[Dots] draft-h-dots-mitigation-offload-expansion-00: Reasons why we want to standardize between DMS and orchestrator using DOTS

Yuhei Hayashi <hayashi.yuhei@lab.ntt.co.jp> Thu, 29 November 2018 08:46 UTC

Return-Path: <hayashi.yuhei@lab.ntt.co.jp>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07855130DD1 for <dots@ietfa.amsl.com>; Thu, 29 Nov 2018 00:46:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3AolxzA0VERV for <dots@ietfa.amsl.com>; Thu, 29 Nov 2018 00:46:27 -0800 (PST)
Received: from tama50.ecl.ntt.co.jp (tama50.ecl.ntt.co.jp [129.60.39.147]) by ietfa.amsl.com (Postfix) with ESMTP id 5D551130DC3 for <dots@ietf.org>; Thu, 29 Nov 2018 00:46:27 -0800 (PST)
Received: from vc1.ecl.ntt.co.jp (vc1.ecl.ntt.co.jp [129.60.86.153]) by tama50.ecl.ntt.co.jp (8.13.8/8.13.8) with ESMTP id wAT8kQKb026095 for <dots@ietf.org>; Thu, 29 Nov 2018 17:46:26 +0900
Received: from vc1.ecl.ntt.co.jp (localhost [127.0.0.1]) by vc1.ecl.ntt.co.jp (Postfix) with ESMTP id 5614BEA8186 for <dots@ietf.org>; Thu, 29 Nov 2018 17:46:26 +0900 (JST)
Received: from jcms-pop21.ecl.ntt.co.jp (jcms-pop21.ecl.ntt.co.jp [129.60.87.134]) by vc1.ecl.ntt.co.jp (Postfix) with ESMTP id 4B5AFEA7546 for <dots@ietf.org>; Thu, 29 Nov 2018 17:46:26 +0900 (JST)
Received: from [IPv6:::1] (unknown [129.60.13.46]) by jcms-pop21.ecl.ntt.co.jp (Postfix) with ESMTPSA id 476B74008D5 for <dots@ietf.org>; Thu, 29 Nov 2018 17:46:26 +0900 (JST)
From: Yuhei Hayashi <hayashi.yuhei@lab.ntt.co.jp>
Message-ID: <60792ae9-9e70-bfda-cd2c-a1112c7dbb29@lab.ntt.co.jp>
Date: Thu, 29 Nov 2018 17:45:16 +0900
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.1
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-CC-Mail-RelayStamp: 1
To: dots@ietf.org
X-TM-AS-MML: disable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/ItAIr6hA7-mMltoS7DkJyUY76Dw>
Subject: [Dots] draft-h-dots-mitigation-offload-expansion-00: Reasons why we want to standardize between DMS and orchestrator using DOTS
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Nov 2018 08:46:30 -0000

Hi Tiru, Flemming,

Thank you for asking question for my draft "draft-h-dots-mitigation-offload-expansion-00" in IETF103.

I'm sorry I'm late for answering the question.
These questions are similar so I will answer the question in this one thread.
> Q: (Tiru Reddy) Why the DMS must use DOTS to talk to the orchestrator?
> Q: (Flemming Andreasen) Is it worthwhile to standardize the communication between the DMS with the orchestrator? https://datatracker.ietf.org/meeting/103/materials/minutes-103-dots-00

We want to use various and latest DMS in DDoS Orchestration usecase because DDoS attacks evolve day by day.

However, syslog format varies from DMS to DMS.
There is no standardized IF or API between DMS and Orchestrator, so we have to develop IF module on orchestrator for adapting the DMS to the orchestrator.
I think it is obstacle to use various DMS in DDoS Orchestration usecase.

We are paying attention to DOTS, which is being debated the most as a standard for signaling related to DDoS.

Thanks,
Yuhei

-----------------------------------------
Nippon Telegraph and Telephone Corporation
  Network Service Systems Laboratories
   Transport Service Platform Innovation Project
    Transport Service Systems Development Project
     Yuhei Hayashi
0422-59-3485
hayashi.yuhei@lab.ntt.co.jp