Re: [Dots] I-D Action: draft-ietf-dots-telemetry-06.txt
Meiling Chen <chenmeiling@chinamobile.com> Sun, 12 April 2020 23:33 UTC
Return-Path: <chenmeiling@chinamobile.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C43233A0C9B for <dots@ietfa.amsl.com>; Sun, 12 Apr 2020 16:33:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.888
X-Spam-Level:
X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fpvepxTZVoAO for <dots@ietfa.amsl.com>; Sun, 12 Apr 2020 16:33:16 -0700 (PDT)
Received: from cmccmta2.chinamobile.com (cmccmta2.chinamobile.com [221.176.66.80]) by ietfa.amsl.com (Postfix) with ESMTP id 5D5A33A0C9A for <dots@ietf.org>; Sun, 12 Apr 2020 16:33:14 -0700 (PDT)
Received: from spf.mail.chinamobile.com (unknown[172.16.121.7]) by rmmx-syy-dmz-app06-12006 (RichMail) with SMTP id 2ee65e93a528c84-25cb3; Mon, 13 Apr 2020 07:33:00 +0800 (CST)
X-RM-TRANSID: 2ee65e93a528c84-25cb3
X-RM-TagInfo: emlType=0
X-RM-SPAM-FLAG: 00000000
Received: from cmcc-PC (unknown[120.244.166.72]) by rmsmtp-syy-appsvr04-12004 (RichMail) with SMTP id 2ee45e93a52bc52-84ea0; Mon, 13 Apr 2020 07:32:59 +0800 (CST)
X-RM-TRANSID: 2ee45e93a52bc52-84ea0
Date: Mon, 13 Apr 2020 07:33:02 +0800
From: Meiling Chen <chenmeiling@chinamobile.com>
To: "mohamed.boucadair" <mohamed.boucadair@orange.com>, dots <dots@ietf.org>
References: <158624600381.27398.18200958068747513105@ietfa.amsl.com>, <787AE7BB302AE849A7480A190F8B93303148FF3D@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
X-Priority: 3
X-Has-Attach: no
X-Mailer: Foxmail 7.2.9.115[cn]
Mime-Version: 1.0
Message-ID: <2020041307330224403520@chinamobile.com>
Content-Type: multipart/alternative; boundary="----=_001_NextPart753647627284_=----"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/uZJe6yu_DsA76wkuoONgLjwwczc>
Subject: Re: [Dots] I-D Action: draft-ietf-dots-telemetry-06.txt
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Apr 2020 23:33:19 -0000
Hi all, I have reviewed this draft, and I have some questions: 1. section 7 contains pre-or-ongoing mitigation telemetry, why not the telemetry after the end of mitigation. 2.Telemetry put request sent after a mitigation request, is that means telemetry request and mitigation request will not be in one packet? 3."attack-severity" has three options, how to determine which level the attack is? 4.For "top-talkers", is it necessary to specify the quantity? From: mohamed.boucadair@orange.com Date: 2020-04-07 16:03 To: dots@ietf.org Subject: Re: [Dots] I-D Action: draft-ietf-dots-telemetry-06.txt Hi all, The main changes in this version are as follows: * add a reminder that cuid/cdid must not appear in the message body * add a reminder about the use of YANG * add a clarification about refresh of telemetry configuration * Restructure the model to fix a problem raised by Jon about access to max/min data when no tsid is in place. * Define unit-type * attack details are not modeled as an array * add new containers ton convey protocol- and port-specific telemetry data. * add a clarification about partial requests * add a clarification about the usage of per protocol and per-port metrics. * telemetry data can now be filtered using Uri-Query options * add a note about handling baseline to accommodate non-attack overloads * describe how to delete "tmids' * update the cbor/mapping tables. The point about long responses is still PENDING. Please review and share your comments. Cheers, Med > -----Message d'origine----- > De : I-D-Announce [mailto:i-d-announce-bounces@ietf.org] De la part de > internet-drafts@ietf.org > Envoyé : mardi 7 avril 2020 09:53 > à : i-d-announce@ietf.org > Cc : dots@ietf.org > Objet : I-D Action: draft-ietf-dots-telemetry-06.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the DDoS Open Threat Signaling WG of the > IETF. > > Title : Distributed Denial-of-Service Open Threat > Signaling (DOTS) Telemetry > Authors : Mohamed Boucadair > Tirumaleswar Reddy > Ehud Doron > Meiling Chen > Filename : draft-ietf-dots-telemetry-06.txt > Pages : 93 > Date : 2020-04-07 > > Abstract: > This document aims to enrich DOTS signal channel protocol with > various telemetry attributes allowing optimal DDoS attack > mitigation. > It specifies the normal traffic baseline and attack traffic > telemetry > attributes a DOTS client can convey to its DOTS server in the > mitigation request, the mitigation status telemetry attributes a > DOTS > server can communicate to a DOTS client, and the mitigation > efficacy > telemetry attributes a DOTS client can communicate to a DOTS > server. > The telemetry attributes can assist the mitigator to choose the > DDoS > mitigation techniques and perform optimal DDoS attack mitigation. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dots-telemetry/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dots-telemetry-06 > https://datatracker.ietf.org/doc/html/draft-ietf-dots-telemetry-06 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-telemetry-06 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > > _______________________________________________ > I-D-Announce mailing list > I-D-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/i-d-announce > Internet-Draft directories: http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt _______________________________________________ Dots mailing list Dots@ietf.org https://www.ietf.org/mailman/listinfo/dots
- [Dots] I-D Action: draft-ietf-dots-telemetry-06.t… internet-drafts
- Re: [Dots] I-D Action: draft-ietf-dots-telemetry-… mohamed.boucadair
- Re: [Dots] I-D Action: draft-ietf-dots-telemetry-… Meiling Chen
- Re: [Dots] I-D Action: draft-ietf-dots-telemetry-… H Y
- Re: [Dots] I-D Action: draft-ietf-dots-telemetry-… mohamed.boucadair