Re: Éric Vyncke's No Objection on draft-ietf-6man-icmp-limits-07: (with COMMENT)

Tom Herbert <tom@quantonium.net> Fri, 06 March 2020 21:59 UTC

Return-Path: <tom@quantonium.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DFCE3A0B85 for <ipv6@ietfa.amsl.com>; Fri, 6 Mar 2020 13:59:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.879
X-Spam-Level:
X-Spam-Status: No, score=-1.879 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=quantonium-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H44veU17a79J for <ipv6@ietfa.amsl.com>; Fri, 6 Mar 2020 13:58:49 -0800 (PST)
Received: from mail-ed1-x543.google.com (mail-ed1-x543.google.com [IPv6:2a00:1450:4864:20::543]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B13D3A0B84 for <ipv6@ietf.org>; Fri, 6 Mar 2020 13:58:48 -0800 (PST)
Received: by mail-ed1-x543.google.com with SMTP id e25so4237811edq.5 for <ipv6@ietf.org>; Fri, 06 Mar 2020 13:58:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quantonium-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=eemYLL6Z2O1YA+e8grjYlSw2gXuicR5clwQm2xG/TgM=; b=f7h/rm325fqUe6CNfy5/PUDgfiLkfQfAyKt3CVFZoxzVhvxCf9TOMuh/pADvgyNG4G y+G9ImoQlInoeDTILC86IhU1FjUOSQyehz+nhj/384gdDv29vq6M2qXINVEGeeeKnIrv GlQ9ynUssdJIXBAzL2eKgsudbneyD82AlYbHo+kwo1PXw4PPUncrvhOmE1+6xaR5KG5o W5Vqo5ZIVUpYQOkDSFsqDl2C283yzG5DOv0bXZuVxhoxFt833TUfpyJD7s4+5Uq5xc8r vTj/SVS+j0CaEhIlDOrNEM2sObTWTVctdRhRH8Z4l/lXoxFd8aYXxP6Tpooe7E+t/dQ1 G+PQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=eemYLL6Z2O1YA+e8grjYlSw2gXuicR5clwQm2xG/TgM=; b=oQg8/QvfFt0Idav0J7GzYUnhM1QKM/EkHOrKjcEffEZjaPcjbKHuS3L+D7QUIueLK3 RMgQujKNHsvcSoYmq4LBGpTLyVI9TwVciIG9efXjkQNfG1a4EdC1dZ9q3kWZCNl4IvZy U81ZLXyqh7t03ZEa8tGCPDWx7hUv6TvZgH2RPOmhGd1dMZZmQBS/xRpWSdiEui0+dJ/W teGVr87zM6u7iwIvOxobnvY0O/SltIDeJTzDIXY3/GRlqUsBSglSNLnAvTeETBBCI27X bu7SBXadFwxhHUSqjKX7Nebf54ff0MQwqTpZp4ig1U/+xgYxC2z07dMNnbB+/XV3XF6v 0eFg==
X-Gm-Message-State: ANhLgQ39sI6eDxVc1S1ilBRTMrAxjhaq/iByPZNT5t89marrqvYBjiyc lFSYfBlx6rHSeJ5n7ttp5owfNGBwbjr9DP7yOqG5jw==
X-Google-Smtp-Source: ADFU+vsMwSAaFhFz8wvThuRjNJhzDOiLIUT/cZ3mOxQzZ+310XIRr0IMcS/tmQyyiGzqseHc8sJkT14OmRZmnR/pTY8=
X-Received: by 2002:a50:c31c:: with SMTP id a28mr5659032edb.125.1583531925870; Fri, 06 Mar 2020 13:58:45 -0800 (PST)
MIME-Version: 1.0
References: <158349584610.2156.6067317475048579614@ietfa.amsl.com>
In-Reply-To: <158349584610.2156.6067317475048579614@ietfa.amsl.com>
From: Tom Herbert <tom@quantonium.net>
Date: Fri, 06 Mar 2020 13:58:34 -0800
Message-ID: <CAPDqMeosz3uxstbb1rxgVT8CdLjfev3_fPmsTiTmsfxzaadOXA@mail.gmail.com>
Subject: Re: Éric Vyncke's No Objection on draft-ietf-6man-icmp-limits-07: (with COMMENT)
To: Éric Vyncke <evyncke@cisco.com>
Cc: The IESG <iesg@ietf.org>, draft-ietf-6man-icmp-limits@ietf.org, 6man-chairs@ietf.org, ipv6@ietf.org, Bob Hinden <bob.hinden@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/p9XblF0d6AeuaRxHjOY8lkofyDU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Mar 2020 21:59:05 -0000

