[Int-area] Re: WGLC for "IP Tunnels in the Internet Architecture" draft-ietf-intarea-tunnels

Ole Troan <otroan@employees.org> Fri, 08 August 2025 07:26 UTC

Return-Path: <otroan@employees.org>
X-Original-To: int-area@mail2.ietf.org
Delivered-To: int-area@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 880FC5192E36 for <int-area@mail2.ietf.org>; Fri, 8 Aug 2025 00:26:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=employees.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UjBxkTIy4gua for <int-area@mail2.ietf.org>; Fri, 8 Aug 2025 00:26:35 -0700 (PDT)
Received: from proxmox01.kjsl.com (proxmox01.kjsl.com [204.87.183.6]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 7F6AD5192E29 for <int-area@ietf.org>; Fri, 8 Aug 2025 00:26:35 -0700 (PDT)
Received: from proxmox01.kjsl.com (localhost.localdomain [127.0.0.1]) by proxmox01.kjsl.com (Proxmox) with ESMTP id C6322E4915; Fri, 8 Aug 2025 07:26:34 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=employees.org; h=cc:cc:content-transfer-encoding:content-type:content-type :date:from:from:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=prox2023; bh=5iVQOqierWDBJcJv t8EoEDDzzqIRjD8aGh4ObWvhSzU=; b=FTOA5+D9D8z6uCrEYjU5PyxXlEWWk7QV fdykjI8V76UUWM3LkOSigWIRUsjMvMv2yq0DGbUnttwkpW5PpKaoBE7DL0gBGCRm 2DmZoGEZc8sNO2RTlXqeEUmNIvUIw+6o46/jEyrY7DIQdCezkR1LnHRFSEjuLpHO TYijEjLy8C5brGZ85mHHiYnGJdG3dWxSAPhLsrUEA9CIelYrgz/oP6jDx2di8igL lFkrQ48Wf4vlN6mMQ9JQapTk8TDA4smh5W9Jdzl6OC1DIoJCxnTxjJEv5bEkotyE qQGyskJCuuCKOEcSYi28C8p0OBrLd1U3M+qZVF893pfwq2VjL0P/+Q==
Received: from clarinet.employees.org (clarinet.employees.org [198.137.202.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by proxmox01.kjsl.com (Proxmox) with ESMTPS id AA4B9E4906; Fri, 8 Aug 2025 07:26:34 +0000 (UTC)
Received: from smtpclient.apple (unknown [IPv6:2001:4650:c3ed:37a:f35e:c5de:8048:9425]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id C8B352C77FD0; Fri, 08 Aug 2025 07:26:33 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
From: Ole Troan <otroan@employees.org>
In-Reply-To: <98356426-E5CD-4D54-9E48-D031C7E6F666@strayalpha.com>
Date: Fri, 08 Aug 2025 09:26:21 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <C80D1970-83EC-4683-B563-E5962E36C642@employees.org>
References: <MW5PR11MB57615B9836319605E034BC15D198A@MW5PR11MB5761.namprd11.prod.outlook.com> <DS4PPFCECA323059982564234961B24BB7DD12DA@DS4PPFCECA32305.namprd11.prod.outlook.com> <PH0PR05MB87048215540FA89B4914EF0EAE2CA@PH0PR05MB8704.namprd05.prod.outlook.com> <BN0P110MB14208A1C05652B494A430F72A32CA@BN0P110MB1420.NAMP110.PROD.OUTLOOK.COM> <PH0PR05MB8704CED7F5409338D85273BFAE2CA@PH0PR05MB8704.namprd05.prod.outlook.com> <BN0P110MB1420674D17EF0FB4F0667D26A32CA@BN0P110MB1420.NAMP110.PROD.OUTLOOK.COM> <98356426-E5CD-4D54-9E48-D031C7E6F666@strayalpha.com>
To: touch@strayalpha.com
X-Mailer: Apple Mail (2.3826.700.81)
Message-ID-Hash: DKVO2YGMLSDS25LZLXC36R2RULOHQDIM
X-Message-ID-Hash: DKVO2YGMLSDS25LZLXC36R2RULOHQDIM
X-MailFrom: otroan@employees.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-int-area.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "Templin (US), Fred L" <Fred.L.Templin=40boeing.com@dmarc.ietf.org>, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>, Internet Area <int-area@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Int-area] Re: WGLC for "IP Tunnels in the Internet Architecture" draft-ietf-intarea-tunnels
List-Id: IETF Internet Area WG Mailing List <int-area.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/4AionbQzheArS97qqMZR_-vRWUs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Owner: <mailto:int-area-owner@ietf.org>
List-Post: <mailto:int-area@ietf.org>
List-Subscribe: <mailto:int-area-join@ietf.org>
List-Unsubscribe: <mailto:int-area-leave@ietf.org>

> Additionally:
> 
>> On Aug 7, 2025, at 1:15 PM, Templin (US), Fred L <Fred.L.Templin=40boeing.com@dmarc.ietf.org> wrote:
>> 
>> Many tunneling protocols live by “grace” and assume 1500 everywhere. But, robust
>> tunneling protocols need to live by the “law”, and the law says 1280.
> 
> And its subtle - for IPv4, they assume 1500 everywhere but it’s really 576 after reassembly at the receiver.
> 
> For IPv6, it’s 1280 over each hop BUT up to 1500 after reassembly at each receiver.
> 
> These and other aspects are why this isn’t just an op-ed.

I think the current text is fine from a historical perspective.
For future recommendations I would prefer a recommendation that tunnels must support link-layer segmentation and reassembly.
That could be UDP options FRAG or something else.

Outer IP fragmentation is undesirable for multiple reasons.
E.g. a tunnel tail-end has to reassemble _before_ it can check if the fragment chain belongs to a tunnel. Last I looked, a lot of IP fragments are part of attacks, and they are costly to process.

Ole