Re: [Dots] Robert Wilton's No Objection on draft-ietf-dots-telemetry-21: (with COMMENT)

mohamed.boucadair@orange.com Thu, 03 February 2022 14:01 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 471293A18F1; Thu, 3 Feb 2022 06:01:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xNXbDDWi529B; Thu, 3 Feb 2022 06:01:07 -0800 (PST)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B66153A18E7; Thu, 3 Feb 2022 06:01:06 -0800 (PST)
Received: from opfednr07.francetelecom.fr (unknown [xx.xx.xx.71]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by opfednr21.francetelecom.fr (ESMTP service) with ESMTPS id 4JqL1C6snwz5vkj; Thu, 3 Feb 2022 15:01:03 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1643896864; bh=hiw+O7/GXDa6z3GyitVTqlK+pUK0jATHzUcy0yPtodY=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=bLxXLcfzWMCHw1kTIB5PAfzRYlhM5QXH7+2CQKLEeR4PbSmTjDN3oaZWNo1IpE739 PLgABncsLVwHqnSJlR85xLDg2rkc4xkS9kEf/FSZfDBBPLyimY690mJRs3bELnR2k3 hglHe7pNm3sWRP3MiEM9hc8tn0grvPzqZ1ErOHhOyrddzC0BY7idMa9MMKs82NIWS+ MdJl4SmEBqgnB7YfHdUsAX3Q501z37YeioYuJ9obtaj89ht8LjXYoCmxfdOvhrgiK5 X8l6msFdXBGDCY30lpgr06LJ2VGEwRXhWnq76YpIXlmxfktpFAZfVbPZAt1Sd0nFMg Pml/+/EjSCL+w==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by opfednr07.francetelecom.fr (ESMTP service) with ESMTPS id 4JqL1C62QwzFpXB; Thu, 3 Feb 2022 15:01:03 +0100 (CET)
From: mohamed.boucadair@orange.com
To: Robert Wilton <rwilton@cisco.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-dots-telemetry@ietf.org" <draft-ietf-dots-telemetry@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, "valery@smyslov.net" <valery@smyslov.net>
Thread-Topic: Robert Wilton's No Objection on draft-ietf-dots-telemetry-21: (with COMMENT)
Thread-Index: AQHYGPDeWn5YyQeqyUenh6XKcHKH/6yB0ypw
Content-Class:
Date: Thu, 03 Feb 2022 14:01:02 +0000
Message-ID: <8752_1643896863_61FBE01F_8752_209_1_787AE7BB302AE849A7480A190F8B93303548B83F@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <164388756511.18110.3363048825395144277@ietfa.amsl.com>
In-Reply-To: <164388756511.18110.3363048825395144277@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Enabled=true; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SetDate=2022-02-03T13:33:10Z; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Method=Privileged; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_Name=unrestricted_parent.2; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_SiteId=90c7a20a-f34b-40bf-bc48-b9253b6f5d20; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ActionId=efffd745-3e0f-471c-a248-0039dd2430e4; MSIP_Label_07222825-62ea-40f3-96b5-5375c07996e2_ContentBits=0
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/thfn3NBJph2f6vhg6F6CN1-c01o>
Subject: Re: [Dots] Robert Wilton's No Objection on draft-ietf-dots-telemetry-21: (with COMMENT)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Feb 2022 14:01:13 -0000

Hi Rob, 

Many thanks for the comments. 

Please see inline. 

Cheers,
Med

> -----Message d'origine-----
> De : Robert Wilton via Datatracker <noreply@ietf.org>
> Envoyé : jeudi 3 février 2022 12:26
> À : The IESG <iesg@ietf.org>
> Cc : draft-ietf-dots-telemetry@ietf.org; dots-chairs@ietf.org;
> dots@ietf.org; valery@smyslov.net; valery@smyslov.net
> Objet : Robert Wilton's No Objection on draft-ietf-dots-telemetry-21:
> (with COMMENT)
> 
> Robert Wilton has entered the following ballot position for
> draft-ietf-dots-telemetry-21: No Objection
> 
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
> 
> 
> Please refer to https://www.ietf.org/blog/handling-iesg-ballot-
> positions/
> for more information about how to handle DISCUSS and COMMENT positions.
> 
> 
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-dots-telemetry/
> 
> 
> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> Hi,
> 
> Thanks for this document.  I have no major comments, but do have a few
> minor ones.
> 
> 1. I wonder if the abstract/introduction can be clearer that this is an
> extension to the data channel as well as the signal channel, although I
> appreciate that the vast majority of this document is about telemetry
> communicated via the signal channel.

