Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Thu, 17 January 2019 09:35 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D23712F1AC; Thu, 17 Jan 2019 01:35:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.554
X-Spam-Level:
X-Spam-Status: No, score=-11.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-4.553, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fSg3h6DJOLfm; Thu, 17 Jan 2019 01:35:05 -0800 (PST)
Received: from MIVWSMAILOUT1.mcafee.com (mivwsmailout1.mcafee.com [161.69.47.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBD80126DBF; Thu, 17 Jan 2019 01:35:04 -0800 (PST)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1547717727; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-ms-exchange-senderadcheck: x-microsoft-antispam-message-info:spamdiagnosticoutput: spamdiagnosticmetadata:Content-Type:Content-Transfer-Encoding: MIME-Version:X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=U Bn5C2yK1PCZqZ5RIS2QM4tnzGdiO6xegW9lJAVPB+ Q=; b=RvixYeMo+n+AzPnqQR6+R0nui8wcj7TRZ1Ow1tjWEA9k NvWMOM0H2dzkJRvXqf0rhMIEkBa/2EP08BtIKozbA+GQSnUp44 YAxWEnhfKJGc9W3B3yxtFVh01it1FqVe06B+o9GynajJ1XviWo fozQx5IzTlnQi40Po9eGJ/CE4Rg=
Received: from DNVEXAPP1N06.corpzone.internalzone.com (DNVEXAPP1N06.corpzone.internalzone.com [10.44.48.90]) by MIVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 682f_21c6_b6ca5b92_a0cf_47f6_9baa_95cabe00126b; Thu, 17 Jan 2019 03:35:26 -0600
Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 02:33:25 -0700
Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Thu, 17 Jan 2019 02:33:25 -0700
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.176.243) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Thu, 17 Jan 2019 02:33:25 -0700
Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB2917.namprd16.prod.outlook.com (20.178.235.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1537.24; Thu, 17 Jan 2019 09:33:24 +0000
Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::202f:5967:73ad:130f%5]) with mapi id 15.20.1537.018; Thu, 17 Jan 2019 09:33:24 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, Benjamin Kaduk <kaduk@mit.edu>, "draft-ietf-dots-signal-channel@ietf.org" <draft-ietf-dots-signal-channel@ietf.org>
CC: "dots@ietf.org" <dots@ietf.org>
Thread-Topic: AD review of draft-ietf-dots-signal-channel-25 (1st Part)
Thread-Index: AdStcXDAyV5dGCs3RsiPQHlA/kiM3wAGhxNwACmhiPAAAHjuYAABML0AAAOinHA=
Date: Thu, 17 Jan 2019 09:33:23 +0000
Message-ID: <BYAPR16MB279093FB1F979E9D76E5933EEA830@BYAPR16MB2790.namprd16.prod.outlook.com>
References: <787AE7BB302AE849A7480A190F8B93302EA08123@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB2790F718420DF7D6C1061870EA820@BYAPR16MB2790.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EA08E05@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB2790BB23E26F2B213F8C388FEA830@BYAPR16MB2790.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA08EAE@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.1.100.18
