Return-Path: X-Original-To: ipv6@ietfa.amsl.com Delivered-To: ipv6@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA669129499; Tue, 7 Feb 2017 13:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aVChaKyucpBN; Tue, 7 Feb 2017 13:24:51 -0800 (PST) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 702EA128874; Tue, 7 Feb 2017 13:24:51 -0800 (PST) Received: from [128.9.184.104] ([128.9.184.104]) (authenticated bits=0) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id v17LOMfc024098 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Tue, 7 Feb 2017 13:24:23 -0800 (PST) Subject: Re: Last Call: (Path MTU Discovery for IP version 6) to Internet Standard To: otroan@employees.org References: <148599312602.18643.4886733052828400859.idtracker@ietfa.amsl.com> <1859B1D9-9E42-4D65-98A8-7A326EDDE560@netapp.com> <63eaf82e-b6d5-bff5-4d48-479e80ed4698@gmail.com> <2d36e28c-ee7d-20fc-3fec-54561e520691@si6networks.com> <3A5429F6-0EA6-436A-AF30-E55C9026F456@employees.org> <8cf1fe7d-bdfd-5e81-e61f-55d9ecd5d28a@isi.edu> <7E9AB9E8-3FCB-4475-BEEB-F18CFC4BC752@employees.org> <8076a1ea-182d-9cbe-f954-3e50f0fc53d9@isi.edu> <4118C6CE-7649-436B-9598-78A034AFFE50@employees.org> From: Joe Touch Message-ID: <1d3c4a88-8c50-a0e2-f852-798d671c8750@isi.edu> Date: Tue, 7 Feb 2017 13:24:23 -0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 MIME-Version: 1.0 In-Reply-To: <4118C6CE-7649-436B-9598-78A034AFFE50@employees.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Archived-At: Cc: 6man WG , "ietf@ietf.org" , "draft-ietf-6man-rfc1981bis@ietf.org" , "tsv-area@ietf.org" , "Eggert, Lars" , "6man-chairs@ietf.org" <6man-chairs@ietf.org> X-BeenThere: ipv6@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "IPv6 Maintenance Working Group \(6man\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Feb 2017 21:24:53 -0000 I'd add one sentence about Fred's observation too: In addition, spoofed ICMP messages can also affect the correct operation of PMTUD. That'd do it... Joe On 2/7/2017 12:32 PM, otroan@employees.org wrote: > Joe, > > Thanks! > >> I appreciate that you want to not point at PLPMTUD because it's not >> widely supported, but **for the same reason** this doc should not hold >> up this solution without pointing out very clearly that it basically >> isn't going to be work. > Would something like this help? > (borrowed from https://en.wikipedia.org/wiki/Path_MTU_Discovery) > > "Many network security devices block all ICMP messages for perceived > security benefits, including the errors that are necessary for the proper > operation of PMTUD. This can result in connections that complete the > TCP three-way handshake correctly, but then hang when data is transferred. > This state is referred to as a black hole connection." > > > Best regards, > Ole