Re: [Dots] I-D Action: draft-ietf-dots-telemetry-06.txt

mohamed.boucadair@orange.com Tue, 07 April 2020 08:03 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D99C03A18B0 for <dots@ietfa.amsl.com>; Tue, 7 Apr 2020 01:03:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usLt1hYDuPnG for <dots@ietfa.amsl.com>; Tue, 7 Apr 2020 01:03:43 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.41]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27F7F3A18AF for <dots@ietf.org>; Tue, 7 Apr 2020 01:03:43 -0700 (PDT)
Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 48xKfj6Vh7zFqDr for <dots@ietf.org>; Tue, 7 Apr 2020 10:03:41 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1586246621; bh=1ow5PvwZCqZZlAhw8e0fIls/uRecmYixp0nsmYcUq5Y=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=wKUHNWhbIblh+hsSP6BTtMV95X2wRU/8hY0NE7XWDhO2IadcFqUjKnO8LFkDdzv2R 5ibd/cD3N9Z2E+tZPUChiU4ISS21P0vh96Wp3fZXRMuZmYuCC6B2lSXJjhjpsNvna/ c+heLZONGYFg+zL5+/IQr2H9qpZ34mxu5wjMcIOl08XJOGe+3HeFGptA+lQnIFw556 Jvjn9ArcrQ2TMLGhaCW+eqLqlMlUsLcMSTlZHrK2Jy4bWqyqIldfBAObuwDv8GJFX0 zVEqb5l2znbpIJTLCJrefLGPx8zW9w3oevqlurlAz5ZcK3KH9ZDQfVhOugF0UxIag0 qthwHqY8XI9ZQ==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.38]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 48xKfj5jMVzBrLT for <dots@ietf.org>; Tue, 7 Apr 2020 10:03:41 +0200 (CEST)
From: mohamed.boucadair@orange.com
To: "dots@ietf.org" <dots@ietf.org>
Thread-Topic: I-D Action: draft-ietf-dots-telemetry-06.txt
Thread-Index: AQHWDLGyfVymjH6szUuLK92Wjbpd+KhtSh+Q
Date: Tue, 07 Apr 2020 08:03:41 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93303148FF3D@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <158624600381.27398.18200958068747513105@ietfa.amsl.com>
In-Reply-To: <158624600381.27398.18200958068747513105@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/vSG9E9jAHyhwjandZpbLifrd5sI>
Subject: Re: [Dots] I-D Action: draft-ietf-dots-telemetry-06.txt
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Apr 2020 08:03:45 -0000

Hi all, 

The main changes in this version are as follows:
* add a reminder that cuid/cdid must not appear in the message body
* add a reminder about the use of YANG
* add a clarification about refresh of telemetry configuration
* Restructure the model to fix a problem raised by Jon about access to max/min data when no tsid is in place.
* Define unit-type 
* attack details are not modeled as an array
* add new containers ton convey protocol- and port-specific telemetry data. 
* add a clarification about partial requests
* add a clarification about the usage of per protocol and per-port metrics. 
* telemetry data can now be filtered using Uri-Query options
* add a note about handling baseline to accommodate non-attack overloads
* describe how to delete "tmids'
* update the cbor/mapping tables. 

The point about long responses is still PENDING.  

Please review and share your comments.

Cheers,
Med

> -----Message d'origine-----
> De : I-D-Announce [mailto:i-d-announce-bounces@ietf.org] De la part de
> internet-drafts@ietf.org
> Envoyé : mardi 7 avril 2020 09:53
> À : i-d-announce@ietf.org
> Cc : dots@ietf.org
> Objet : I-D Action: draft-ietf-dots-telemetry-06.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> This draft is a work item of the DDoS Open Threat Signaling WG of the
> IETF.
> 
>         Title           : Distributed Denial-of-Service Open Threat
> Signaling (DOTS) Telemetry
>         Authors         : Mohamed Boucadair
>                           Tirumaleswar Reddy
>                           Ehud Doron
>                           Meiling Chen
> 	Filename        : draft-ietf-dots-telemetry-06.txt
> 	Pages           : 93
> 	Date            : 2020-04-07
> 
> Abstract:
>    This document aims to enrich DOTS signal channel protocol with
>    various telemetry attributes allowing optimal DDoS attack
> mitigation.
>    It specifies the normal traffic baseline and attack traffic
> telemetry
>    attributes a DOTS client can convey to its DOTS server in the
>    mitigation request, the mitigation status telemetry attributes a
> DOTS
>    server can communicate to a DOTS client, and the mitigation
> efficacy
>    telemetry attributes a DOTS client can communicate to a DOTS
> server.
>    The telemetry attributes can assist the mitigator to choose the
> DDoS
>    mitigation techniques and perform optimal DDoS attack mitigation.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dots-telemetry/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-dots-telemetry-06
> https://datatracker.ietf.org/doc/html/draft-ietf-dots-telemetry-06
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dots-telemetry-06
> 
> 
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> I-D-Announce mailing list
> I-D-Announce@ietf.org
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt