Re: [Dots] WGLC on draft-ietf-dots-architecture-08

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Fri, 30 November 2018 16:14 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4274128BCC for <dots@ietfa.amsl.com>; Fri, 30 Nov 2018 08:14:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.26
X-Spam-Level:
X-Spam-Status: No, score=-4.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SORBS_WEB=1.5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4tXboyGUV6PH for <dots@ietfa.amsl.com>; Fri, 30 Nov 2018 08:14:41 -0800 (PST)
Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C77F41271FF for <dots@ietf.org>; Fri, 30 Nov 2018 08:14:40 -0800 (PST)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1543594498; h=From: To:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-ms-exchange-senderadcheck: x-exchange-antispam-report-cfa-test:x-forefront-prvs: x-forefront-antispam-report:received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=LvKsKIgY37YxWb+2r+CdyuPLS/FTDLrBxLfPlM 3yA7o=; b=io4Sni67nQNMPdG/RiCgPyVQ8LpHMeNzdK8wEki7 anwOQ4AWcONGGtX7x8D7kQRIwtcICwN50GMU53IwC+T/bJH7GU z4Go0kdhXaJRjWZKANWw2tKxONsBPDCiVYNZzj+lVP2mlVFR/t xRIiLHIvO5CE6IUBuLMpO61Klb8JPq0=
Received: from DNVEXAPP1N05.corpzone.internalzone.com (unknown [10.44.48.89]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 7ceb_c252_636c1724_384e_4a66_be47_e3e217fccc57; Fri, 30 Nov 2018 10:14:57 -0600
Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 30 Nov 2018 09:13:54 -0700
Received: from DNVEX10N01.corpzone.internalzone.com (10.44.82.192) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Fri, 30 Nov 2018 09:13:54 -0700
Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEX10N01.corpzone.internalzone.com (10.44.82.192) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 30 Nov 2018 09:13:54 -0700
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 30 Nov 2018 09:13:52 -0700
Received: from DM5PR16MB1436.namprd16.prod.outlook.com (10.173.210.150) by DM5PR16MB1673.namprd16.prod.outlook.com (10.172.43.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1382.18; Fri, 30 Nov 2018 16:13:52 +0000
Received: from DM5PR16MB1436.namprd16.prod.outlook.com ([fe80::8133:9925:98c0:aa04]) by DM5PR16MB1436.namprd16.prod.outlook.com ([fe80::8133:9925:98c0:aa04%2]) with mapi id 15.20.1361.019; Fri, 30 Nov 2018 16:13:52 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>, Roman Danyliw <rdd@cert.org>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: WGLC on draft-ietf-dots-architecture-08
Thread-Index: AdSGnlgla3cLRB5MRLWQWFaJSQftBABEEW3wAAZceYAAB9nNYAAEkILwAB+EMpAACKXk4AACgplwAAhHgoA=
Date: Fri, 30 Nov 2018 16:13:52 +0000
Message-ID: <DM5PR16MB1436848B4B3EC35B6EF67D9BEAD30@DM5PR16MB1436.namprd16.prod.outlook.com>
References: <359EC4B99E040048A7131E0F4E113AFC0184C49169@marathon> <787AE7BB302AE849A7480A190F8B93302E04F649@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <BN6PR16MB1425AD85A67FFE5A0EA5A769EAD20@BN6PR16MB1425.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302E04F981@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <BN6PR16MB1425D2A6BED037A18098CF54EAD20@BN6PR16MB1425.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302E04FF7F@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <BN6PR16MB1425379772574B34E678406DEAD30@BN6PR16MB1425.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302E050207@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302E050207@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.1.0.61
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [122.167.21.83]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM5PR16MB1673; 6:oJpIc+/TJkpTwEH5iPrJbDy0DZ9cKfABnMOL3/HTaDQx+8VrtcsRbZpxx+43Pf0yIGkUUQLJJxjRUVDc83FsMEe+P1mdaeucQwbfRUpsRhAcpXJ1tsvgBrzR8dKqywwLhcUindZDrwlo01tECdsmf/5kiVBgFPT0LuR9xC3RyRVzUy/T0k5GNA7IaREjR2OHBDUgkpy3NSqxYT5z+sFn/Co86NBB4c1A07LY/NNFy1YGyUolB/5Xu0E9OQMdkdf+6kLwEIMJgttUmTtdy0LMPW2weUErRj/8+n3vdcHuyRC2FfH/zcKRAx+D3aEYQmn17ikReKUqrjy20vv8GlO9df8ZQ6/1EUwEZnTVN5WGToF2dEwxsrxEnnxZcKLRTL+XUAk2niG6dT3gGsOBpqrMxNmzlEYsPPDSgiH89JfSRsSpJVYI/F3U6OhD7m8gMxXcvcFt8A8874bbu5aQNxnR1g==; 5:tVIvCpvj5aWUBQXq1vEqfl0rmOIr9HxZsrpwaZqRaNcvunOOZnc3txNW7CXdOVseCSDEehG01WUC2cjFlRDokladrSMGqjdKaA1QWr0JxOQV6ZYxC1BSLgaVRj3poJziBOgQzFlkcR5kW/P6Zb5AELoFPUWPNeSJzr8UUdAWapc=; 7:uApLDxtf3mcDAnCqGa8aQiZX5jA4hP6DXqltCwQOg/yrucG24C+gjsOn2KYBLJVJ8lNdvr6Or+Dd3EudAks+139SEqmLuVeyRgNGz1Ox1b8Qmsvm3Qk0avR1uLtycIIlhFqoSfbkixDPhpz2RsLk9Q==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 85812074-8f6b-45c4-35a1-08d656ded1ef
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:DM5PR16MB1673;
x-ms-traffictypediagnostic: DM5PR16MB1673:
x-microsoft-antispam-prvs: <DM5PR16MB16730E1D35529C8D544D97A3EAD30@DM5PR16MB1673.namprd16.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(3231453)(999002)(944501410)(52105112)(10201501046)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:DM5PR16MB1673; BCL:0; PCL:0; RULEID:; SRVR:DM5PR16MB1673;
x-forefront-prvs: 087223B4DA
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(396003)(136003)(376002)(366004)(13464003)(32952001)(189003)(199004)(3846002)(6116002)(80792005)(68736007)(478600001)(97736004)(966005)(72206003)(33656002)(66066001)(2501003)(6246003)(5660300001)(55016002)(305945005)(25786009)(7736002)(53936002)(14454004)(74316002)(6306002)(9686003)(8936002)(76176011)(81156014)(81166006)(186003)(110136005)(229853002)(5024004)(256004)(14444005)(11346002)(7696005)(105586002)(106356001)(93886005)(486006)(476003)(316002)(26005)(6436002)(8676002)(6506007)(53546011)(86362001)(102836004)(71190400001)(71200400001)(99286004)(78486014)(2906002)(446003)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM5PR16MB1673; H:DM5PR16MB1436.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: gO5J9OZhVQbMip4ClTcE6dmfxsqfNFZVHg2hSro9o8BvLY4B464mGm1AgYQc7EM5Unqq00eWWojbUpVWJZcrhZvLZ2NDjyivG7ztrVP4S+c59JHGQM5rcTPQXKzDwuZYyg7LjCVoYm59WJ6ish7ULXZybydZ5RzOj0Z8RzRd6BdOr90Gq2kSqx7Vi1D6t8TTHpVNkimjtTTEcQormgQm5ax2WMjgxI5xjKduvJ2xOdN9vDpvfgbUWgICQJGzeaw3Qa8oZXq9LcxAEAQtVXlcwled+TnW27461ElLyZUbY0qs4OyuH/Y0dFSWyFsZjIUdJlTf41bnvIjrTkBDJ1WIuD/npgQjiRKT0qZ4d2vy5OM=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 85812074-8f6b-45c4-35a1-08d656ded1ef
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 16:13:52.3722 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR16MB1673
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Level:
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0.1
X-NAI-Spam-Version: 2.3.0.9418 : core <6430> : inlines <6975> : streams <1805781> : uri <2758144>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/tUpjrtZe6779s_fsGqny912dY6g>
Subject: Re: [Dots] WGLC on draft-ietf-dots-architecture-08
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Nov 2018 16:14:43 -0000

