Re: [Dots] Éric Vyncke's No Objection on draft-ietf-dots-telemetry-use-cases-14: (with COMMENT)

mohamed.boucadair@orange.com Thu, 20 October 2022 07:32 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CF52C14F73E; Thu, 20 Oct 2022 00:32:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.807
X-Spam-Level:
X-Spam-Status: No, score=-2.807 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g0fBUbH7afi5; Thu, 20 Oct 2022 00:32:53 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C49DC14EB1C; Thu, 20 Oct 2022 00:32:53 -0700 (PDT)
Received: from opfednr01.francetelecom.fr (unknown [xx.xx.xx.65]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfednr21.francetelecom.fr (ESMTP service) with ESMTPS id 4MtK7k5pvZz5w0C; Thu, 20 Oct 2022 09:32:50 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1666251170; bh=xkunnijv0lD1/dQz3nmfFIsB0fk+ZoyZPi3JLWTcpGI=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=p6+29YxWVAyDoFnuYArKdtDvDIQhkGJJXqapxsXaozVnS4Y5As+DmMkQEegb+iYjj FBPvuZikpgX1hlsQY1+3moaEXhf6MghSneENZtXG6Sq6X2n+NKiumGKwy6UKEUTRmD ALtLE2JTYPr4bKr0MrVKqWg6MGFptxiPK5RlM4r9wPwbFSF0G2IjfN3wZKjwW0XWtw ZvrCX08f41TL7rBxAvdGjV3B5JnQM58JhIVPcIXsGUbsbWTA0i/vv/OhcAxk50ZIQ5 IDqLdoot+5T8QHZmkqixDWFnBfd9YoCozDOSducniOAffwqIOjUSUFNHso3xKpZkoj 02gn/mpzU42Dg==
From: mohamed.boucadair@orange.com
To: Éric Vyncke <evyncke@cisco.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-dots-telemetry-use-cases@ietf.org" <draft-ietf-dots-telemetry-use-cases@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, "valery@smyslov.net" <valery@smyslov.net>
Thread-Topic: [Dots] Éric Vyncke's No Objection on draft-ietf-dots-telemetry-use-cases-14: (with COMMENT)
Thread-Index: AQHY5FMlsAkHwX+giky80tiDSsD5C64W3x/g
Content-Class:
Date: Thu, 20 Oct 2022 07:32:50 +0000
Message-ID: <13715_1666251170_6350F9A2_13715_117_1_495c1200cff34efcb93a5fc0d91f0be8@orange.com>
References: <166624987160.51235.4253999818051631886@ietfa.amsl.com>
In-Reply-To: <166624987160.51235.4253999818051631886@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2022-10-20T07:18:51Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=5efa7a3e-384f-4b05-b0c7-3d6682519f03; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0
x-originating-ip: [10.115.26.52]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/f_1DuJF82MZaCD9A1AWeZxeP3cE>
Subject: Re: [Dots] Éric Vyncke's No Objection on draft-ietf-dots-telemetry-use-cases-14: (with COMMENT)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Oct 2022 07:32:57 -0000

Hi Éric, 

Please see one comment inline.

Cheers,
Med

> -----Message d'origine-----
> De : Dots <dots-bounces@ietf.org> De la part de Éric Vyncke via
> Datatracker
> Envoyé : jeudi 20 octobre 2022 09:11
> À : The IESG <iesg@ietf.org>
> Cc : draft-ietf-dots-telemetry-use-cases@ietf.org; dots-
> chairs@ietf.org; dots@ietf.org; valery@smyslov.net;
> valery@smyslov.net
> Objet : [Dots] Éric Vyncke's No Objection on draft-ietf-dots-
> telemetry-use-cases-14: (with COMMENT)
> 
> Éric Vyncke has entered the following ballot position for
> draft-ietf-dots-telemetry-use-cases-14: No Objection
> 
> When responding, please keep the subject line intact and reply to
> all email addresses included in the To and CC lines. (Feel free to
> cut this introductory paragraph, however.)
> 
> 
> Please refer to
> https://www.ietf.org/about/groups/iesg/statements/handling-ballot-
> positions/
> for more information about how to handle DISCUSS and COMMENT
> positions.
> 
> 
> The document, along with other ballot positions, can be found
> here:
> https://datatracker.ietf.org/doc/draft-ietf-dots-telemetry-use-
> cases/
> 
> 
> 
> ------------------------------------------------------------------
> ----
> COMMENT:
> ------------------------------------------------------------------
> ----
> 
> 
> # Éric Vyncke, INT AD, comments for draft-ietf-shmoo-hackathon-07
> CC @evyncke
> 
> Thank you for the work put into this document.
> 
> Please find below some non-blocking COMMENT points (but replies
> would be
> appreciated even if only for my own education).
> 
> Special thanks to Valery Smyslov for the shepherd's detailed
> write-up including
> the WG consensus *but* the justification of the intended status is
> missing.
> 
> I hope that this review helps to improve the document,
> 
> Regards,
> 
> -éric
> 
> ## COMMENTS
> 
> ### Timing of the WG docs
> 
> Like Alvaro wrote, it would have been nicer for the reviewer to
> have this
> document published before RFC 9244 ;-)
> 
> ### Section 3.1.1 report
> 
> `recently reported large DDoS attacks exceeded several Tbps`
> please provide an
> informative reference to this report.

[Med] A pointer to https://datatracker.ietf.org/meeting/108/materials/slides-108-saag-dots-overview-00 (slide 3) can be added. The prez includes embedded URLs.  

> 
> ### Section 3.1.1 top-talkers
> 
> I am a little puzzled how an attack coming out of *two* top-
> talkers (and thanks
> for using IPv6 examples :-) ) is a *distributed* DoS attack.
> Suggest to change
> the prefix to something broader (e.g., two /48) rather than a host
> /128 prefix.
> 
> ### Section 3.1.1 figure 1 e.g.
> 
> Is the use of "E.g.," in figures common ? or useful ? in figure 1
> ?
> 
> As a side note, I am hard time to understand the figure 1: they
> are overloaded
> and little explanations on the graphics are given.
> 
> ### Section 3.1.5
> 
> The intro text is about DNS torture attack, but the DOTS example
> is about DNS
> amplification attack, which appears as different attacks to me.
> 
> ### Section 3.3.1
> 
> To be honest, the value of this section about ML escapes me ;-)
> (notably why
> DOTS is helping here) but the example DOTS message would benefit
> of using
> 2001:db8::2/127 rather than the 2 /128 ;)
> 
> ### Section 6
> 
> Like Murray, I also wonder why some reviews are labelled as IESG
> review ;-)
> 
> ## Notes
> 
> This review is in the ["IETF Comments" Markdown format][ICMF], You
> can use the
> [`ietf-comments` tool][ICT] to automatically convert this review
> into
> individual GitHub issues.
> 
> [ICMF]: https://github.com/mnot/ietf-comments/blob/main/format.md
> [ICT]: https://github.com/mnot/ietf-comments
> 
> 
> 
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.