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [103.245.47.20]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BYAPR16MB2917; 6:tsdWIQ5zCQdrldTX0ofKItHQNUWcTf/277bRTklIfNWI9DpQpWWAYYaVeuQQjLib+flA4BClJOSnYiWfMsMVI9T/f03S15Em/+iFGKnol3Wos9wguzXFleoib5fWF67y03dk+UtIFrpGSO0FpLuSXRwNvwWQqNuqsu+4GGy459gIGcN7IWU/DzxT8I0kMvUkBiVpdiVpRBkjAuM7hsblMitwVCtXRDEu4Sj1iJ+PH2JYIr5enp9CcRoJ/0dJpx1H7kPln3DUnmcrbW0V+IN7A6WLTDDGituWmUvY1ZBV1b6L0wmpXjfEAK0XY2F6FzKohE0/KPZ6J5izFcFebdK15orPkRcGBq2TxddY9Rp0/ibLZNkgqSb99mGyc+cGMeCdr+F2gbidQpT0qXYFuv3lfVbmAi3k/0E+TlbcGUnIz44tkBnaNbfT0x3/XieIGRQSPz6QLiNPbM5gMFReAKwLkg==; 5:guf3K20Ksp474V0gye7WEges0l+sjQzssboJJEBsDWBI9lH6ETPq3SdhlI8c5yvVYmSi9PgkutwosuKgsa6Ynd1jwMuMydJYHqD6om9g2C4zgNnO8GBQfEdqoEvNQvc3cAyzSw3XMQHiAnwzTXzx9Wk+A46xFaoEv0HoMqSYJZ1ltqhBNAJA5G84+KIfnPP69zwC8/vuri0QXtxsNsLl3Q==; 7:pY9mvH0uAoEvvEp1oioM16HdSCWXM/ZdZPNToymK422CoIhPXV9v/wq/6v99g2Pdmf1/XFpkmBF5Z/S6zfsUxDoOqb6Vjm52DWEUkp3HAJ9T5zE2yUOTauF8wdt9tznKm1cfm0JI6Cj66eYuw9lv3A==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 8190c308-fe9d-499b-ff19-08d67c5ed3c5
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600109)(711020)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB2917;
x-ms-traffictypediagnostic: BYAPR16MB2917:
x-microsoft-antispam-prvs: <BYAPR16MB2917DBE55357C107D00E205FEA830@BYAPR16MB2917.namprd16.prod.outlook.com>
x-forefront-prvs: 0920602B08
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(366004)(396003)(376002)(39860400002)(346002)(189003)(199004)(13464003)(32952001)(55784004)(71200400001)(71190400001)(256004)(3846002)(14444005)(5660300001)(6116002)(76176011)(229853002)(305945005)(6506007)(186003)(53546011)(55016002)(102836004)(74316002)(6436002)(80792005)(7736002)(81156014)(81166006)(7696005)(8936002)(66066001)(8676002)(26005)(97736004)(2501003)(25786009)(6246003)(4326008)(2171002)(14454004)(110136005)(5024004)(478600001)(72206003)(966005)(9686003)(53936002)(316002)(33656002)(476003)(11346002)(446003)(2906002)(86362001)(99286004)(93886005)(486006)(106356001)(68736007)(105586002)(6306002)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB2917; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: Fbkz+grz/hY1j4phG9LiO2ZFFEUWaUB0g/VLnWZ4DklpGoOzi3mqq2f/a2S8qXuEsaMEFONCh4SiZUYMjiwh4doBXgpcq9vgkHdKmI0PQ2tuJBJHeCfpnHo4M31f9jZIMzU/r2Q28h9n4U29nQ/iL2RilAQgqJD2wWggNprhppOv6RkP7CT4QHJlUm1MP8udMRT6GB/SZDosCKTc/zDT12TYXk23KUZ77Kh9VRT6JmBplJG9Rqcz3o3g+uAVuYcOQHg1am6tv4s8FfI77hWcj+dQqTO15JYvviIA+rL4UjYzywcpUJ4PBM9BfqP25A3JU+xvsqREbyYAS36yQ2bN4kurQU/4LA6f2ATG8ljwvZVFxcb3/C1Id6zK1mOZUSXGxFm/od3ccHOk2u3xCPqcmezh1hIB4iL4G+yXQdJlNcs=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 8190c308-fe9d-499b-ff19-08d67c5ed3c5
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2019 09:33:23.9781 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB2917
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0
X-NAI-Spam-Version: 2.3.0.9418 : core <6462> : inlines <6996> : streams <1810329> : uri <2781238>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/gGYWc-AHdREUP2hi71FQFdR5fko>
Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jan 2019 09:35:12 -0000

