RE: draft-ietf-6man-icmp-limits-05

Ron Bonica <rbonica@juniper.net> Tue, 17 September 2019 00:28 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 644581200D6 for <ipv6@ietfa.amsl.com>; Mon, 16 Sep 2019 17:28:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qk03p4k4nmV8 for <ipv6@ietfa.amsl.com>; Mon, 16 Sep 2019 17:28:25 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36E8912001E for <6man@ietf.org>; Mon, 16 Sep 2019 17:28:25 -0700 (PDT)
Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x8H0KbEE022652; Mon, 16 Sep 2019 17:28:23 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=/3GN/9JIxDfw77WZUYn9GCTPsfLDnoXbS90PKE1LxHE=; b=kpa8HRf7BSe0uimw7xOfEpJRDMrT5qT6s8Odgpk9SjbWZ7vLJ+TKWioyNqNETUD88qyT 1tbdPwonwDarqrZ3ntEQDwPdAHI0G3o9yFDcQhnhbPRlVzp09bwKaMgrxXi0PrhueVjy JPth6Te4hjTXvtkOLcbJeCbkXw0D0M8Hv1pQ8MdJgNXnMFKiGIE0PbVHD/3dZYuACdEo 75c/eMw5V/pEiVj2r0GYAbTSoa0C7Xyg50e1qxcr4FHvp/HAXGXW36VBgMNM1Qq4bjzh In7Ov5OQxolaHIreEncr74+uYIYrLGikg5cCW1hSRZOkSrdyO83mLDgFrCLmIBesBMj0 3w==
Received: from nam04-co1-obe.outbound.protection.outlook.com (mail-co1nam04lp2058.outbound.protection.outlook.com [104.47.45.58]) by mx0a-00273201.pphosted.com with ESMTP id 2v2a359555-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 16 Sep 2019 17:28:23 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Yy9syUrHCGzD22myWsumz95f0Ko/S+nypslG6gnLRaAmS0lMYEpe6mdy0Ca9HtckIaDD76V/huZpuubWDH4kLKAiwuZfNCm4GDVI3Iy7P9p17JJrnSdKTYL8CcFxaCp/Qf0qCav9OAKC9B2YTWyuY85JL9j+8PAwJWAuOnOHzms/KW0/stps2xDD1CSsiq3yv3GBMkkLc4bM/FE0kFgg5hsEzromOYgIFVE3RYqJTEmBw1KxpxWahEQVQMgKT29+q6OzoLjrLBliN7lsyuTD5gYmATOUvXfYghGqePl3YbvIZ3HD0CZ8YNKIqlGT3Fr+wI7iH8Xk6BsHPeDqbnegug==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/3GN/9JIxDfw77WZUYn9GCTPsfLDnoXbS90PKE1LxHE=; b=ChkQcWiwtK7A+ROhZF2/ZaXKD/T0mX/1trsCXC3iavqL5T3opJYQXwpaYlaWEFRRLyXyw0uF5qcSGMAhVXxE97ULClRm23wVnROch50pr4H4Dj2WiL0tFvvM6eHyKmZJI2PLtXEMg1NxJgmDz53f/dJo2R9s2v7l90McfI23FzUYJjmGVgqkj7FB6tcXPu4NEJnS2PV/En94Uh2mU0QUNRjIIIxY4d0OAYiXYIy1w37LCYkGUSCGhboRYYoAEU+tArizFGMBUmrhV0B+q55C5ILc053TmBzM61Qpevzk7xX7eMd6w9oU5eYv5w4rAlegAHwkBD0OVRavRvqzrn42RQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
Received: from BYAPR05MB5463.namprd05.prod.outlook.com (20.177.185.144) by BYAPR05MB6021.namprd05.prod.outlook.com (20.178.53.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2284.18; Tue, 17 Sep 2019 00:28:21 +0000
Received: from BYAPR05MB5463.namprd05.prod.outlook.com ([fe80::f4f2:f284:d49a:890a]) by BYAPR05MB5463.namprd05.prod.outlook.com ([fe80::f4f2:f284:d49a:890a%4]) with mapi id 15.20.2284.009; Tue, 17 Sep 2019 00:28:21 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Tom Herbert <tom@herbertland.com>, Bob Hinden <bob.hinden@gmail.com>
CC: 6man <6man@ietf.org>
Subject: RE: draft-ietf-6man-icmp-limits-05
Thread-Topic: draft-ietf-6man-icmp-limits-05
Thread-Index: AdVsvnSyTBtOQp3wRoq3q2I/DzoWvQAFKhwAAAHB3YAABRx9gA==
Content-Class:
Date: Tue, 17 Sep 2019 00:28:20 +0000
Message-ID: <BYAPR05MB5463668B642AFDC688685C50AE8F0@BYAPR05MB5463.namprd05.prod.outlook.com>
References: <BYAPR05MB5463C784BD5C5DCD52AAE425AE8C0@BYAPR05MB5463.namprd05.prod.outlook.com> <17B9B735-94F3-405B-9885-21427E9628FD@gmail.com> <CALx6S37vXK-EypbJ_-5iO2QTqPLGQk7Pc6wZXMfAskOxCwKFaA@mail.gmail.com>
In-Reply-To: <CALx6S37vXK-EypbJ_-5iO2QTqPLGQk7Pc6wZXMfAskOxCwKFaA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-09-17T00:28:18.5752244Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=000ed43b-44e2-418b-9e5b-c61f40617a5a; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.2.0.14
dlp-reaction: no-action
x-originating-ip: [66.129.241.10]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 97af9930-5c2b-45d1-cf90-08d73b05f1a4
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600167)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BYAPR05MB6021;
x-ms-traffictypediagnostic: BYAPR05MB6021:
x-ms-exchange-purlcount: 1
x-microsoft-antispam-prvs: <BYAPR05MB6021D63F6C40DE2694A8F277AE8F0@BYAPR05MB6021.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-forefront-prvs: 01630974C0
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(346002)(136003)(39860400002)(396003)(366004)(376002)(199004)(189003)(13464003)(102836004)(6506007)(26005)(76176011)(53546011)(14454004)(486006)(3846002)(11346002)(99286004)(476003)(25786009)(7696005)(5660300002)(2906002)(256004)(14444005)(446003)(74316002)(33656002)(86362001)(4326008)(7736002)(305945005)(71200400001)(71190400001)(55016002)(8936002)(66946007)(52536014)(229853002)(110136005)(6116002)(66446008)(81166006)(9686003)(6306002)(81156014)(76116006)(478600001)(966005)(66066001)(186003)(6246003)(66476007)(64756008)(316002)(6436002)(66556008)(8676002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB6021; H:BYAPR05MB5463.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: m58yZDxLXbHl4RoyRrcQgFRXLZXTW0nQaFBP2egXzdi2lpP8p8aCoBIg2RSEpJ6/0ACoj2ro0facJxPd0TzFfO6GwkdQEEHViSFyn6v5QSG7rRdDjPUhbELnsHviJP4rbupiFA0Wcdix0qXcm0dxDRXydtkMkOM0vI8hiFqRj7YATkDuST5i8yqM6J9KGVXKNk2RU6YMDwp9n7pDaJNWy5OTbxkQujckhJxwr7AddlFob3wCWFv1Tv+XB5/PdkJZlphZ5pWGpex4WFBuOzOJGrYuRND97vY5bG+ufNTmBtAzCXTzaWJvRBlXP/38vAIItVtgnKbk4sE4aVFPgajjZo1ZmO7CGn2znWkfhjxD46dKACoCKLIfyuTHYLonrLLYC5kjEVIdmtrtjnoWLYmEKPkB6B1f2w+Y9KrjOLNyrlc=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 97af9930-5c2b-45d1-cf90-08d73b05f1a4
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Sep 2019 00:28:20.2416 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: aD0FErf92aRkVk6Mym/s9BqGiBi2NfQWSxxaw+kq140aleQpE+5yK3gLhl4PndRw6xM4xYR6rH/F5bmDHXexVA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB6021
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.70,1.0.8 definitions=2019-09-16_09:2019-09-11,2019-09-16 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 suspectscore=0 priorityscore=1501 mlxscore=0 malwarescore=0 lowpriorityscore=0 mlxlogscore=999 bulkscore=0 clxscore=1015 spamscore=0 impostorscore=0 adultscore=0 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1909170002
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/JZDHpyfWcRJ15ctAFn-abllWgAQ>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Sep 2019 00:28:28 -0000

