Re: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-14.txt

Miika Komu <miika.komu@ericsson.com> Fri, 25 November 2016 07:25 UTC

Return-Path: <miika.komu@ericsson.com>
X-Original-To: hipsec@ietfa.amsl.com
Delivered-To: hipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B63C812A228 for <hipsec@ietfa.amsl.com>; Thu, 24 Nov 2016 23:25:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.21
X-Spam-Level:
X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zafO_GWKL41a for <hipsec@ietfa.amsl.com>; Thu, 24 Nov 2016 23:24:58 -0800 (PST)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCB1D12A227 for <hipsec@ietf.org>; Thu, 24 Nov 2016 23:24:57 -0800 (PST)
X-AuditID: c1b4fb30-c294498000000c18-7a-5837e74717e4
Received: from ESESSHC017.ericsson.se (Unknown_Domain [153.88.183.69]) by (Symantec Mail Security) with SMTP id 8B.61.03096.747E7385; Fri, 25 Nov 2016 08:24:55 +0100 (CET)
Received: from ESESSMB301.ericsson.se ([169.254.1.211]) by ESESSHC017.ericsson.se ([153.88.183.69]) with mapi id 14.03.0319.002; Fri, 25 Nov 2016 08:23:42 +0100
From: Miika Komu <miika.komu@ericsson.com>
To: Robert Moskowitz <rgm@htt-consult.com>, "hipsec@ietf.org" <hipsec@ietf.org>
Thread-Topic: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-14.txt
Thread-Index: AQHSRi1W80dwUSF+TkuPjmRl48EGoqDoAfUAgADHXwCAAIN70A==
Date: Fri, 25 Nov 2016 07:23:41 +0000
Message-ID: <7110ABD9BA66454293AEE83D6D370166170C415C@ESESSMB301.ericsson.se>
References: <147997633613.2546.2113430680233289739.idtracker@ietfa.amsl.com> <a2d2e51a-03ba-8163-079d-c3cc3f255883@ericsson.com> <f82ae394-466c-10bf-8c9f-cdc56ea2db99@htt-consult.com>
In-Reply-To: <f82ae394-466c-10bf-8c9f-cdc56ea2db99@htt-consult.com>
Accept-Language: fi-FI, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [153.88.183.16]
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="SHA1"; boundary="----=_NextPart_000_0021_01D246FD.9BD8E9C0"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrGIsWRmVeSWpSXmKPExsUyM2K7q677c/MIg8Xz9S2mLprMbNGw7jOj A5PH7klN7B5LlvxkCmCK4rJJSc3JLEst0rdL4MrYvP4IU8GKXYwVPTc+sDQwbl3B2MXIySEh YCLx/v1kti5GLg4hgXWMEo8/X2aHcJYwShzedpAJpIpNQEti1Z3rzF2MHBwiAoEST07UgZjC Aj4Sf5eZgVSICPhKbNj7hAXCdpJY8GAlO4jNIqAqcfvmHXaQcl6gmnXffCGm72aU+HCghRUk zingLLFiZRxIOaOArMTKzf+YQWxmAXGJW0/mM0GcKSLx8OJpNghbVOLl43+sELaixM6z7cwg M5kFehkl2l8tAmvgFRCUODnzCcsERuFZSGbNQlY3C0kdRFG0xI27pxghbAOJ+4c6WCFsbYll C18zQ9j6Em3HVjNjiltLzPh1kA3CVpSY0v2QHcI2lXh99CPjAkbuVYyixanFSbnpRkZ6qUWZ ycXF+Xl6eaklmxiBMXpwy2+DHYwvnzseYhTgYFTi4d1gYR4hxJpYVlyZe4hRBWjOow2rLzBK seTl56UqifAyPAVK86YkVlalFuXHF5XmpBYfYpTmYFES5zVbeT9cSCA9sSQ1OzW1ILUIJsvE wSnVwKiywSvFyrpbMcljfoNXXYbvuoW76659lVu0yaHMWkpj050dV+q91i4vTEzh0J12bIK3 ztmnNz5WSW2YuL3oaW77jt3RQROKjirNiUzxnt/RvFMyNje8Z2657JQ2q6gXSToHKqfuSV5q 2Hl4qsS3x32TE02Cz1x8sjtwjdK7vMZ5611/xxi++6jEUpyRaKjFXFScCAD3K9aA2QIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/hipsec/K6lmQCS_xM1338snCHH0z4AxcLQ>
Subject: Re: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-14.txt
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hipsec/>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Nov 2016 07:25:03 -0000

Hi Robert,

 

yes, it is a typo. All nits are welcome! I will fix this in the next
version.