> -----Original Message-----
> From: Dots <dots-bounces@ietf.org> On Behalf Of
> mohamed.boucadair@orange.com
> Sent: Thursday, January 17, 2019 1:16 PM
> To: Konda, Tirumaleswar Reddy <TirumaleswarReddy_Konda@McAfee.com>;
> Benjamin Kaduk <kaduk@mit.edu>; draft-ietf-dots-signal-channel@ietf.org
> Cc: dots@ietf.org
> Subject: Re: [Dots] AD review of draft-ietf-dots-signal-channel-25 (1st Part)
> 
> This email originated from outside of the organization. Do not click links or
> open attachments unless you recognize the sender and know the content is
> safe.
> 
> Re-,
> 
> OK.
> 
> Given that we don't have an explicit mention about this in 8305, I added this
> NEW sentence echoing what was in 6555:
> 
>    Note that the DOTS client must cache information regarding the
>    outcome of each connection attempt, and it uses that information to
>    avoid thrashing the network with subsequent attempts.

Minor change:

Note that the DOTS client must cache information regarding the
outcome of each connection attempt for a specific time period (e.g. 10 minutes), and it uses that information to
avoid thrashing the network with subsequent attempts.

-Tiru

> 
> Cheers,
> Med
> 
> > -----Message d'origine-----
> > De : Konda, Tirumaleswar Reddy
> > [mailto:TirumaleswarReddy_Konda@McAfee.com]
> > Envoyé : jeudi 17 janvier 2019 08:16
> > À : BOUCADAIR Mohamed TGI/OLN; Benjamin Kaduk; draft-ietf-dots-signal-
> > channel@ietf.org Cc : dots@ietf.org Objet : RE: AD review of
> > draft-ietf-dots-signal-channel-25 (1st Part)
> >
> > > -----Original Message-----
> > > From: mohamed.boucadair@orange.com
> > > <mohamed.boucadair@orange.com>
> > > Sent: Thursday, January 17, 2019 12:33 PM
> > > To: Konda, Tirumaleswar Reddy
> <TirumaleswarReddy_Konda@McAfee.com>;
> > > Benjamin Kaduk <kaduk@mit.edu>;
> > > draft-ietf-dots-signal-channel@ietf.org
> > > Cc: dots@ietf.org
> > > Subject: RE: AD review of draft-ietf-dots-signal-channel-25 (1st
> > > Part)
> > >
> > >
> > >
> > > Hi Tiru,
> > >
> > > As you know RFC8305 obsoletes RFC6555.
> > >
> > > I fail to see where caching results is mentioned in 8305. Do you?
> >
> > Though RFC8035 obsoletes RFC6555, it is still compatible with RFC6555
> > (see https://tools.ietf.org/html/rfc8305#appendix-A)
> > It is useful to cache the happy eyeball results for a specific time.
> >
> > -Tiru
> >
> > >
> > > Cheers,
> > > Med
> > >
> > > > -----Message d'origine-----
> > > > De : Konda, Tirumaleswar Reddy
> > > > [mailto:TirumaleswarReddy_Konda@McAfee.com]
> > > > Envoyé : mercredi 16 janvier 2019 12:11 À : BOUCADAIR Mohamed
> > > > TGI/OLN; Benjamin Kaduk; draft-ietf-dots-signal- channel@ietf.org Cc :
> > > > dots@ietf.org Objet : RE: AD review of
> > > > draft-ietf-dots-signal-channel-25 (1st Part)
> > > >
> > > > Hi Med,
> > > >
> > > > Please see inline
> > > >
> > > > > -----Original Message-----
> > > > > From: Dots <dots-bounces@ietf.org> On Behalf Of
> > > > > mohamed.boucadair@orange.com
> > > > > Sent: Wednesday, January 16, 2019 1:30 PM
> > > > > To: Benjamin Kaduk <kaduk@mit.edu>; draft-ietf-dots-signal-
> > > > > channel@ietf.org
> > > > > Cc: dots@ietf.org
> > > > > Subject: Re: [Dots] AD review of
> > > > > draft-ietf-dots-signal-channel-25 (1st
> > > > Part)
> > > > >
> > > > > >
> > > > > >                                   These connection attempts are
> > > > > >    performed by the DOTS client when it initializes.  The
> > > > > > results of
> > the
> > > > > >    Happy Eyeballs procedure are used by the DOTS client for
> > > > > > sending
> > its
> > > > > >    subsequent messages to the DOTS server.
> > > > > >
> > > > > > I see this is scoped to "when the client initializes", so I
> > > > > > don't know whether it adds more or not to end with "for the
> > > > > > duration of the DOTS session" or some similar scoping for the
> > > > > > caching of the happy eyeballs results.
> > > > >
> > > > > [Med] The connection attempts are performed each time the client
> > > > > has to select among a list of v4, v6 (tls, dtls). This is
> > > > > particularly true when
> > > > the client
> > > > > initiates, but this may also be true each time the client has to
> > > > > select
> > > > among
> > > > > v4, v6, DTLS, TLS (e.g., the client attaches to a new network).
> > > > >
> > > > > I updated the text to:
> > > > >
> > > > > "These connection attempts are performed by the DOTS client when
> > > > > it initializes, or in general when it has to select an address
> > > > > family and
> > > > transport
> > > > > to contact its DOTS server."
> > > >
> > > > Happy eyeballs mandates caching the results, see
> > > > https://tools.ietf.org/html/rfc6555#section-4 (to avoid thrashing
> > > > the network).
> > > > We may want to update the above line accordingly.
> > > >
> > > > Cheers,
> > > > -Tiru
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots