xYCXCZ9xVeI9uhIEiFPM0vpU2Hw/VTkyIWn93KpyBGO6HfuVgHIgt6QyQ8xUy1A6N2uEnQpiCj2LyQPgl8AsrwCQLKsMXIYlM3X1rvpEcGyrIADtkgmr5UEWjhRANL4lzDNAs6lNSMIfMCQ==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: ad7dc36f-6a2e-4f52-4136-08d67c670a83
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2808;
x-ms-traffictypediagnostic: BYAPR16MB2808:
x-microsoft-antispam-prvs: <BYAPR16MB2808145FD10F71EED90EC298EA830@BYAPR16MB2808.namprd16.prod.outlook.com>
x-forefront-prvs: 0920602B08
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(396003)(39860400002)(366004)(136003)(376002)(189003)(199004)(55784004)(13464003)(32952001)(6306002)(81166006)(8676002)(8936002)(81156014)(6246003)(229853002)(7736002)(26005)(110136005)(186003)(305945005)(66066001)(486006)(6116002)(93886005)(68736007)(2906002)(9686003)(106356001)(2171002)(105586002)(476003)(446003)(11346002)(25786009)(80792005)(6506007)(53546011)(33656002)(99286004)(3846002)(71190400001)(478600001)(5660300001)(71200400001)(74316002)(76176011)(97736004)(53936002)(7696005)(316002)(5024004)(966005)(256004)(14444005)(2201001)(14454004)(86362001)(72206003)(55016002)(102836004)(6436002)(2501003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2808; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: EY7oPIJRG+/4R5oZoYy4SrWXTZCSERgJLL2w/FwO86/uRYT5njLo81pgLca80R91cKRwF/IG3325Jne5/u9P2RsvfOVMsQs551n613rNiGlZWSF2NBA13Bi0v16Isj8K1bW4U6CvJH1NuzhQ36czEKxIHoPX4nOez523d3WXK8aqvZohslbEk0HPEeai3s0JUoQ1laEjq3I5kHadTLasV6xDDOU+riEeZajHkQ/RjTllCN/EAlQx1xexJjlWLfJwUnEZiSUOu9DIx+W2x9R0xQKFqxMu9Irsn0ytxQnN9plmqwI/IxPZwdlsA5cP0MelCd4WtMqBkHnjcRgpq9RjXjeifcByfaWs9buaLKJDCJsm4by10NBSxhNUP4h8NZgay9Ky6hNNS2QT+6/ZXrnDwOgw4nMjvvQ8SU1fvb+BQhc=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: ad7dc36f-6a2e-4f52-4136-08d67c670a83
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 10:32:11.6671 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2808
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0
X-NAI-Spam-Version: 2.3.0.9418 : core <6463> : inlines <6996> : streams <1810333> : uri <2781262>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/4gaJtSEk4VjMjhAkwakksPuu_2A>
Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jan 2019 10:35:45 -0000

> -----Original Message-----
> From: Dots <dots-bounces@ietf.org> On Behalf Of Jon Shallow
> Sent: Thursday, January 17, 2019 3:39 PM
> To: Konda, Tirumaleswar Reddy <TirumaleswarReddy_Konda@McAfee.com>;
> mohamed.boucadair@orange.com; dots@ietf.org; 'Benjamin Kaduk'
> <kaduk@mit.edu>; draft-ietf-dots-signal-channel@ietf.org
> Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)
> 
> This email originated from outside of the organization. Do not click links or
> open attachments unless you recognize the sender and know the content is
> safe.
> 
> 
> 
> > -----Original Message-----
> > From: Dots [mailto: dots-bounces@ietf.org] On Behalf Of Konda,
> > Tirumaleswar Reddy
> > Sent: 17 January 2019 09:33
> > To: mohamed.boucadair@orange.com; Benjamin Kaduk;
> > draft-ietf-dots-signal- channel@ietf.org
> > Cc: dots@ietf.org
> > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25
> > (1st Part)
> >
> > > -----Original Message-----
> > > From: Dots <dots-bounces@ietf.org> On Behalf Of
> > > mohamed.boucadair@orange.com
> > > Sent: Thursday, January 17, 2019 1:16 PM
> > > To: Konda, Tirumaleswar Reddy
> > <TirumaleswarReddy_Konda@McAfee.com>;
> > > Benjamin Kaduk <kaduk@mit.edu>;
> > > draft-ietf-dots-signal-channel@ietf.org
> > > Cc: dots@ietf.org
> > > Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25
> > > (1st Part)
> > >
> > > This email originated from outside of the organization. Do not click
> > > links or open attachments unless you recognize the sender and know
> > > the content is safe.
> > >
> > > Re-,
> > >
> > > OK.
> > >
> > > Given that we don't have an explicit mention about this in 8305, I
> > > added
> > this
> > > NEW sentence echoing what was in 6555:
> > >
> > >    Note that the DOTS client must cache information regarding the
> > >    outcome of each connection attempt, and it uses that information to
> > >    avoid thrashing the network with subsequent attempts.
> >
> > Minor change:
> >
> > Note that the DOTS client must cache information regarding the outcome
> > of each connection attempt for a specific time period (e.g. 10
> > minutes), and it uses that information to avoid thrashing the network
> > with subsequent attempts.
> 
> How frequently should the client retry when all 4 connection methods fail -
> 10 minutes is excessive to me?