 

P.S. I plan to redundantly include the missing ICE prioritization formulas
in the next version.

 

From: Robert Moskowitz [mailto:rgm@htt-consult.com] 
Sent: Friday, November 25, 2016 2:31 AM
To: Miika Komu <miika.komu@ericsson.com>; hipsec@ietf.org
Subject: Re: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-14.txt

 

What is 'co called' in this text:

o  In ICE, the conflict when two communicating end-points take the
      same controlling role is solved using random values (co called
      tie-breaker value).  In this protocol, the conflict is solved by
      the standard HIP base exchange procedure, where the host with the
      "larger" HIT switches to Responder role, thus changing also to
      controlled role.


Should it be 'so called'?

I will continue reading...

Bob

On 11/24/2016 05:37 AM, Miika Komu wrote:

Hi, 

I read the latest version of the ICE specs. Based on this, I included more
details on ICE processing to the HIP NAT traversal draft. A quick summary of
the changes: 

* Introduced more details from ice-bis draft 
  * New terminology 
  * Aligned connectivity check procedure to match with ICE (3-way check is
now 4-way) 
  * Ta minimum value is now 5 ms (according to ICE bis) 
  * 4.9 Handoff: first update HIP relay to in order learn new server
reflexive locators 
  * New sections: 
     * 4.6.3.  Rules for Concluding Connectivity Checks 
     * 6.6.  Amplification attacks (new section) 
     * 6.7.  Attacks against Connectivity Checks and Candidate Gathering 
     * Appendix C.  Differences to ICE 
     * Appendix D.  Differences to Base Exchange and UPDATE procedures 
  * 7. IANA Considerations: added UNSAF considerations (references ICE) 
* updated references (some drafts are now RFCs) 

Feedback is welcome! For people already familiar with HIP, I'd recommend
reading "the diff to normal HIP" in section
https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-14#appendix-
D

On 11/24/2016 10:32 AM, internet-drafts@ietf.org
<mailto:internet-drafts@ietf.org>  wrote: 




A New Internet-Draft is available from the on-line Internet-Drafts
directories. 
This draft is a work item of the Host Identity Protocol of the IETF. 

        Title           : Native NAT Traversal Mode for the Host Identity
Protocol 
        Authors         : Ari Keranen 
                          Jan Melén 
                          Miika Komu 
    Filename        : draft-ietf-hip-native-nat-traversal-14.txt 
    Pages           : 51 
    Date            : 2016-11-24 

Abstract: 
   This document specifies a new Network Address Translator (NAT) 
   traversal mode for the Host Identity Protocol (HIP).  The new mode is 
   based on the Interactive Connectivity Establishment (ICE) methodology 
   and UDP encapsulation of data and signaling traffic.  The main 
   difference from the previously specified modes is the use of HIP 
   messages for all NAT traversal procedures. 


The IETF datatracker status page for this draft is: 
https://datatracker.ietf.org/doc/draft-ietf-hip-native-nat-traversal/ 

There's also a htmlized version available at: 
https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-14 

A diff from the previous version is available at: 
https://www.ietf.org/rfcdiff?url2=draft-ietf-hip-native-nat-traversal-14 


Please note that it may take a couple of minutes from the time of submission

until the htmlized version and diff are available at tools.ietf.org. 

Internet-Drafts are also available by anonymous FTP at: 
ftp://ftp.ietf.org/internet-drafts/ 

_______________________________________________ 
Hipsec mailing list 
Hipsec@ietf.org <mailto:Hipsec@ietf.org>  
https://www.ietf.org/mailman/listinfo/hipsec 







_______________________________________________
Hipsec mailing list
Hipsec@ietf.org <mailto:Hipsec@ietf.org> 
https://www.ietf.org/mailman/listinfo/hipsec