Re: [Ice] Peter's review of ICEbis - removal of lower-priority candidate pairs (5.1.2.5)

Peter Thatcher <pthatcher@google.com> Thu, 01 June 2017 01:13 UTC

Return-Path: <pthatcher@google.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D20271294A4 for <ice@ietfa.amsl.com>; Wed, 31 May 2017 18:13:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OflXMELNLEzs for <ice@ietfa.amsl.com>; Wed, 31 May 2017 18:13:33 -0700 (PDT)
Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DCB912948F for <ice@ietf.org>; Wed, 31 May 2017 18:13:33 -0700 (PDT)
Received: by mail-oi0-x22b.google.com with SMTP id h4so36883760oib.3 for <ice@ietf.org>; Wed, 31 May 2017 18:13:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=4zeHvOStASsoewEbEMMRy5TO4ZUJ9KH1UumBYClEQDs=; b=I1vpydRiwNo3FiabPRV6FzHWnrJ0P1Z6wJcAwUPxj/qPNtplIojCZWaXZT0mnd9x26 VbjJFvRWmzmKz1JQ23VWsFnunIhqOzJN5kb2iqumdiC/8KHaMVjVLXNyWztiOsMHMaks i2RXph4jzyEhO3Tm87Ji+CO/9sq6R0M4rBbipXuhH3TJSdo9l9sGFZdPongtzP0lTPM4 jg8jzQSPkSwArXQW/tYRYHAfe30NiMpNZRQRo1SBcKdspDWAbVZwpwF8lDUQVj/LvisD V/YELv4/axVSEYwOq3pwg3YIq/YU7Vd4yMu4AGtkdBRVQuDJ4X24+CJGRLGzFaGfFYrp AzTA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=4zeHvOStASsoewEbEMMRy5TO4ZUJ9KH1UumBYClEQDs=; b=d3UYoTFxdBYuI2yqdewzoSUTGR9Qq7fmbTdmS9zQLmMoDyYYDMUxmtKLzNNnpq5urT bt5JxTeEJD/hl3Ake32CzRyMIIalqz5OTmXRPUONZ9b8yBo+ZCf3O6jkqyPjFBNRYmvZ ATJ2O5f0X6ymG1fPPbYVsmWoNjP9NH2xGQi0o0x2mWEjDIly1axmMTxqWSvPerpQ7pzS PWjAgeCjJtukPEhFB84PR8LMypBiAjbVyV99pURs1Ye2bQtspazN9Ial+0uHv7ai1SgD L174zbHNKwb5GrYiK2F2EfmpiaEml2wkmvzPzRLeJoUsZzv4wKHlSqxjTzF8cGSWsoa0 2Lpg==
X-Gm-Message-State: AODbwcDMrdE9ex7QszcEkInoQ4pXOQVyqyu9SWFK8oIy24YQmv+3UuOZ pBOyL97AafG1Eealae808XrcBAeDkP9C
X-Received: by 10.202.82.23 with SMTP id g23mr11551239oib.217.1496279612587; Wed, 31 May 2017 18:13:32 -0700 (PDT)
MIME-Version: 1.0
References: <D5519609.1D367%christer.holmberg@ericsson.com>
In-Reply-To: <D5519609.1D367%christer.holmberg@ericsson.com>
From: Peter Thatcher <pthatcher@google.com>
Date: Thu, 01 Jun 2017 01:13:22 +0000
Message-ID: <CAJrXDUFYtYRdy+bh8FpynK1gfZ4_j0ZLW2RaVV4bKsJZoe4Hfg@mail.gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>, "ice@ietf.org" <ice@ietf.org>
Content-Type: multipart/alternative; boundary="001a113d77cccb5b2a0550dbbe9e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/C3N1-_PH-LOD7VRO1E3JGdnnOIs>
Subject: Re: [Ice] Peter's review of ICEbis - removal of lower-priority candidate pairs (5.1.2.5)
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jun 2017 01:13:35 -0000

So basically add that it should be evenly distributed to avoid starving one
check list?

That sounds good to me.  Just make sure you don't have 101 check lists :).

On Sun, May 28, 2017 at 11:13 PM Christer Holmberg <
christer.holmberg@ericsson.com> wrote:

> Hi,
>
> > - If we remove lower-priority candidate pairs across check lists, what
> >happens if a certain check list is starved because all of its candidate
> >pairs are lower priority?
> > One option might be to say the limit is per check list.  Another is to
> >recognise that it might happen but live with it.
>
> My understanding was always that the limit is per check list, but I agree
> it may not be very clear.
>
> Perhaps we could modify the text as below:
>
>    In order to limit the attacks described in Section 15.4.1, an agent
>    MUST limit the total number of connectivity checks the agent performs
>    across all CHECK LISTs to a specific value, and this value MUST be
>    configurable. A default of 100 is RECOMMENDED.  This limit is
>    enforced by, within each CHECK LIST, discarding the lower-priority
> candidate
>    pairs of that CHECK LIST, until there are less than a total of 100
> candidate
>    pairs in the CHECK LIST SET. The discarding of candidate pairs SHOULD be
>    distributed equally throughout the CHECK LISTs in the CHECK LIST SET.
>
>
> Regards,
>
> Christer
>
>
>