[Med] Sure. We added this NEW text to the abstract of -21: "It also specifies a second YANG module to share the attack mapping details over the DOTS data channel."

Added this NEW to the introduction:

   Also, the document specifies a YANG module (Section 11.2) that
   augments the DOTS data channel [RFC8783] with attack details
   information.  Sharing such details during 'idle' time is meant to
   optimize the data exchanged over the DOTS signal channel.

> 
> 2. I found the text in section 7.1.2 related to tsids to be somewhat
> unclear.
> When I first read this paragraph:
> 
>    tsid:  Telemetry Setup Identifier is an identifier for the DOTS
>         telemetry setup configuration data represented as an integer.
>         This identifier MUST be generated by DOTS clients.  'tsid'
>         values MUST increase monotonically (when a new PUT is generated
>         by a DOTS client to convey new configuration parameters for the
>         telemetry).
> 
> and
> 
>    A PUT request with a higher numeric 'tsid' value overrides the DOTS
>    telemetry configuration data installed by a PUT request with a lower
>    numeric 'tsid' value.  To avoid maintaining a long list of 'tsid'
>    requests for requests carrying telemetry configuration data from a
>    DOTS client, the lower numeric 'tsid' MUST be automatically deleted
>    and no longer be available at the DOTS server.
> 
> It gave me the impression that a new PUT request with a new tsid
> completely replaces all configuration provided by any lower tsid, but I
> don't think that is is the intent.

[Med] That’s the intent for PUT requests that  ** carry telemetry configuration data **. I think the last sentence is clear enough. 

The text repeats "telemetry configuration data" as we have the following: 

   In reference to Figure 1, a DOTS telemetry setup message MUST include
   only telemetry-related configuration parameters (Section 7.1) or
   information about DOTS client domain pipe capacity (Section 7.2) or
   telemetry traffic baseline (Section 7.3).  As such, requests that
   include a mix of telemetry configuration, pipe capacity, and traffic
   baseline MUST be rejected by DOTS servers with a 4.00 (Bad Request).

+ specific tsid behavior for the other two cases, e.g.,: 

      The relative order of two PUT requests carrying DOTS client domain
      pipe attributes from a DOTS client is determined by comparing
      their respective 'tsid' values.  If such two requests have
      overlapping 'link-id' and 'unit', the PUT request with higher
      numeric 'tsid' value will override the request with a lower
      numeric 'tsid' value.  The overlapped lower numeric 'tsid' MUST be
      automatically deleted and no longer be available.

  Perhaps this could be made clearer?
> 
> 3.
>    *  If the DOTS server finds the 'tsid' parameter value conveyed in
>       the PUT request in its configuration data and if the DOTS server
>       has accepted the updated configuration parameters, 2.04 (Changed)
>       MUST be returned in the response.
> 
> I was wondering why not error this case and not except the config change
> (presumably this is a simple error if the client has used the same
> tsid)?

[Med] because we accept to "update" values of already communicated configuration without having to include all other parameters in the "update" request. Otherwise, the client will need to include all the parameters each time it generates a new tsid. if not, the server will use default values for parameters that are not present. 

> 
> 4. The YANG is obviously being used in a different way here than for
> regular network device configuration, but this still means that you end
> up with descriptions of various properties in two places in the
> document, once in the main part of the text and once in the YANG data
> model, which makes the document both somewhat more verbose and also runs
> the risk of discrepancies between what is in the YANG vs what is
> described earlier in the document.  For regular YANG data models, the
> preferred approach is try and have the full normative definitions in the
> YANG module, and keeps the text outside of the model to be more
> informative/descriptive of the expected behavior, partly because of the
> expectation to be able to generate user documentation from the
> description statements.  I don't know if you would ever be expected to
> generate a UI description from the YANG module for DOTS telemetry, but
> you might want to double check that have you the right balance between
> whether the text in the YANG module of the main description is
> definitive and whether there should be any statement in the document to
> indicate which text is regarded as definitive if there is any
> discrepancy between the two descriptions.
> 

[Med] We do already have the following: 

   The authoritative reference for validating telemetry messages
   exchanged over the DOTS signal channel are Sections 7, 8, and 9
   together with the mapping table established in Section 12.


> 5. I agree with Warren's comments regarding whether allowing a choice of
> units and scaling causes additional complexity that could perhaps be
> avoided.
> 
> Regards,
> Rob
> 
> 


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.