Re: [Int-area] AD Evaluation : draft-ietf-intarea-provisioning-domains-08

Tommy Pauly <tpauly@apple.com> Fri, 06 December 2019 22:29 UTC

Return-Path: <tpauly@apple.com>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91BE41200EB; Fri, 6 Dec 2019 14:29:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3x6Hf3mne58c; Fri, 6 Dec 2019 14:29:52 -0800 (PST)
Received: from ma1-aaemail-dr-lapp01.apple.com (ma1-aaemail-dr-lapp01.apple.com [17.171.2.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19BFB12002F; Fri, 6 Dec 2019 14:29:52 -0800 (PST)
Received: from pps.filterd (ma1-aaemail-dr-lapp01.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp01.apple.com (8.16.0.27/8.16.0.27) with SMTP id xB6MM0nQ014065; Fri, 6 Dec 2019 14:29:50 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=gp1HNK/98TkXw3RWodtLxE0vbWHB5N3d9fIkA8vs764=; b=e1zjoKgophn67+ukdKKjf3V7OM/uoOocrC1B5q9yCqzG0H0aHKQyql9RfttmxNc7d9ki UUwWiDDuxJLwoGyQ4Kj4jvmfIcGetbYFRooAmVaBC3ZgjsLxAzNZV82cAGqQ1JG8JByH crg+JEsyyCODDGz9FIcY8v4pWY/wZlZfk9xKKfr/eemIjmnPrWU858kP6CFpXVJRub56 cB/1tV9zfkyAO+v/wmUYDKW0XwORyt6M2b37ejjH3+LLH7P+2vhlC8XfUfABZp5ighg6 iJ5vzQ7G8kzzg41G73a/HMUZLqTIbOtvemm179+pMsydrOkq9pjufEFJtExhHTJwy/7O 9w==
Received: from mr2-mtap-s03.rno.apple.com (mr2-mtap-s03.rno.apple.com [17.179.226.135]) by ma1-aaemail-dr-lapp01.apple.com with ESMTP id 2wkqyb50c0-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Fri, 06 Dec 2019 14:29:50 -0800
Received: from nwk-mmpp-sz13.apple.com (nwk-mmpp-sz13.apple.com [17.128.115.216]) by mr2-mtap-s03.rno.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0Q2400LN23TPN080@mr2-mtap-s03.rno.apple.com>; Fri, 06 Dec 2019 14:29:49 -0800 (PST)
Received: from process_milters-daemon.nwk-mmpp-sz13.apple.com by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0Q240070038NG400@nwk-mmpp-sz13.apple.com>; Fri, 06 Dec 2019 14:29:49 -0800 (PST)
X-Va-A:
X-Va-T-CD: b1892866cc0b72e46a2eba39855f571d
X-Va-E-CD: 9852153024110d773a6429b6f37a4f05
X-Va-R-CD: a93bf6171125b3e92d9b4998b3c45e55
X-Va-CD: 0
X-Va-ID: 0a5c9752-5737-4eb4-bb14-58193f9e8ee3
X-V-A:
X-V-T-CD: b1892866cc0b72e46a2eba39855f571d
X-V-E-CD: 9852153024110d773a6429b6f37a4f05
X-V-R-CD: a93bf6171125b3e92d9b4998b3c45e55
X-V-CD: 0
X-V-ID: 2cb0c129-8ded-4fce-a3df-96c8a5862df2
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-12-06_07:,, signatures=0
Received: from [17.234.55.84] by nwk-mmpp-sz13.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0Q2400K6F3TJFY30@nwk-mmpp-sz13.apple.com>; Fri, 06 Dec 2019 14:29:44 -0800 (PST)
Sender: tpauly@apple.com
From: Tommy Pauly <tpauly@apple.com>
Message-id: <6AB941ED-3D91-4A1E-B8D9-BC7C718FF7C3@apple.com>
Content-type: multipart/alternative; boundary="Apple-Mail=_E6446593-EF9C-4C14-9B14-82C26EF1C620"
MIME-version: 1.0 (Mac OS X Mail 13.0 \(3594.4.17\))
Date: Fri, 06 Dec 2019 14:29:42 -0800
In-reply-to: <B3BC9295-3BFD-4B33-A51D-BBF735E991F9@kaloom.com>
Cc: "draft-ietf-intarea-provisioning-domains@ietf.org" <draft-ietf-intarea-provisioning-domains@ietf.org>, int-area <int-area@ietf.org>, Eric Vyncke <evyncke@cisco.com>, "Pierre Pfister (ppfister)" <ppfister@cisco.com>
To: Suresh Krishnan <Suresh@kaloom.com>
References: <B3BC9295-3BFD-4B33-A51D-BBF735E991F9@kaloom.com>
X-Mailer: Apple Mail (2.3594.4.17)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-12-06_07:, , signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/FryaSE4wNaCjTPHRwOmr17Ms4Nc>
Subject: Re: [Int-area] AD Evaluation : draft-ietf-intarea-provisioning-domains-08
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Dec 2019 22:29:54 -0000

Hi Suresh,

Thanks very much for the review!

