[Dtls-iot] FW: [dice] #36 (profile): Appendix C. DTLS Fragmentation -- Not complete?

"FOSSATI, Thomas (Thomas)" <thomas.fossati@alcatel-lucent.com> Wed, 22 July 2015 10:56 UTC

Return-Path: <thomas.fossati@alcatel-lucent.com>
X-Original-To: dtls-iot@ietfa.amsl.com
Delivered-To: dtls-iot@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB451AD377 for <dtls-iot@ietfa.amsl.com>; Wed, 22 Jul 2015 03:56:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.91
X-Spam-Level:
X-Spam-Status: No, score=-5.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_AFFORDABLE=1, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mOV1g6QPdwed for <dtls-iot@ietfa.amsl.com>; Wed, 22 Jul 2015 03:56:26 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpgre-esg-01.alcatel-lucent.com [135.245.210.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1F821AD34C for <dtls-iot@ietf.org>; Wed, 22 Jul 2015 03:56:26 -0700 (PDT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (unknown [135.239.2.122]) by Websense Email Security Gateway with ESMTPS id 9D5C1493F8C35 for <dtls-iot@ietf.org>; Wed, 22 Jul 2015 10:56:22 +0000 (GMT)
Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id t6MAuOHH008313 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <dtls-iot@ietf.org>; Wed, 22 Jul 2015 12:56:24 +0200
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.234]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0195.001; Wed, 22 Jul 2015 12:56:24 +0200
From: "FOSSATI, Thomas (Thomas)" <thomas.fossati@alcatel-lucent.com>
To: "dtls-iot@ietf.org" <dtls-iot@ietf.org>
Thread-Topic: [dice] #36 (profile): Appendix C. DTLS Fragmentation -- Not complete?
Thread-Index: AQHQvvM7qNqy/FC+HEuHuAMPgU8A3J3nCiEAgABSDoA=
Date: Wed, 22 Jul 2015 10:56:24 +0000
Message-ID: <D1D54342.31E65%thomas.fossati@alcatel-lucent.com>
References: <064.ce1e64c37b01e8acba5ca0151ecaf87f@tools.ietf.org> <079.43105472bc069b263357cfa0d335eeb8@tools.ietf.org>
In-Reply-To: <079.43105472bc069b263357cfa0d335eeb8@tools.ietf.org>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.5.2.150604
x-originating-ip: [135.239.27.41]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <76028B764F7ECC40AFD30C43D5946302@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dtls-iot/U3SC3300MVagH2V3Bf0Tu3Dokms>
Subject: [Dtls-iot] FW: [dice] #36 (profile): Appendix C. DTLS Fragmentation -- Not complete?
X-BeenThere: dtls-iot@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DTLS for IoT discussion list <dtls-iot.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dtls-iot>, <mailto:dtls-iot-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dtls-iot/>
List-Post: <mailto:dtls-iot@ietf.org>
List-Help: <mailto:dtls-iot-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dtls-iot>, <mailto:dtls-iot-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Jul 2015 10:56:29 -0000

