Re: [Dots] Warren Kumari's Discuss on draft-ietf-dots-telemetry-20: (with DISCUSS)

mohamed.boucadair@orange.com Wed, 02 February 2022 18:32 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FFC3A199A; Wed, 2 Feb 2022 10:32:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.096
X-Spam-Level:
X-Spam-Status: No, score=-7.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jWNrki_3xMeP; Wed, 2 Feb 2022 10:32:04 -0800 (PST)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81FCE3A1996; Wed, 2 Feb 2022 10:32:04 -0800 (PST)
Received: from opfedar03.francetelecom.fr (unknown [xx.xx.xx.5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfedar24.francetelecom.fr (ESMTP service) with ESMTPS id 4Jpr4L748bz5vxP; Wed, 2 Feb 2022 19:32:02 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1643826723; bh=Jvh/1vzlOztzU6JM+bQIDfUAybgdbYgr2GexhCKS/s4=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=qkJnRoFLUtNByEjbQYnF0g9GU0lC5fdbIzXv86vCbM56lkfaG1Z40K3Vl+XX8jvhb +w9ol2ZY+e057Wz3CowAr0YI381CNkd2LHt4oBQIQcmInH4di2dbQ1nbN6zMJJf+5N TFXJ9QWHAv9Ihf6ia652TXyE/T+f+m0VNbLq14R2DlZa+tpIzIXflRS+VENg9zzbx+ UthzRdzpQOp1PePB5HNnEZ3vSR/lKKoLr8oUUjbjGbD+a/b3jpka0aDTWGpb6zzDlP hlKAszAPAPq9Mk429dd6+Nn9WNAM9cyT94CECgfNinHCI+gmVi08qChZnwiH5X8SzY v6n+b95CmZgSQ==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by opfedar03.francetelecom.fr (ESMTP service) with ESMTPS id 4Jpr4L5cxDzCqlK; Wed, 2 Feb 2022 19:32:02 +0100 (CET)
From: mohamed.boucadair@orange.com
To: Warren Kumari <warren@kumari.net>, The IESG <iesg@ietf.org>
CC: "draft-ietf-dots-telemetry@ietf.org" <draft-ietf-dots-telemetry@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, "valery@smyslov.net" <valery@smyslov.net>
Thread-Topic: Warren Kumari's Discuss on draft-ietf-dots-telemetry-20: (with DISCUSS)
Thread-Index: AQHYGFZarYyInwq/kE2dtAcEcC2KcayAju2g
Content-Class:
Date: Wed, 02 Feb 2022 18:32:01 +0000
Message-ID: <6832_1643826722_61FACE22_6832_172_1_787AE7BB302AE849A7480A190F8B93303548B106@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <164382121385.21407.6415201995737053293@ietfa.amsl.com>
In-Reply-To: <164382121385.21407.6415201995737053293@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2022-02-02T18:28:16Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=058475cd-848c-4b60-992d-b260386c6433; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0
x-originating-ip: [10.114.13.247]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/QoY64nX2TS5-4qigInLQRCrHvME>
Subject: Re: [Dots] Warren Kumari's Discuss on draft-ietf-dots-telemetry-20: (with DISCUSS)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2022 18:32:10 -0000

Hi Warren, 

We need to keep in mind that the data that will be shared by a DOTS agent may not be computed/measured locally, but be provided by another (external) entity. Having the support for the tree unit classes eases the injection of such external data into the telemetry machinery without any need for adjustment/conversion between unit classes. 

Because we need to ensure for compact encoding, unit auto-scaling is recommended and as such many units for each unit-class should be supported. 

We could stop at tera-* or peta-* as largest unit given that nowadays DDoS attacks are already exceeding TBps. However, and given that we are using enumerations, it will be difficult to define new values in the future if needed. This is why we included support for exa-* and zetta-* as a provision. 

Note that units can be easily augmented if we used identities rather than enumerations, but we went for enumerations for reasons recorded in the document:  

   The DOTS telemetry module (Section 11.1) uses "enumerations" rather
   than "identities" to define units, samples, and intervals because
   otherwise the namespace identifier "ietf-dots-telemetry" must be
   included when a telemetry attribute is included (e.g., in a
   mitigation efficacy update).  The use of "identities" is thus
   suboptimal from a message compactness standpoint; one of the key
   requirements for DOTS Signal Channel messages.

Cheers,
Med

> -----Message d'origine-----
> De : Warren Kumari via Datatracker <noreply@ietf.org>
> Envoyé : mercredi 2 février 2022 18:00
> À : The IESG <iesg@ietf.org>
> Cc : draft-ietf-dots-telemetry@ietf.org; dots-chairs@ietf.org;
> dots@ietf.org; valery@smyslov.net; valery@smyslov.net
> Objet : Warren Kumari's Discuss on draft-ietf-dots-telemetry-20: (with
> DISCUSS)
> 
> Warren Kumari has entered the following ballot position for
> draft-ietf-dots-telemetry-20: Discuss
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/blog/handling-iesg-ballot-
> positions/
> for more information about how to handle DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-dots-telemetry/
> 
> 
> 
> ----------------------------------------------------------------------
> DISCUSS:
> ----------------------------------------------------------------------
> 
> Please note: This really is just a DISCUSSion - I'm happy to be educated
> / wrong, but I do think that it is important enough that it gets
> addressed.
> 
> The 'unit-class' and 'unit' enumerations seems like they add a large
> amount of complexity for (AFAICT) very little gain. Do you really need:
>              "Packets per second (pps).";
>              "Bits per Second (bps).";
>              "Bytes per second (Bps).";
>              "Kilo packets per second (kpps).";
>              "Kilobits per second (kbps).";
>              "Kilobytes per second (kBps).";
>              "Mega packets per second (Mpps).";
>              "Megabytes per second (MBps).";
>              "Giga packets per second (Gpps).";
>              "Gigabits per second (Gbps).";
>              "Gigabytes per second (GBps).";
>              "Tera packets per second (Tpps).";
>              "Terabits per second (Tbps).";
>              "Terabytes per second (TBps).";
>              "Peta packets per second (Ppps).";
>              "Petabits per second (Pbps).";
>              "Petabytes per second (PBps).";
>              "Exa packets per second (Epps).";
>              "Exabits per second (Ebps).";
>              "Exabytes per second (EBps).";
>              "Zetta packets per second (Zpps).";
>              "Zettabits per second (Zbps).";
>              "Zettabytes per second (ZBps)."
> when just Packets Per Second and Bits Per Second would work? Yes, you
> might have to have a really large number in BPS, but that seems much
> much less likely to lead to errors than having parsers have to deal with
> this. When a user enters a number their glass would presumably allow
> them to use a more convenient unit, but having it encoded and decoded
> into this seems needlessly complex.
> 
> I did look through the document and list to try and find discussions on
> this point - I'm happy to be pointed at a place where it was discussed
> and agreed.
> 
> 
> 
> 


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.