Re: [Int-dir] Intdir last call review of draft-ietf-6lo-minimal-fragment-04

Dave Thaler <dthaler@microsoft.com> Thu, 07 November 2019 21:22 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: int-dir@ietfa.amsl.com
Delivered-To: int-dir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F3F212095A; Thu, 7 Nov 2019 13:22:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xH_dfrYc3isO; Thu, 7 Nov 2019 13:22:03 -0800 (PST)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790107.outbound.protection.outlook.com [40.107.79.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20FCA120104; Thu, 7 Nov 2019 13:22:00 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AnpISzyEKpZYt+hSbKBezD5eyWbiMhXinLgzn11501R4wTV7Iy5OqKBJQ9LZVLpP8mssmFRdCMp68FR6Gr2w1FQUr2lQb48/iKChOqEbx2pN7S2lBdFWRPjvkbhDzsX8y8ZE9H8Xw4EAqlYSfjMqEhkDkbToLjd//XwDH8YT4sLsam6/OD9xeFpVuyOI+lCunbqsBvoNmTBuB0P+WHZUVv+7SBEIMTjd8P14ZNNfm1PDGhSAzWbJi3pbz63c6LPU7jSCMtTigDEmrdvkifHgV9975b9jlbCq1BMN7l2SEbNovZzj0OmdPrUz1+94KgC07vbo/R06hoe1/DwlPvr5Cw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D/4ygP/YF8JkMKvdEKkuk25zIgWFRD9zceR05la2ZsI=; b=mftBqMEeAYcSJii/ry0qFS6MgiSQ5iRvXX82whqC6yf68TgBgIpjUMWCL9+3npr/WWFswAtwKZDnAE1Mu6vnf0manGtqsaPDksPDzs66j42nBTrTsue+dNs8acJPBnBtWvFdICzEEkt+EYEAaE1yFwOO3ztFM/b+J7e2sZ2Q7ytBjbAOhuB69qO2T/vWf9CbyBammB9MZcAKCMF6OLTxaY9c+pwT7allVmr904G8PJ8wMH6XMfs2x0v3HmwFK8QaFdkRpenbeOpx2YWHtU9pVJP6Dg/WJ5aeetH8DrwVTdFYeDt2+AQJz8wCqmfc0t4Tx2R9KOQwpxvStL5Jk3iZjA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D/4ygP/YF8JkMKvdEKkuk25zIgWFRD9zceR05la2ZsI=; b=XFwKV8Ml11MeEPArCVXmkf+e9MZQO+MAEjO0nb/VgQYPi0uZHl3WXgg0SqJjuNMI9ce+p0B3prsgbAfOvCwu9yIOu22fss7FUFn99EuxGrbHxo6PUmXhM/oyc3FRnuOFkzI/C2SWybC4FdY/MOGzrPJsqgp2ohdesCxI2sUT4m8=
Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0862.namprd21.prod.outlook.com (10.173.51.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.7; Thu, 7 Nov 2019 21:21:58 +0000
Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2451.013; Thu, 7 Nov 2019 21:21:58 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: "Pascal Thubert (pthubert)" <pthubert@cisco.com>, "int-dir@ietf.org" <int-dir@ietf.org>
CC: "draft-ietf-6lo-minimal-fragment.all@ietf.org" <draft-ietf-6lo-minimal-fragment.all@ietf.org>, "6lo@ietf.org" <6lo@ietf.org>
Thread-Topic: Intdir last call review of draft-ietf-6lo-minimal-fragment-04
Thread-Index: AQHVlV3F2k2o4xBB00mXyengkwdeQ6eANN5A
Date: Thu, 07 Nov 2019 21:21:58 +0000
Message-ID: <MWHPR21MB0784B933306ADFFE22E0B2E5A3780@MWHPR21MB0784.namprd21.prod.outlook.com>
References: <157308179603.20089.3680167711838185681@ietfa.amsl.com> <MN2PR11MB356517192D428E8181F7FB06D8780@MN2PR11MB3565.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB356517192D428E8181F7FB06D8780@MN2PR11MB3565.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-07T21:21:57.2179823Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5ed2287e-72a8-402a-90d5-b8e08e76ec5d; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com;
