RE: Thoughts on address selection

"Dan Wing" <dwing@cisco.com> Wed, 02 December 2009 06:19 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7C6453A6835 for <ipv6@core3.amsl.com>; Tue, 1 Dec 2009 22:19:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.343
X-Spam-Level:
X-Spam-Status: No, score=-6.343 tagged_above=-999 required=5 tests=[AWL=0.256, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dg+sSfv54O6O for <ipv6@core3.amsl.com>; Tue, 1 Dec 2009 22:19:19 -0800 (PST)
Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by core3.amsl.com (Postfix) with ESMTP id 117033A67B5 for <ipv6@ietf.org>; Tue, 1 Dec 2009 22:19:18 -0800 (PST)
Authentication-Results: sj-iport-4.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-AV: E=Sophos;i="4.47,327,1257120000"; d="scan'208";a="56385875"
Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-4.cisco.com with ESMTP; 02 Dec 2009 06:19:10 +0000
Received: from dwingwxp01 ([10.32.240.195]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id nB26JAg1013625; Wed, 2 Dec 2009 06:19:10 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Stig Venaas' <stig@venaas.com>, 'Fred Baker' <fred@cisco.com>
References: <F25A2D83-2504-4354-90BB-4CD2B0D3D743@cisco.com> <BB56240F3A190F469C52A57138047A030387A09C@xmb-rtp-211.amer.cisco.com> <alpine.BSF.2.00.0911101724110.4034@mignon.ki.iif.hu> <4553CA36-9AF3-427C-BA03-1B9CDF487C32@cisco.com> <40B8A36C-A018-48DF-9D6A-E940E1A2E92B@nttv6.net><62B2E1A8-B367-43B6-9C1C-CFCD819950D0@cisco.com> <4B044080.4060604@venaas.com>
Subject: RE: Thoughts on address selection
Date: Tue, 01 Dec 2009 22:19:10 -0800
Message-ID: <006f01ca7317$5cad8c40$c3f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-reply-to: <4B044080.4060604@venaas.com>
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcpofzyUp0KRXKTWRYa6FC/dD+kVZAKmAM8w
Cc: draft-ietf-6man-addr-select-sol@tools.ietf.org, draft-ietf-6man-addr-select-considerations@tools.ietf.org, 'IETF IPv6 Mailing List' <ipv6@ietf.org>, 'Mohacsi Janos' <mohacsi@niif.hu>, draft-arifumi-6man-addr-select-conflict@tools.ietf.org
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Dec 2009 06:19:22 -0000

(catching up on an old thread.) 

> -----Original Message-----
> From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On 
> Behalf Of Stig Venaas
> Sent: Wednesday, November 18, 2009 10:44 AM
> To: Fred Baker
> Cc: draft-ietf-6man-addr-select-sol@tools.ietf.org; IETF IPv6 
> Mailing List; 
> draft-ietf-6man-addr-select-considerations@tools.ietf.org; 
> Mohacsi Janos; draft-arifumi-6man-addr-select-conflict@tools.ietf.org
> Subject: Re: Thoughts on address selection
> 
> Fred Baker wrote:
> > 
> > On Nov 18, 2009, at 6:22 PM, Arifumi Matsumoto wrote:
> > 
> >> I guess that is because if you force to try all the pairs, 
> it perfectly
> >> ignores the address selection manner defined in RFC 3484, and thus,
> >> it gives us not little impact.
> > 
> > If they space them closely and run them in parallel, I 
> guess I don't see 
> > the impact. Imagine you have five addresses and your peer has five 
> > addresses, so there are 25 pairs. Imagine you are spacing 
> the SYNs 10 ms 
> > apart. Imagine that the only pair that works is the last 
> one you try. 
> 
> I'm a bit worried about this. If e.g. the host is 100ms (RTT) away and
> 10 combinations work, you may end up creating TCP state (and getting
> syn-acks back) on the destination host for 10 connections, 

Are there servers that don't use SYN-cookies now-a-days?

> while you are
> only going to use one.
> 
> I feel the delay between then should ideally be a bit longer than the
> RTT. Which is fine if you only try a few combinations. Of course one
> problem is that you don't really know what the RTT will be.

If I knew the RTT...

-d


> Stig
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------