On Fri, Mar 6, 2020 at 3:57 AM Éric Vyncke via Datatracker
<noreply@ietf.org> wrote:
>
> Éric Vyncke has entered the following ballot position for
> draft-ietf-6man-icmp-limits-07: No Objection
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
>
> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-6man-icmp-limits/
>
>
>
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> Tom,
>
> Thank you for the work put into this document. It is short and easy to read
> while addressing a real problem in real deployments.
>
> ********************
> *  I was about to add a DISCUSS for not using the right BCP14 RFC 8174 template
> but please FIX this *       (as this is the first review, I would suggest to
> issue today a revised I-D with just this fix *       before other IESG
> reviews). * *  I was also about to ballot a DISCUSS on the comment in section
> 2.4...
> *******************
>
Okay.

> Please find below some non-blocking COMMENTs and NITs. An answer will be
> appreciated.
>
> I hope that this helps to improve the document,
>
Thanks for the review!

> Regards,
>
> -éric
>
> == COMMENTS ==
>
> -- Section 1.2 --
> Just wondering why the "aggregate header limits" has a section on its own. Feel
> free to keep it like it is but this looks weird.
>
It's distinctly different than the other errors. This error can be
applied to other packet headers than IPv6 whereas the rest are only
about IPv6 header or extension header. Hence we needed to use
Destination Unreachable with extended ICMP message instead of
Parameter Problem type.

> -- Section 2 --
> Strongly suggest to use TBA1, TBA2, ... in order to avoid mistakes done by the
> IANA.

Thanks, will do that.

>
> -- Section 2.2 --
> Why not using a new code for 'unrecognized header' by intermediate node ? I
> really wonder why: it can only be confusing to existing implementation.
>
I imagine the host response would be the same.

> Please also ensure what is meant by 'destination' here... I would prefer to
> avoid discussions when a routing-header is used (too many discussions around
> this in 6MAN already)
>
Will make that "final destination"

> -- Section 2.4 --
> How can the original source distinguish among the two potential causes ? Why
> not using two code points? Or am I missing something obvious? I was really
> about to issue a blocking DISCUSS on this one.
>
If the Pointer points to the first byte of an extension header then
the limit on extension headers is inferred. If it points to something
inside extension headers then the length is exceeded. Grant it, that's
not 100% accurate but I don't believe that fine granularity is needed
for host response.

> -- Section 3 --
> Some justifications on why using a different ICMPv6 format would really help
> the reader.
>
Okay, will add some text.

> -- Section 4.1 --
> The wording "1) Real error (existing codes)" looks weird because the code
> points in this documents will also be existing. Why not using "1) RFC 4443
> error codes" ?
>

Will fix.

> -- Section 5.2 --
> Is applicable to RFC 4443 in general, so, I wonder why it is in this document.
>
That was due to feedback from 6man WG to mention reliability of ICMP.

> == NITS ==
>
> -- Section 1.1 --
> If I was picky, then I would argue that "Extension Headers are placed between
> the IPv6 header and the Upper-Layer Header in a packet" is not always true: if
> Next-Header is 59 (No Next Header per RFC 8200 section 4.7) ;-)
>
That's from RFC8200.

> -- Section 2.1 + 3.1--
> s/IPv6 Fields:/IPv6 Header Fields:/

Will fix.
>
>
>