x-originating-ip: [2001:4898:80e8:2:e5b5:1d22:4f74:1f52]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: ab8c62cc-5595-4e23-1593-08d763c885cf
x-ms-traffictypediagnostic: MWHPR21MB0862:
x-microsoft-antispam-prvs: <MWHPR21MB0862CA5963E14C8C6AC4967CA3780@MWHPR21MB0862.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0214EB3F68
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(346002)(366004)(376002)(396003)(39860400002)(55674003)(189003)(199004)(9686003)(8990500004)(478600001)(790700001)(110136005)(6116002)(86362001)(33656002)(561944003)(2906002)(14454004)(316002)(55016002)(229853002)(6436002)(71200400001)(71190400001)(10090500001)(8676002)(54906003)(6306002)(54896002)(22452003)(186003)(10290500003)(476003)(5660300002)(81166006)(4326008)(81156014)(6246003)(99286004)(7696005)(11346002)(46003)(76176011)(446003)(486006)(25786009)(2501003)(256004)(64756008)(66556008)(7736002)(66476007)(6506007)(66446008)(14444005)(74316002)(8936002)(52536014)(102836004)(76116006)(66946007); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0862; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 7llQdqdYzvI08ir9nOVrNS16hG3/zR3PRtmzUdb+HeIYsWGnY2L1mAdjf84EOg3S7q8jMbzO1BD7y7ayWXxFaKtI4BSVJMgFhTauqGzHa33pam6j9agNul6X1yYaf1J4i2z9PfqdncbdokemPjZL+hpQ5tH4VHEu4SbjzfEvgVm0IOB+/A9/Ye4/apmPw2F7tunkqi/E11kLSZIX3AqmV1HCjH0LPqCmv8xnpnMHowJQAsRBY32ZiyZrQSVjyHwCxUnwi4tDSRPaQ2oiwyt3hrxmHVldrLkmKYAoxTO1g08McGOYziRY41fKnK3xsugyzGPvmJ3FEJ1OqzJQnHIpXeZTVGrAgCKMOHmYGYTe6IG6TeJy4BTsMGYGLaFaRiefcfQPaughImD+jgoJN3OPpKqed1rFevpHL6iqbFNuT6yKWolUJMZS5+h6d869a0Gh
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784B933306ADFFE22E0B2E5A3780MWHPR21MB0784namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ab8c62cc-5595-4e23-1593-08d763c885cf
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 21:21:58.4185 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Vw1mHL3nci3GW3TnB91Vz1vzsCX4Xjm/mOO8P5Xr1I5DmmX592vsI1twfSyXfIYt3zCu9j3LWsJek5YgEPq2AUG5qeg6oqh9H3n1Pnlz4uQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0862
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-dir/RqAzPbUr-cUWIjHv_IQPHJbXufU>
Subject: Re: [Int-dir] Intdir last call review of draft-ietf-6lo-minimal-fragment-04
X-BeenThere: int-dir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This list is for discussion between the members of the Internet Area directorate." <int-dir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-dir>, <mailto:int-dir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-dir/>
List-Post: <mailto:int-dir@ietf.org>
List-Help: <mailto:int-dir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-dir>, <mailto:int-dir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 21:22:06 -0000

Responses inline below.

Pascal Thubert (pthubert) <pthubert@cisco.com> wrote:
> The title implies the document specifies a forwarding mechanism, but

> it does not, it merely provides discussion of two mechanisms in other

> docs (RFC 4944 and draft-ietf-lwig-6lowpan-virtual-reassembly). I

> would recommend at least changing the title to be more clear as to the purpose of the doc.



A suggestion would help : )



Does "On Forwarding 6LoWPAN Fragments over a Multihop IPv6 Network" go the right way?



Sure.  Other possibilities in case you like them better than that one:

·        “6LoWPAN Fragment Forwarding Techniques: Discussion and Tradeoffs”

·        “An Analysis of Various 6LoWPAN Fragment Forwarding Mechanisms”

Etc.



> Technical confusion

> -------------------

> 1) Page 3 says the reassembly buffer contains "the link-layer address

> that node B uses to forward the

>    fragments".  I cannot tell whether this is referring to B's link-layer

>    address that it received the fragment on, or B's link-layer address that it

>    uses as a source link-layer address for forwarding it on, or the link-layer

>    address of the next hop to which B forwards.



The latter. B needs to send all the fragments with the same source link-layer address because that's part of the index for the datagram in C. Proposed change:

"

the Link-Layer address that node B uses as source to forward the fragments



"



Ok



> 2) Page 3 also says the reassembly buffer contains "the link-layer

> address of the next hop that is resolved

>    on the first fragment".  I found this similarly confusing.  What does it

>    mean to resolve something "on" the first fragment?  Does it mean "during

>    processing of the first fragment"?  Maybe I missed it, but I couldn't find

>    in RFC 4944 anywhere that says that it would do next-hop resolution before

>    the datagram can be reassembled.  That would seem like a waste, if the

>    fragments are then discarded (e.g., due to timer expiry) without actually

>    doing any forwarding.

>



RFC 4944 reassembles and then routes. We make the routing decision on the first fragment before we receive the second fragment, forward the first fragment and store that state. Unsure how to reword, your suggestion would be appreciated.



When you say “We made”, who is “we”?  RFC 4944?  If so, cite a specific section,
since making the routing decision on receipt of the first fragment, rather than the last,
seems non-intuitive and wasteful.   If that’s what the RFC says, then you can point it out

since this doc is (from my understanding) about discussing issues and tradeoffs with other mechanisms.



The waste is that if you choose to discard the datagram rather than forward it,
your efforts in doing the lookup are a waste of cycles, and a waste of space to store the result.

If you have a constrained node where every byte of storage is precious, having to store another

link-layer address can be burdensome, as opposed to a mechanism that only does the lookup

post reassembly, and has no such storage requirements, thus is lighter weight and arguably
better for constrained nodes.



I would encourage adding such discussion into this doc.



> 5) Section 3 explains that "the first fragment must always be

> forwarded first", but does not explain

>    what the behavior is if a fragment other than the first fragment is received

>    before the first fragment. Figure 1 shows that the fragments can be received

>    out of order, since there fragment 6 is received before 5, which is received

>    before 4.   Presumably it is either queued or dropped.  If it's queued, then

>    section 4 is insufficient, which talks about an attacker generating a large

>    number of bogus "fragment 1" fragments, since if you queue the first

>    fragment received even if it's not "fragment 1", then the same attack

>    presumably exists, it's not specific to "fragment 1" packets.

>



6LoWPAN does not mandate that all the fragments are sent in order, thus Fig1. But fragment 1 is sent first Quoting section 5.5 of Rfc 4944 "

                                                                   The first link fragment

   SHALL contain the first fragment header as defined below.



                           1                   2                   3

       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

      |1 1 0 0 0|    datagram_size    |         datagram_tag          |

      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+



                         Figure 4: First Fragment



   The second and subsequent link fragments (up to and including the

   last) SHALL contain a fragmentation header that conforms to the

   format shown below.



                           1                   2                   3

       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

      |1 1 1 0 0|    datagram_size    |         datagram_tag          |

      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

      |datagram_offset|

      +-+-+-+-+-+-+-+-+



                      Figure 5: Subsequent Fragments "



The first fragment is the one with the IPv6 address of the destination that enables to find the next hop that the other fragments will use. So it is always available before a fragment can be forwarded. So it is easy to mandate that we forward it first.



The text we’re discussing is about the order of receipt, not the order in which they are sent.

Even if it’s forwarded first, it does not mean it was received first (e.g., whether due to packet loss
or whatever other reason).



If we do that then the only way for a next fragment to arrive first is that the first fragment was lost in the transmission by the previous node. The first fragment may be queued for retries in the previous hop but that's a really bad idea.



Regarding “that’s a really bad idea”… if this draft is the one discussing tradeoffs and variations, then perhaps
it should explain why “that’s a really bad idea”.



Proposal:



* we add text on the above to clarify

* we mandate that on a link with ARQ, the node only forwards a next fragment if the first was acknowledged.

* we clarify that a next fragment that is received with no state from a first fragment for that datagram should be dropped.



If by “clarify”, you mean by reference to normative text in the RFC that specifies it, then ok.



[…]

> Abstract has "to the virtual Reassembly Buffer", which seems incorrect

> both in terms of capitalization (since sectoin 3 has VRB) and grammar.

> Suggest "to using virtual reassembly buffers".



I think we meant to the VRB draft. Applied your recommendation in the meantime:

"

This method reduces the latency and increases end-to-end reliability in route-over forwarding.

It is the companion to using virtual reassembly buffers which is a pure implementation technique.



"

Does that read well?



Ok.



Dave