Re: I-D Action: draft-ietf-httpbis-connect-tcp-02.txt

Ben Schwartz <bemasc@meta.com> Thu, 07 December 2023 20:42 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=ietf.org@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BE3AC14F686 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 7 Dec 2023 12:42:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.755
X-Spam-Level:
X-Spam-Status: No, score=-7.755 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=meta.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WHhuXpKFzYne for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Thu, 7 Dec 2023 12:42:38 -0800 (PST)
Received: from lyra.w3.org (lyra.w3.org [128.30.52.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A453C151089 for <httpbisa-archive-bis2Juki@ietf.org>; Thu, 7 Dec 2023 12:42:37 -0800 (PST)
Received: from lists by lyra.w3.org with local (Exim 4.94.2) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1rBLCW-005msI-8k for ietf-http-wg-dist@listhub.w3.org; Thu, 07 Dec 2023 20:42:28 +0000
Resent-Date: Thu, 07 Dec 2023 20:42:28 +0000
Resent-Message-Id: <E1rBLCW-005msI-8k@lyra.w3.org>
Received: from titan.w3.org ([128.30.52.76]) by lyra.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <prvs=5705335b85=bemasc@meta.com>) id 1rBLCT-005mrB-37 for ietf-http-wg@listhub.w3.org; Thu, 07 Dec 2023 20:42:25 +0000
Received: from mx0a-00082601.pphosted.com ([67.231.145.42]) by titan.w3.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <prvs=5705335b85=bemasc@meta.com>) id 1rBLCQ-008pDN-Jx for ietf-http-wg@w3.org; Thu, 07 Dec 2023 20:42:24 +0000
Received: from pps.filterd (m0044012.ppops.net [127.0.0.1]) by mx0a-00082601.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 3B7Gfdxv019545; Thu, 7 Dec 2023 12:42:17 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meta.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=s2048-2021-q4; bh=99EegSXAvwGhyqRDY0aEVaqdGVL62K+oPFrT5hVB2mA=; b=a1TjtPeDAMjLoeWCjHMFakcCouTIU4EmBOSHVb1E7bD56N0wzDgYkySEyDHEdsy5Ypek 0IhtIKRAqGZc8vf/7DgeLODsu+CDY/793ygjIdqNcOrmLpdSvlqj9m6KJvOcdwMsvSqA 43GawY1ckLOBQmkNYEwJ8IRmccwphrWF1K4r2GAmmASe8DlHZcHgR8OusA7/89VOXotC bXM723P93QF6iVXRUhS+b6nUv5r095S53vqLULeFwpMOKt+f3rCLslQpnK8ilNz5hgbP Swj+uMFowc669dxUfEQAWEEy/6+KEpP51TxTQUyBtsBgBQBgN382A4+gY4BFHWOTriTc Pg==
Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2169.outbound.protection.outlook.com [104.47.58.169]) by mx0a-00082601.pphosted.com (PPS) with ESMTPS id 3utd1j88pq-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 07 Dec 2023 12:42:17 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RQ7hBx6Z1NHKpqvYDebDYw6Anzet2DAxHUZJpF9lhbQ7/dF6BKKwLDR+rJNIQQUmvsGQ79Jxadex9ihtd3mIdbrJk1eG0TvPNBFLyeAaTM6e4m58vYeJFajQLu1pKCqJp/yxuRALHEY2DdyAoXtiK6xUE8oEu/0H9VpExE6UHu58+J20zOk+L8WowmnySzAJ0m+U6LTvkhTYPxRjsYypmwm39uTgQIXsGQx0QoPaU9QsVZf7ygmh26HjXTMF3FH8GglUAbTihj/WwwTniRSPzDinBbG0FGb55mimg5BDGdeYKGkw4qBT3gU4Sbj1wp+RFXNeJIsW46I/8e0DFoGRMw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CUnBLkZwfzaNA7w3ljaIl8loZXvUBMYryemLm4E8fxM=; b=TRyWcChHIwwQi48tUi4eRELHuXjd9GcRTl7+gkq7isSfFALOiqHr986eUUzs5uloPb64egOKO6njxIkdDabphobZmhWNsKY77QqKCuPtoLWgsO+F4vub3GqGbb1F97lJwpJz0IuyrzdgeiEIwdnZEsicEY5W5N5uowurUGksQCx/8/GUlgbazPYLiP/f2+AAswrw3bMbRAnP9reoYXoE4AvIH43zAAtSlAjWXOLhLml5BYSUhrMOlBCtxxj/x4bThTDeB/5NcV5ncnWso8Fyac4EuCFQSIzToWNuarv9cQ0jwA3i0gv4NlMoYsGBkvw8S7J8NmXf73w5+F7lYWg5+w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=meta.com; dmarc=pass