Review of draft-ietf-6man-rfc1981bis-02

Tim Chown <Tim.Chown@jisc.ac.uk> Mon, 18 July 2016 11:00 UTC

Return-Path: <tim.chown@jisc.ac.uk>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9BBD12D854 for <ipv6@ietfa.amsl.com>; Mon, 18 Jul 2016 04:00:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.111
X-Spam-Level:
X-Spam-Status: No, score=-4.111 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=jisc365.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GodvgmUuiqik for <ipv6@ietfa.amsl.com>; Mon, 18 Jul 2016 04:00:54 -0700 (PDT)
Received: from eu-smtp-delivery-189.mimecast.com (eu-smtp-delivery-189.mimecast.com [146.101.78.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BADC712D88D for <6man@ietf.org>; Mon, 18 Jul 2016 04:00:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jisc365.onmicrosoft.com; s=selector1-jisc-ac-uk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=sLIqByaYqeOxFbXI0OJMfbMPlCYH/FHmpDaQVKgjpHA=; b=BgJ+uD2aGzQowEw6xxivQoC3kY6e8+APzGyhqg59PoqxvT+Ast4QO/nFP9k9mEmvzMj7ZqKxqcyticLJneJeWM2fAQRtX3WDsFR6KQ6RCJR80Fn8aPa6xmz36Tg0mtXXkTutKyte1PBvHVsBV9W38t1QzD8Jr7rtcjdAyCz7Xho=
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01lp0215.outbound.protection.outlook.com [213.199.154.215]) (Using TLS) by eu-smtp-1.mimecast.com with ESMTP id uk-mta-13-ptn2HOdXOIe4uoCgBRcT_A-1; Mon, 18 Jul 2016 12:00:38 +0100
Received: from AMSPR07MB455.eurprd07.prod.outlook.com (10.242.106.148) by AMSPR07MB456.eurprd07.prod.outlook.com (10.242.106.149) with Microsoft SMTP Server (TLS) id 15.1.534.14; Mon, 18 Jul 2016 11:00:36 +0000
Received: from AMSPR07MB455.eurprd07.prod.outlook.com ([10.242.106.148]) by AMSPR07MB455.eurprd07.prod.outlook.com ([10.242.106.148]) with mapi id 15.01.0539.019; Mon, 18 Jul 2016 11:00:36 +0000
From: Tim Chown <Tim.Chown@jisc.ac.uk>
To: "6man@ietf.org" <6man@ietf.org>
Subject: Review of draft-ietf-6man-rfc1981bis-02
Thread-Topic: Review of draft-ietf-6man-rfc1981bis-02
Thread-Index: AQHR4OOcHTdtd97/T0uoAf+Lc9/n0Q==
Date: Mon, 18 Jul 2016 11:00:36 +0000
Message-ID: <89394068-B340-4B04-BA26-A3876E53F66C@jisc.ac.uk>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3124)
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [2001:67c:370:152:91c8:1613:ed42:694]
x-ms-office365-filtering-correlation-id: b09ee07c-04df-4130-0af4-08d3aefabf3a
x-microsoft-exchange-diagnostics: 1; AMSPR07MB456; 20:BnGb1nsQ4gr5PpYdEIaA0SIRN8mrue2F9BO3A0oDZnRg0gtOic6u1jz/Hqa9OS1lAzsSXIPCfddEhM78xHUEMu3sBWZWlTWYCryUjl6R0dje6QQAeAoHrftDc+UPaUZzRYvW6YgvZm+71j942c+VIgdzbZxAxY21MpFEuv5aatI=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AMSPR07MB456;
x-microsoft-antispam-prvs: <AMSPR07MB4561708EC7D804FBD590342D6360@AMSPR07MB456.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(192374486261705);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001); SRVR:AMSPR07MB456; BCL:0; PCL:0; RULEID:; SRVR:AMSPR07MB456;
x-forefront-prvs: 00073DB75F
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(189002)(199003)(586003)(305945005)(81166006)(2501003)(10400500002)(92566002)(57306001)(2906002)(8676002)(105586002)(106356001)(82746002)(2351001)(106116001)(101416001)(229853001)(3660700001)(81156014)(77096005)(4326007)(3280700002)(7846002)(50226002)(102836003)(7736002)(2900100001)(74482002)(6116002)(8936002)(11100500001)(122556002)(33656002)(189998001)(50986999)(86362001)(230783001)(83716003)(87936001)(110136002)(68736007)(5002640100001)(36756003)(5640700001)(97736004)(3826002)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:AMSPR07MB456; H:AMSPR07MB455.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-ID: <BA30942AA74A5A4A9C9F148FE24D2C57@eurprd07.prod.outlook.com>
MIME-Version: 1.0
X-OriginatorOrg: jisc.ac.uk
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2016 11:00:36.0749 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 48f9394d-8a14-4d27-82a6-f35f12361205
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMSPR07MB456
X-MC-Unique: ptn2HOdXOIe4uoCgBRcT_A-1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/cd_gSwC1LmcyNc1MtqMrGoh9P98>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Jul 2016 11:00:58 -0000

Hi,

Ole asked for a review of draft-ietf-6man-rfc1981bis-02.

