Re: [dtn] [EXT] Re: I-D Action: draft-ietf-dtn-ipn-update-01.txt

"Birrane, Edward J." <Edward.Birrane@jhuapl.edu> Tue, 14 March 2023 16:58 UTC

Return-Path: <Edward.Birrane@jhuapl.edu>
X-Original-To: dtn@ietfa.amsl.com
Delivered-To: dtn@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D22F7C14CE38 for <dtn@ietfa.amsl.com>; Tue, 14 Mar 2023 09:58:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jhuapl.edu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C3Asf57d3qs5 for <dtn@ietfa.amsl.com>; Tue, 14 Mar 2023 09:58:16 -0700 (PDT)
Received: from aplegw02.jhuapl.edu (aplegw02.jhuapl.edu [128.244.251.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F9AAC14CE5E for <dtn@ietf.org>; Tue, 14 Mar 2023 09:58:16 -0700 (PDT)
Received: from pps.filterd (aplegw02.jhuapl.edu [127.0.0.1]) by aplegw02.jhuapl.edu (8.17.1.19/8.17.1.19) with ESMTP id 32EGqas7029980; Tue, 14 Mar 2023 12:58:15 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhuapl.edu; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=JHUAPLDec2018; bh=4VlFRccxEs8KWZZmBEE9OLm3kMe9AcYQ2+dLdRGgfuE=; b=lReIjmfFqFTKK+wPspYIOieC/WZM/VWpZ/6pGiqKbmIZRW5Ck6E3m0gfiLWf6ooL8g7C N62zyysXkWrGUtODgC+J4BoLRk211Xqw6JYYdt/pEXWB3oAmAi2g8bNulyCmrErgdELn mOggtk07HmDto4MNYfJ6Njqqk246xa+7+j4f2QLFD4h2xEbg4XaFCiRSFxenZsdKDmO7 B0pxBrg4vWGB3+ZfoLaNBpvFklyy9BuKT9q7pVaAHA1otaHTHyJWI8dun9RA7Gv4kRG4 KtxdaFDBeW2MuzIK/vw53kNWsMFAYOmOR7BtsZxBDCCEoBMZQ0Gv9KbT+UxZsRSgX8OX 2g==
Received: from aplex29.dom1.jhuapl.edu (aplex29.dom1.jhuapl.edu [10.114.162.14]) by aplegw02.jhuapl.edu (PPS) with ESMTPS id 3p8pr4juf2-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 14 Mar 2023 12:58:15 -0400
Received: from APLEX21.dom1.jhuapl.edu (10.114.162.6) by APLEX29.dom1.jhuapl.edu (10.114.162.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.21; Tue, 14 Mar 2023 12:58:15 -0400
Received: from APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2]) by APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2%5]) with mapi id 15.02.1118.021; Tue, 14 Mar 2023 12:58:15 -0400
From: "Birrane, Edward J." <Edward.Birrane@jhuapl.edu>
To: "scott@solarnetone.org" <scott@solarnetone.org>, "dtn@ietf.org" <dtn@ietf.org>
Thread-Topic: [EXT] Re: [dtn] I-D Action: draft-ietf-dtn-ipn-update-01.txt
Thread-Index: AQHZVlv5EDZddhzBeEmSVjqMcWJwqK76cymg
Date: Tue, 14 Mar 2023 16:58:15 +0000
Message-ID: <c5bcc755c56f4a5685dcfc0266bab76d@jhuapl.edu>
References: <167873115985.24779.9764876359257592115@ietfa.amsl.com> <66de5eca-d3f1-c62b-b148-cfca9a589fd4@solarnetone.org>
In-Reply-To: <66de5eca-d3f1-c62b-b148-cfca9a589fd4@solarnetone.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.162.27]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CrossPremisesHeadersFilteredBySendConnector: APLEX29.dom1.jhuapl.edu
X-OrganizationHeadersPreserved: APLEX29.dom1.jhuapl.edu
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.942,Hydra:6.0.573,FMLib:17.11.170.22 definitions=2023-03-14_10,2023-03-14_02,2023-02-09_01
Archived-At: <https://mailarchive.ietf.org/arch/msg/dtn/DaTJlMO360CUX0G8-n4ARLCRIIM>
Subject: Re: [dtn] [EXT] Re: I-D Action: draft-ietf-dtn-ipn-update-01.txt
X-BeenThere: dtn@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Delay Tolerant Networking \(DTN\) discussion list at the IETF." <dtn.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dtn>, <mailto:dtn-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dtn/>
List-Post: <mailto:dtn@ietf.org>
List-Help: <mailto:dtn-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dtn>, <mailto:dtn-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Mar 2023 16:58:20 -0000

Scott,

  I can add a few comments inline below, prefaced with EJB.