action=none header.from=meta.com; dkim=pass header.d=meta.com; arc=none
Received: from BN8PR15MB3281.namprd15.prod.outlook.com (2603:10b6:408:aa::24) by SA1PR15MB4571.namprd15.prod.outlook.com (2603:10b6:806:19a::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7068.27; Thu, 7 Dec 2023 20:42:14 +0000
Received: from BN8PR15MB3281.namprd15.prod.outlook.com ([fe80::d54d:eea6:c930:d1e6]) by BN8PR15MB3281.namprd15.prod.outlook.com ([fe80::d54d:eea6:c930:d1e6%2]) with mapi id 15.20.7068.027; Thu, 7 Dec 2023 20:42:14 +0000
From: Ben Schwartz <bemasc@meta.com>
To: "i-d-announce@ietf.org" <i-d-announce@ietf.org>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
Thread-Topic: I-D Action: draft-ietf-httpbis-connect-tcp-02.txt
Thread-Index: AQHaKUwHZUGOyZsFBEajrrCHBVz8M7CeRfwy
Date: Thu, 07 Dec 2023 20:42:14 +0000
Message-ID: <BN8PR15MB32819B194BFA5869FC3BC8A7B38BA@BN8PR15MB3281.namprd15.prod.outlook.com>
References: <170198076638.62409.18291920171728714134@ietfa.amsl.com>
In-Reply-To: <170198076638.62409.18291920171728714134@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN8PR15MB3281:EE_|SA1PR15MB4571:EE_
x-ms-office365-filtering-correlation-id: 91abcd68-a9cf-455e-33bf-08dbf764fedd
x-fb-source: Internal
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 6WmY47AFG+hQIIH/FpOItYe/j9xkJVQdwmU0sHvzeDwtAzDWyMCmPWqDSAnAfOIAFOQQcIzkuAy48eKBhMjx+0BjhgoCidbPyrVCnzIN/UK0sAYxQqmxlUK7AsYNBI0+vobcJ5w1vozF3O+2sDbjqA8a0K/iljWoAWkhzEw+Uh/SmjW5z/9goK6FcQR7dKyzwG7+h5VSpbME3dqKnC8pCA5jjQVmYtKJjty68rE1z0j56+Ny7xKSkkovb+G9aaEhLR2/l0Z8s+aPBW81+nd9HJs04Nf/5hEfCY1InLqiWLikAxokrN5qWJ+mrOJe4VmJfLCK5VFqhx1el3B7vcmmhilMYhnfZxqQMryrCiSEh1tTg6PV3NWvFYeDs11NX5GkR3oztQwb7RYn6KRV6gOuZKJau7X3V1YLwWsWQAozw/+nvQXRSB/u40STvwmtnu+ua4QmJIuDq+HkAo696CkK6BeJ0Df9wfTtPtC+8KYfkxjfXS5srTFPWU1Vo1U4m0hVhAvIOmXyYDkjkW+Vhe9KI7ZtbGCtxOTrpWhfjMb4/ufybD8myXtOb2eRd5AmS93EcrJZ3UmiIzo4q5mu6/075pR9GaGoba3wc98cEP039EgORW158tdFZsD99TvTq4SBVH/pYITQKEA6+3h6d4FUFw==
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN8PR15MB3281.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(39860400002)(366004)(346002)(376002)(136003)(396003)(230273577357003)(230922051799003)(230173577357003)(451199024)(64100799003)(186009)(1800799012)(66946007)(66476007)(76116006)(91956017)(66446008)(66556008)(110136005)(64756008)(966005)(478600001)(71200400001)(66574015)(83380400001)(8936002)(8676002)(316002)(122000001)(9686003)(166002)(6506007)(55016003)(7696005)(53546011)(19627405001)(38100700002)(2906002)(41300700001)(33656002)(5660300002)(38070700009)(86362001)(52536014);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: KdMFq33OcxhjH4F7ALo0vVPTY79seQzb0E0oWj5vNZAnd27ljJIbSibltps4DIUNJrVnC03QUxQvvzYcgSV1mBoF8rCVcDTZriIXaZqnsZmhIsT/ZEyl+RnkeV6lBEGdCI3KMar1FlGr1fR7RvfbkNh6dxBVpbwQ2KJOWl32HUe2KsysylEzZ2/WKD+R8QjBOf0eS6TbxOI5a8BFtdOVHrO72vu4MAmCXr/zh1DyGxRfHO+ynvFkRq4gAHQCasTePqrZ/Zh6UWd1/scMl24a6O/jWCvqKfAqRkPU0xG9tYtoMJwo4hUv8YojfV3nHdNmQ3ba55g9TPGlFPSl9gUgGAwaD3hnqbcE8P1aoNJP56fuZU4ZxXOqyqSHI+T54E5K6uBwChc4070IZZcWcc73C+Wn9nuaU+Mqcs5JxOZX4hMq15Cwnz7yVkVfW2VB8bLTxVj/roMu5+oK1ZW7d8xU6+udrEQpCXfJuZ6hrBjrXlC7skGjKMB9aZKH8mP24Opi8678MXcnIYRXEdayO0fB2JbdLECXmF06WxZ7jrDU5jeieokuxAR7u8zqdp72ntYCvf9I0/7JU2Np1bMIGPEU1MkvRhVbkQ8RU5cuuAw8le/pl22B5m8SL5xSMKRt9y72SBBYqu1lbxYEXedbtdYQaSLJ6acYhlam2RlyokToms+p5C33bOFPVoueWZYDNHKgIMkNLZ0DL6gfipgfDlX8flvM447HDceSQ0sfluFNcyIVHHyAw9+yZw46/kh99KXxVbcYZDN98bfx1nqZScjOEBa2C5MqUZ2Pv/2cbjqpzLzPkeytiAuzHPp97Xz/p5zeCN0rlqjhucus7SnpOjb3vQkTpSyMQEJUC8FFlCgVjqdAMxXA8gM2fWG7Q9L+p6zCorvrUS/nPmTkCB/81I66O1SedMSjfRJ4SuBgzX+NRYN8b76uvq1dywC7J9kmmdhbkXnmZhu4eT7vqGPCwNoaR5aMoJ3OXXQZwrm2VH0YcnHsXgiJqmTDbqMSd2IGbCCCGzQa4L31Sr8V+CR+1TUsMfKEMKzXV62Qzz0ItsNoF8RaDHBgkgx9swXcEsOCWYZJ4LmcYvLf/m9EcqELN6/Lb8oCIfRpDOSJyc6ay1ltfQSYoHjP7JSaa9Z7cyBbUsEV0nTlk82v1UWU8rH5mYaYD8mHP69Z5HHM4iJMXJ8BAayrR31i1JyTfIvbmE6SFgoTgtrur/D3KzP5E0paG4Ds93o3U4QWSdUjOEP4HyVDlbszisWK+ANF8YnHMY5YEHtfwkjpCJlTVnn7mCT7p8VOiowoe08N7mWUJ1vbBmRGolN3ywUFV9jmSoxo/Nc3PVPQcIKAXTbqK9dcRo6PSeUN7TD1uAJONDqc3c/HYKo6wfBuse7TdBgcp3ASSEbPU65D0c9G13tmatk/zwtnym0LdtpTfbD5diEIzxVv/1f2NjTr96d0RUMuOy4GdpFiOydqkpLgLw4kKU4Khg0Ni+ioedVS0H13BjmfJWS6ymmwmfa25LyOCReqXf8JVJx2R9/iwLO8hREtV2CPFmFG/T7AtuTLXjuVjXpba3y90ULdPrX/t90mO8YTzfT2r7fZ35Yg
Content-Type: multipart/alternative; boundary="_000_BN8PR15MB32819B194BFA5869FC3BC8A7B38BABN8PR15MB3281namp_"
X-OriginatorOrg: meta.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN8PR15MB3281.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 91abcd68-a9cf-455e-33bf-08dbf764fedd
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Dec 2023 20:42:14.7600 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: gNibzbCTXjcOGxaBobq8+kzpJosbwwlHhl41/aebfF7tlICcVeHQy2dTV7fI6Tgm
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR15MB4571
X-Proofpoint-GUID: UCV2iceaq-tgRs1qj3hQnu6XkL3Bjh7G
X-Proofpoint-ORIG-GUID: UCV2iceaq-tgRs1qj3hQnu6XkL3Bjh7G
X-Proofpoint-UnRewURL: 12 URL's were un-rewritten
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.997,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2023-12-07_17,2023-12-07_01,2023-05-22_02
Received-SPF: pass client-ip=67.231.145.42; envelope-from=prvs=5705335b85=bemasc@meta.com; helo=mx0a-00082601.pphosted.com
X-W3C-Hub-DKIM-Status: validation passed: (address=prvs=5705335b85=bemasc@meta.com domain=meta.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1rBLCQ-008pDN-Jx 043b5e382d6b9201e340c52c619f09f3
X-Original-To: ietf-http-wg@w3.org
Subject: Re: I-D Action: draft-ietf-httpbis-connect-tcp-02.txt
Archived-At: <https://www.w3.org/mid/BN8PR15MB32819B194BFA5869FC3BC8A7B38BA@BN8PR15MB3281.namprd15.prod.outlook.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/51622
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

