Re: [hybi] Last Call: <draft-ietf-hybi-thewebsocketprotocol-10.txt>

Martin Rex <mrex@sap.com> Fri, 29 July 2011 02:38 UTC

Return-Path: <mrex@sap.com>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D84521F8AAC; Thu, 28 Jul 2011 19:38:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.935
X-Spam-Level:
X-Spam-Status: No, score=-9.935 tagged_above=-999 required=5 tests=[AWL=0.314, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AQcz8QH+cXFe; Thu, 28 Jul 2011 19:38:51 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id CD29321F886C; Thu, 28 Jul 2011 19:38:50 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id p6T2cDxV004245 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 29 Jul 2011 04:38:13 +0200 (MEST)
From: Martin Rex <mrex@sap.com>
Message-Id: <201107290238.p6T2cCLu021118@fs4113.wdf.sap.corp>
To: marka@isc.org
Date: Fri, 29 Jul 2011 04:38:12 +0200
In-Reply-To: <20110728020118.647E1123AED8@drugs.dv.isc.org> from "Mark Andrews" at Jul 28, 11 12:01:18 pm
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-SAP: out
X-Mailman-Approved-At: Thu, 28 Jul 2011 22:12:04 -0700
Cc: hybi@ietf.org, ietf@ietf.org, mrex@sap.com
Subject: Re: [hybi] Last Call: <draft-ietf-hybi-thewebsocketprotocol-10.txt>
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jul 2011 02:38:52 -0000

Mark Andrews wrote:
> 
> Martin Rex writes:
> >
> > Mark Andrews wrote:
> > > 
> > > More correctly it is try the first address and if that doesn't
> > > connect in a short period (150...250ms) start a second connection
> > > to the next address while continuing with the first.  If you have
> > > more that 2 address you do something similar for the next one
> > 
> > Happy eyeballs means that a clients reaction to congestion is
> > to perform an DoS attack, flood the network with additional
> > connection requests and hammer the server with many additional
> > half-open connections that will never actually get used.
> 
> It is not a DoS attack.  The client is almost certainly going to
> make those connection attempts anyway if the path is congested
> enough to cause the first connection attempt to fail.  The only
> difference is the application gives up in 30 seconds rather than
> 60 or 90 seconds by doing the attempts serially.

150...250ms  ?!

For a satellite link you already have started 3 parallel connects
in non-congested(!) situations. 

just some random IPv4 pings from my office (in germany)
_without_congestion_:

   ping  www.asus.com.tw            300-380ms
   ping  south-america.pool.ntp.org 280-370ms
   ping  oceania.pool.ntp.org       340-420ms
   ping  www.eff.org                160-170ms
   ping  www.ietf79.cn              330-450ms
   ping  www.ietf76.jp              270-370ms

So your approach is already hurting the network without congestion!

-Martin