Re: [Dots] WGLC for draft-dots-use-cases-19

<mohamed.boucadair@orange.com> Tue, 06 August 2019 13:13 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6596412018E for <dots@ietfa.amsl.com>; Tue, 6 Aug 2019 06:13:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V1gkmGPHynWT for <dots@ietfa.amsl.com>; Tue, 6 Aug 2019 06:13:32 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99868120182 for <dots@ietf.org>; Tue, 6 Aug 2019 06:13:32 -0700 (PDT)
Received: from opfednr05.francetelecom.fr (unknown [xx.xx.xx.69]) by opfednr21.francetelecom.fr (ESMTP service) with ESMTP id 462w7H0gLKz5wP8; Tue, 6 Aug 2019 15:13:31 +0200 (CEST)
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.38]) by opfednr05.francetelecom.fr (ESMTP service) with ESMTP id 462w7H16hnzyQ4; Tue, 6 Aug 2019 15:13:31 +0200 (CEST)
Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5C.corporate.adroot.infra.ftgroup ([fe80::393d:418c:3f1d:991d%21]) with mapi id 14.03.0468.000; Tue, 6 Aug 2019 15:13:30 +0200
From: mohamed.boucadair@orange.com
To: H Y <yuuhei.hayashi@gmail.com>
CC: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@mcafee.com>, Valery Smyslov <valery@smyslov.net>, "dots@ietf.org" <dots@ietf.org>, "Xialiang (Frank, Network Standard & Patent Dept)" <frank.xialiang@huawei.com>
Thread-Topic: [Dots] WGLC for draft-dots-use-cases-19
Thread-Index: AQHVTFfBWeNm+qrZFEWI5uHup0s9bKbuGAaQ
Date: Tue, 06 Aug 2019 13:13:29 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B9330312FDF13@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <00b001d54c1f$d57799e0$8066cda0$@smyslov.net> <DM5PR16MB17050571BAD70FACA597FA6CEAD50@DM5PR16MB1705.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B9330312FDB17@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <DM5PR16MB170555606E26709FC5C54AA4EAD50@DM5PR16MB1705.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B9330312FDBC8@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <DM5PR16MB17050DF869BABA8B3670DC85EAD50@DM5PR16MB1705.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B9330312FDC3B@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <DM5PR16MB1705E573DE3E7482115B9FE0EAD50@DM5PR16MB1705.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B9330312FDC6C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <DM5PR16MB170551C20908654A0F6428D7EAD50@DM5PR16MB1705.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B9330312FDDC9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <CAA8pjUMpZUtd_au+UTcB0N7sS-hySddSD_18Dhn=9kGd=o_7aA@mail.gmail.com>
In-Reply-To: <CAA8pjUMpZUtd_au+UTcB0N7sS-hySddSD_18Dhn=9kGd=o_7aA@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.247]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/B-_9Pxmc9TKzSshCszeZGqIwYwI>
Subject: Re: [Dots] WGLC for draft-dots-use-cases-19
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Aug 2019 13:13:35 -0000

Hi Yuhei,

I was not questioning the new offload text. My question to Tiru was about new security issues specific to the offload. 

From where I sit, I still don't see any specific issue induced by the offload. 

Cheers,
Med

> -----Message d'origine-----
> De : H Y [mailto:yuuhei.hayashi@gmail.com]
> Envoyé : mardi 6 août 2019 15:06
> À : BOUCADAIR Mohamed TGI/OLN
> Cc : Konda, Tirumaleswar Reddy; Valery Smyslov; dots@ietf.org; Xialiang
> (Frank, Network Standard & Patent Dept)
> Objet : Re: [Dots] WGLC for draft-dots-use-cases-19
> 
> Hi
> 
> Please see inline.
> 
> 2019年8月6日(火) 21:16 <mohamed.boucadair@orange.com>:
> >
> >
> >  However If orchestrator is enforcing
> > > filtering rules on routers, it should create the black-list rules
> based on
> > > the non-spoofed attacker IP address and not use the spoofed victim IP
> > > addresses.
> > >
> >
> > [Med] Agree. Whether the check is done at the orchestrator or by the
> DMS, is not a new concern. The DMS has to proceed with these checks,
> anyway. I fail to see what is NEW and SPECIFIC to the offload scenario.
> [Yuhei]
> The NEW point of the offload scenario is that DMS has DOTS client
> function in DDoS orchestration usecase, and the orchestrator can take
> further actions based on result of DMS's detailed analysis.
> 
> Thanks,
> Yuhei