This version contains several small changes:

  *   A default template is registered, as requested in HTTPBIS at IETF 118.  The text says "If the client infers that classic HTTP CONNECT is not supported, it SHOULD retry the request using the registered default template".
  *   A new section discusses the use of various headers with "connect-tcp", emphasizing that this is an ordinary origin for the purposes of headers like "Alt-Svc" and "WWW-Authenticate".
  *   The Security Considerations have been filled in.
  *   The introduction text has been adjusted to avoid the thorny question of whether classic HTTP CONNECT proxies have an "origin".

Special thanks to David Schinazi and Kazuho Oku for their input on these changes.  This version resolves all outstanding Github issues filed against this draft.

--Ben Schwartz
________________________________
From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: Thursday, December 7, 2023 3:26 PM
To: i-d-announce@ietf.org <i-d-announce@ietf.org>
Cc: ietf-http-wg@w3.org <ietf-http-wg@w3.org>
Subject: I-D Action: draft-ietf-httpbis-connect-tcp-02.txt

!-------------------------------------------------------------------|
  This Message Is From an External Sender

|-------------------------------------------------------------------!

Internet-Draft draft-ietf-httpbis-connect-tcp-02.txt is now available. It is a
work item of the HTTP (HTTPBIS) WG of the IETF.

   Title:   Template-Driven HTTP CONNECT Proxying for TCP
   Author:  Benjamin M. Schwartz
   Name:    draft-ietf-httpbis-connect-tcp-02.txt
   Pages:   13
   Dates:   2023-12-07

Abstract:

   TCP proxying using HTTP CONNECT has long been part of the core HTTP
   specification.  However, this proxying functionality has several
   important deficiencies in modern HTTP environments.  This
   specification defines an alternative HTTP proxy service configuration
   for TCP connections.  This configuration is described by a URI
   Template, similar to the CONNECT-UDP and CONNECT-IP protocols.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-httpbis-connect-tcp/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-httpbis-connect-tcp-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-httpbis-connect-tcp-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts