Re: [ippm] Progressing draft-ietf-ippm-ioam-conf-state

"Frank Brockners (fbrockne)" <fbrockne@cisco.com> Thu, 16 December 2021 12:54 UTC

Return-Path: <fbrockne@cisco.com>
X-Original-To: ippm@ietfa.amsl.com
Delivered-To: ippm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90F043A0E71 for <ippm@ietfa.amsl.com>; Thu, 16 Dec 2021 04:54:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.596
X-Spam-Level:
X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fK4lj1pB; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=unibSiMI
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hqf6Qt5DwtLk for <ippm@ietfa.amsl.com>; Thu, 16 Dec 2021 04:54:14 -0800 (PST)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08C013A0E6D for <ippm@ietf.org>; Thu, 16 Dec 2021 04:54:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6856; q=dns/txt; s=iport; t=1639659253; x=1640868853; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=mzg8d0f76Xaiz9m+CjwmIby70m8dqxJ9klPjNgmCwVo=; b=fK4lj1pBa0CMSkCRacF0px9Gr55va3+DuDqHC4uBrGao9PAq0iJxsceJ me3S3JassaQsU5WlScbvKATC1UJpcBzFns9Gc6sCRMLpyOulH1BRkw7/o 33kkqr4RPsrsX0/za7um7QFEnCl7FVPp6qqD1ztMplBIz0Pk8b25ZGcq4 c=;
IronPort-PHdr: A9a23:BSO28xfShHX0NOngKW21C3+alGM/tYqcDmcuAtIPh7FPd/Gl+JLvdAza6O52hVDEFYPc97pfiuXQvqyhPA5I4ZuIvH0YNpAZURgDhJYamgU6C5uDDkv2ZPfhcy09GpFEU1lot3G2OERYAoDwfVrX93az9jUVXB74MFkdGw==
IronPort-Data: A9a23:XNcQj6CEkut+hBVW/xLhw5YqxClBgxIJ4kV8jS/XYbTApD9zhGMDzjBNUGrQbPmNYTD8KtAjO9u3oxxVsJKDx4ViOVdlrnsFo1CmBibm6XV1Fqp7Vs+rBpWroHlPsoNOOrEsEOhuFiWF/030bOC7xZVB/fjgqoTUWbas1h9ZHWeIeA954f5Ss7ZRbrxA2LBVMCvV0T/GmPAzDXf+s9JC3s343IrYwP9nlKyaVDr1JTXSb9gT1LPVvyF94J7yuciMw3XErol8RoZWRs7KyLW/u2je5RpoW5Wuk63wdQsBRbu60Qqm0yUNHfP8xEEZ4HVog87XN9JEAatTozuDhdd6y9NAnZexUgwueKbLnYzxVjEJTH8uY/AZoeKvzX+X9Jb7I1f9W2f0yuhqHWk/JZUc96B8BmQm3f0AMDUlbx2fiaSx2r3TYvltj8NlKcjtZqsNpnwmxjbcS/0gKa0v6Y2iCcRw1TM0gIVFGuzTIptfYjt0ZxOGaBpKUmr7wakWxI+A7kQTuRUBwL5NmZcK3g==
IronPort-HdrOrdr: A9a23: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
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0BuAABoNrth/4ENJK1aHQEBAQEJARIBBQUBQIFFCAELAYFRVQd4WjcxhEeDRwOEWWCFDoMCA4ETjyCKaoEugSUDVAgDAQEBDQEBKg8IBAEBhQYCF4MVAiU0CQ4BAgQBAQESAQEFAQEBAgEGBIEJE4VoDYZCAQEBAQMBARAREQwBASUHCwELBAIBCBEEAQEDAiYCAgIlCxUFAwgCBAENBQgagleCZQMvAQ6jVwGBOgKJUgFMeoExgQGCCAEBBgQEgToCDkGDABiCNQMGOFgqAYMNhB6CWoQsJxyBSUSBFUOCMDc+gmMBAQIBF4ETCiuDFjeCLpIwbAJoBEMOAk8MBQYyNQMUHgIBFA8ES5U6qWgKg0GKZ5RmFYNvjASGU5EShUuQZB+CI4o7k3A7hHgCBAIEBQIOAQEGNYEsO4FZcBU7gmlRGQ+OIAwWg1CFFIVKdDgCBgEKAQEDCQGCOotvASeCHgEB
X-IronPort-AV: E=Sophos;i="5.88,211,1635206400"; d="scan'208";a="976865715"
Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 16 Dec 2021 12:54:12 +0000
Received: from mail.cisco.com (xbe-rcd-002.cisco.com [173.37.102.17]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 1BGCsCJt009320 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=OK); Thu, 16 Dec 2021 12:54:12 GMT
Received: from xfe-aln-001.cisco.com (173.37.135.121) by xbe-rcd-002.cisco.com (173.37.102.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.14; Thu, 16 Dec 2021 06:54:12 -0600
Received: from xfe-rcd-004.cisco.com (173.37.227.252) by xfe-aln-001.cisco.com (173.37.135.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.14; Thu, 16 Dec 2021 06:54:11 -0600