10 minute change is for successful outcome only.

-Tiru

> 
> ~Jon
> 
> >
> > -Tiru
> >
> > >
> > > Cheers,
> > > Med
> > >
> > > > -----Message d'origine-----
> > > > De : Konda, Tirumaleswar Reddy
> > > > [mailto:TirumaleswarReddy_Konda@McAfee.com]
> > > > Envoyé : jeudi 17 janvier 2019 08:16 À : BOUCADAIR Mohamed
> > > > TGI/OLN; Benjamin Kaduk; draft-ietf-dots-signal- channel@ietf.org
> > > > Cc : dots@ietf.org Objet : RE: AD review of
> > > > draft-ietf-dots-signal-channel-25 (1st Part)
> > > >
> > > > > -----Original Message-----
> > > > > From: mohamed.boucadair@orange.com
> > > > > <mohamed.boucadair@orange.com>
> > > > > Sent: Thursday, January 17, 2019 12:33 PM
> > > > > To: Konda, Tirumaleswar Reddy
> > > <TirumaleswarReddy_Konda@McAfee.com>;
> > > > > Benjamin Kaduk <kaduk@mit.edu>;
> > > > > draft-ietf-dots-signal-channel@ietf.org
> > > > > Cc: dots@ietf.org
> > > > > Subject: RE: AD review of draft-ietf-dots-signal-channel-25 (1st
> > > > > Part)
> > > > >
> > > > >
> > > > >
> > > > > Hi Tiru,
> > > > >
> > > > > As you know RFC8305 obsoletes RFC6555.
> > > > >
> > > > > I fail to see where caching results is mentioned in 8305. Do you?
> > > >
> > > > Though RFC8035 obsoletes RFC6555, it is still compatible with
> > > > RFC6555 (see https://tools.ietf.org/html/rfc8305#appendix-A)
> > > > It is useful to cache the happy eyeball results for a specific time.
> > > >
> > > > -Tiru
> > > >
> > > > >
> > > > > Cheers,
> > > > > Med
> > > > >
> > > > > > -----Message d'origine-----
> > > > > > De : Konda, Tirumaleswar Reddy
> > > > > > [mailto:TirumaleswarReddy_Konda@McAfee.com]
> > > > > > Envoyé : mercredi 16 janvier 2019 12:11 À : BOUCADAIR Mohamed
> > > > > > TGI/OLN; Benjamin Kaduk; draft-ietf-dots-signal- channel@ietf.org
> Cc :
> > > > > > dots@ietf.org Objet : RE: AD review of
> > > > > > draft-ietf-dots-signal-channel-25 (1st Part)
> > > > > >
> > > > > > Hi Med,
> > > > > >
> > > > > > Please see inline
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Dots <dots-bounces@ietf.org> On Behalf Of
> > > > > > > mohamed.boucadair@orange.com
> > > > > > > Sent: Wednesday, January 16, 2019 1:30 PM
> > > > > > > To: Benjamin Kaduk <kaduk@mit.edu>; draft-ietf-dots-signal-
> > > > > > > channel@ietf.org
> > > > > > > Cc: dots@ietf.org
> > > > > > > Subject: Re: [Dots] AD review of
> > > > > > > draft-ietf-dots-signal-channel-25 (1st
> > > > > > Part)
> > > > > > >
> > > > > > > >
> > > > > > > >                                   These connection attempts are
> > > > > > > >    performed by the DOTS client when it initializes.  The
> > > > > > > > results of
> > > > the
> > > > > > > >    Happy Eyeballs procedure are used by the DOTS client
> > > > > > > > for sending
> > > > its
> > > > > > > >    subsequent messages to the DOTS server.
> > > > > > > >
> > > > > > > > I see this is scoped to "when the client initializes", so
> > > > > > > > I don't know whether it adds more or not to end with "for
> > > > > > > > the duration of the DOTS session" or some similar scoping
> > > > > > > > for the caching of the happy eyeballs results.
> > > > > > >
> > > > > > > [Med] The connection attempts are performed each time the
> > > > > > > client has to select among a list of v4, v6 (tls, dtls).
> > > > > > > This is particularly true when
> > > > > > the client
> > > > > > > initiates, but this may also be true each time the client
> > > > > > > has to select
> > > > > > among
> > > > > > > v4, v6, DTLS, TLS (e.g., the client attaches to a new network).
> > > > > > >
> > > > > > > I updated the text to:
> > > > > > >
> > > > > > > "These connection attempts are performed by the DOTS client
> > > > > > > when it initializes, or in general when it has to select an
> > > > > > > address family and
> > > > > > transport
> > > > > > > to contact its DOTS server."
> > > > > >
> > > > > > Happy eyeballs mandates caching the results, see
> > > > > > https://tools.ietf.org/html/rfc6555#section-4 (to avoid
> > > > > > thrashing the network).
> > > > > > We may want to update the above line accordingly.
> > > > > >
> > > > > > Cheers,
> > > > > > -Tiru
> > > _______________________________________________
> > > Dots mailing list
> > > Dots@ietf.org
> > > https://www.ietf.org/mailman/listinfo/dots
> > _______________________________________________
> > Dots mailing list
> > Dots@ietf.org
> > https://www.ietf.org/mailman/listinfo/dots
> 
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots