Re: [ipwave] Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34

CARLOS JESUS BERNARDOS CANO <cjbc@it.uc3m.es> Mon, 08 April 2019 19:03 UTC

Return-Path: <cjbc@it.uc3m.es>
X-Original-To: its@ietfa.amsl.com
Delivered-To: its@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AB7A1200A2 for <its@ietfa.amsl.com>; Mon, 8 Apr 2019 12:03:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=it.uc3m.es
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JR9h4F9xUHKS for <its@ietfa.amsl.com>; Mon, 8 Apr 2019 12:03:29 -0700 (PDT)
Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C27312016A for <its@ietf.org>; Mon, 8 Apr 2019 12:03:29 -0700 (PDT)
Received: by mail-wr1-x432.google.com with SMTP id y13so17710592wrd.3 for <its@ietf.org>; Mon, 08 Apr 2019 12:03:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=it.uc3m.es; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=HfHNCBRVWZITsgL5kffMmE3+Ea38mI+6pGL9xF6K1Cw=; b=Ib7qzGHj2SBwezu2GtAMTLlsx3L6JvOKMm/dfrzOEwNfNfKUeC4ljmNvLLYsh2jDba cXsdvQ0W6AgnBfrauJccInvWutUvL10bjaWGONNQvzjhjCaDIfipyUXNhtEZVuXJD8fh Yw1HhQ3fG/5zJU1MIQy3qn8eH9G3me8/AcVQLmtQTX1en5DSU8pubDpiPXSxuFVr6FO2 r0N/4Hs+p3egVHoZxZVpm47d7MdThdwtZBbo8KdD+7P+3o8Jygkj2TF91T/Bwz2tEtb+ 8x4lYd7FbcnMnWeZtyWkQgyfQDiknRudmQx9dQK6UWI+HppfbVbjouygHufKEAsFEp66 437Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=HfHNCBRVWZITsgL5kffMmE3+Ea38mI+6pGL9xF6K1Cw=; b=DG0buo7H7UHtc5L21FbNKjSQwMHpL31LJFb24qevmyBUIZ5P9SbR3MsOZingiwrxbw 7Mf3NeDlQRAOAP/fQgbXgIqAMJ0NSzM6lUr0S44/1Hg53bPx7ttYpd9gZZ0BRYB2RG84 EHAh8EaGVwTtj1In/DZEzlb+imJVHDdlW2YRJ5xlDj8dWo7Lip6RApWKqhU1QXcRbIWA Fx6ZFTzOs4Rx/co6KS6xRq2vikZR7Vw4ND4epvfwvJDrZc6Ny62MZGEt6DURkJU3taPk TbvIVw5gKP9rCEArw2zLGXSQJlmOv6Yxqc6LmTBgxQ60mtDNCL8a23/JhNl3x+Pcmitf V/uQ==
X-Gm-Message-State: APjAAAWf15IUEHsN60IPBlBiRMGKhWV7/wYR2WUOcn5f9xji8pvPhcFo 65+J3qHkxdtVirICNiE+SFo0sQtSMKPsuOM5E4Dw7A==
X-Google-Smtp-Source: APXvYqzxkQWcgRlGeyJDDvMIMUmjPYNykep8+Yw9wSKrT7VEAgr9SvMyR2fpxBhDn+2sVEAvl5vBVQXwIv0jnWskA78=
X-Received: by 2002:adf:fd04:: with SMTP id e4mr20288236wrr.190.1554750207165; Mon, 08 Apr 2019 12:03:27 -0700 (PDT)
MIME-Version: 1.0
References: <155169869045.5118.3508360720339540639@ietfa.amsl.com> <9d5c8168-a915-358e-d7eb-0362cad96d81@gmail.com> <27AE185B-1D95-4DCD-8C76-AECE90E46802@cisco.com> <MN2PR11MB35651C4D8957516CF034BFADD8510@MN2PR11MB3565.namprd11.prod.outlook.com>
In-Reply-To: <MN2PR11MB35651C4D8957516CF034BFADD8510@MN2PR11MB3565.namprd11.prod.outlook.com>
From: CARLOS JESUS BERNARDOS CANO <cjbc@it.uc3m.es>
Date: Mon, 08 Apr 2019 21:03:11 +0200
Message-ID: <CALypLp9SuURGJ4f8FBzZg1WQOo9B4xsB8Y4uGW+Jtfm2b=8Sww@mail.gmail.com>
To: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
Cc: Alexandre Petrescu <alexandre.petrescu@gmail.com>, "its@ietf.org" <its@ietf.org>, "int-ads@tools.ietf.org" <int-ads@tools.ietf.org>, "Stanley, Dorothy" <dorothy.stanley@hpe.com>
Content-Type: multipart/alternative; boundary="000000000000d02d010586097dd4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/its/TFl-xV_yrwnqIALmpnI8E3b-Fso>
Subject: Re: [ipwave] Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34
X-BeenThere: its@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IPWAVE - IP Wireless Access in Vehicular Environments WG at IETF <its.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/its>, <mailto:its-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/its/>
List-Post: <mailto:its@ietf.org>
List-Help: <mailto:its-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/its>, <mailto:its-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Apr 2019 19:03:34 -0000

Hi Pascal, all,

Sorry to jump late into this discussion.

Thanks for the provided text.

I think it contains good parts that I'd recommend authors to consider
incorporating into the draft. I see you are already discussing about that
and I hope the WG reaches an agreement on how to modify current text.

I have some comments from my side:

- I tend to agree with Alex in that I'd skip the RECOMMENDED part of the
text (referring to RFC 8505). I agree that some pieces of RFC 8505 could be
adapted to be used in OCB, but I think using RECOMMENDED with further
analysis within the WG is too much. I'd rather prefer that RFC 8505 is
referenced in the draft as a solution that could be used as starting point
to enhance ND over OCB (but we have agreed already in the WG that ND
enhacements are outside the scope of current draft).

- I see good points in Pascal's text, but probably need some language
fixing, as it might lead to some questions as the Alex has pointed out.

- I'd appreciate if we all acknowledge here all the work Alex (and the rest
of the authors) have been doing so far, as well as Pascal's help. Please,
try to keep the discussion positive. That _always_ helps.

Thanks,

Carlos

On Fri, Apr 5, 2019 at 5:09 PM Pascal Thubert (pthubert) <pthubert@cisco.com>
wrote:

> Dear all;
>
>
>
> As promised I put together some words on using IPv6 ND and then RFC 8505
> for OCB. Please find attached early text. This could become a section 4.7.
>
> Note that RFC 8505 enables a DAD operation for both link local and global
> addresses, the associated global prefix being owned by either a car or a
> RSU. RSUs connected to the internet can advertise a default router
> preference to indicate they are willing to relay packets for global
> addresses.
>
> The attached text impacts other sections in particular the discussion on
> global addresses which is somehow avoided in the current draft and could be
> reintroduced.
>
>
>
> Comments welcome : )
>
>
>
> Pascal
>
>
>
> *From:* Pascal Thubert (pthubert)
> *Sent:* jeudi 28 mars 2019 11:29
> *To:* Alexandre Petrescu <alexandre.petrescu@gmail.com>
> *Cc:* its@ietf.org
> *Subject:* Re: Intdir early review of
> draft-ietf-ipwave-ipv6-over-80211ocb-34
>
>
>
> Yes Alex. Also as an offer to help...
>
>
>
> Regards,
>
>
>
> Pascal
>
>
> Le 28 mars 2019 à 11:08, Alexandre Petrescu <alexandre.petrescu@gmail.com>
> a écrit :
>
> Pascal,
>
> Should we treat these two reviews (iotdir and intdir reviews) as just one?
>
> The contents appear to me to be the same.
>
> Alex
>
> Le 04/03/2019 à 12:24, Pascal Thubert a écrit :
>
> Reviewer: Pascal Thubert
>
> Review result: Not Ready
>
>
>
> Reviewer: Pascal Thubert
>
> Review result: Not ready. Need to clarify IEEE relationship, IOW which SDO
>
> defines the use of L2 fields, what this spec enforces vs. recognizes as being
>
> used that way based on IEEE work. The use of IPv6 ND requires a lot more
>
> thoughts, recommendation to use 6LoWPAN ND. The definition of a subnet is
>
> unclear. It seems that RSUs would have prefixes but that is not discussed.
>
>
>
> I am an assigned INT and IOT directorates reviewer for <
>
> draft-ietf-ipwave-ipv6-over-80211ocb-34 >. These comments were written
>
> primarily for the benefit of the Internet Area Directors. Document editors and
>
> shepherd(s) should treat these comments just like they would treat comments
>
> from any other IETF contributors and resolve them along with any other Last
>
> Call comments that have been received. For more details on the INT Directorate,
>
> see https://datatracker.ietf.org/group/intdir/about/
>
>
>
> Majors issues
>
> -----------------
>
>
>
> “
>
>
>
> o  Exceptions due to different operation of IPv6 network layer on
>
>       802.11 than on Ethernet.
>
>
>
> “
>
> Is this doc scoped to OCB or 802.11 in general? Is there an expectation that an
>
> implementer of IPv6 over Wi-Fi refers to this doc? Spelled as above, it seems
>
> that you are defining the LLC. Figure 1 shows the proposed adaptation layer as
>
> IEEE LLC work. Who defines those fields, IETF or IEEE, or mixed? Who defines
>
> their use? If this spec defines a new LLC header (vs. how to use an IEEE field)
>
>  then it should be very clear, and the newly defined fields should be isolated
>
> from IEEE fields.
>
>
>
> "
>
>    The IPv6 packet transmitted on 802.11-OCB MUST be immediately
>
>    preceded by a Logical Link Control (LLC) header and an 802.11 header.
>
>
>
> "
>
> Is there anything new or specific to OCB vs. classical 802.11 operations?
>
> If/when this is echoing the IEEE specs then this text should not use uppercase
>
> but say something like: 'Per IEEE Std 802.11, the IPv6 packet transmitted on
>
> 802.11-OCB is immediately  preceded by a Logical Link Control (LLC) header and
>
> an 802.11 header ...'
>
>
>
> different things? Why define both?
>
>
>
> "   An 'adaptation' layer is inserted between a MAC layer and the
>
>    Networking layer.  This is used to transform some parameters between
>
>    their form expected by the IP stack and the form provided by the MAC
>
>    layer.
>
> "
>
> Is this different from what an AP does when it bridges Wi-Fi to Ethernet? Is
>
> this IETF business?
>
>
>
> "
>
>    The Receiver and Transmitter Address fields in the 802.11 header MUST
>
>    contain the same values as the Destination and the Source Address
>
>    fields in the Ethernet II Header, respectively.
>
> "
>
> Same,  this is IEEE game isn't it?
>
>
>
> "
>
>
>
> Solutions for these problems SHOULD
>
>    consider the OCB mode of operation.
>
> "
>
> This is not specific enough to be actionable. I suggest to remove this sentence.
>
> It would be of interest for the people defining those solutions to understand
>
> the specific needs of OCB vs. Wi Fi, but I do not see text about that.
>
>
>
> "
>
>
>
> The method of forming IIDs
>
>    described in section 4 of [RFC2464] MAY be used during transition
>
>    time.
>
> "
>
> Contradicts section 4.3 that says
>
> "
>
> Among these types of
>
>    addresses only the IPv6 link-local addresses MAY be formed using an
>
>    EUI-64 identifier.
>
> "
>
>
>
> "
>
>
>
> This
>
>    subnet MUST use at least the link-local prefix fe80::/10 and the
>
>    interfaces MUST be assigned IPv6 addresses of type link-local.
>
> "
>
> If this is conforming IPv6 then the MUST is not needed.
>
>
>
> "
>
>    A subnet is formed by the external 802.11-OCB interfaces of vehicles
>
>    that are in close range (not by their in-vehicle interfaces).
>
> "
>
> Is the definition transitive? Do we really get a subnet?
>
>  A is close to  B who is close to C .... to Z, makes Paris one subnet! Are you
>
>  talking about a link, rather?
>
>
>
> "
>
>    The Neighbor Discovery protocol (ND) [RFC4861] MUST be used over
>
>    802.11-OCB links.
>
> "
>
>
>
> IPv6 ND is not suited for a non-broadcast network. How does DAD work?
>
> Maybe you could consider RFC 6775 / RFC 8505 instead.
>
>
>
> "
>
> In the moment the MAC address is changed
>
>    on an 802.11-OCB interface all the Interface Identifiers of IPv6
>
>    addresses assigned to that interface MUST change.
>
> "
>
> Why is that? This is unexpected, and hopefully wrong.
>
>
>
> Minor issues
>
> ---------------
>
>
>
> "   OCB (outside the context of a basic service set - BSS): A mode of
>
>    operation in which a STA is not a member of a BSS and does not
>
>    utilize IEEE Std 802.11 authentication, association, or data
>
>    confidentiality.
>
>
>
>    802.11-OCB: mode specified in IEEE Std 802.11-2016 when the MIB
>
>    attribute dot11OCBActivited is true.  Note: compliance with standards
>
>    and regulations set in different countries when using the 5.9GHz
>
>    frequency band is required.
>
> "
>
>
>
> Are these 2 different things?
>
>
>
> "
>
> Among these types of
>
>  addresses only the IPv6 link-local addresses MAY be formed using an
>
>   EUI-64 identifier.
>
> "
>
> This text should not be in a LL specific section since it deals with the other
>
> addresses. Maybe rename the section to "addressing" or something?
>
>
>
> "
>
>    For privacy, the link-local address MAY be formed according to the
>
>    mechanisms described in Section 5.2.
>
> "
>
> The MAY is not helpful. I suggest to remove the sentence that does not bring
>
> value vs. 5.2
>
>
>
> Could you make sections 4.3 and 4.5 contiguous?
>
>
>
> "
>
> If semantically
>
>    opaque Interface Identifiers are needed, a potential method for
>
>    generating semantically opaque Interface Identifiers with IPv6
>
>    Stateless Address Autoconfiguration is given in [RFC7217].
>
>
>
>    Semantically opaque Interface Identifiers, instead of meaningful
>
>    Interface Identifiers derived from a valid and meaningful MAC address
>
>    ([RFC2464], section 4), MAY be needed in order to avoid certain
>
>    privacy risks.
>
>
>
> ...
>
>
>
>    In order to avoid these risks, opaque Interface Identifiers MAY be
>
>    formed according to rules described in [RFC7217].  These opaque
>
>    Interface Identifiers are formed starting from identifiers different
>
>    than the MAC addresses, and from cryptographically strong material.
>
>    Thus, privacy sensitive information is absent from Interface IDs, and
>
>    it is impossible to calculate the initial value from which the
>
>    Interface ID was calculated.
>
>
>
> "
>
> Duplicate and mis ordered text, isn't it?
>
>
>
> " For this reason, an attacker may realize many
>
>    attacks on privacy.
>
> "
>
> Do we attack privacy? Maybe say that privacy is a real concern, and maybe move
>
> that text to security section?
>
>
>
> "
>
>    The way Interface Identifiers are used MAY involve risks to privacy,
>
>    as described in Section 5.1.
>
> "
>
> Also duplicate
>
>
>
> Nits
>
> ------
>
>
>
> "
>
>    IP packets MUST be transmitted over 802.11-OCB media as QoS Data
>
>    frames whose format is specified in IEEE Std 802.11.
>
> "
>
> Please add link to the reference
>
>
>
> " the 802.11 hidden node"
>
> Do not use 802.11 standalone (multiple occurrences).
>
> => "the IEEE Std. 802.11 [ ref ] hidden node", or just "the hidden terminal".
>
>
>
> BCP 14 text:
>
>
>
> Suggest to use this text:
>
> “
>
>    The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
>
>    "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
>
>    "OPTIONAL" in this document are to be interpreted as described in
>
>    https://tools.ietf.org/html/bcp14 https://tools.ietf.org/html/bcp14
>
>    [https://tools.ietf.org/html/rfc2119][RFC8174] when, and only when, they
>
>    appear in all capitals, as shown here.
>
>
>
> “
>
>
>
> All the best
>
>
>
> Pascal
>
>
>
>
>
>
>
>