Re: [Dots] Data Channel Fragment handling nits

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Fri, 18 May 2018 07:14 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ACBE127369 for <dots@ietfa.amsl.com>; Fri, 18 May 2018 00:14:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.31
X-Spam-Level:
X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nlxGp6W3ZJ3r for <dots@ietfa.amsl.com>; Fri, 18 May 2018 00:14:53 -0700 (PDT)
Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4518127275 for <dots@ietf.org>; Fri, 18 May 2018 00:14:52 -0700 (PDT)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1526627694; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-microsoft-antispam: x-ms-traffictypediagnostic:x-microsoft-antispam-prvs: x-exchange-antispam-report-test:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:MIME-Version:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=g koP1jUr0efjNp1jw+CCJKGxH22Lx0Zpcb+d3y3EyG s=; b=Et7c+3H+mZH6yWFtvlDA+khrWccTH6oYc4PK7nG+lIjw KonR1KdGhqhkxCnhr1+Rj0PKAA1FZ149O6sss8wCzJvUn+xrWT AMDu4a6KK2SAhmkDh4gOQzcpg8t7R8vAXQAcHzuXlndFybF69O vdwXPPsW7dehNIB/m0N33J2KB5U=
Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 291a_8551_5b909d23_4fd5_408c_97f8_8dd02f41fc2b; Fri, 18 May 2018 02:14:54 -0500
Received: from DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:32 -0600
Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXUSR1N13.corpzone.internalzone.com (10.44.48.86) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:32 -0600
Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 18 May 2018 01:13:32 -0600
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 18 May 2018 01:13:31 -0600
Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB1508.namprd16.prod.outlook.com (10.172.208.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.776.11; Fri, 18 May 2018 07:13:30 +0000
Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::4dec:4270:1d97:fab8%9]) with mapi id 15.20.0776.010; Fri, 18 May 2018 07:13:30 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: Jon Shallow <supjps-ietf@jpshallow.com>, "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] Data Channel Fragment handling nits
Thread-Index: AdPsStPjVXG7Yx+4T/K9n2ITS/OGmQAAw5HAAAGFJYAAAL69gAABMl6AAIb6xmA=
Date: Fri, 18 May 2018 07:13:29 +0000
Message-ID: <BN6PR16MB14255643FCDD18BBCFC78391EA900@BN6PR16MB1425.namprd16.prod.outlook.com>
References: <017601d3ec4a$d50620c0$7f126240$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B46E@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01a401d3ec53$f6ff6610$e4fe3230$@jpshallow.com> <787AE7BB302AE849A7480A190F8B93302DF1B505@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <01cc01d3ec5b$bbac0bb0$33042310$@jpshallow.com>
In-Reply-To: <01cc01d3ec5b$bbac0bb0$33042310$@jpshallow.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.0.300.84
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [103.245.47.20]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN6PR16MB1508; 7:jL4DaqvMhLjFpQ+0D7ZR53Ah9nUpxdXf0HM8tBN/Y44DUY0fyiRvJO3fQLyd01p+ZxJ0K79pOQ/O/C3bIvkUjscbWJb9ZYKZOERtNRm6n1gh8AGqJXrTqbaVTTL503XJx9Qox6fsqOvXgEfA+6Legm2UAiGWumVazJns2JT01Mq+KcIK4ELQHJZhkVmYJzY2CtgzX6ndWERQejVGpn++6oXbfPxWCtNm2ldcGmr7LOoJaFlqv6b7SGqEET+5TeeA
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB1508;
x-ms-traffictypediagnostic: BN6PR16MB1508:
x-microsoft-antispam-prvs: <BN6PR16MB1508A614EB3CB32FF59F5183EA900@BN6PR16MB1508.namprd16.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(158342451672863)(18271650672692)(21748063052155);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231254)(944501410)(52105095)(93006095)(93001095)(149027)(150027)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:BN6PR16MB1508; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB1508;
x-forefront-prvs: 0676F530A9
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(396003)(39860400002)(366004)(346002)(189003)(199004)(32952001)(316002)(102836004)(74316002)(68736007)(186003)(76176011)(6506007)(53936002)(53546011)(6246003)(93886005)(6306002)(54896002)(790700001)(3846002)(55016002)(6116002)(2900100001)(72206003)(9686003)(236005)(7696005)(110136005)(2906002)(81156014)(8676002)(8936002)(7736002)(26005)(5660300001)(99286004)(81166006)(2201001)(486006)(6436002)(3660700001)(80792005)(5890100001)(2501003)(229853002)(11346002)(19609705001)(97736004)(66066001)(446003)(25786009)(33656002)(105586002)(3280700002)(86362001)(478600001)(106356001)(5250100002)(14454004)(476003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB1508; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: sT8QGp+j5aIgNyjXvznT85WCqaJcx+Hi04aqLjiS1mZEKJAOBCX6qoukC7LzOdwODe/FlJF2xdtd6yRasvmjwbP/ez62+oQL/08QXChNDDFhC5Pq9KS73gzshe8RGooX0OxJFaRv3LQXC/CCaoWmyBlkv/Jj/Vh/FW60J7neFatIYeKHgVcZng1zQX8OhOQOUuZotT2xpBiN4rnr3SH8xA==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR16MB14255643FCDD18BBCFC78391EA900BN6PR16MB1425namp_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: e29e15de-bbaf-4530-b215-08d5bc8edbb9
X-MS-Exchange-CrossTenant-Network-Message-Id: e29e15de-bbaf-4530-b215-08d5bc8edbb9
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 May 2018 07:13:29.9769 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB1508
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0
X-NAI-Spam-Version: 2.3.0.9418 : core <6288> : inlines <6643> : streams <1787071> : uri <2643202>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/eOI8Jeb9Mu0vMWCCMDql9UjoMWw>
Subject: Re: [Dots] Data Channel Fragment handling nits
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 May 2018 07:14:55 -0000

