Re: [icnrg] Review of draft-irtf-icnrg-icntraceroute

Spyridon Mastorakis <smastorakis@unomaha.edu> Fri, 26 August 2022 02:43 UTC

Return-Path: <prvs=523705693a=smastorakis@unomaha.edu>
X-Original-To: icnrg@ietfa.amsl.com
Delivered-To: icnrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A716C1524C7 for <icnrg@ietfa.amsl.com>; Thu, 25 Aug 2022 19:43:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=unomaha.edu header.b=C9PvJvwd; dkim=pass (1024-bit key) header.d=unomaha.edu header.b=HPw7cWa1
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vnwjlIb5zOdN for <icnrg@ietfa.amsl.com>; Thu, 25 Aug 2022 19:43:43 -0700 (PDT)
Received: from mx0a-00246402.pphosted.com (mx0a-00246402.pphosted.com [148.163.147.197]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DD06C1522C9 for <icnrg@irtf.org>; Thu, 25 Aug 2022 19:43:41 -0700 (PDT)
Received: from pps.filterd (m0136268.ppops.net [127.0.0.1]) by mx0a-00246402.pphosted.com (8.17.1.5/8.17.1.5) with ESMTP id 27PMnOlQ024974; Thu, 25 Aug 2022 21:43:35 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=unomaha.edu; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=pppod; bh=VuWLq1pfNeXHNddGhz0A3+7GnXozpk7OZ8E73Z/tNRc=; b=C9PvJvwdo89Hdzq42WXuYq6Gac+Bp5aoIWq6CA1xNT7eYaKGBqEcfjhfh2zSUZJQNFhi hUpjagIjXN5s4HGvIOefnflGKikZrXxT1UsxFTlL1S90Xz4pfquLqlphtlL2pr8bJ87G 18uq8uD1d0v/0cj9nnA/+NMVKqE7U+xBGQwIX/sHqW5gnPw7DQwz9ROfmv6pwWZglMI2 MFCUccezYmFT5ho3lvSbWWE8pG7r5BPTTUVK2cuqL2jXAChTxTCdjjFxLCkZL/V+qias RihqtsFBt019YKusJVmpr7DalKO/VZAXw8q9GVoXemWW9ouDp0M4YJfnPs5sUniTQiao GA==
Received: from nam10-dm6-obe.outbound.protection.outlook.com (mail-dm6nam10lp2102.outbound.protection.outlook.com [104.47.58.102]) by mx0a-00246402.pphosted.com (PPS) with ESMTPS id 3j6j7cgh3w-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 25 Aug 2022 21:43:35 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NYlQ1ewx2m/ZopkXVan6lXrMGZCeHtwrSsQ3mIYJNImu7jS7yPUSx9zRarQ8G/im4ml7k6txVQiwwAzkZGL3ZiailtS9ZefFghq7lgPBLkNidBbLgVbO//ccTrCfyFkXC6Jrk163+ZFCvVqJ76OtLQGHDrUCecm/hGUP9qXGb4E/f5NcuPGac7SrpVThgn/WFGNTQaUPvuBlCu44ng3Tjyl34l+uHcEd/s23Bc+hu4dRU1fkAOUZw0fSNZ5nXd5GwdwUbXPmB7rexNEZRPTeebOR1MkVvja4Jj+MuV/7HmBi9I886Kr6XIA0Nxdo6pZKmNm8FdAX1GWwzq6VRVrVxg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VuWLq1pfNeXHNddGhz0A3+7GnXozpk7OZ8E73Z/tNRc=; b=KTAe2r6fhYfkMy9lqb1DxuF/C9vE9bERP4l3jMhhasngu3h9uJkNoX9HBW1FeED72E1i4EJwe/oQNRqQDWbcMQSOPNEM810SfRDHC0ZwkaxvE9y6dkMIokwvhP6XbIQxTxJC7kDDQAHvbWCRZGatXN4jWx3XOih3nao5RXxQja5wpqZmJSrygWS9DdA90DPYR8hxR/89a7ZOb5M2uoJTWiemoBcyPkZauTUaJ92+5iCWWcM+gSM3fzero12slDR44Si0imMvYzIVS+QkgmxgkW7U2xASUfC5mB47uGuU5IKILJBff7MBIVxCiS/2X4jBlPqIYwvIjvHFfuip94/67A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=unomaha.edu; dmarc=pass action=none header.from=unomaha.edu; dkim=pass header.d=unomaha.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=unomaha.edu; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VuWLq1pfNeXHNddGhz0A3+7GnXozpk7OZ8E73Z/tNRc=; b=HPw7cWa1QMsLSKOZ3K9pwY3YzJW44C8ziJ5VaiaMQV22tCJHNWeFPgosG5y5wKgC1vmWPF/xOHVqvW4Ul5EiYn139FcaF/zruynvWP33uxZ57OsA2ISa87yj9HcG0zEur9j7uUd/ujbfKtXvqaObaZZbZpxYsJcybpZg15uzL4Q=
Received: from BYAPR07MB5960.namprd07.prod.outlook.com (2603:10b6:a03:134::10) by DS7PR07MB8288.namprd07.prod.outlook.com (2603:10b6:5:38f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5525.10; Fri, 26 Aug 2022 02:43:33 +0000
Received: from BYAPR07MB5960.namprd07.prod.outlook.com ([fe80::f8cb:b6bb:675b:7081]) by BYAPR07MB5960.namprd07.prod.outlook.com ([fe80::f8cb:b6bb:675b:7081%5]) with mapi id 15.20.5546.022; Fri, 26 Aug 2022 02:43:32 +0000
From: Spyridon Mastorakis <smastorakis@unomaha.edu>
To: Colin Perkins <csp@csperkins.org>
CC: Christopher Wood <caw@heapingbits.net>, "icnrg@irtf.org" <icnrg@irtf.org>
Thread-Topic: [icnrg] Review of draft-irtf-icnrg-icntraceroute
Thread-Index: AQHYgMcPVLQTKVLjhUmYSmh0Fl/orK1peB4AgD2OxQCAGY3CAIAAVQ6A
Date: Fri, 26 Aug 2022 02:43:32 +0000
Message-ID: <C4F43533-32FC-4E18-9BD7-8CA3D2886A59@unomaha.edu>
References: <DC888366-23E6-4FD0-9FD0-24AACB98BCF9@heapingbits.net> <E838CC2F-4BB2-4E9A-8946-60D913FE7306@unomaha.edu> <57C45821-5AAE-4648-B6D0-A2A6C08E537A@csperkins.org> <47CD5CAC-6ED8-4C8D-8ABD-3FA99BFB4960@csperkins.org>
In-Reply-To: <47CD5CAC-6ED8-4C8D-8ABD-3FA99BFB4960@csperkins.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3696.120.41.1.1)
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: f61788bd-cb9a-41be-5f80-08da870cc451
