IETF Logo Mail Archive

Re: [Dots] DOTS Telemetry

"Dobbins, Roland" <rdobbins@arbor.net> Fri, 17 February 2017 14:05 UTC

Return-Path: <rdobbins@arbor.net>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79CE212946F for <dots@ietfa.amsl.com>; Fri, 17 Feb 2017 06:05:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level:
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=thescout.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eM6M0wMZXX1j for <dots@ietfa.amsl.com>; Fri, 17 Feb 2017 06:05:31 -0800 (PST)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0100.outbound.protection.outlook.com [104.47.37.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47B9B1295C9 for <dots@ietf.org>; Fri, 17 Feb 2017 06:05:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=njtzj/DrxkUiIBKMpk8/lxwe+HFS3mh1ubmZXk57e3E=; b=fpZ9ah9yJhfopUrbXfbF0pmRUFwgqKhD97Q+rLMVQl+Nzw1waaSMAtpYPom2ABOqcCV/R2r/8MVGrkcUr+DTi7BAmj9C3wmRoOXJOltXqlwr/JM+JYlg+FSTjyq4VSNkIYn4KIzMOoNDr9TbEGgm08PcHJQAJOu7HCLHP3ZdQYY=
Received: from DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156) by DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.16; Fri, 17 Feb 2017 14:05:30 +0000
Received: from DM2PR0101MB1039.prod.exchangelabs.com ([10.160.129.156]) by DM2PR0101MB1039.prod.exchangelabs.com ([10.160.129.156]) with mapi id 15.01.0888.030; Fri, 17 Feb 2017 14:05:30 +0000
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: Barry Raveendran Greene <bgreene@senki.org>
Thread-Topic: [Dots] DOTS Telemetry
Thread-Index: AQHSiGdqs9jnVMU+R1WnPYyVGJhdZKFsKsCAgACFyACAAH3XAIAADGeAgAACNkQ=
Date: Fri, 17 Feb 2017 14:05:30 +0000
Message-ID: <9DDFFA4C-BA2E-4453-BC14-049563612454@arbor.net>
References: <AF69B704-0C37-4B22-85CC-81406CDB876A@verisign.com> <8e4b578e-c96e-60f1-244a-f648067dcad5@cisco.com> <BB99BF0B-3B9F-45C1-A197-780F67ECBED1@arbor.net> <97d79d4e-1bdc-f45f-eb6f-874544a9c05d@nttv6.jp>, <4CE6428E-1FD6-4E6D-A2FB-B27B5A85C579@senki.org>
In-Reply-To: <4CE6428E-1FD6-4E6D-A2FB-B27B5A85C579@senki.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=rdobbins@arbor.net;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [2405:9800:b400:bfe0:b9da:9f32:143a:e1de]
x-ms-office365-filtering-correlation-id: 70dd66b3-dedd-42db-51e6-08d4573e0827
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:DM2PR0101MB1039;
x-microsoft-exchange-diagnostics: 1; DM2PR0101MB1039; 7:jOiN5QWXUbCqgw0JyesPNTD8IXqzIRj2FaFLhechHJhcgOzZWA2gD+mjI5FY+tJrkxJYL4DHDpYLa55hVbSDewzlUPfSCDiRY4fuo2YcqTspol3XeXLFPwEkx7HdmDqzQHOBpyX7lC4+4drIeLDi1fXQgYL9LSkLSVv4hr/I1AayxjdzkQ3BYwqz23kP9WXtSWdqD+9djsCfeWWe+S4KljnfCSavv9pIm3Txyp8y5DA7jlfFZkULX/jwvUdAtdh89goCICJRhVY5F9fxz3iJ29PNagINrAC/breH8Uvgji+6wczZyg+EAc/GrOMkWd30IKbkrld7m72tJCtg/kBavQ==
x-microsoft-antispam-prvs: <DM2PR0101MB10396701128F9B802BE04F4CCA5D0@DM2PR0101MB1039.prod.exchangelabs.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040375)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6041248)(20161123555025)(20161123560025)(20161123562025)(20161123564025)(20161123558025)(6072148); SRVR:DM2PR0101MB1039; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0101MB1039;
x-forefront-prvs: 02213C82F8
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(39450400003)(24454002)(199003)(189002)(6506006)(50986999)(38730400002)(81166006)(81156014)(99286003)(54896002)(6512007)(82746002)(106356001)(54906002)(236005)(6486002)(8676002)(229853002)(3660700001)(77096006)(93886004)(6436002)(110136004)(83716003)(25786008)(2906002)(4326007)(3280700002)(53936002)(2900100001)(68736007)(92566002)(97736004)(101416001)(122556002)(5660300001)(36756003)(76176999)(54356999)(86362001)(106116001)(6116002)(6246003)(33656002)(102836003)(8936002)(6916009)(105586002)(2950100002)(7736002)(189998001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0101MB1039; H:DM2PR0101MB1039.prod.exchangelabs.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: arbor.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_9DDFFA4CBA2E4453BC14049563612454arbornet_"
MIME-Version: 1.0
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Feb 2017 14:05:30.1216 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 54f11205-d4aa-4809-bd36-0b542199c5b2
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0101MB1039
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/ZsHqe9GvWyxOIZW7oIpmgJimO28>
Cc: dots <dots@ietf.org>, kaname nishizuka <kaname@nttv6.jp>
Subject: Re: [Dots] DOTS Telemetry
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Feb 2017 14:05:34 -0000

On Feb 17, 2017, at 20:57, Barry Raveendran Greene <bgreene@senki.org<mailto:bgreene@senki.org>> wrote:

This was done in TIDP/TMS. So it can be done.
When operators have DOTS peers set up, all they have to do is request mitigation for the target.  Their peers do the same, etc.

That will spread mitigation in 'inkblot' fashion - i.e., 'traceback via pervasive mitigation'.

The status messages also serve this purpose.

If we want to add explicit traceback requests later, we can.  But pervasive mitigation in and of itself accomplishes the goal, to a large extent.

-----------------------------------
Roland Dobbins <rdobbins@arbor.net<mailto:rdobbins@arbor.net>>

v2.23.0 | Report a Bug | By Email