Re: [Dots] Questions about draft-doron-dots-telemetry-00

Roland Dobbins <rdobbins@arbor.net> Wed, 16 November 2016 23:04 UTC

Return-Path: <rdobbins@arbor.net>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3BE7129548 for <dots@ietfa.amsl.com>; Wed, 16 Nov 2016 15:04:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level:
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wfree-E0dU3f for <dots@ietfa.amsl.com>; Wed, 16 Nov 2016 15:04:56 -0800 (PST)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0117.outbound.protection.outlook.com [104.47.40.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80423129432 for <dots@ietf.org>; Wed, 16 Nov 2016 15:04:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/N9CZxAYcc/FegnBynuUce3R3YerfDUTKuwZiEO4Ps8=; b=RJah57Rq6ZCmNBct7NixLJT77fDTwtwq6aATK29KOwvSpROSk8A82PWuZYlcLQgTTtJN+gXmAqTuSc+ugS6K/U92FZESh1lEzEGKRtBHSOn6edPIJYQkfesKsm/EBxpB4RsgMlOuEC4PFKP4U5FQ3yvBTkmhwqG1H1/uqCo94ew=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=rdobbins@arbor.net;
Received: from [10.0.1.6] (121.162.109.253) by BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Wed, 16 Nov 2016 23:04:52 +0000
From: Roland Dobbins <rdobbins@arbor.net>
To: dots <dots@ietf.org>
Date: Thu, 17 Nov 2016 06:04:33 +0700
Message-ID: <27D8FF07-7140-478F-AD26-64B5A1B7102D@arbor.net>
In-Reply-To: <E58182C4A35A8E498E553AD3D33FA00101170E325A@ILMB1.corp.radware.com>
References: <359EC4B99E040048A7131E0F4E113AFC0104EAE8B8@marathon> <E58182C4A35A8E498E553AD3D33FA00101170E0067@ILMB1.corp.radware.com> <14E9BCB6-D522-4877-84E5-4589472B3CEC@arbor.net> <E58182C4A35A8E498E553AD3D33FA00101170E325A@ILMB1.corp.radware.com>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"
X-Mailer: MailMate (1.9.5r5263)
X-Originating-IP: [121.162.109.253]
X-ClientProxiedBy: PS1PR0601CA0038.apcprd06.prod.outlook.com (10.165.208.48) To BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16)
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 2:zy7Gri59mfsoeo7Eebbg+kQUjAyzf0nT+1J2uO3b9i8VZRwoNRbkh1Dnz2Xz/xis6zh606myQ36EsXP+3Y7iDVyyqxKcw+ZrcSmE97NkO0I/CagUshEICztyqWFppMcnC1+yPhwsorGCofQFjBDih6eJ5HJsU/FTL4tUY0foTcE=; 3:WqQbfejsm/2hnYn43UZ+dF6S7KfkVTho5sFYX9wZRqyrfjAKdgCa0YvcqevyNgkCyme/gVdHOKto8OAcL4m1Lmm9O2HjS69infasq95s/+45jt9fQgIjF8kSziY/UFW4fglvnkFdR34V2f7BbShry/8yC3jZB/2/NKWbt3d2VGY=; 