x-ms-traffictypediagnostic: DS7PR07MB8288:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BYAPR07MB5960.namprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(4636009)(396003)(366004)(376002)(346002)(39860400002)(136003)(786003)(6916009)(75432002)(83380400001)(53546011)(5660300002)(966005)(6486002)(2906002)(54906003)(8936002)(86362001)(33656002)(2616005)(41320700001)(186003)(36756003)(8676002)(4326008)(91956017)(38070700005)(122000001)(316002)(71200400001)(26005)(478600001)(6512007)(6506007)(41300700001)(64756008)(66476007)(66946007)(66446008)(166002)(66556008)(76116006)(38100700002)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?ZVN2eDY3c3VIU3FjeGFCQ01kN1VNVzduelJkSm9MREUrd0FORHY4WFZnRmpo?= =?utf-8?B?U09VeXNEa0Iyc3ZpVXI2TmRDd1pTcWJxVWRORm1rd0VJcU5xMjdqZWJhQm1u?= =?utf-8?B?VFk3TSt0RHVSdTgxcDViM1dvYjRGQ1kzNzAzYloxQ2dPZlZMSW40NlNLUWlM?= =?utf-8?B?RDJYQ0tJWHFhdEl0SEZqdUVmeEJjZEdtM2hUTUpFbWx3cUVUaE4xcGtxN1lT?= =?utf-8?B?ZmlpWStsWFVCNjF2cnJqbjByamVPd3NaWFFqaS9EY2s2TzVWb0pQMHBxTUdJ?= =?utf-8?B?OGl1aVRIdmt2YmpONmNMWVYwejh5RGw3dFFaMW1taFl4TEpGcHMveHI3NTZL?= =?utf-8?B?K3Viay9YaGRFOUdsTkE3UGcyVmFiVjJEQlFCVUZqL1BoRU56RjFCamxrQTl3?= =?utf-8?B?cVpnMmpDblNGeE9rVFVtTUhrc3pLZmtQM0xCZGorcHFxZHRoSFljOVgyeG1r?= =?utf-8?B?NUV6bzl3WlNZaUQvMDhwVDJ1V3lxa3A0UTB6TVBLVGUrdkp1Z3VuZE0zMTBU?= =?utf-8?B?QVNVcWl6U3p5UWNNSXFGM3BIM2xhb3NUOGVSdkl4cnh4LzA2a1V0UkRSWTdj?= =?utf-8?B?L21Idk9YVnNKR2oxY0JWSm00a09XUTg0TnJxbWh2M004bVAyYmJMNU1OYnpa?= =?utf-8?B?MlZiY2FxU2hzVWpiU21Pa2lOTjVuanNuWE5ucG8xbWI4b0IyMEhIcEJJZjhu?= =?utf-8?B?L1g5RzEvZEhIQzVpdUg2WU5adERndXQraUJFR3hNeFVOL3dCNloydVBXbGVL?= =?utf-8?B?L2NlTUZ1RXhOK2NsQUQwLzhJR3ZJSnIyVEFGeVhjcW9rSitrT09oWTNqNDU5?= =?utf-8?B?Y24rV3lXSGZYREQyZVE0UTV3M2Z0QVZSeXRCUTM2aEhVSWtFdUJVWCtCQVU0?= =?utf-8?B?ZWF3WXFDRC80VCtXNUlJb3JGazRJS2lmRVFTVXBGRW05UmZCTVp6MWJtSW5w?= =?utf-8?B?bGc3ZC93MGZyclZFenh5SzlrMys1elczYWNXbDdZZVVySlZaOUF5M1BDQ3VU?= =?utf-8?B?YUd0ckE1YW9OYVZteFZpN0ZTdDROY2xKUytsTEdUV21TZ3B2bHZoTjFYMlFL?= =?utf-8?B?aG1kSzJhM1JYSHB4MFdGVXhCNDZtMHBLUXJlL0lQUUk0cmpxUFFoMlNSbFk3?= =?utf-8?B?U3NxbWpxWU1ISEdkSFFtV016ZlY1NjNjZE1HOE8xcU9yMUFCZWdvbVp2MUFm?= =?utf-8?B?L21HU1B3K05wRUF6L25sK2cxMWRnQ3grV2hmd2RoRFRXRkRoM0FCK094L3Iv?= =?utf-8?B?UEN3RFJ2LzhRbUR2M2lMZXN0cWFwZ0RqQUtYNGFiR3FkRTVGQ3VDY0MwQm5q?= =?utf-8?B?MUhFNlVDTmZuTFhxSWpEK0hmVzJ4MXRrT081Z2NvZ2k3eVlaRkdMYlJwQmtO?= =?utf-8?B?WU9oUkJ0TjlwWmUySG4xRklKN215cEdIbGpjckZ1RndDbjFnN2w1UnAwMExy?= =?utf-8?B?UDBwN1poSDFXdWFsRXl3bi9wOE5hYkdjYzRZSFEzTk5rYm9JL3NoaUdmejU1?= =?utf-8?B?cTNDT0NDYzQ4V0hLWFFXUXFHanRjZUNqNlEzSHVPUXVQYmpJNjZOdFNjOWRh?= =?utf-8?B?S2tock1FWXBzbUFvcnhTSWRkOWZnY0h5Y3RMZG4xL0hyWGlncnQzMDVvNTcw?