Re: [Int-area] draft-bonica-intarea-frag-fragile-01

Ron Bonica <rbonica@juniper.net> Thu, 31 May 2018 18:57 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2781C12EAD1; Thu, 31 May 2018 11:57:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oQqTncCil--c; Thu, 31 May 2018 11:57:47 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 147ED12EB9F; Thu, 31 May 2018 11:57:44 -0700 (PDT)
Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w4VIn54R018559; Thu, 31 May 2018 11:57:43 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=5LNjbr68Qrc/otBQ4/ttm6TVl2340SO1nLEw/Sfh/N4=; b=n3Gd+BuaqKxbydicvHElJ/0/ecFYTU9Q1M75Ayk7L0bLxvf+4OaJ+LT5vWzLjUpqAFdZ pLrqY4c3Tv8Mvm1vGU2uU0pFSSPWjkFJHRkmBsBCtT5Tp0hzLzCdldzeSQA7z98QPFne 7p2h2qaJdyigkZtA+CCtMQYRhyViwSaOWbHmUPQhtTAgC6PqnnRWTQen939MNqP92XUG 6LqMAbvn49HdlcRYfUcMAxgKsBOMhsy9NxaNy74xJumzch8ke4kFnDwvB0yxyVfFAAJs on/6eJGqgCauPWWm/whDqUtVBJlY5AX86L9r3GZjnAMHmnbJ6ol9k8XM7OUSu12GiaVB Eg==
Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp0049.outbound.protection.outlook.com [207.46.163.49]) by mx0a-00273201.pphosted.com with ESMTP id 2janbk05tu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Thu, 31 May 2018 11:57:43 -0700
Received: from SN6PR05MB4240.namprd05.prod.outlook.com (52.135.67.146) by SN6PR05MB4367.namprd05.prod.outlook.com (52.135.74.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.820.5; Thu, 31 May 2018 18:57:41 +0000
Received: from SN6PR05MB4240.namprd05.prod.outlook.com ([fe80::4dcd:96fe:df81:33e5]) by SN6PR05MB4240.namprd05.prod.outlook.com ([fe80::4dcd:96fe:df81:33e5%2]) with mapi id 15.20.0820.010; Thu, 31 May 2018 18:57:41 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Mikael Abrahamsson <swmike@swm.pp.se>, "draft-bonica-intarea-frag-fragile@ietf.org" <draft-bonica-intarea-frag-fragile@ietf.org>
CC: "int-area@ietf.org" <int-area@ietf.org>
Thread-Topic: [Int-area] draft-bonica-intarea-frag-fragile-01
Thread-Index: AdO0jIS4ltp/Psx9RAixmQiDhRi6uAApQCsAEPeM9EA=
Date: Thu, 31 May 2018 18:57:41 +0000
Message-ID: <SN6PR05MB424076A1069048545F362D3DAE630@SN6PR05MB4240.namprd05.prod.outlook.com>
References: <BLUPR0501MB2051C0DCCE28384FCD08F7C4AEDA0@BLUPR0501MB2051.namprd05.prod.outlook.com> <alpine.DEB.2.20.1803061037320.20609@uplift.swm.pp.se>
In-Reply-To: <alpine.DEB.2.20.1803061037320.20609@uplift.swm.pp.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.0.300.84
dlp-reaction: no-action
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; SN6PR05MB4367; 7:bUnI3eXSMlOBTAg/h6f4LqKOHnnYSwAv/kse4n+Q9eztmCY4rJKgIAz0zWMXXlehzturqyV7XiGtxd1+8N0Dp0dhmB5eqY5opVA3UsrBrFtGrFF8QYp+SJA9ZibyEA7lx1OkkpcuZi421/8gfNAyhNtn3ql2mncelkoJ+WcQSVl3omWl3oIiHqmLAw8W2FrysNusonAbaGrOsHPam1eyA3EfWf4ld89pDF1MDhafZeRs+d7dv+x/9Mks0qKfAYEn
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:SN6PR05MB4367;
x-ms-traffictypediagnostic: SN6PR05MB4367:
x-microsoft-antispam-prvs: <SN6PR05MB4367D049BC87697D6C927489AE630@SN6PR05MB4367.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(10436049006162)(138986009662008)(278428928389397);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3231254)(944501410)(52105095)(3002001)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:SN6PR05MB4367; BCL:0; PCL:0; RULEID:; SRVR:SN6PR05MB4367;
x-forefront-prvs: 06891E23FB
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39380400002)(366004)(346002)(376002)(39860400002)(189003)(199004)(13464003)(252514010)(110136005)(3660700001)(14454004)(2900100001)(99286004)(5250100002)(575784001)(2501003)(316002)(33656002)(86362001)(6436002)(2906002)(229853002)(76176011)(74316002)(102836004)(486006)(3280700002)(446003)(11346002)(25786009)(476003)(68736007)(66066001)(55016002)(7736002)(305945005)(81156014)(81166006)(8936002)(6306002)(5660300001)(9686003)(53936002)(6246003)(4326008)(97736004)(105586002)(7696005)(186003)(8676002)(59450400001)(53546011)(3846002)(106356001)(6116002)(26005)(478600001)(6506007)(966005)(19627235001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR05MB4367; H:SN6PR05MB4240.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: NieT1QatfzpxE6cv7CKIU4gtJU33WL/VkLs/pBgRTC0BprhzIp2efjJM3FUnqYLyoNz1yPMa3Lz/RfReJtCJhv6R0XCOlx1/szg8adahijvQowsdO0OUet/MiNrGzBHOVuM7b0TWe+rPjiswRt5GNFHVS0TAiavGyhM4lWxVoOmLDnmAShRGXpdZ86q7oB5P
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: d5d54ce0-be3d-436c-e917-08d5c72862bf
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: d5d54ce0-be3d-436c-e917-08d5c72862bf
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 May 2018 18:57:41.1716 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB4367
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-05-31_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1805220000 definitions=main-1805310209
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/hA4vKBJkxEQpzU2cagmrYX7sf-Y>
Subject: Re: [Int-area] draft-bonica-intarea-frag-fragile-01
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 May 2018 18:57:50 -0000

