Re: [Int-area] The small address use case in FlexIP

Stewart Bryant <stewart.bryant@gmail.com> Mon, 08 February 2021 11:31 UTC

From: Stewart Bryant <stewart.bryant@gmail.com>
Message-Id: <1A1B8B65-5806-42FA-9E4D-893855653E98@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1E95D612-DED5-4C59-B393-D9F1C8394F15"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Mon, 08 Feb 2021 11:31:46 +0000
In-Reply-To: <1749aa4fe2f44eb8852d1914d2623cb3@huawei.com>
Cc: Stewart Bryant <stewart.bryant@gmail.com>, int-area <int-area@ietf.org>, "draft-jia-flex-ip-address-structure@ietf.org" <draft-jia-flex-ip-address-structure@ietf.org>, "draft-jia-scenarios-flexible-address-structure@ietf.org" <draft-jia-scenarios-flexible-address-structure@ietf.org>
To: Jiayihao <jiayihao@huawei.com>
References: <1749aa4fe2f44eb8852d1914d2623cb3@huawei.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/Sjc_oP7Fwl7FVSQn902ZQVdOj3k>
Subject: Re: [Int-area] The small address use case in FlexIP
Precedence: list

The problem with this approach is that you only secure the address and not the rest of the packet, so you end up with two crypto functions to execute.

Also there are other contenders for the suffix such as the arrival action as per network programming, and the perhaps per hop action as per foam. Now I suppose that this simply means a much longer address and the semantics of the stuff that follows the prefix is defined by the address, but then I think that it is better to simply call that a blob defined by the prefix rather with no formal semantics in the protocol and leave the definition of the blob to the network application designers.

There is clearly quite a lot to study in terms of multi-semantics which I think really should be taken out and put in its own draft. 

- Stewart

> On 8 Feb 2021, at 10:05, Jiayihao <jiayihao@huawei.com> wrote:
> 
> As for address embedding public key, it need not to carry any algorithm in the address. It would be much better to carry the public key by address, while indicate the algorithm by protocol. I think CGA is a good instance for involve address in cryptography. For forwarding efficiency, a public key can be only set as a suffix, thus forwarder could process the prefix only, and thus the cryptography related stuff may not hinder the looking up efficiency. 
>

[Int-area] The small address use case in FlexIP Stewart Bryant
Re: [Int-area] The small address use case in Flex… Behcet Sarikaya
Re: [Int-area] The small address use case in Flex… Stewart Bryant
Re: [Int-area] The small address use case in Flex… Lin Han
Re: [Int-area] The small address use case in Flex… Jiayihao
Re: [Int-area] The small address use case in Flex… Stewart Bryant
Re: [Int-area] The small address use case in Flex… Stewart Bryant
Re: [Int-area] The small address use case in Flex… Stewart Bryant
Re: [Int-area] The small address use case in Flex… Dirk Trossen
Re: [Int-area] The small address use case in Flex… Stewart Bryant
[Int-area] 答复: The small address use case in Flex… Jiayihao
Re: [Int-area] [Flexip] The small address use cas… Liguangpeng (Roc, Network Technology Laboratory)
Re: [Int-area] The small address use case in Flex… Jiayihao
Re: [Int-area] The small address use case in Flex… Stewart Bryant
Re: [Int-area] The small address use case in Flex… Jiayihao
Re: [Int-area] The small address use case in Flex… Kiran Makhijani
Re: [Int-area] The small address use case in Flex… Dirk Trossen