Hi Med,

I don't fully agree with some of the updates.  I propose the following changes:

[1] Replace " A DOTS session can be a DOTS data channel session or a DOTS signal channel session" with "A DOTS session can be a DOTS data channel session or a DOTS signal channel session or both."
[2] I thought we agreed to say the following:
A DOTS signal channel session is associated with a single transport connection (TCP or UDP session) and an ephemeral security association (e.g. a TLS or DTLS session). Similarly,  a DOTS data channel session is associated with a single TCP connection and an ephemeral TLS security association.
[3] Direct and recursive signaling is applicable to both DOTS signal and data channel sessions, replace "DOTS signal channel session" with "DOTS session".
[4] In Section 3.1.2, replace "session" with "DOTS session"
[5] Remove the following line:
"These sessions may belong to the same or distinct DOTS channels (signal or data). 

Cheers,
-Tiru

> -----Original Message-----
> From: mohamed.boucadair@orange.com <mohamed.boucadair@orange.com>
> Sent: Friday, November 30, 2018 5:40 PM
> To: Konda, Tirumaleswar Reddy <TirumaleswarReddy_Konda@McAfee.com>;
> Roman Danyliw <rdd@cert.org>; dots@ietf.org
> Subject: RE: WGLC on draft-ietf-dots-architecture-08
> 
> This email originated from outside of the organization. Do not click links or
> open attachments unless you recognize the sender and know the content is safe.
> 
> Re-,
> 
> OK. Thanks.
> 
> FWIW, I also made on my side some changes that I'd like to see made to fix the
> issues we discussed so far:
> 
> Xml: https://github.com/boucadair/IETF-Drafts-Reviews/blob/master/draft-ietf-
> dots-architecture-09.xml
> Diff: https://github.com/boucadair/IETF-Drafts-
> Reviews/blob/master/wdiff%20draft-ietf-dots-architecture-09.txt%20draft-ietf-
> dots-architecture-09.pdf
> 
> Feel free to reuse the modified version.
> 
> (Removing parts that were agreed and focusing on the last pending one)
> 
> > > > >
> > > > > > DOTS data channel draft is not using the term "DOTS data
> > > > > > channel session", we can fix the signal channel draft to use
> > > > > > "DOTS data channel" instead of "DOTS data channel session".
> > > > > >
> > > > >
> > > > > [Med] May be. BTW, this part of the text:
> > > > >
> > > > > " Conversely, a
> > > > >    DOTS session cannot exist without an established signal channel "
> > > > >
> > > > > is conflicting with this one:
> > > > >
> > > > > "
> > > > > To allow for DOTS
> > > > >    service flexibility, neither the order of contact nor the time
> > > > >    interval between channel creations is specified.  A DOTS client MAY
> > > > >    establish signal channel first, and then data channel, or
> > > > > vice
> > versa."
> > >
> > > [Med] This one is still pending.
> >
> > The above line looks clear to me, what is the confusion ?
> >
> 
> [Med] The problem is not with the last line with this one:
> 
> "DOTS session cannot exist without an established signal channel"
> 
> Which means that dots signal channel session is a pre-requisite for DOTS data
> channel. This is conflict with the other excerpt I cited.