Hi Mikael,

Thanks for your careful review. Responses inline.

                           Ron

> -----Original Message-----
> From: Mikael Abrahamsson <swmike@swm.pp.se>
> Sent: Tuesday, March 6, 2018 4:57 AM
> To: Ron Bonica <rbonica@juniper.net>
> Cc: int-area@ietf.org
> Subject: Re: [Int-area] draft-bonica-intarea-frag-fragile-01
> 
> On Mon, 5 Mar 2018, Ron Bonica wrote:
> 
> > Folks,
> >
> > Please review draft-bonica-intarea-frag-fragile-01 and provide comments.
> > The URL is
> > https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__tools.ietf.org_html_draft-2Dbonica-2Dintarea-2Dfrag-2Dfragile-
> 2D01&d=DwIBAg&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-
> ndb3voDTXcWzoCI&r=Fch9FQ82sir-BoLx84hKuKwl-
> AWF2EfpHcAwrDThKP8&m=rEnXuPqkshyKZKBjvbX5C4azFkl4x3umDYP-
> M8MPk9k&s=fzVLPQb705xxBUc4zque37mctCX2lPbU4hREEMOtsjU&e=.
> 
> I like it.
> 
> 4.6. There are cases where this "misconfiguration" is due to vendor default
> not being changed. I do not equate "misconfiguration" with "didn't change
> default configuration". Some others might. It might also be due to "hardware
> limitation". Generally, I do not like the "filtering" (I have opposed to this in
> other drafts), as for me "filtering" conveys intent. If there is no intent, there
> is no filtering, but instead there is "dropping"
> or some other word.

Agree. I have expanded this text in the next draft version.

> 
> 4.7 Can we please have 4.7 that describes cases where ICMP PTB are never
> emitted because of misconfiguration? For instance intermediate L2 switch
> that has lower MTU than the L3 nodes connected to it, or mismatched
> MTU/MRU on two nodes connected to each other.

I have added this text in Section 7.2 saying that network devices must be configured so that they emit ICMP PTBs when required to do so.

> 
> 5.1. Can we have some kind of strong recommendation that hosts enable
> PLMTUD for TCP?
> 
While I agree with this recommendation, I am not sure if the INT AREA is empowered to make it. Wouldn't such a recommendation have to come from the TSV area?


> 6. "IP encapsulations". Shouldn't this be "some packet-in-packet
> encapsulations"? Or does "IP encapsulations" mean "anything encapsulated
> in IP"? 6.3 talks about this as well, I think it's worthwile to put in a sentence
> that whatever is said in this document, probably applies to all kinds of
> encapsulations.

I have changed the term "IP encapsulations" to "Packet-in-packet encapsulations"
> 
> 6.1. Err, last paragraph, aren't we getting ahead of ourselves here? I guess
> this is because of Geoff Hustons claims? That last paragraph is in dispute (I'd
> say, from talking to other people involved in DNS).
> 

I will defer to Geoff on this one.

> 7.2. I strongly believe we need more text here. It should be something along
> the lines of:
> 
> "As per RFC4890, network operators MUST assure proper operation of
> PMTUD by making sure that PTB packets are emitted by all equipment when
> it can't fit a packet into a smaller MTU link, and that large MTU packets are
> not silently discarded due to misconfiguration. Network operators MUST
> NOT filter ICMP PTB packets."

Agree. It is in the next version

> 
> ...
> 
> As a last comment, do we know documents that tell application developers
> how to do what this document recommends in 5.2? If someone developers
> applications that use UDP for instance, how do they know what the
> operating system PMTUD is at any given time, to avoid the host stack
> fragmenting the packet? I've been interacting with people who had this
> specific problem, and it wasn't easy to figure out exactly how to do what
> is being said in this text (which I agree should be done).
> 
If I understand you correctly, such documentation would be available on per-OS basis.

> Generally, I think the IETF should strongly recommend application/protocol
> developers to not rely on IP fragmentation, generally. So the ones listed
> in 6 (and I imagine there are more of them), should change the way the
> protocol is done. This includes DNS. So all working groups should be put
> on notice to start working on this problem if they don't already have a
> solution for it.
> 

This draft is intended to bring the IETF community to the conclusion that you have drawn.

                                                      Ron

> --
> Mikael Abrahamsson    email: swmike@swm.pp.se