RE: I-D Action: draft-ietf-6man-oversized-header-chain-01.txt

"Eric Vyncke (evyncke)" <evyncke@cisco.com> Tue, 17 July 2012 14:38 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52ADA21F86C1 for <ipv6@ietfa.amsl.com>; Tue, 17 Jul 2012 07:38:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.299
X-Spam-Level:
X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltzJaPXACrRb for <ipv6@ietfa.amsl.com>; Tue, 17 Jul 2012 07:38:55 -0700 (PDT)
Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id 566D021F86C4 for <ipv6@ietf.org>; Tue, 17 Jul 2012 07:38:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=evyncke@cisco.com; l=3053; q=dns/txt; s=iport; t=1342535983; x=1343745583; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=ufkDCtBvrBV7lE55t1izWBj0ARynZmszXZ3WyDz729M=; b=lM7O6W91SFssBRWUh9kOGx8tTIpmhIfA+1Hj0T6/owFaQz81TiWOgVa1 Gv4p1YyySnSn0b40cCoD09rfv0MmUjRqPJfkYTsS0V1Rtp8s3wPp1CzpM 7D9+Hbat1Fx991C2hwrXqOvNOou/wykqatath/1JCBHms5a7MShbVbjzu o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av8EALh3BVCtJXG9/2dsb2JhbABFuVKBB4IgAQEBBBIBZgwEAgEIDgMEAQEBCh0HMhQJCAIEDgUIGodrnQmgMYtAGoVNYAOIFptJgWaCX4Ff
X-IronPort-AV: E=Sophos;i="4.77,603,1336348800"; d="scan'208";a="102647159"
Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-7.cisco.com with ESMTP; 17 Jul 2012 14:39:43 +0000
Received: from xhc-aln-x01.cisco.com (xhc-aln-x01.cisco.com [173.36.12.75]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id q6HEdgQw032514 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 17 Jul 2012 14:39:42 GMT
Received: from xmb-aln-x02.cisco.com ([169.254.5.178]) by xhc-aln-x01.cisco.com ([173.36.12.75]) with mapi id 14.02.0298.004; Tue, 17 Jul 2012 09:39:42 -0500
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: Fernando Gont <fgont@si6networks.com>
Subject: RE: I-D Action: draft-ietf-6man-oversized-header-chain-01.txt
Thread-Topic: I-D Action: draft-ietf-6man-oversized-header-chain-01.txt
Thread-Index: AQHNY5uf9NPwb/+GJkuSbbB/fIVyipctA4xwgADFgwD//8KRsA==
Date: Tue, 17 Jul 2012 14:39:42 +0000
Message-ID: <97EB7536A2B2C549846804BBF3FD47E104F17A@xmb-aln-x02.cisco.com>
References: <20120716213830.29978.99834.idtracker@ietfa.amsl.com> <97EB7536A2B2C549846804BBF3FD47E104C050@xmb-aln-x02.cisco.com> <5005656E.1020101@si6networks.com>
In-Reply-To: <5005656E.1020101@si6networks.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.55.185.70]
x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19046.000
x-tm-as-result: No--61.553600-8.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "ipv6@ietf.org" <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jul 2012 14:38:56 -0000

Fernando,

Fully agree with your first change. Just for the pleasure chatting: BGP is indeed an app while ICMP is the control part of the network layer, let's reserve a beer to discuss about this. 

Regarding the 'IPv6 header chain', indeed RFC 2460 does not define 'chain' but specifically write about 'IPv6 extension headers' as w/o upper-layer protocol, hence, 'IPv6 header chain' could be confusing. I.e. I am using this wording to address the extension header chain (ellipsis of mine). Your I-D clearly defines it so no big deal, just slightly confusing. I would prefer the word 'IPv6 header chain + next-layer header' but this is quite long of course.

-éric

> -----Original Message-----
> From: Fernando Gont [mailto:fgont@si6networks.com]
> Sent: mardi 17 juillet 2012 15:15
> To: Eric Vyncke (evyncke)
> Cc: ipv6@ietf.org
> Subject: Re: I-D Action: draft-ietf-6man-oversized-header-chain-01.txt
> 
> Hi, Eric,
> 
> Thanks so much for your feedback! -- Please find my comments inline...
> On 07/17/2012 07:35 AM, Eric Vyncke (evyncke) wrote:
> > As I said in Paris, very useful I-D which is really important for
> stateless firewalls (read switch ACL).
> >
> > Two minor comments:
> > - section 2.0 I would also explicitly add ICMP in addition to UDP &
> > TCP
> 
> How about e.g. s/UDP/ICMPv6/, since, after all, "UDP" was just there as an
> example? (I'd prefer to do this rather to add yet another protocol, since it
> might lead people to think that the list is exhaustive.. when it's not).
> 
> 
> > (as ICMP is not really an upper-layer protocol as it is the control
> > engine of the network layer)
> 
> From the point of view of encapsulation, I view ICMP as an upper layer
> protocol -- although it clearly provides a function at lower layers.
> 
> A similar example would be BGP, which is an "app" protocol, but provides
> functions for the network layer.
> 
> 
> > - not sure whether an upper-layer header could strictly be part on the
> > IPv6 extension header chain (at least not per RFC 2460)
> 
> Well, I'd consider the upper-layer header being part of the "ipv6 header
> chain" (*) since they are identified with the same namespace used for
> extension headers.
> 
> (*) I've just skimmed through RFC 2460, and it doesn't mention/define the
> term "header chain".
> 
> 
> Two possible options:
> 1) Leave the doc "as is"
> 
> 2) s/IPv6 header chain/header chain/
> This one might address the issue you've raised, but then some might argue
> that "the entire header chain could also mean that e.g. an app-layer header
> should be included".
> 
> 
> I'd rather stick with 1, but I'm certainly open to suggestions. Thoughts?
> 
> 
> 
> > Even as the I-D is, it is ready for WGLC IMHO
> 
> Thanks!
> 
> Best regards,
> --
> Fernando Gont
> SI6 Networks
> e-mail: fgont@si6networks.com
> PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
> 
> 
> 
>