HTTP Partial POST Replay

Alan Frindell <afrind@fb.com> Fri, 28 June 2019 18:31 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91E06120806 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Fri, 28 Jun 2019 11:31:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.749
X-Spam-Level:
X-Spam-Status: No, score=-2.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fb.com header.b=kAul4Bxf; dkim=pass (1024-bit key) header.d=fb.onmicrosoft.com header.b=N9e9Py6o
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pRwDdCJPNBch for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Fri, 28 Jun 2019 11:31:46 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [IPv6:2603:400a:ffff:804:801e:34:0:38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65D951207D5 for <httpbisa-archive-bis2Juki@lists.ietf.org>; Fri, 28 Jun 2019 11:31:46 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.89) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1hgvcK-0005lH-NY for ietf-http-wg-dist@listhub.w3.org; Fri, 28 Jun 2019 18:29:00 +0000
Resent-Date: Fri, 28 Jun 2019 18:29:00 +0000
Resent-Message-Id: <E1hgvcK-0005lH-NY@frink.w3.org>
Received: from uranus.w3.org ([128.30.52.58]) by frink.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <prvs=2082d4b706=afrind@fb.com>) id 1hgvcG-0005kQ-Ow for ietf-http-wg@listhub.w3.org; Fri, 28 Jun 2019 18:28:56 +0000
Received: from www-data by uranus.w3.org with local (Exim 4.89) (envelope-from <prvs=2082d4b706=afrind@fb.com>) id 1hgvcG-0000ip-HF for ietf-http-wg@listhub.w3.org; Fri, 28 Jun 2019 18:28:56 +0000
Received: from titan.w3.org ([2603:400a:ffff:804:801e:34:0:4c]) by frink.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <prvs=2082d4b706=afrind@fb.com>) id 1hgvE3-00065r-7K for ietf-http-wg@listhub.w3.org; Fri, 28 Jun 2019 18:03:55 +0000
Received: from mx0b-00082601.pphosted.com ([67.231.153.30] helo=mx0a-00082601.pphosted.com) by titan.w3.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <prvs=2082d4b706=afrind@fb.com>) id 1hgvDq-0002BP-JQ for ietf-http-wg@w3.org; Fri, 28 Jun 2019 18:03:54 +0000
Received: from pps.filterd (m0089730.ppops.net [127.0.0.1]) by m0089730.ppops.net (8.16.0.27/8.16.0.27) with SMTP id x5SHs7fj023596 for <ietf-http-wg@w3.org>; Fri, 28 Jun 2019 11:03:17 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.com; h=from : to : subject : date : message-id : content-type : mime-version; s=facebook; bh=yfXs7VTKu54IYBldkYJumMFnJ0uoiDU6db40MAsRnsY=; b=kAul4BxfgLAKpwJCyRYhoGieg6x7iV77D1n/qxTTF9ci5o5s5MfZuBIj1olajhmA2XJ+ 3K+W1CVIYcdemXpKaDcTqfp8WcbXaZ4nNqYhUTaLTY8E0bRQR66fOjilJDDwbMMihu1r 63h9tfhoZvG0eIYliVNX3ip52nMbqlw8M2E=
Received: from maileast.thefacebook.com ([163.114.130.16]) by m0089730.ppops.net with ESMTP id 2tdqm4r1wy-7 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for <ietf-http-wg@w3.org>; Fri, 28 Jun 2019 11:03:17 -0700
Received: from ash-exhub201.TheFacebook.com (2620:10d:c0a8:83::7) by ash-exhub201.TheFacebook.com (2620:10d:c0a8:83::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Fri, 28 Jun 2019 11:02:56 -0700
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (100.104.31.183) by o365-in.thefacebook.com (100.104.36.101) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Fri, 28 Jun 2019 11:02:56 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fb.onmicrosoft.com; s=selector1-fb-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yfXs7VTKu54IYBldkYJumMFnJ0uoiDU6db40MAsRnsY=; b=N9e9Py6oJsm9pCL0hb8prx7rTamLaSmvsio8dCoIM9bmazR7iNrRoDAX2977jloxjZf8JV3d/hB1uk58mihwlLTxM8iZEXoxsljd017HfEvsQg3IqT0q3PrInLxbAtLklOZP68BYS3s9bXDa01afK7nc9TijYMy/pzpm5xZ26N8=
Received: from MWHPR15MB1181.namprd15.prod.outlook.com (10.175.9.8) by MWHPR15MB1488.namprd15.prod.outlook.com (10.173.235.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2032.20; Fri, 28 Jun 2019 18:02:55 +0000
Received: from MWHPR15MB1181.namprd15.prod.outlook.com ([fe80::e9e3:7a6d:bb46:4e15]) by MWHPR15MB1181.namprd15.prod.outlook.com ([fe80::e9e3:7a6d:bb46:4e15%6]) with mapi id 15.20.2008.018; Fri, 28 Jun 2019 18:02:55 +0000