Received: from NAM02-BN1-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-004.cisco.com (173.37.227.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.14 via Frontend Transport; Thu, 16 Dec 2021 06:54:11 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MhoKUXSwBbMWyC/khfZK8JRwi9bC2zZMg7GX3//6NW3g9yGz2veOJgZzEQOpz/4tSZJPk69cHbmWI1+OqKBuXzgN9knVaHywYU0MO7GgCVZ6NqoQB89QtxZLgvz6QYGuXwsbGTzV7ZdLsJEHuB6kenO9UIDuAy7WcaEDzdcdb6hpTmObtpNjCC75EJGbG9HPhQzlt/xXSBIfdfWNO+4/FMSF9JWA7zeOpS79f9n0WiyA4vt0/DAJ5Ct8hKJ8zngGDeFnMbanLU366LxRsHf5TxvyzvqZUoaZXJF/N9RdeqTVHHLvF8Q5u+JM4AUM2c94XRCeQ1QgllNlC1aY+Ez36g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mzg8d0f76Xaiz9m+CjwmIby70m8dqxJ9klPjNgmCwVo=; b=ZahdbbYWUT4S5CU3sXrxFffRqZq/aMBH4rP4qV7hEgg4Ew7gJyHK9G7fE9jiII+N1X+YxglkvQuTOf500w4ihSZWerUX3Ygq/xXn9I/WkQ0oAAaCC8VbYcES6puPDG1Xonoq/+Vy4KDOTg2Lg9H6vI3iWQdg0deCg/k2kW5wgvUotMkCEY26rkalSenjyTI5NFODUejPPLXh+rSeF3E0yefP6x5K1jBIJ9/Gg6eepFnoE5YCtFqPRFaWo59Xx9li+4VWlUffZPRVtVhjhCQfgE9qgD4yBD6wY+v3Wmk7d4SITKYT9ovr826DjyF9tWza1HUZbjPZrFmpO2Ig2aRYcQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mzg8d0f76Xaiz9m+CjwmIby70m8dqxJ9klPjNgmCwVo=; b=unibSiMIPXF5fc9/RbauKhmAktHQO/xA8vcN4t3HBglIWCB/fhqUHRakCGRWiwsq9XKQkEZ5Ce8YX+yiEuSX31uXceBCLK7N0DFh4NAByePULDKsRjZoir9Eq6TZ4TQtHdSTxUmttQgRB+ovVz60rqH3WfoidFhxcGF2FhL7Zh4=
Received: from CY4PR11MB1672.namprd11.prod.outlook.com (2603:10b6:910:f::8) by CY4PR11MB0037.namprd11.prod.outlook.com (2603:10b6:910:77::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4801.14; Thu, 16 Dec 2021 12:54:10 +0000
Received: from CY4PR11MB1672.namprd11.prod.outlook.com ([fe80::80a:357b:8644:2312]) by CY4PR11MB1672.namprd11.prod.outlook.com ([fe80::80a:357b:8644:2312%7]) with mapi id 15.20.4801.015; Thu, 16 Dec 2021 12:54:09 +0000
From: "Frank Brockners (fbrockne)" <fbrockne@cisco.com>
To: "xiao.min2@zte.com.cn" <xiao.min2@zte.com.cn>, "ippm@ietf.org" <ippm@ietf.org>
Thread-Topic: [ippm] Progressing draft-ietf-ippm-ioam-conf-state
Thread-Index: AQHX7ZPJRKVfHSMK8km2j+o41ByxSaw1Dk+A
Date: Thu, 16 Dec 2021 12:54:09 +0000
Message-ID: <CY4PR11MB1672EE19AF2E99EE77BAF5D3DA779@CY4PR11MB1672.namprd11.prod.outlook.com>
References: <202112101500302348450@zte.com.cn>
In-Reply-To: <202112101500302348450@zte.com.cn>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cisco.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: f233de49-69b6-4201-34a0-08d9c093270f
x-ms-traffictypediagnostic: CY4PR11MB0037:EE_
x-microsoft-antispam-prvs: <CY4PR11MB00371C103A015C0A51DCA944DA779@CY4PR11MB0037.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CY4PR11MB1672.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(186003)(8936002)(55016003)(33656002)(66946007)(966005)(508600001)(9686003)(86362001)(71200400001)(76116006)(7696005)(53546011)(316002)(110136005)(6506007)(5660300002)(38100700002)(4326008)(64756008)(66556008)(66476007)(52536014)(26005)(83380400001)(122000001)(38070700005)(2906002)(66446008); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CY4PR11MB1672.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f233de49-69b6-4201-34a0-08d9c093270f
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Dec 2021 12:54:09.5390 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: RusFQDKOwZD0NrwEljrL6WF9WW8fFusO84/HH+07lDeIaX7W5AmZCZ/+aJhV9NOh1TaRr5w+i4/UMfU172oJYg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR11MB0037
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.17, xbe-rcd-002.cisco.com
X-Outbound-Node: alln-core-9.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ippm/YMCr6yMl1y0nLCzmofMQSU8Oslo>
Subject: Re: [ippm] Progressing draft-ietf-ippm-ioam-conf-state
X-BeenThere: ippm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF IP Performance Metrics Working Group <ippm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ippm>, <mailto:ippm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ippm/>
List-Post: <mailto:ippm@ietf.org>
List-Help: <mailto:ippm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ippm>, <mailto:ippm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Dec 2021 12:54:20 -0000