= =?utf-8?B?c2FKSmUwSDNsc1p5NFYwbzRpVzdjQ2hhdGlUamUvNzgzT3paOUMyc1ZOb0dS?= =?utf-8?B?ZE1Ja2tCUEVjN0JPaHozNVRoUUFjdXFkcVVreDJ5cS93dzdaNVFJendBY1li?= =?utf-8?B?ejlVWmlFVG5SZWJrNEFuOWMvbUVEbmtONGZVSTVrRVZLM2MxV2l2SENoZ29i?= =?utf-8?B?VHYvRlQvVVJqRTFYOWlZN2dabWlPdk9raHJzRllMS0dzNDlydHQyVGRFK0RB?= =?utf-8?B?ZHJJUTlTYUk4Tm44cUpxd2VSNkdPSktxYnNzWmJGL2dHU3pIWTlBTXlRdzVi?= =?utf-8?B?NFBWK0lGV1dyUFdJbEhUYkY1Vk85cE1WRUtZTGhteFJQZVZGSC9rUWZFM0Qx?= =?utf-8?B?NmxwOE9CaVVyKzE2a3Z2OHA2b0RjNEFnNUoyK3N2Rm5WUHJKWVZvTGdwUGZG?= =?utf-8?B?ZW5HZ2ZZYnlQaU8yVGMvNWU3QkllVU9pL1F1OEtxUHlYUHlFeEhkTHIwYklW?= =?utf-8?B?ZlpWQStwbVVGR29BanU1ejlMbjNlMWYzcDF5SXExVkd4YWVNOGhVdzE3cDZa?= =?utf-8?B?S1E9PQ==?=
Content-Type: multipart/alternative; boundary="_000_C4F4353332FC4E189BD78CA3D2886A59unomahaedu_"
MIME-Version: 1.0
X-OriginatorOrg: unomaha.edu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BYAPR07MB5960.namprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f61788bd-cb9a-41be-5f80-08da870cc451
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Aug 2022 02:43:32.8746 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f1f4be86-d048-47e8-aa26-15b01dcdb13d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CfBCpCkosTBT8j86jZVVQr9/y68BxOXkMCOJGFkq1T8wHqLyuwLKBHmqpnUk7OE2pQAc0zIQSH66nGHr2jeM+Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR07MB8288
X-Proofpoint-ORIG-GUID: N7ui3yXM89Vxn3vn1yleIwm4Y5YBGc_8
X-Proofpoint-GUID: N7ui3yXM89Vxn3vn1yleIwm4Y5YBGc_8
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 malwarescore=0 spamscore=0 mlxscore=0 phishscore=0 bulkscore=0 priorityscore=1501 clxscore=1011 suspectscore=0 adultscore=0 lowpriorityscore=0 impostorscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2207270000 definitions=main-2208260008
Archived-At: <https://mailarchive.ietf.org/arch/msg/icnrg/VGmsVQ_doCvgITT-ZRXmXDnaGVU>
Subject: Re: [icnrg] Review of draft-irtf-icnrg-icntraceroute
X-BeenThere: icnrg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Information-Centric Networking research group discussion list <icnrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/icnrg>, <mailto:icnrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/icnrg/>
List-Post: <mailto:icnrg@irtf.org>
List-Help: <mailto:icnrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/icnrg>, <mailto:icnrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Aug 2022 02:43:48 -0000

