Re: [Dots] Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)

"Eric Vyncke (evyncke)" <evyncke@cisco.com> Wed, 04 November 2020 10:49 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61B2A3A0EEB; Wed, 4 Nov 2020 02:49:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.601
X-Spam-Level:
X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=IX8wWLdA; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=wpO9h/WX
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J8x1rrVQ15K6; Wed, 4 Nov 2020 02:49:21 -0800 (PST)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AF363A0EE6; Wed, 4 Nov 2020 02:49:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5358; q=dns/txt; s=iport; t=1604486961; x=1605696561; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=9fzUqNjt79jgR7YSC7kPVPiuIWZwew5ni+ddNeSnhsw=; b=IX8wWLdAo1VHQsklXhfCsTZtzr9VB8BBaYpHDxdwsjvfdUNKfb36VVlG l81skJ40BHQ8SDBs3HIo1E9Tijun30r5VyrhWKD+Rry1tNT+qLkqxD81J Lz4ighOwOeEw+Hh7qnuBLRDPKRF+IEohkYF5GcS5k1EH/TnNjVTMTpExE w=;
IronPort-PHdr: 9a23:2rC+PxH0ERP+wbhydiZLfJ1GYnJ96bzpIg4Y7IYmgLtSc6Oluo7vJ1Hb+e401QGbWp/S7f1JzeHRtvOoVW8B5MOHt3YPONxJWgQegMob1wonHIaeCEL9IfKrCk5yHMlLWFJ/uX3uN09TFZX5fVTUrXD05jkXSV3zMANvLbHzHYjfx828y+G1/cjVZANFzDqwaL9/NlO4twLU48IXmoBlbK02z0jE
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BECgCEhqJf/5tdJa1igQmDIVEHgUkvLoQ9g0kDjU+KE45sgUKBEQNUCwEBAQ0BAS0CBAEBhEoCF4F1AiU4EwIDAQELAQEFAQEBAgEGBHGFYQyFcgEBAQECARIREQwBATcBCwQCAQgRAwECAwImAgICHxEVBQMIAgQBDQUigwSCTAMOIAGkNQKBO4hodoEygwQBAQWFAw0LghAJgQ4qgnKDcYIphC4bgUE/gREnHIJPPoIbggkCGIMXM4IskEMCgmEBPYdBnCxUCoJtjxdShg2FEwMfgxiKEoVMjneEXY5wjWaSXgIEAgQFAg4BAQWBayOBV3AVGiEqAYI+UBcCDY5WgzqKWHQ4AgYBCQEBAwkBe41MAQE
X-IronPort-AV: E=Sophos;i="5.77,450,1596499200"; d="scan'208";a="598674748"
Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 04 Nov 2020 10:49:20 +0000
Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id 0A4AnKMh027540 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 4 Nov 2020 10:49:20 GMT
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 4 Nov 2020 04:49:20 -0600
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 4 Nov 2020 04:49:19 -0600
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 4 Nov 2020 05:49:19 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PiIr7TSe2kLrjFXS9o10QGzsPuymlCVRaqDP6L05gxBFZ2xJ0dO7snvJYTk8ElvSaRAOS5AbuP8xuxiarhlMMYZhFoGGfgB6wHV58hgqhWsiZllmPNAXyr1vljz64gFvq2H06XazjeNUz+Ekna33vr4mYbGN8Dm6VAcCdnPTE582cUDnfs5dZp3lPrOfh8jPGZUeLOPwjGSurx4mZ//ejNzuoJ1igDbJlfz6ozsOkNNl/Ssi3k+l0gFgx8IPrXp0jPJ2NQrTreDjNN9yPHsNtwMCAzsV/uoIMzWu01QemKjijPfBq7otKFyurPpXCx4wXFrDaXCTnfOBHmjBHteZng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9fzUqNjt79jgR7YSC7kPVPiuIWZwew5ni+ddNeSnhsw=; b=SPEvWf8S/awSgzxRwm6nC7VXrqENd+N1cZjeaAhrWljJR4/xC8zHcJg6mzCyoO6MPyi4AuW0wNOvOkRLxBwEbpj8+B6JGLkwNBQ55LRpyxtTof5XJfHnrlR9DOcV3b1JHm8/Q2bKAUEM5OexMtJnNZVF83Af5fcywxE9bsiyBhW2uYMFEMT9wS7pIoUJe1DVhA98fbdR5N/srmztRxgby1xwZ4fluAVkyf0l2/EbUpCeehns/1kXrSIzf2ntyshlqjOm4n4lubq61VgyRhG3Sy6fcF0U1JeGXkV3ZQk2HPEBqX0dvzPP5Zvg4Vh9FlqBDplXbJh8E0E0BQrAcVac0g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9fzUqNjt79jgR7YSC7kPVPiuIWZwew5ni+ddNeSnhsw=; b=wpO9h/WXra0IyEP9Fnfxhf1ZhfGgSvURQyffWjv5VQUQV8yJb++04LUAu/DpHdQraZbhMeGnXCg9V/QAzNA2UWYQpmbqxI1eEupdlxUXtDBhZXnv2a8B/RO32K5OIo17xcv8LI01o2f+Beo/FqDHZkXAJCI8MHsZ5NJrb9rl/ig=
Received: from PH0PR11MB4966.namprd11.prod.outlook.com (2603:10b6:510:42::21) by PH0PR11MB5192.namprd11.prod.outlook.com (2603:10b6:510:3b::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Wed, 4 Nov 2020 10:49:18 +0000
Received: from PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::453b:b2f5:ec29:410d]) by PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::453b:b2f5:ec29:410d%7]) with mapi id 15.20.3499.032; Wed, 4 Nov 2020 10:49:18 +0000
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-dots-server-discovery@ietf.org" <draft-ietf-dots-server-discovery@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, Valery Smyslov <valery@smyslov.net>, "zhencao.ietf@gmail.com" <zhencao.ietf@gmail.com>, "Bernie Volz (volz)" <volz@cisco.com>, "tim@qacafe.com" <tim@qacafe.com>
Thread-Topic: Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)
Thread-Index: AQHWshMdIy60/aZzWU6NT11nUIRB7qm3erxAgABiKoA=
Date: Wed, 04 Nov 2020 10:49:18 +0000
Message-ID: <6C00489A-9A46-4A6F-8F8C-50C564B616CA@cisco.com>
References: <160442981984.8698.100494815694851250@ietfa.amsl.com> <888_1604474112_5FA25500_888_442_1_787AE7BB302AE849A7480A190F8B93303156F7F0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
In-Reply-To: <888_1604474112_5FA25500_888_442_1_787AE7BB302AE849A7480A190F8B93303156F7F0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
Accept-Language: fr-BE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.42.20101102
authentication-results: orange.com; dkim=none (message not signed) header.d=none;orange.com; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [2001:420:c0c1:36:1140:cf94:e6c:82f]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: db5adb63-d563-4d8f-4a3c-08d880af47aa
x-ms-traffictypediagnostic: PH0PR11MB5192:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <PH0PR11MB519267281E0BC3F383B83A4FA9EF0@PH0PR11MB5192.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: ZF5qV5YW6u1N+LMAPtpOgl4rMLAogCSoeJffBXSUh6K0DPM7lv8a3kQDvzPhr4sWyCWT7as8lLX3vSCDUjoGZ4H5TQXSw7da2FYTiY1ZfmXYTeozxL0m2zyWb/oMCcbhVSXbjxI4VXbRt9347cQsQnHdvZka664/BzfLuFLlwGC4amL0uxA6VEreG26nAQ6frxo+8dY/XLvYzGmjGgZvNt/IARQW42+4xZCKe4ZMqtvnblpwNHHxcNAkbA81iMB2wOLRNHRjtdGghYYzvvGL6Uypf32PsdPpRfEUQCd5Xso0vXrnmTFcc54b3tDer286num4zWZVFwi8hvh73cCJKg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR11MB4966.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(396003)(376002)(136003)(346002)(39860400002)(366004)(186003)(86362001)(6506007)(6512007)(316002)(33656002)(5660300002)(36756003)(53546011)(83380400001)(54906003)(71200400001)(110136005)(91956017)(2616005)(6486002)(64756008)(66556008)(224303003)(478600001)(66946007)(76116006)(2906002)(4326008)(66476007)(8936002)(66446008); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <F870168F448AEA4892F998334D80E696@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4966.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: db5adb63-d563-4d8f-4a3c-08d880af47aa
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2020 10:49:18.2222 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: AM4y3YYofQ9et42lWfT2gFDDmO2S2OF6/rNwNjWUAFhJvQAC1JbJxfqHghTzH/hrsDkuxjHStoMaBJGaCFP6hQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR11MB5192
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com
X-Outbound-Node: rcdn-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/9IbpTuou3quGX41biQK6jkdEN-k>
Subject: Re: [Dots] Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Nov 2020 10:49:23 -0000

Re-bonjour Med,

I have removed the parts where we agree. Additional comments are prefixed by EV>

Regards

-éric


-----Original Message-----
From: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>
Date: Wednesday, 4 November 2020 at 08:15
To: Eric Vyncke <evyncke@cisco.com>, The IESG <iesg@ietf.org>
Cc: "draft-ietf-dots-server-discovery@ietf.org" <draft-ietf-dots-server-discovery@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, Valery Smyslov <valery@smyslov.net>, "zhencao.ietf@gmail.com" <zhencao.ietf@gmail.com>, "Bernie Volz (volz)" <volz@cisco.com>, "tim@qacafe.com" <tim@qacafe.com>
Subject: RE: Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)

    > -- Section 5.1.2 --
    > I fully second Zhen Cao's review: how will the IPv4-mapped IPv6
    > address(es) be used? They MUST not appear on the wire and there is a
    > DHCPv4 option to convey the DOTS information. Is it when DHCPv6 is
    > available, no DHCPv4, and only IPv4 connectivity to the DOTS server
    > ? If so, then please clarify the text.
    > 

    [Med] You got it. Added: " This is particularly useful in IPv4 service continuity deployments where only DHCPv6 is used."

EV> I am afraid that more text and explanations are required to clear my remaining DISCUSS even if your suggested modification is a big step forward


    > 
    > -- Section 4 --
    > While this section title is "Unified DOTS Discovery Procedure", I
    > read 3 different mechanisms so apparently conflicting with the
    > section title. Suggest to remove "unified" from the section title.

    [Med] It is "unified" in the sense that the different mechanisms as packaged to form one with an internal preference order. OK to remove it if it hurts.   

EV> yes, please remove the "unified" in the section title

    > 
    > Putting DHCP configuration under explicit configuration appears
    > weird to me as DHCP is rather dynamic and on the same level as DNSD.

    [Med] Not sure what is weird there. There two levels of explicit config as detailed in the text. 

EV> but my point is that DHCP is not really an explicit configuration rather a dynamic one. So, I do not see why the DHCP part is on the same level as static configuration in the 1st item in the list

    > 
    > May I suggest to move the sentence "DOTS clients will prefer
    > information received from the discovery methods in the order listed"
    > before the list? It is an important sentence IMHO.

    [Med] It is important in case the client supports many mechanisms and receives the information using various sources.

EV> sure but my point was to move this sentence *before* the enumeration due to its importance.

    > 
    > I wonder wheter the sentence "Expiry of a peer DOTS agent's
    > certificate currently in use." is correct... Should it be "agent
    > peer DOTS certificate" ?

    [Med] Would the "Expiry of the certificate of a peer DOTS agent" be better? To be honest, I'm not sure to get the issue with the initial wording. 


EV> it is indeed easier to read  / parse for a non-English reader like myself

    > 
    > -- Sections 5.1.3 and 5.2.3--
    > The part of the sentence "as distinguished by the presence of
    > multiple root labels" should be explained more as it is unclear.

    [Med] If multiple names were included, then each of these names will be terminating with a byte value of 0. We drafted the text with the assumption that the reader is familiar with Section 3.1 of RFC1035.

EV> sure about RFC 1035 ;-) but I wonder whether this part of the sentence is useful as the previous part " OPTION_V6_DOTS_RI contains more than one name" seems perfectly enough for me so reader may wonder about the part " as distinguished by the presence of multiple root labels"