Re: [Int-area] WG Adoption Call: IP Fragmentation Considered Fragile

Toerless Eckert <tte@cs.fau.de> Sat, 25 August 2018 03:25 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FE39130E0E; Fri, 24 Aug 2018 20:25:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-FZlsX9DM8J; Fri, 24 Aug 2018 20:25:01 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1873F130EBC; Fri, 24 Aug 2018 20:25:00 -0700 (PDT)
Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [131.188.34.52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 47E8658C4BB; Sat, 25 Aug 2018 05:24:57 +0200 (CEST)
Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id 3C2B94402CB; Sat, 25 Aug 2018 05:24:57 +0200 (CEST)
Date: Sat, 25 Aug 2018 05:24:57 +0200
From: Toerless Eckert <tte@cs.fau.de>
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Tom Herbert <tom@herbertland.com>, int-area <int-area@ietf.org>, intarea-chairs@ietf.org
Message-ID: <20180825032457.ol5rlrr7h2kqi6px@faui48f.informatik.uni-erlangen.de>
References: <CALx6S36Ef3t7Axmx9hg994DHpVM=NdW-7ygf89E==gL4XKrkQg@mail.gmail.com> <5E21B3C1-0420-404C-9824-9B7E5A850BC5@employees.org> <CALx6S34qmKngi3hK_PVrJA1DMa5kfaLww3jfqRKN=up5v0Y0Ww@mail.gmail.com> <8D23C8B1-C2DA-4A8B-A2BE-8CCF6233B3A5@strayalpha.com> <D1D5EDCE-7C43-4CD8-947C-AA43CDB18892@employees.org> <1B04E207-08FA-400F-BBED-67379FEFD64E@strayalpha.com> <137751A3-7C52-4CCF-AE9C-B99C4A85EFC1@strayalpha.com> <alpine.DEB.2.20.1808021749020.19688@uplift.swm.pp.se> <CALx6S35kw2dodgG2L3LE3A5y8RYEXy6izQWgrQTwg7-yPqpzOg@mail.gmail.com> <alpine.DEB.2.20.1808030857370.19688@uplift.swm.pp.se>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <alpine.DEB.2.20.1808030857370.19688@uplift.swm.pp.se>
User-Agent: NeoMutt/20170113 (1.7.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/xSMaQcunXKHLyJeMgD74p7ubUfk>
Subject: Re: [Int-area] WG Adoption Call: IP Fragmentation Considered Fragile
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Aug 2018 03:25:04 -0000

On Fri, Aug 03, 2018 at 09:48:25AM +0200, Mikael Abrahamsson wrote:
> I've kept saying "Networks must support ip fragmentation properly.

Why ? Wheren't you also saying that you've got (like probably many
else on this thread) all the experience that only TCP MSS gets you
working connectivity in many case (like hotels) ?

IMHO, we (network layer) should accept defeat on network layer 
fragmentation and agree that we should make it easier for the
transport layer to resolve the problem.

Aka: I would lvoe to see a new ICMPv4/ICMPv6 reply and/or PTB reply option
indicating "Fragmented Packets Not Permitted". Any network device which
for whatever reason does not like Fragemnts would simply drop
fragmented packets and send this as a reply. Allows then the
transport layer to automatically use packetization  (such as TCP MSS) 
to get packets through. 

Of course. Will take a decade to get ubiquitously deployed, but
neither IPv4 nor IPv6 will go away, only the problems with fragmentation
will become worse and work if we do not have an exit strategy like this.

If we don't try an exit strategy like this, we will just get what
Joe said, the complete segmentation of the Internet with more and
more L4 or even higher layer proxies.

Btw: +1 for adopting the doc as a WG item, but primarily because everything
before section 7 is on a way to become a good read of reality. Section
7 recommendations is only a faith based exercise (praying) as long as it tries to
get the job done primarily by appealing to application developers.

Cheers
    Toerless