We've posted a new -09 version to incorporate your feedback:

URL:            https://www.ietf.org/internet-drafts/draft-ietf-intarea-provisioning-domains-09.txt <https://www.ietf.org/internet-drafts/draft-ietf-intarea-provisioning-domains-09.txt>
Status:         https://datatracker.ietf.org/doc/draft-ietf-intarea-provisioning-domains/ <https://datatracker.ietf.org/doc/draft-ietf-intarea-provisioning-domains/>
Htmlized:       https://tools.ietf.org/html/draft-ietf-intarea-provisioning-domains-09 <https://tools.ietf.org/html/draft-ietf-intarea-provisioning-domains-09>
Htmlized:       https://datatracker.ietf.org/doc/html/draft-ietf-intarea-provisioning-domains <https://datatracker.ietf.org/doc/html/draft-ietf-intarea-provisioning-domains>
Diff:           https://www.ietf.org/rfcdiff?url2=draft-ietf-intarea-provisioning-domains-09 <https://www.ietf.org/rfcdiff?url2=draft-ietf-intarea-provisioning-domains-09>

Detailed responses inline.

Best,
Tommy

> On Dec 2, 2019, at 7:44 AM, Suresh Krishnan <Suresh@kaloom.com> wrote:
> 
> Hi authors,
> I found this draft generally well written and easy to read but I would like a couple of things fixed in it before I send it off to IETF Last call.
> 
> Major
> ====
> 
> * Section 3
> 
> "The PvD ID is a Fully
>   Qualified Domain Name (FQDN) which MUST belong to the network
>   operator in order to avoid naming collisions."
> 
> Which network operator? Can you please clarify this.

Reworded this section to be more clear.

> 
> * Section 3.1
> 
> How is the Router Lifetime field processed if the R bit is set and the RA header is included? Is the intent that this will always supersede the “outer” Router Lifetime for PvD aware hosts? In any case this needs to be specified as it is not standard RFC4861 behavior.
> 

Added a reference down to the host behavior section, and added a sentence to explain precedence handling.

> * Section 3.4.1
> 
> Not sure if this is the best way to specify stateful DHCPv6. There are stateful options that will not be under a PIO (e.g. IA_PD). I think this document should limit itself to IA_NA and possibly IA_TA. Leaving this unbounded does not seem to be a good idea. Thoughts?
> 

The authors discussed, and we've left this as-is for now; part of the intention is to leave it open for implementations to associate IA_PD if they can. I can let Eric and Pierre chime in more on the details.

> * Section 4.1
> 
> "If the host has a temporary address per[RFC4941] 
>   in this PvD, then hosts SHOULD use a temporary address to
>   fetch the PvD Additional Information and SHOULD deprecate the used
>   temporary address and generate a new temporary address afterward.”
> 
> Not sure why this behavior is required. Can you please explain?

Added both a description of the reason for this (privacy protections), and made the recommendation a MAY.

> 
> * Section 5
> 
> I was thinking that there needs to be some host behavior to be specified related to the H bit and the sequence number here. If the H bit is set and the sequence number is unchanged from a previous successful query I think the host should refrain from sending another https query. If you agree, this needs to be written down.

I've added a new example section that details these considerations. Great suggestion!

> 
> Minor
> =====
> 
> * Section 1
> 
> This text is confusing and self-referential
> 
> OLD:
> Since such options are only
>   considered by hosts implementing this specification, network
>   operators may configure hosts that are 'PvD-aware' with PvDs that are
>   ignored by other hosts.
> 
> Suggest rewording to something like
> 
> Since such options are only
>   considered by hosts implementing this specification, network
>   operators may configure hosts that are 'PvD-aware' with PvDs that are
>   ignored by other hosts.

Fixed!

> 
> * Section 3.1
> 
> Not sure if the definition of the L flag is correct. Does the router actually need to provide the DHCPv4 information to set this? What if it is just a relay?
> 
> * Section 4.1
> 
> Not sure why there is a reference to RFC8615 here.

Remove this reference, and moved down to the IANA registration (where it is relevant).
> 
> Editorial
> ======
> 
> * Section 1
> 
> OLD:
> The ability to associate additional informations
> 
> NEW:
> The ability to associate additional information
> 
> OLD:
> deriving from it
> 
> NEW:
> derived from it

Fixed these.
> 
> Thanks
> Suresh
>