On 22/07/2015 10:02, "dice issue tracker" <trac+dice@tools.ietf.org> wrote:
>#36: Appendix C.  DTLS Fragmentation -- Not complete?
>
>Comment (by thomas.fossati@alcatel-lucent.com):
>
> We had a further round of reviews from Robert and Matthias (thanks!).
>
> The email exchange, together with the new text, is copied below.
>
> ----
>
> From: <robert.cragie@gmail.com> on behalf of Robert Cragie
> <robert.cragie@gridmerge.com>
> Reply-To: "robert.cragie@gridmerge.com" <robert.cragie@gridmerge.com>
> Date: Wednesday, 22 July 2015 00:27
> To: Thomas Fossati <thomas.fossati@alcatel-lucent.com>
> Cc: Thomas Fossati <tfossati@velocix.com>, Kovatsch Matthias
> <kovatsch@inf.ethz.ch>, Hannes Tschofenig <Hannes.Tschofenig@arm.com>
> Subject: Re: DICE ticket #36
>
> Hi Thomas - looks good!
>
> Robert
>
> On 21 Jul 2015 19:44, "FOSSATI, Thomas (Thomas)" <thomas.fossati@alcatel-
> lucent.com> wrote:
> Hi Robert, thanks very much for the comments.
>
> I've removed any reference to specific network technologies because
> fragment size adjustments and consequent overlaps happen whenever we go
> from a bigger to a smaller MTU (e.g. 1500 -> 1280).  Here's the new text:
>
> =-=-=-=
>
>    Section 4.2.3 of [RFC6347] advises DTLS implementations to not
>    produce overlapping fragments.  However, it requires receivers to be
>    able to cope with them.  The need for the latter requisite is
>    explained in Section 4.1.1.1 of [RFC6347]: accurate path MTU (PMTU)
>    estimation may be traded for shorter handshake completion time.
>
>    In many cases, the cost of handling fragment overlaps has proved to
>    be unaffordable for constrained implementations, particularly because
>    of the increased complexity in buffer management.
>
>    In order to reduce the likelihood of producing different fragment
>    sizes and consequent overlaps within the same handshake, this
>    document RECOMMENDs:
>
>    o  clients (handshake initiators) to use reliable PMTU information for
> the intended destination;
>
>    o  servers to mirror the fragment size selected by their clients.
>
>    The PMTU information comes either from a "fresh enough" discovery
>    performed by the client ([RFC1981], [RFC4821]), or from some other
>    reliable out-of-band channel.
>
> =-=-=-=
>
> Cheers, t
>
> From: <robert.cragie@gmail.com> on behalf of Robert Cragie
> <robert.cragie@gridmerge.com>
> Reply-To: "robert.cragie@gridmerge.com" <robert.cragie@gridmerge.com>
> Date: Tuesday, 21 July 2015 17:18
> To: Thomas Fossati <thomas.fossati@alcatel-lucent.com>
> Cc: Kovatsch Matthias <kovatsch@inf.ethz.ch>, Thomas Fossati
> <tfossati@velocix.com>, Hannes Tschofenig <Hannes.Tschofenig@arm.com>
> Subject: Re: DICE ticket #36
>
> A couple of points:
>
> Point 1:
>
> "the cost on the constrained implementation in terms of memory (due to
>re-
> buffering) and latency (due to re-transmission) would be much higher than
> the benefit that it would get from a theoretically shorter handshake."
>
> I presume this means "the cost from assuming an infeasibly large MTU..."?
> Maybe this should be made clear.
>
> Point 2:
>
> If IEEE 802.15.4 is being used, 6LoWPAN is the only shim available and
> fragmentation would occur at the 6LoWPAN shim. This means that the MTU is
> effectively 1280. So for that reason, I would probably take out IEEE
> 802.15.4. Also, I believe that BT Smart also does its own fragmentation
> and reassembly in the L2CAP layer so I presume the same would apply to BT
> Smart (although I am not an expert).
>
> Robert
>
>
>
> On 21 July 2015 at 13:56, FOSSATI, Thomas (Thomas) <thomas.fossati
> @alcatel-lucent.com> wrote:
> On 21/07/2015 14:38, "Kovatsch  Matthias" <kovatsch@inf.ethz.ch> wrote:
> >>Good feedback, thanks very much!  Just to avoid any ambiguity: PMTU
> >> doesn't need to be done before each DTLS handshake.  It could be done
> >> once and the information cached for as long as it's reasonable.
> >
> >Yes, that's what I assumed. I was even thinking about adding this
> >information to the draft. And since you clarified this here, I now think
> >it would be best to also put this reminder into the document :)
>
> I agree it's worth a further editorial pass :-)
>
> >> I've slightly re-written the text to match your suggestion:
> >
> >Sounds good.
> >
> >Ciao
> >Matthias
>
>-- 
>-------------------------------------+------------------------------------
>-
> Reporter:                           |       Owner:  draft-ietf-dice-
>  hannes.tschofenig@gmx.net          |  profile@tools.ietf.org
>     Type:  defect                   |      Status:  new
> Priority:  major                    |   Milestone:
>Component:  profile                  |     Version:
> Severity:  Waiting for Shepherd     |  Resolution:
>  Writeup                            |
> Keywords:                           |
>-------------------------------------+------------------------------------
>-
>
>Ticket URL: <http://trac.tools.ietf.org/wg/dice/trac/ticket/36#comment:2>
>dice <http://tools.ietf.org/dice/>