From: Alan Frindell <afrind@fb.com>
To: "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
Thread-Topic: HTTP Partial POST Replay
Thread-Index: AQHVLdu2Q7k3G2uA3Eid3uyhFbvcFQ==
Date: Fri, 28 Jun 2019 18:02:55 +0000
Message-ID: <BCDF2644-1D6A-40FF-9AF7-7FA26A57E3A9@fb.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1a.0.190609
x-originating-ip: [2620:10d:c090:200::3:2397]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 131dd214-784a-4fbb-143b-08d6fbf2d893
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:MWHPR15MB1488;
x-ms-traffictypediagnostic: MWHPR15MB1488:
x-ms-exchange-purlcount: 3
x-microsoft-antispam-prvs: <MWHPR15MB1488C912396263A87DEF7AB2A7FC0@MWHPR15MB1488.namprd15.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 00826B6158
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(376002)(346002)(39860400002)(366004)(396003)(189003)(199004)(36756003)(71190400001)(66946007)(2616005)(476003)(256004)(2906002)(486006)(64756008)(71200400001)(99286004)(6916009)(25786009)(5660300002)(86362001)(66556008)(66446008)(14444005)(66476007)(3480700005)(73956011)(76116006)(478600001)(6116002)(4744005)(46003)(6506007)(68736007)(33656002)(102836004)(6486002)(2351001)(6436002)(53936002)(6512007)(5640700003)(6306002)(54896002)(236005)(2501003)(81166006)(81156014)(8936002)(8676002)(14454004)(606006)(7736002)(966005)(316002)(186003)(58126008); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR15MB1488; H:MWHPR15MB1181.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: fb.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: l7FUae8kPyWRuH2PhipKSSj4uZPoFXBc0AlywG+vF/MzstcjC1ev2IS1y8cJ5unx18MdfneMcIjZbMzibkSJ9n3k/Ufmd0vs+vIIJvi7KWDFQE4eeLB3E6qlhVTaLW7JpUafxZ3i/eZCPdTZWJ0v9NzR1cycUnhRNRBn8oscZZNhpcnAxBPkQASinf2USlULaRHoGZGY/o3W6DjdZaKxbOA0p7yzgtqTaNbNYGliQS01hG+ryD4Mt8R9gr/LaeboMkzaFoXKnxk2o2bf1E7v+a0q487Axcs+WdJ+l8WW5MQC224tvFnroqE4REfQP9fDfzrJLYxmE00pGynV1aPuS4iZ1qpgHSXPZpsDDUel33Iw6vk+uQquV4f0z9z6VP4rhJx9mr1eCAitzdt6sySUpzLZCTdFCnR6FbIi91SmYjs=
Content-Type: multipart/alternative; boundary="_000_BCDF26441D6A40FF9AF77FA26A57E3A9fbcom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 131dd214-784a-4fbb-143b-08d6fbf2d893
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jun 2019 18:02:55.2587 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: afrind@fb.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR15MB1488
X-OriginatorOrg: fb.com
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-06-28_08:, , signatures=0
X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=563 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1906280204
X-FB-Internal: deliver
Received-SPF: pass client-ip=67.231.153.30; envelope-from=prvs=2082d4b706=afrind@fb.com; helo=mx0a-00082601.pphosted.com
X-W3C-Hub-Spam-Status: No, score=-4.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, KHOP_DYNAMIC=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: titan.w3.org 1hgvDq-0002BP-JQ 38f64e6f20e27b6de1b9cb5b352e3a98
X-caa-id: 131761df7f
X-Original-To: ietf-http-wg@w3.org
Subject: HTTP Partial POST Replay
Archived-At: <https://www.w3.org/mid/BCDF2644-1D6A-40FF-9AF7-7FA26A57E3A9@fb.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/36734
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Hi, I submitted an individual draft describing our work on HTTP Partial POST Replay.  I initially presented this work at the HTTP Workshop in April.

https://datatracker.ietf.org/doc/draft-frindell-httpbis-partial-post-replay/

The TL;DR is that when a webserver behind a cooperating intermediary wants to shut down but has received only part of a POST request, it can return that request in the response, and the intermediary will pick a different server to handle it.  This process is transparent to the client.

Any comments, questions or other feedback welcome!

Thanks

-Alan