Re: [Dots] Signal / Data / Alias / Filter Implementation

"Dobbins, Roland" <rdobbins@arbor.net> Wed, 02 August 2017 18:27 UTC

Return-Path: <rdobbins@arbor.net>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F09A129B26 for <dots@ietfa.amsl.com>; Wed, 2 Aug 2017 11:27:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level:
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=thescout.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LCTpGWZBl2qG for <dots@ietfa.amsl.com>; Wed, 2 Aug 2017 11:27:50 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0124.outbound.protection.outlook.com [104.47.32.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1612A126C0F for <dots@ietf.org>; Wed, 2 Aug 2017 11:27:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Lhy6lLqF4ajNGE+bRLIxduHj3Qmkjy1SkE0wSLmchJQ=; b=hyTSKhCRdYdHDDjfv1hedLQjqFFRdXndw0NTqpLEX3A8xEiOJ7VE/peGeA2LlklHufl4v7BxU1rxakS56gucnKJWw1XsIfqKipwJBe3hyqQIl0jKXmuM0BV/eZJ0D3DNtJYWP0fkABNDzHCGdHuYNWT3doQIE1sfnrVUBAH7y34=
Received: from DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156) by DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1304.22; Wed, 2 Aug 2017 18:27:48 +0000
Received: from DM2PR0101MB1039.prod.exchangelabs.com ([fe80::7c00:c01c:3a1b:51c2]) by DM2PR0101MB1039.prod.exchangelabs.com ([fe80::7c00:c01c:3a1b:51c2%13]) with mapi id 15.01.1304.023; Wed, 2 Aug 2017 18:27:48 +0000
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: Jon Shallow <supjps-ietf@jpshallow.com>
CC: "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] Signal / Data / Alias / Filter Implementation
Thread-Index: AdMLd/i8iwFwzTfWQ/S7HayGj5igcAAP0ScA///YgwCAADMXzw==
Date: Wed, 02 Aug 2017 18:27:47 +0000
Message-ID: <B8BBF80E-5A5B-473D-A0B2-B6EFEC21DEBF@arbor.net>
References: <035401d30b77$fb3a1da0$f1ae58e0$@jpshallow.com> <628E4313-95D3-42F5-9DDB-00C7B4EBB4D6@arbor.net>, <039001d30ba3$7f4290c0$7dc7b240$@jpshallow.com>
In-Reply-To: <039001d30ba3$7f4290c0$7dc7b240$@jpshallow.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [49.228.111.8]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM2PR0101MB1039; 7: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
x-ms-office365-filtering-correlation-id: c69e8d39-0754-4d3f-37e2-08d4d9d42d2f
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:DM2PR0101MB1039;
x-ms-traffictypediagnostic: DM2PR0101MB1039:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=rdobbins@arbor.net;
x-exchange-antispam-report-test: UriScan:(278428928389397);
x-microsoft-antispam-prvs: <DM2PR0101MB10392F4FD47278B5527BAC50CAB00@DM2PR0101MB1039.prod.exchangelabs.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(100000703101)(100105400095)(3002001)(6041248)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123558100)(20161123562025)(20161123555025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:DM2PR0101MB1039; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:DM2PR0101MB1039;
x-forefront-prvs: 0387D64A71
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39850400002)(39400400002)(39840400002)(39410400002)(39450400003)(189002)(24454002)(199003)(53936002)(478600001)(81156014)(189998001)(8936002)(54896002)(236005)(81166006)(6512007)(105586002)(50986999)(106356001)(76176999)(54356999)(5250100002)(3846002)(6116002)(102836003)(53546010)(68736007)(101416001)(229853002)(6506006)(2900100001)(6436002)(36756003)(82746002)(6486002)(2950100002)(99286003)(6916009)(8676002)(5660300001)(3660700001)(97736004)(83716003)(38730400002)(86362001)(6246003)(7736002)(4326008)(110136004)(3280700002)(33656002)(25786009)(66066001)(14454004)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0101MB1039; H:DM2PR0101MB1039.prod.exchangelabs.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: arbor.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_B8BBF80E5A5B473DA0B2B6EFEC21DEBFarbornet_"
MIME-Version: 1.0
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Aug 2017 18:27:47.8258 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 54f11205-d4aa-4809-bd36-0b542199c5b2
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0101MB1039
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/AqbVmi5xzZna3yUf6F_TsF3ooQA>
Subject: Re: [Dots] Signal / Data / Alias / Filter Implementation
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Aug 2017 18:27:52 -0000

On Aug 2, 2017, at 22:25, Jon Shallow <supjps-ietf@jpshallow.com<mailto:supjps-ietf@jpshallow.com>> wrote:

In draft-ietf-dots-use-cases-07
3.1.6.  End-customer operating a CPE network infrastructure device with
       an integrated DOTS client

3.1.6 from idraft-ietf-dots-use-cases-07 in full:




3.1.6.  End-customer operating a CPE network infrastructure device with
        an integrated DOTS client

   Similar to the above use-case featuring applications or services with
   built-in DDoS attack detection/classification and DOTS client
   capabilities, in this scenario, an end-customer network
   infrastructure CPE device such as a router, layer-3 switch, firewall,
   or load-balance incorporates both the functionality required to
   detect and classify incoming DDoS attacks as well as DOTS client
   functionality.

   The subsequent DOTS communications dialogue and resultant DDoS
   mitigation initiation and termination activities take place in the
   same manner as the use-cases described above.

-----------------------------------
Roland Dobbins <rdobbins@arbor.net<mailto:rdobbins@arbor.net>>