From: Dots [mailto:dots-bounces@ietf.org] On Behalf Of Jon Shallow
Sent: Tuesday, May 15, 2018 8:18 PM
To: mohamed.boucadair@orange.com; dots@ietf.org
Subject: Re: [Dots] Data Channel Fragment handling nits


CAUTION: External email. Do not click links or open attachments unless you recognize the sender and know the content is safe.


________________________________
Hi there

See inline [Jon1]

Regards

Jon

De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow
Envoyé : mardi 15 mai 2018 14:47
À : dots@ietf.org<mailto:dots@ietf.org>
Objet : [Dots] Data Channel Fragment handling nits

Hi there,

I am beginning to with that I had not raised how to handle fragments, but it was keyed off my naive interpretation of the handling of IPv6 protocols by netmod-acl!

Making this changes has raised some inconsistencies in the draft data channel document.
Searching on fragment reveals v4-fragment and v6-fragment which are no longer used.


[Med] Hmm. These are related to the capabilities of a DOTS server to enforce fragment-based filtering. See Figure 23 for an example.

[Jon] I agree – Hmm.

[Med] Cool.



  However the v4-fragment is alluding to “flags” being supported and v6-fragment to “fragment” being supported – not that intuitive!  They really should be an identical name match.  There is a part of me that would like to go back to as it was now that we know that we have to support “fragment” for IPv6 no matter what; unless netmod-acl comes up with something sensible (unlikely).  If we do go back, then do we actually need both v4-fragment and v6-fragment and just use fragment (in the same way that length is common)?



[Med] The use of the same name as part of the capabilities is possible only if we have distinct containers; each for address family (IPv4, IPv6). In the current version, we tried to have something compact:


       "fragment": ["v4-fragment", "v6-fragment"]


We may include a fragment leaf as part of ipv4 and ipv6 containers and then use the same name. Then, it will look like:


       "ipv4": {
         "length": "true",
         "protocol": "true",
         "destination-prefix": "true",
         "source-prefix": "true",
         "fragment": "true"
       },
       "ipv6": {
         "length": "true",
         "protocol": "true",
         "destination-prefix": "true",
         "source-prefix": "true",
         "fragment": "true"
       },



[Jon1] Works for me



[TR] Looks good to me .



Cheers,

-Tiru



~Jon1

~Jon

The YANG bits type conversions to JSON in the Appendix A are wrong – I initiated this error.
[Med] Good catch. Fixed.

                     "flags": {
                       "more": 1
                     }
Should be
                     "flags": { “more”}

And
                     "flags": {
                       "more": 0
                     }
Should be
                     "flags": { “”}


Regards

Jon