Re: [Dots] Yangdoctors early review of draft-ietf-dots-telemetry-09

mohamed.boucadair@orange.com Wed, 08 July 2020 09:19 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 535163A0CDC; Wed, 8 Jul 2020 02:19:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qQWtFVhxeRMO; Wed, 8 Jul 2020 02:18:59 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.36]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 782593A0CDB; Wed, 8 Jul 2020 02:18:59 -0700 (PDT)
Received: from opfednr06.francetelecom.fr (unknown [xx.xx.xx.70]) by opfednr25.francetelecom.fr (ESMTP service) with ESMTP id 4B1tz60MT0zCr5s; Wed, 8 Jul 2020 11:18:58 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1594199938; bh=ycG7SPBhP0YA3j266wViLohdWkgafu3owRXGq9LjcTQ=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=QKpSGVKtmEYuGlFHnrne0TgvJWeHyqXQrqhVIhzs1QP04pNpJwiStmre2knn3MPsr zDRrjCmB5bFa5jVqL8u7zv2+LwIDuGbizeSZWDrdaEdfp+DEiVOMuZCftSOuLQsDh4 aBaiyTmrgm6ec0T2vx4Y1Aqu3Av6JUCHe+ZaYatCEhLHg7KVG4yZOifsBYGf5tXsWl qvX+6xBMlk2Utv28SDvNSl2LXCihoC/K0ZWaKT4E6EKuMQpLiLoOxqsNqzHbQ3N8pe wfe794UFs6pXtP/Imdwfv+32gJP7E7qa6XXP0tiNtSHDxoilgvbexy2RGc13akxqgV NhvoaxkWkNGJg==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.32]) by opfednr06.francetelecom.fr (ESMTP service) with ESMTP id 4B1tz56HxkzDq7C; Wed, 8 Jul 2020 11:18:57 +0200 (CEST)
From: mohamed.boucadair@orange.com
To: Jan Lindblad <janl@tail-f.com>
CC: "yang-doctors@ietf.org" <yang-doctors@ietf.org>, "dots@ietf.org" <dots@ietf.org>, "draft-ietf-dots-telemetry.all@ietf.org" <draft-ietf-dots-telemetry.all@ietf.org>
Thread-Topic: Yangdoctors early review of draft-ietf-dots-telemetry-09
Thread-Index: AQHWVF99zHY6zynqkkCdCx+tS06vUqj8G1tQgAFI71A=
Date: Wed, 08 Jul 2020 09:18:56 +0000
Message-ID: <5619_1594199937_5F058F81_5619_133_1_787AE7BB302AE849A7480A190F8B9330314F234C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <159353177839.29172.8254735147639701580@ietfa.amsl.com> <5252_1593761623_5EFEDF57_5252_57_9_787AE7BB302AE849A7480A190F8B9330314EE318@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <4B4D2FC8-68E0-4C59-96AF-17E0D77F325D@tail-f.com> <10654_1594040372_5F032034_10654_248_1_787AE7BB302AE849A7480A190F8B9330314F0712@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <D2BAD546-91B5-4009-B8F4-3879C8C8F755@tail-f.com> <16820_1594131987_5F048613_16820_137_2_787AE7BB302AE849A7480A190F8B9330314F168E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
In-Reply-To: <16820_1594131987_5F048613_16820_137_2_787AE7BB302AE849A7480A190F8B9330314F168E@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.247]
Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B9330314F234COPEXCAUBMA2corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/f6DO6EnxrjL8mw45ls-245GT7x8>
Subject: Re: [Dots] Yangdoctors early review of draft-ietf-dots-telemetry-09
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jul 2020 09:19:02 -0000

Jan,

Some clarifications about this one:

+ If a server has started sending back a response to a client request, but then hits an internal error, and is unable to filfil the request, what should it do? Is closing the connection a reasonable response?
[Med] We don’t have text as this is implementation-specific. That’s said I expect implementations to maintain the session alive as we are dealing with DDoS attack mitigation.

I thought that you were asking for a case where the server has accepted for example a (mitigation) request but then encounters an error. That case is implementation-specific.

FWIW, we do have the following:


·         If the server crashes, the connection will be closed. This will be detected by the client thanks to the use of heartbeats. The client will then re-establish the signal session.

·         For errors on the server side we do have the following:


   “The error Response Code 5.03 (Service Unavailable) is
   returned if the DOTS server has erred or is incapable of performing
   the mitigation.  As specified in [RFC7252<https://tools.ietf.org/html/rfc7252>], 5.03 uses Max-Age Option
   to indicate the number of seconds after which to retry."

Implementations can send 5.00, but how the client will react to the error code is implementation-specific.

Cheers,
Med

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.