Re: [hybi] With deflate-stream / websocket traceroute action

Andy Green <andy@warmcat.com> Fri, 25 February 2011 13:57 UTC

Return-Path: <andy.warmcat.com@googlemail.com>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B66543A69CC; Fri, 25 Feb 2011 05:57:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.562
X-Spam-Level:
X-Spam-Status: No, score=-3.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zn1dLLexbJVu; Fri, 25 Feb 2011 05:57:18 -0800 (PST)
Received: from mail-ww0-f44.google.com (mail-ww0-f44.google.com [74.125.82.44]) by core3.amsl.com (Postfix) with ESMTP id DAE453A69C7; Fri, 25 Feb 2011 05:57:17 -0800 (PST)
Received: by wwb22 with SMTP id 22so276367wwb.13 for <multiple recipients>; Fri, 25 Feb 2011 05:58:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:sender:message-id:date:from:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=2KelKs5PsUEubFuqiBY6AsJylpppPvbhsg8nKL3KlUs=; b=keIH0H9XyXGIRcg7WTFe0FnOYAK+c3z6HoeNnt6l1p3PagrjtvkxyAJ2b6KKjiPlLM 0aP1/cp1U236hQVRwNKGnWgk21G/jheZA/EzmUJZOIyCjS62pha4UTrvB1Wmpeogfq+d 8f0MfaVzzySZfbU1gx0BLyhKb+8qVh5ds5e0s=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; b=ZWLGAwqAvyVGpIL3kobKI0AKyqh6ooL/O2jr/R96GtSqpdBI5WFoRQf3gOVuZtl3ZR upMBgJMuCz8w7+g0GDVg/et1RRo7oit5Z4dYYoECX2FzzkqffYtDmj3as4slsIZGO7MT OaxqKvkjLUbn3RMlVdLy6IQqnsWEj7Cfw3lME=
Received: by 10.227.195.137 with SMTP id ec9mr2101881wbb.218.1298642289562; Fri, 25 Feb 2011 05:58:09 -0800 (PST)
Received: from otae.warmcat.com (s15404224.onlinehome-server.info [87.106.134.80]) by mx.google.com with ESMTPS id f27sm570503wbf.7.2011.02.25.05.58.08 (version=SSLv3 cipher=OTHER); Fri, 25 Feb 2011 05:58:08 -0800 (PST)
Sender: Andy Green <andy.warmcat.com@googlemail.com>
Message-ID: <4D67B56F.8090306@warmcat.com>
Date: Fri, 25 Feb 2011 13:58:07 +0000
From: Andy Green <andy@warmcat.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.13) Gecko/20101217 Fedora/3.1.7-0.39.b3pre.fc15 Thunderbird/3.1.7
MIME-Version: 1.0
To: John Tamplin <jat@google.com>
References: <OF9EDDF2DA.D45B4501-ON88257842.0027DEB4-88257842.002C3B97@playstation.sony.com> <4D6777BB.4070605@warmcat.com> <AANLkTinCzHU+qKd9oPNX_eUEFNTkoNH_hadCsGa3YSpn@mail.gmail.com>
In-Reply-To: <AANLkTinCzHU+qKd9oPNX_eUEFNTkoNH_hadCsGa3YSpn@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: hybi-bounces@ietf.org, hybi@ietf.org, Yutaka_Takeda@playstation.sony.com
Subject: Re: [hybi] With deflate-stream / websocket traceroute action
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Feb 2011 13:57:19 -0000

On 02/25/2011 01:34 PM, Somebody in the thread at some point said:

> However, requiring this would be complicate some simple intermediaries
> dramatically -- I don't know if the value gained is worth anything.

Well if it made trouble it could just be ignored and your intermediary 
is invisible to it without breaking anything.  But I guess most 
intermediaries which could consider it are going to be parsing the 
websocket stuff enough to understand the opcode anyway, it doesn't seem 
like any radical complication to do it from that basis.

>   Also, there would seem to be a problem exposing this to JS -- you
> wouldn't want hostile JS to be able to get a layout of the network
> behind the firewall.

That's why it was a MAY, just like some places filter ICMP ECHO in and out.

Some ninja intermediaries might not want to participate in a headcount 
either for their own reasons.

> What does this gain over using ICMP or UDP-based traceroute?

Well, traceroute is telling you about things that at least perform a 
routing action whereas this websocket-traceroute is telling you about 
websocket intermediaries on your path that might be meddling with your 
websocket stuff AS websocket stuff.

It's not critical but since it's only a small addition to existing 
opcodes, I thought I would describe it since adding opcodes to do it was 
mentioned.

-Andy