-Ed


> Section 3. The ipn URI scheme
> 
> Given that the entire URI is comprised of two 64 bit integers presently, and
> in consideration for the historical unexpected requirement for
> numbering/naming resources associated with the terrestrial internet, I am
> confused as to why the proposed change shifts naming space from 64 bit
> integer names to 32 bit integer names, as opposed taking those 32 bits from
> service numbers.  

EJB:  Preserving "node identification information" in one 64-bit segment and services in a second 64 bit segment was the consensus of this WG. The rationale, IIRC, was that it preserves backwards compatibility with existing encodings and software implementations.  I would welcome an example of the proposed segmentation of the 64 bit space leading to exhaustion.

> Section 3.1 Numbering Authorities
> 
> Can we have clarification on the administrative burden referred to?

EJB: It is a well-established principle that our best (only) tool against scaling is hierarchy. I will refer to the discussions on the WG prior, when the WG decided to adopt this proposal. Summarized, the consensus was that managing a flat, 64 bit, global registry of identity was not scalable. The nearest example of a scaled, "global" identifier was MAC addressing, which used hierarchy in the form of a manufacturer id. The ipn update takes a similar approach.

> The concept of Numbering Authorities also suggests the concept of
> interconnection arrangements, perhaps dynamic, between Numbering
> Authorities.  

EJB: I disagree. Section 3.1 says "Each NA is responsible for ensuring that any Node Numbers it allocates are unique. However, Node Numbers assigned by other NAs do not otherwise need to be coordinated or synchronized." Recall - node numbers (or numbering authority + node numbers) are identifiers. Not addresses. Implementers may, at their own risk, use identifiers as addresses, but to assign any meaning other than identification to them is an abuse of the concept. This perspective has been part of the ipn URI concept since its inception.

> Section 4.2
> 
> Note there is no Section 4.2.5.3 in RFC 9171.  This is puzzling, as it is not April
> 1 yet.

EJB: Yes, I have noted several typos as well in this document.

> The draft seems to imply that "Node ID" = "EID".  4.2.5.1 of 9171 defines EIDs
> as URIs having this structure: < scheme name > : < scheme-specific part >
> Since we are referring to the ipn scheme, < scheme-specific part > is
> assumed to be ipn, but as written, the draft could refer to dtn scheme EIDs
> as well.

EJB: I'm not sure I understand this read. Section 4.2 specifically mentions "ipn EIDs." The term ipn EID is defined earlier: An ipn URI used as a BPv7 or BPv6 EID is termed an "ipn EID."

> RFC 9171 Section 4.2.5.1.2 (The ipn URI Scheme) states:
> 
>     An ipn-scheme endpoint ID for which service-nbr is zero MAY identify
>     the administrative endpoint for the node identified by node-nbr, and
>     as such may serve as a node ID.  No ipn-scheme endpoint ID for which
>     service-nbr is non-zero may do so.
> 
> Notwithstanding the former, I am reasonably sure that in implementations,
> we do not want to populate Node Id fields inclusive of the < scheme name >
> component, nor the service-nbr component of the <scheme-specific part>.
> As such, it is most correct to say that for the ipn scheme, the Node ID can be
> implied from the node-nbr component of the ipn-hier-part component of
> the administrative endpoint EID, which itself is a conformant URI.

EJB: Rick and I went back and forth on this. I agree with you that your read makes more intuitive sense. BUT...that would involve rewriting the concept of NodeID in 9171, which is not the intent of the ipn URI update. As stated in 9171, the NodeID is expressed as an EID. But, happy to be misreading that.  Perhaps Scott Burleigh can chime in here.

> Draft section 4.4.1 seems to directly contradict draft section 4.2.
> The latter would allow any EID to be a Node ID, while RFC 9171 and section
> 4.4.1, reiteratively, strictly prohibit use of non-zero service-nbr values for
> node identification.

