Re: [Dots] Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)

mohamed.boucadair@orange.com Wed, 04 November 2020 11:48 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB76D3A101F; Wed, 4 Nov 2020 03:48:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bh4RQUQhGBfv; Wed, 4 Nov 2020 03:48:05 -0800 (PST)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27F0A3A100E; Wed, 4 Nov 2020 03:48:05 -0800 (PST)
Received: from opfedar01.francetelecom.fr (unknown [xx.xx.xx.2]) by opfedar26.francetelecom.fr (ESMTP service) with ESMTP id 4CR4fC4f9VzFptK; Wed, 4 Nov 2020 12:48:03 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1604490483; bh=R33WEivJVDo7gsXPpIZNVQaQ0e+rWpEcPf3mI7mrnI4=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=IPVwv5uf9qn5KNN9BID0UM3O1LaB3iCuPRayGB3ZlyUWEiu12/Ki4G39zDByKVxfN SYdv4rmIhyh0dL4zSGsXpyyoJVA/IIAhWmYSptRY7Oawix9NGKxxuKbVZqwfx62Ar1 TMcKfmco48+1Sx/2n8zdN0K2pgstYrKE9IgoVR2J/GFK9vksNrJNyqAEIABVKV2cqu CNtBT7XhZdTVed3OTmUQftogfPvSFMRqJFSsZ3dWcA/rsRT0OitQ/K/GUw+nteIFZt RSSBaJf802N9utIGT4Kejdf8aLNuLns5Wl87VctZ4uQPPfCAF3qYjCVf//I3Kemue3 XTcG4oYjxGyGA==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.92]) by opfedar01.francetelecom.fr (ESMTP service) with ESMTP id 4CR4fC2RkTzBrLH; Wed, 4 Nov 2020 12:48:03 +0100 (CET)
From: mohamed.boucadair@orange.com
To: "Eric Vyncke (evyncke)" <evyncke@cisco.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-dots-server-discovery@ietf.org" <draft-ietf-dots-server-discovery@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, Valery Smyslov <valery@smyslov.net>, "zhencao.ietf@gmail.com" <zhencao.ietf@gmail.com>, "Bernie Volz (volz)" <volz@cisco.com>, "tim@qacafe.com" <tim@qacafe.com>
Thread-Topic: Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)
Thread-Index: AQHWshMdIy60/aZzWU6NT11nUIRB7qm3erxAgABiKoD///TcgA==
Date: Wed, 04 Nov 2020 11:48:02 +0000
Message-ID: <2804_1604490483_5FA294F3_2804_108_15_787AE7BB302AE849A7480A190F8B93303156FB75@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <160442981984.8698.100494815694851250@ietfa.amsl.com> <888_1604474112_5FA25500_888_442_1_787AE7BB302AE849A7480A190F8B93303156F7F0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <6C00489A-9A46-4A6F-8F8C-50C564B616CA@cisco.com>
In-Reply-To: <6C00489A-9A46-4A6F-8F8C-50C564B616CA@cisco.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/zMCMWFgLZHi2dOkEU-WvQ_Ix9Qc>
Subject: Re: [Dots] Éric Vyncke's Discuss on draft-ietf-dots-server-discovery-14: (with DISCUSS and COMMENT)
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Nov 2020 11:48:07 -0000

Re-,

Thanks, Eric. 

Please see inline.