25:2v01Agtx54lJifr2Lw+8QR2NbyiujyeINeS0F2yRoR0W68304fJlRmvS0pyHcK1H7AcYpuuT1Z9RFcT8mTgrZbdQzvDLhNRKii8tBDnCPfx4j5bpEa+nDOET+tixenm/ewER05jYBSaDMRIwnOeu9P2obXkmByDjPID/S2wPeR3jxj5lkBOaxKgm7ewgqen1T2osIekzNEOFD9k0gd81JHDHiiS5VkLHYAdCfkfpJ37Ak6dX3qEZ0w4gUk/Qn/yJJm+jHpfpMfjq9pWf8lNJeKDbLeuOZ/jRlPtUlKujj1/7d4Tygr8eB4uukbXU+P5AbYH3rxYelBvN6HM0KqjYY1UmdnYWuXXFHSRw4J4iQ2Lj7rT/FEfvwLRrOSI9Df6D5bAvKujPdCzZ18/utltN84qmqm4wSDayUKFRa0X27ulyAEyjKEBO+qVqzoZlgp3RjSWhI0DigxChQ0szC1CWNg==
X-MS-Office365-Filtering-Correlation-Id: 84ad6980-f90b-4b47-245b-08d40e74f99f
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 31:ClTBLdJy810Gm9F7VmJ31UYnigJZgXGGWnLkcmetjC/+5N5GpQbKvDTXVmkRInhw05edOJBAoc9uX96gm5vD4miwo6CxcFHtC4fCm17DK5bQ71YNUZpdmzI0hpY8pI4f1Z9jLpG6ILUs4YXoSDec57QH9Qf5dLJo3EEYD0/LXTLC4sAshbmvppHBBjCLJ/l7fDn3UiMyyfVdrtM4tqw1c88KUmnkwgGUbQvIjnvWsmGYpp/IWxW9RsG6fZNy1nNSQUSQYc4tCvbA9R8qs75c36pNXzV1i4OYZZiHIg3O4v8=; 20:lJ8ObR7PMbTDFdmBoBkPaOTm3ohkUV6LrZV9tL/Yx6oI5Y5UhNOoTz1+c3H26Umhm14sbeO37CvTyUbpe/6MfEnutqca/YzhPobvH6srWqrzXlX9Af1zmmRY89nmCh3efUCOAiH/bLVETvzgxQWH8j7eEr2peOvbZXGulHxoAKelHYBGYrxHkZvh3ZbWhOGqff5TsdKjl3om5FUeg2k6xpPOLBos/BKrF5jmveH4CwInBLc/1iUnvDyZbUsWo8vbk0l1y1lI9mPFg5e+28mVuNSP+APO95JWzJBpx+2Jr1tp6sgcxecy+XIr8TdvxiNFKfo7u43j6cCxVU/KB7NW6oNuq4CVt2+Tt1XqX/Aq8y7UujVUGjVmB8cwSo6dhKIogAilNsp6esBPkS5GQfMhCXgmiC9UofmXrYKAvy11yjrCYa1v8fihRLeckp5T2HTfkPydb5YnBGMNnVg1wdvW0B9yWWdnUkAOWprjJmc2bsZM3DTG2DB9mdu+7rj100K2
X-Microsoft-Antispam-PRVS: <BN3PR0101MB1028FE99AEA4CE617A965262CABE0@BN3PR0101MB1028.prod.exchangelabs.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6060326)(6040281)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6061324)(6041223)(6043046); SRVR:BN3PR0101MB1028; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 4:O5KASwzGnkNmdbCRB4w9QR5cfJROQ/BSFMjY+Hcuf3ucV5fFl4a4yc3ZKrH/Y81lxoACKTqJm5m+w/o9qGASH9BNSFnQ7WNap7vAG879OHIA4lBuP+QmxYpaIDIiu/AuUZCWEbIjJXG1OZFBO3vZQ5jE9ZjFF8eZ8FD3HUq3ZZbAXakAZ6Cwh55+937Bjhs317qR7bnW1DiPt8x3eWVJbhbWR79jxb4e808FapVDBVUUxJkwTI0bVFNQmgu24/Q8MUrb82Z8VhB2q3Mp5Wcswl/xzPFnBXyXnJiUisfisWtdPvIuvR7zMBdrdxh9WUXcQn2XQLCrfpuyQQ5yUtYH3V3X1OdxdWoKGMhWZJt+/G1VcPqEGAKpt2usv+uxMG705bupSfnS5f4aSm/h9lXIVgsAQJiKSR0O3JvbB13Twlp2J5+dPFeRGwUdZTBDB+Zy2A5m5F0K2Ylk6wkkK9NGng==
X-Forefront-PRVS: 01283822F8