EJB: Any ipn EID can be used for node identification. Non-zero service numbers cannot identify the administrative endpoint. The administrative endpoint != the only NodeId. From 9171 Section 4.2.5.2: The EID of any singleton endpoint is allowed to serve as a "node ID" identifying the node that is the sole member of that endpoint. So, ipn:100.1 *can* be a NodeID but *cannot* be an administrative endpoint.

EJB: This is an important point - RFC9171 requires every bundle source to be a NodeID. If the only NodeId were the administrative endpoint, then every bundle every created could only be sourced from a .0 service. No one wants that.

 
> Section 6.1 Scheme Compatibility
> 
> IMHO, this forces existing implementations to forward port to maintain
> network wide interoperability, and existing networks to implement these
> changes.  Will this not break legacy assets which are still in good working
> order, but not able to be updated for a variety of reasonably good reasons?

EJB: I could ask the same question about a variety of work ongoing in the IETF or CCSDS. What about BPSec support? Or new security contexts? Or new extension block types? The ipn URI scheme update, by being backwards compatible has far fewer implementation issues. Recall, the 2-element scheme-specific encoding remains universal. Painfully inefficient in some situations, but universal.


> Correct me if I am wrong, but as worded, there can be exactly 16 blocks of
> authorities that can be allocated in total, if the first number of the block
> must be a power of 2?  

EJB: Table 1 of Section 3.1.3 provides an example of how we would have more than 16 blocks of authorities.


> I make this point to
> illustrate that great care must be taken in IANA consideration sections,
> particularly if you wish some advanced functionality to be encoded in the
> numbering method.  I suspect that first-come/first-served is inappropriate
> for this particular

EJB: Heartily agree here, and think it should be Expert Review at all times.


> Section 8.2
> 
> I believe there are 6 other private sector stakeholders who are not
> represented in this list.  Please consult the registry at IANA:
> https://www.iana.org/assignments/bundle/bundle.xhtml#cbhe-node-
> numbers

EJB: Agreed. The intent is the same, which is to migrate the IANA registry over as it exists at the time of migration. Again, the point of the Default Numbering Authority is to maintain backward compatibility. 
 

> Section 8.3
> 
> I think this reorganization is a bit light on the opportunity for standard
> side services, and heavy on the private use side services, particularly
> when keeping a 64 bit service-nbr.

EJB:  Very open to discussion on how to rebalance these ranges.


> 
> On Mon, 13 Mar 2023, internet-drafts@ietf.org wrote:
> 
> >
> > A New Internet-Draft is available from the on-line Internet-Drafts
> > directories. This Internet-Draft is a work item of the Delay/Disruption
> > Tolerant Networking (DTN) WG of the IETF.
> >
> >   Title           : Update to the ipn URI scheme
> >   Authors         : Rick Taylor
> >                     Ed Birrane
> >   Filename        : draft-ietf-dtn-ipn-update-01.txt
> >   Pages           : 26
> >   Date            : 2023-03-13
> >
> > Abstract:
> >   This document updates both the specification of the ipn URI scheme
> >   previously defined in [RFC7116] and the rules for encoding of these
> >   URIs when used as an Endpoint Identifier (EID) in Bundle Protocol
> >   Version 7 (BPv7) as defined in [RFC9171].  These updates update and
> >   clarify the structure and behavior of the ipn URI scheme, define
> >   encodings of ipn scheme URIs, and establish the registries necessary
> >   to manage this scheme.
> >
> > The IETF datatracker status page for this Internet-Draft is:
> > https://datatracker.ietf.org/doc/draft-ietf-dtn-ipn-update/
> >
> > There is also an HTML version available at:
> > https://www.ietf.org/archive/id/draft-ietf-dtn-ipn-update-01.html
> >
> > A diff from the previous version is available at:
> > https://author-tools.ietf.org/iddiff?url2=draft-ietf-dtn-ipn-update-01
> >
> > Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
> >
> >
> > _______________________________________________
> > dtn mailing list
> > dtn@ietf.org
> > https://www.ietf.org/mailman/listinfo/dtn
> >
> 
> _______________________________________________
> dtn mailing list
> dtn@ietf.org
> https://www.ietf.org/mailman/listinfo/dtn