Hi Colin,

Thank you for checking in. I think I can revise the draft. Once Dave pushes out the updated version of the path steering draft, we will also update the trace route draft.

Thanks,
Spyros

On Aug 25, 2022, at 4:39 PM, Colin Perkins <csp@csperkins.org<mailto:csp@csperkins.org>> wrote:

Non-NU Email

Hi,

Can I check if you have what you need to progress with the updates to this draft, or if you still need input/confirmation from Chris?

Colin



On 9 Aug 2022, at 16:25, Colin Perkins wrote:

Spyros – thank you!

Chris – could you please check if the following would address your concerns?

Thanks,
Colin




On 1 Jul 2022, at 12:22, Spyridon Mastorakis wrote:

Hi Chris,

Thank you very much for your feedback! Please see my response to each of your comments inline. If you agree with my responses, I can go ahead and update the draft.

Please let me know.

Thank you again!
Spyros

On Jun 15, 2022, at 9:48 AM, Christopher Wood <caw@heapingbits.net<mailto:caw@heapingbits.net>> wrote:

Non-NU Email

Like the ping document, I found this to be very well structured and written. The use case for the protocol is clear, the protocol itself -- including the forwarder behavior -- is simple, and the security and privacy considerations are thorough.

Section 1.

 To this end, the problem of
 ascertaining the characteristics (i.e., transit forwarders and
 delays) of at least one of the available routes to a name prefix is a
 fundamendal requirement for instumentation and network management.

nit: s/instumentation/instrumentation

Thanks for pointing out this typo!


Section 6.

 The TrReply Code TLV value of the reply is set to indicate the
 specific condition that was met.  If none of those conditions was
 met, the TrReply Code is set to 4 to indicate that the hop limit
 value reached 0.

Perhaps I overlooked it, but why does the TrReply Code need to be 4? Is it because there are three prior conditions for the final reply in the session?

This value is based on the protocol specification. We have mentioned it at the end of Section 4.2.


Section 8.

 This approach does not protect against on-path attacks, where a
 compromised forwarder that receives a traceroute reply replaces the
 forwarder's name and the signature in the message with its own name
 and signature to make the client believe that the reply was generated
 by the compromised forwarder.  To foil such attack scenarios, a
 forwarder can sign the reply message itself.  In such cases, the
 forwarder does not have to sign its own name in reply message, since
 the message signature protects the message as a whole and will be
 invalidated in the case of an on-path attack.

Could a compromised forwarder swap out the name of a traceroute request with the name of its choosing? If so, perhaps this should also be listed in the paragraph above? To be honest, I forget the semantics for how content object response signatures are verified, so this might not be an issue.


My understanding is both in CCNx and NDN, changing the name of a request would invalidate the state in PIT, therefore, a response will not reach the client. To this end, it is unclear to me how much damage swapping out the name of a request could cause in our case. Indeed, unless requests are signed and the signature is verified, a forwarder could swap out the names of requests, but the corresponding response will not reach the client. I suppose a malicious forwarder could still see the response before the response is dropped. I am happy to mention that in Section 8.

Hope this helps.

Best,
Chris
_______________________________________________
icnrg mailing list
icnrg@irtf.org<mailto:icnrg@irtf.org>
https://urldefense.com/v3/__https://www.irtf.org/mailman/listinfo/icnrg__;!!PvXuogZ4sRB2p-tU!Ck_l3JqxhS1GBV4FC0GZ9yNSHQAmGDDxHwyH_qxYPljEt7_FZEOymbblf1Re5Ilt9oDVo4a6Ux6ZCuQE_ZM$

_______________________________________________
icnrg mailing list
icnrg@irtf.org<mailto:icnrg@irtf.org>
https://urldefense.com/v3/__https://www.irtf.org/mailman/listinfo/icnrg__;!!PvXuogZ4sRB2p-tU!GpmPMnfIPnKFCUWW0LqABDRfGdJT6cw0VXLZeheaWxlALjc2DaRzcK4cg6BNoQkzaFNqghFWUkTQa4oXBA$

_______________________________________________
icnrg mailing list
icnrg@irtf.org<mailto:icnrg@irtf.org>
https://urldefense.com/v3/__https://www.irtf.org/mailman/listinfo/icnrg__;!!PvXuogZ4sRB2p-tU!GpmPMnfIPnKFCUWW0LqABDRfGdJT6cw0VXLZeheaWxlALjc2DaRzcK4cg6BNoQkzaFNqghFWUkTQa4oXBA$