Re: [Dots] Tsvart last call review of draft-ietf-dots-signal-channel-31

Yoshifumi Nishida <nishida@sfc.wide.ad.jp> Thu, 04 April 2019 16:38 UTC

Return-Path: <nishida@sfc.wide.ad.jp>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B8131205F4; Thu, 4 Apr 2019 09:38:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rdtclHGzuFXr; Thu, 4 Apr 2019 09:38:19 -0700 (PDT)
Received: from mail.sfc.wide.ad.jp (mail.sfc.wide.ad.jp [203.178.142.146]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6941A1205F7; Thu, 4 Apr 2019 09:38:18 -0700 (PDT)
Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) by mail.sfc.wide.ad.jp (Postfix) with ESMTPSA id 9756C29C031; Fri, 5 Apr 2019 01:38:16 +0900 (JST)
Received: by mail-wr1-f46.google.com with SMTP id s15so4571963wra.12; Thu, 04 Apr 2019 09:38:16 -0700 (PDT)
X-Gm-Message-State: APjAAAUR76ScbBGyA43/oa/1dIW8o0eWvhKVsxRFH9gHT3p8SDDTm6tt IYMvd8YyoGbDSLGDdoLHQa+ohwo0taXtNXvzn6Y=
X-Google-Smtp-Source: APXvYqxAQwkbOyw0KWYOxlnGioawyqNNf4XB1/rOrA+mhJKuv1a8cL2FNbFxQCZJcHhXtxFXMcMgjOH/XSpywHxJyq8=
X-Received: by 2002:a5d:618b:: with SMTP id j11mr5096546wru.123.1554395894520; Thu, 04 Apr 2019 09:38:14 -0700 (PDT)
MIME-Version: 1.0
References: <155402239346.12345.7871170827596594079@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302EA5053A@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <CAO249yf92bfdZCyfcQaHMt41SKO6CAQXOYEW2H++ZYQoXqKvpQ@mail.gmail.com> <787AE7BB302AE849A7480A190F8B93302EA51A15@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EA51A15@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
From: Yoshifumi Nishida <nishida@sfc.wide.ad.jp>
Date: Thu, 04 Apr 2019 09:38:02 -0700
X-Gmail-Original-Message-ID: <CAO249yeRK7RJ59jcmpXkwFX5_RniwGoBCcno3tNsCcFCJiRhsA@mail.gmail.com>
Message-ID: <CAO249yeRK7RJ59jcmpXkwFX5_RniwGoBCcno3tNsCcFCJiRhsA@mail.gmail.com>
To: mohamed.boucadair@orange.com
Cc: Yoshifumi Nishida <nishida@sfc.wide.ad.jp>, Yoshifumi Nishida <nishida@wide.ad.jp>, "tsv-art@ietf.org" <tsv-art@ietf.org>, "draft-ietf-dots-signal-channel.all@ietf.org" <draft-ietf-dots-signal-channel.all@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "dots@ietf.org" <dots@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002226380585b6ff04"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/xZRCIGoZPL8L3uIotEvlTkj1jjM>
Subject: Re: [Dots] Tsvart last call review of draft-ietf-dots-signal-channel-31
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Apr 2019 16:38:23 -0000

Hi Med,

On Tue, Apr 2, 2019 at 11:35 PM <mohamed.boucadair@orange.com> wrote:

> Hi Yoshi,
>
>
>
> Please see inline.
>
>
>
> Cheers,
>
> Med
>
>
>
> *De :* Yoshifumi Nishida [mailto:nishida@sfc.wide.ad.jp]
> *Envoyé :* mercredi 3 avril 2019 00:02
> *À :* BOUCADAIR Mohamed TGI/OLN
> *Cc :* Yoshifumi Nishida; tsv-art@ietf.org;
> draft-ietf-dots-signal-channel.all@ietf.org; ietf@ietf.org; dots@ietf.org
> *Objet :* Re: Tsvart last call review of draft-ietf-dots-signal-channel-31
>
>
>
> HI Med,
>
>
>
> Thanks for the reply. I put my comments in lines.
>
>
>
> On Sun, Mar 31, 2019 at 11:55 PM <mohamed.boucadair@orange.com> wrote:
>
> Hi Yoshi,
>
> Thank you for the review.
>
> Please see inline.
>
> Cheers,
> Med
>
> > -----Message d'origine-----
> > De : Yoshifumi Nishida via Datatracker [mailto:noreply@ietf.org]
> > Envoyé : dimanche 31 mars 2019 10:53
> > À : tsv-art@ietf.org
> > Cc : draft-ietf-dots-signal-channel.all@ietf.org; ietf@ietf.org;
> > dots@ietf.org
> > Objet : Tsvart last call review of draft-ietf-dots-signal-channel-31
> >
> > Reviewer: Yoshifumi Nishida
> > Review result: Almost Ready
> >
> > This document has been reviewed as part of the transport area review
> team's
> > ongoing effort to review key IETF documents. These comments were written
> > primarily for the transport area directors, but are copied to the
> document's
> > authors and WG to allow them to address any issues raised and also to the
> > IETF
> > discussion list for information.
> >
> > When done at the time of IETF Last Call, the authors should consider this
> > review as part of the last-call comments they receive. Please always CC
> > tsv-art@ietf.org if you reply to or forward this review.
> >
> > Summary: This document is almost ready for publication, but it will be
> better
> > to clarify the following points.
> >
> > 1:   "it is out of scope of this document to specify the behavior to be
> > followed by a DOTS client to send DOTS requests when multiple
> >         DOTS servers are provisioned."
> >
> >       I'm not sure why it is out of scope. Does it bring a certain
> > complexities
> >       to the protocol?
> >      Or, does it simply mean it is up to implementations?
>
> [Med] This is because of specific considerations such as those discussed
> in draft-ietf-dots-multihoming. We don't want to overload the base spec
> with such considerations (discussed in separate documents). The same
> approach is followed for server discovery
> (draft-ietf-dots-server-discovery).
>
>
>
> Got it. I think it would be useful for readers to mention it in the draft.
>
>
>
> [Med] I updated the text as follows :
>
>
>
>    Likewise, it is out of scope of this document to specify the behavior
>
>    to be followed by a DOTS client to send DOTS requests when multiple
>
>    DOTS servers are provisioned (e.g., contact all DOTS servers, select
>
>    one DOTS server among the list).  Such behavior is specified in other
>
>                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
>    documents (e.g.,  [I-D.ietf-dots-multihoming]).
>
>   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>

WFM. Thanks for the updates!


>
>
>
>
> > 2:   "The DOTS client periodically repeats the mechanism to discover
> whether
> > DOTS signal
> >         channel messages with DTLS over UDP becomes available from the
> DOTS
> >         server.."
> >
> >        -> Does this mean DOTS clients will not repeat this when it
> already
> > has
> >        DTLS over UDP connection?
> >            What about if the client has DTLS over UDPv4? Does it try to
> check
> >            DTLS over UDPv6? Also, is this logic MAY or SHOULD or don't
> want
> > to
> >            specify?
>
> [Med] The client will retry when the cache flushes out:
>
>
>    Note that the DOTS client after successfully establishing a
>    connection MUST cache information regarding the outcome of each
>    connection attempt for a specific time period, and it uses that
>    information to avoid thrashing the network with subsequent attempts.
>
>
>
> OK, but if you retry anyway after a certain time, why do you need to cache
> the results?
>
>
>
> [Med] “to avoid thrashing the network with subsequent attempts” as the
> text says. Also, caching avoids the inconvenience of selection during
> attack times. Typically, the client executes the HE procedure when it
> initializes and uses the outcome of the procedure for subsequent DOTS
> signal exchanges during a certain period. Please refer to this text in the
> draft:
>

Hmm. let's say the results of the happy eyeballs was TCP over IPv4 (just
like the figure 4) and the client cache the info.
After certain period of time, the client will do happy eyeball again
because other better connections might be available . But, in this case,
how the cached info will be used?

It seems that an implementation that doesn't cache the info at all and does
happy eyeballs at every 10 hours won't be allowed in this draft.

Thanks,
--
Yoshi

>