Hi Xiao Min,

Thanks for posting draft-ietf-ippm-ioam-conf-state-02. I read through the updated version and looked at the diff to the 01 version (https://www.ietf.org/rfcdiff?url1=draft-ietf-ippm-ioam-conf-state-01&url2=draft-ietf-ippm-ioam-conf-state-02) Different from what you state below, I don't see any of my comments reflected. 
The two main points I mentioned in the last WG meeting were about (a) alignment with draft-ietf-ippm-ioam-yang and (b) enhancements to the security section, reflecting that the protocol you are defining is a network management protocol, and needs to be secured as such. 

More specifically: 
* Alignment with draft-ietf-ippm-ioam-yang: 
The IPPM WG is in the process of defining a YANG module for IOAM: draft-ietf-ippm-ioam-yang. We should have a single, comprehensive model for config information for IOAM. That model can then be rendered into different transports (be it JSON, XML, or yet another format - to then be carried over a e.g. ICMP in your case). Right now draft-ietf-ippm-ioam-conf-state heads down a path of defining a new set of management objects - many are similar to what draft-ietf-ippm-ioam-yang already defines, some they are less comprehensive, some hint at additional information that draft-ietf-ippm-ioam-yang does not cover yet: E.g.,  you define a "Pre-allocated Tracing Capabilities Object" where draft-ietf-ippm-ioam-yang  has a "Preallocated Tracing Profile" defined. You define ingress interface fields, which is information, which is more comprehensively defined by the ioam-filter grouping. You define specific fields to describe the timestamp format used by a node, which is information that should be described as part of the ioam-info container - and which is currently missing in draft-ietf-ippm-ioam-yang; point well taken :-). It is interesting to note that draft-ietf-ippm-ioam-conf-state does not even reference draft-ietf-ippm-ioam-yang.
From my perspective we should have one single data model for IOAM configuration - and that is the YANG module defined in draft-ietf-ippm-ioam-yang. Let's make sure that this model covers all the information required to properly manage IOAM. Then draft-ietf-ippm-ioam-conf-state would be solely focused on defining how that YANG module (from draft-ietf-ippm-ioam-yang) would be rendered into e.g., ICMP as a carrier protocol. 

* Security: Revision -02 does not seem to update the security section. IMHO, section 6 on security considerations should be enhanced to clearly articulate that we're dealing with very sensitive information. Consider loaning from e.g., https://datatracker.ietf.org/doc/html/rfc6241#section-9. As part of the discussion, it would be good to see an explanation where you'd expect  draft-ietf-ippm-ioam-conf-state to be used. Given the discussion in the Introduction section, you seem to assume an environment that does not have a central network management station / controller in place. Or in other terms, you seem to target a deployment, which isn't a limited domain per RFC 8799. In that case, I would expect that we have normative language that requires the use of strong authentication and encryption between the nodes (i.e., MUST use ICMP with AH and ESP..).

In addition to the above, I struggle to understand the "Operational Guide" in section 4: Could you shed a bit more light on how you expect things to work - and what a target deployment environment would look like? It seems that you assume that you don't know the network nor the destination addresses in your network: Do you expect that you would do regular "ICMP echo sweeps" in your network? Do you expect that, while doing the expanding ring search, an ICMP time exceeded message would also carry the "IOAM Capabilities Response Container Header", so that the capabilities container would not only be carried in the echo reply message but also in the time exceeded message? 

Thanks, Frank

(BTW - Note that due to the upcoming holiday season, replies might be delayed).

> -----Original Message-----
> From: ippm <ippm-bounces@ietf.org> On Behalf Of xiao.min2@zte.com.cn
> Sent: Friday, 10 December 2021 08:01
> To: ippm@ietf.org
> Subject: [ippm] Progressing draft-ietf-ippm-ioam-conf-state
> 
> Hi IPPM WG,
> 
> The -02 version of draft-ietf-ippm-ioam-conf-state has been posted.
> There are mainly two changes, one is on IOAM Tracing Capabilities Objects to
> make them applicable to ICMPv6 extensions, another one is on IOAM Proof-of-
> Transit Capabilities Object to make it aligned with the updated IOAM-Data
> document.
> Also note that I've had an offline discussion with wg chairs and Frank Brockners,
> my conclusion is that Frank's concern raised at IETF 112 has been addressed. If
> that's not the case, please speak up.
> With that said, I think this draft is ready for WGLC.
> 
> Best Regards,
> Xiao Min
> 
> _______________________________________________
> ippm mailing list
> ippm@ietf.org
> https://www.ietf.org/mailman/listinfo/ippm