Overall, the document looks close to being ready. But an important open question is whether PMTUD meets all the criteria for promotion to IS, as per RFC6410, i.e. that it has "a high degree of technical maturity and by a generally held belief that the specified protocol or service provides significant benefit to the Internet community” and it has "widespread deployment and successful operational experience”. The question is on the word “successful”, given the robustness issues of PTB message transmission and receipt. 

Related, one general comment is the level to which PLPMTUD (RFC4821) is ‘pushed’ in this document. It is mentioned in Section 1, but then not elsewhere in the document, where Packetization Layer PMTUD issues are discussed in a few places, e.g. Section 5.1 paragraph 2 which seems to suggest not using the 4821 approach.  Some consistency might be desirable here?

There is a large "Implementation Issues" section (Section 5), from the node’s perspective, but not much that I can see on handling of PMTUD-related messages (PTB) by nodes on a path from the reporter to the original packet sender. There’s a little on this in the Security Considerations. Is there, for example, value in adding a reference to RFC4890 somewhere, and that failure of sites to adhere to 4890 is a reason for using the 4821 approach?

Other comments:

Section 1:

p.3 does the minimal implementation text belong here, or in the IPv6 Node Requirements document (which is also under revision)?

p.3 after the “Nodes not implementing…” paragraph, is it worth noting that use of 1280 MTU gives some level of robustness/predictability at the expense of reduced performance? A 1280 MTU is being used in practice in a number of scenarios/deployments. And in 2460-bis we have text that discourages fragmentation and prefers transmission of 1280 MTU non-fragmented packets (section 5, penultimate paragraph). 

p.3 the note here on PLPMTUD (RFC4821) is appropriate, but as stated above, is this sentiment carried consistently through the rest of the document?  As it stands, it seems this note was parachuted in here, without other parts of 1981bis being updated to reflect the addition.

p.3 further, is use of one, either, or both approaches recommended, given the vagueness of the text about “delivery of ICMP messages not being assured” (for some value of “assured”)?  e.g. RFC4821 says it relaxes the requirements of RFC1981 and “resolves robustness problems”, but the text here doesn’t go further.  Does it need to?

Section 4:

p.6 do we have confidence that the 5 minute ‘MUST’ here is observed in common implementations?  (I don’t know, but if moving to IS we should check on existing practice?)

Section 5:

p.7 Second para in 5.1, as above, the text isn’t wholly in sync with advice on use of RFC4821?

p.7 last para of 5.1, in 2460-bis we say unnecessary fragmentation is “discouraged”.  A reference to [FRAG] is used, but is dated; there was also draft-bonica-6man-frag-deprecate-02, which expresses sentiment but was considered too “drastic" to be adopted by 6man.

p.8 if ND is mentioned here, should we cite RFC6980 on not fragmenting ND messages?

p.8 there’s mention here of RH0, which of course is deprecated; there are other valid RH types though, but this text needs updating to remove reference to RH0. It might also be worth adding a pointer here to the text in 2460-bis about not by default using the reverse path from any RH to send an ICMP message back to the sender (section 8.4 of 2460-bis)?  

p.10 In 5.4, TCP layer interactions, referencing RFC7414 might be useful reinforcement.

p.10 do we have examples of the 10 minute rule on stale PMTU information being implemented, and feedback from that? (Again, I don’t know, but…)

p.11 there’s more packetization layer commentary here in the bottom half of the page; again how does this sit with RFC4821?

p.12 is it worth a Transport Area person reviewing the examples of other transport protocols given here, and adding more topical examples?

Section 6:

p.13 while a ‘malicious party’ may cause problems by stopping a ‘victim’ receiving Packet Too Big messages, failure of sites to adhere to RFC4890 is probably a more likely cause. Should this be mentioned somewhere?

p.13 is it worth adding a note about nodes on a path inserting an EH potentially causing PTB messages to go to the original source and not the ‘offender’ that made the packet too big?

Tim