Tom, 

When you send an ICMP Destination Unreachable with code equal to aggregate header limit exceeded, does the pointer always point beyond the end of the IPv6 header chain?

                                                                                            Ron


Juniper Business Use Only

-----Original Message-----
From: Tom Herbert <tom@herbertland.com> 
Sent: Monday, September 16, 2019 6:00 PM
To: Bob Hinden <bob.hinden@gmail.com>
Cc: Ron Bonica <rbonica@juniper.net>; 6man <6man@ietf.org>
Subject: Re: draft-ietf-6man-icmp-limits-05

On Mon, Sep 16, 2019 at 2:10 PM Bob Hinden <bob.hinden@gmail.com> wrote:
>
>
>
> > On Sep 16, 2019, at 11:48 AM, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org> wrote:
> >
> > Tom,
> >
> > In draft-ietf-6man-icmp-limits-05, you propose sending and ICMP Parameter Problem message when the following errors occur:
> >
> >          - Extension header too big
> >          - Extension header chain too long
> >          - Too many options in extension header
> >          - Option too big
> >
> > However, you send an ICMP Destination Unreachable message in response to aggregate header limits.
> >
> > Why not send an ICMP Parameter Problem message in cases?
>
> Good question.  It would make the draft simpler and avoid having to create RFC4884 extension headers.
>

Ron, Bob,

There was already discussion of this on the list.

Originally, Parameter Problem code was defined for this, however that was considered inconsistent with the definition of Parameter Problem
(RFC4443):

"If an IPv6 node processing a packet finds a problem with a field in the IPv6 header or extension headers such that it cannot complete processing the packet"

Aggregate header limits can apply to headers other than just IP header and extension headers (e.g. UDP encapsulation headers). Hence, we went with Destination Unreachable and subsequently why we need to invoke the ICMP extended header format to get the error pointer.

Tom


> Bob
>
>
> >
> >                                                                                          
> > Ron
> >
> >
> > Juniper Business Use Only
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list ipv6@ietf.org Administrative 
> > Requests: 
> > https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/ip
> > v6__;!8WoA6RjC81c!Tr9t_Imk6fHhld_RTnhilL4gppaKBxhvwff7Y6ZeeMo_eoEjPT
> > TXdBfNvMophbc9$
> > --------------------------------------------------------------------
>