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(7916002)(24454002)(189002)(199003)(68736007)(36756003)(230783001)(105586002)(450100001)(76176999)(3846002)(6116002)(50986999)(110136003)(101416001)(86362001)(2950100002)(6916009)(107886002)(97736004)(42186005)(8676002)(93886004)(189998001)(6666003)(5660300001)(7736002)(50226002)(81166006)(83716003)(106356001)(33656002)(7846002)(82746002)(305945005)(2906002)(229853002)(5003940100001)(66066001)(92566002)(81156014)(47776003)(50466002)(77096005)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0101MB1028; H:[10.0.1.6]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Received-SPF: None (protection.outlook.com: arbor.net does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 6:q+klsm+8ZUFENRL+A2D9GNDQ3Cy+zn2p22mEpxZY6E4mZGYopPWhhuDFnbAcgn4NfPhhQy4Zwi13YwehT3siqNX7qdKnq0xj4UqsYjojMmDdxFtrwfRmOm7Lmo/1zrV5hDOabQEtuaTurH5XV/mOOLwGlNwmgeIF0P9cwSXLnGlS/smfBRrG9B058KlDevGWwJWb9mhb0GaZfE0TSrMeu1FzM7+FqKUczh/cWm3TfBoCoULbgl0QCTfPrTKL1YYGBuF1jUZvDSFdzxqbWWoHvsQZkQLZIq9OxoUmHHbfPYSo4xRbKnxW+fxoySpaVp0VoqdKpqjQokc4GieYCPrYL9oY3OMbjk/2jmQl+VmzTptay6gpmH85MUl5NE3oYTdg; 5:BuKGXa4tn10iH0hc7bDmqyAaNGbJd8hdeWx9i4wVWNqz9FNY8v/yjJrWp9jL6tGirLeD2PSy4FGhl5spdT+BWZkF37MxE6A8yRDMmuBbloKm/LAT3SIPJDnPxEU0mHfPJo028xiNCY7+I5kAYYyZqw==; 24:LR+5xUYFHzYErNuxZ31PQcv7llWHgiRwC5ZlIw7vWrPtetBg887Hm2BVBcKICgPG/nMWOYA3xmu1G44SprnHiQPT7Hceb0/yvAAPmG252/Q=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 7:Fkymvr0QA1lQnNROok+OKCKUk47Ck0h8YV7lcXYRVXDvGtoL4zLA/GzkmaPwW1kOLtISE49x1u0v4SB3ECvh0GhuPtlYYPJb7a/BYAQzGCXdUGoTlHlbdVQSYk+TvelQ1Juzj4fAxxt08m4JcTsdamy5H3HBTPQCeCfkBh+eth4Jvj61aKdoPia5QSyB2h1+pf5mwkCnZa+Yxo4kp3lYvHGH3VatWRq7eAj+hnWdFlPh6RO3i6LeMeYM181ZAKL3GqnHom7OkqccMPfRs26qzClwba9MNtI5NSQt8U7rGxMRQz0kRLz6ihqJf/GTcelYPR1s4ogLKR+xlDaE8nnANyGWoE8c9h7EYov1xMZ9sWw=
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Nov 2016 23:04:52.4537 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0101MB1028
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/m_wAhY0vvfzSZOn0e_0WM9BJS78>
Subject: Re: [Dots] Questions about draft-doron-dots-telemetry-00
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 23:04:58 -0000

On 16 Nov 2016, at 23:30, Ehud Doron wrote:

> Getting deeper, having comprehensive telemetry about the ongoing 
> attacks will improve the overall mitigation accomplished,

There's already lots of telemetry out there that's used every day to 
detect, classify, and traceback DDoS attacks.

It is orthogonal to signaling for DDoS mitigation assistance and 
providing status updates regarding same.

-----------------------------------
Roland Dobbins <rdobbins@arbor.net>