Cheers,
Med

> -----Message d'origine-----
> De : Eric Vyncke (evyncke) [mailto:evyncke@cisco.com]
> Envoyé : mercredi 4 novembre 2020 11:49
> À : BOUCADAIR Mohamed TGI/OLN <mohamed.boucadair@orange.com>; The
> IESG <iesg@ietf.org>
> Cc : draft-ietf-dots-server-discovery@ietf.org; dots-
> chairs@ietf.org; dots@ietf.org; Valery Smyslov <valery@smyslov.net>;
> zhencao.ietf@gmail.com; Bernie Volz (volz) <volz@cisco.com>;
> tim@qacafe.com
> Objet : Re: Éric Vyncke's Discuss on draft-ietf-dots-server-
> discovery-14: (with DISCUSS and COMMENT)
> 
> Re-bonjour Med,
> 
> I have removed the parts where we agree. Additional comments are
> prefixed by EV>
> 
> Regards
> 
> -éric
> 
> 
> -----Original Message-----
> From: "mohamed.boucadair@orange.com" <mohamed.boucadair@orange.com>
> Date: Wednesday, 4 November 2020 at 08:15
> To: Eric Vyncke <evyncke@cisco.com>, The IESG <iesg@ietf.org>
> Cc: "draft-ietf-dots-server-discovery@ietf.org" <draft-ietf-dots-
> server-discovery@ietf.org>, "dots-chairs@ietf.org" <dots-
> chairs@ietf.org>, "dots@ietf.org" <dots@ietf.org>, Valery Smyslov
> <valery@smyslov.net>, "zhencao.ietf@gmail.com"
> <zhencao.ietf@gmail.com>, "Bernie Volz (volz)" <volz@cisco.com>,
> "tim@qacafe.com" <tim@qacafe.com>
> Subject: RE: Éric Vyncke's Discuss on draft-ietf-dots-server-
> discovery-14: (with DISCUSS and COMMENT)
> 
>     > -- Section 5.1.2 --
>     > I fully second Zhen Cao's review: how will the IPv4-mapped
> IPv6
>     > address(es) be used? They MUST not appear on the wire and
> there is a
>     > DHCPv4 option to convey the DOTS information. Is it when
> DHCPv6 is
>     > available, no DHCPv4, and only IPv4 connectivity to the DOTS
> server
>     > ? If so, then please clarify the text.
>     >
> 
>     [Med] You got it. Added: " This is particularly useful in IPv4
> service continuity deployments where only DHCPv6 is used."
> 
> EV> I am afraid that more text and explanations are required to
> clear my remaining DISCUSS even if your suggested modification is a
> big step forward
> 

[Med] We can add some pointers rather than expanding the text. What about:  

"This is particularly useful in IPv4 service continuity deployments (e.g., [RFC6333]) where only DHCPv6 is used and DHCPv4-over-DHCPv6 [RFC7341] is not supported." 

> 
>     >
>     > -- Section 4 --
>     > While this section title is "Unified DOTS Discovery
> Procedure", I
>     > read 3 different mechanisms so apparently conflicting with the
>     > section title. Suggest to remove "unified" from the section
> title.
> 
>     [Med] It is "unified" in the sense that the different mechanisms
> as packaged to form one with an internal preference order. OK to
> remove it if it hurts.
> 
> EV> yes, please remove the "unified" in the section title

[Med] Done. 

> 
>     >
>     > Putting DHCP configuration under explicit configuration
> appears
>     > weird to me as DHCP is rather dynamic and on the same level as
> DNSD.
> 
>     [Med] Not sure what is weird there. There two levels of explicit
> config as detailed in the text.
> 
> EV> but my point is that DHCP is not really an explicit
> configuration rather a dynamic one.

[Med] I don’t get this one. An explicit config can be provided using static or dynamic mechanisms. DHCP falls into the second category. 

 So, I do not see why the DHCP
> part is on the same level as static configuration in the 1st item in
> the list
> 
>     >
>     > May I suggest to move the sentence "DOTS clients will prefer
>     > information received from the discovery methods in the order
> listed"
>     > before the list? It is an important sentence IMHO.
> 
>     [Med] It is important in case the client supports many
> mechanisms and receives the information using various sources.
> 
> EV> sure but my point was to move this sentence *before* the
> enumeration due to its importance.

[Med] Done. Thanks.

> 
>     >
>     > I wonder wheter the sentence "Expiry of a peer DOTS agent's
>     > certificate currently in use." is correct... Should it be
> "agent
>     > peer DOTS certificate" ?
> 
>     [Med] Would the "Expiry of the certificate of a peer DOTS agent"
> be better? To be honest, I'm not sure to get the issue with the
> initial wording.
> 
> 
> EV> it is indeed easier to read  / parse for a non-English reader
> like myself
> 

[Med] Fixed. 

>     >
>     > -- Sections 5.1.3 and 5.2.3--
>     > The part of the sentence "as distinguished by the presence of
>     > multiple root labels" should be explained more as it is
> unclear.
> 
>     [Med] If multiple names were included, then each of these names
> will be terminating with a byte value of 0. We drafted the text with
> the assumption that the reader is familiar with Section 3.1 of
> RFC1035.
> 
> EV> sure about RFC 1035 ;-) but I wonder whether this part of the
> sentence is useful as the previous part " OPTION_V6_DOTS_RI contains
> more than one name" seems perfectly enough for me so reader may
> wonder about the part " as distinguished by the presence of multiple
> root labels"
> 

[Med] OK to remove it if you think this is obvious. 



_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.