Re: [ipwave] Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34

"Pascal Thubert (pthubert)" <pthubert@cisco.com> Mon, 08 April 2019 12:59 UTC

Return-Path: <pthubert@cisco.com>
X-Original-To: its@ietfa.amsl.com
Delivered-To: its@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28E0C1202E9; Mon, 8 Apr 2019 05:59:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.49
X-Spam-Level:
X-Spam-Status: No, score=-14.49 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=cBXGQwf4; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=MvfiSF7H
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9Rq7HlANrlP; Mon, 8 Apr 2019 05:58:59 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA9071203D2; Mon, 8 Apr 2019 05:58:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=40080; q=dns/txt; s=iport; t=1554728338; x=1555937938; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=rQdJxz8IakhxmVvxpkoEqgDqeIuI2T5oCcOB2TiwcJw=; b=cBXGQwf40K0J/D2t+fsMsd8GXgPM9ncLfafpfmuGR90aEENKbJ1gneaY 6U4lXL2wYdL5kJXh+FvOKXnut7JzDRsnxO+oo81rHKD7xtOyQOP9uXhSA VAqQadzbwq/Ujzqvo4tYlJm05QzT4BbNvXXegNZ6mV2F1aV43dxWt2rUB 8=;
IronPort-PHdr: 9a23:rxsJIxRMb6L8EAj92SC9e+oGQdpsv++ubAcI9poqja5Pea2//pPkeVbS/uhpkESXBNfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH15g640NmhA4RsuMCEn1NvnvOjQmHNlIWUV513q6KkNSXs35Yg6arw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0ALAACxRKtc/4gNJK1lGgEBAQEBAgEBAQEHAgEBAQGBUQUBAQEBCwGBDi8pJwNoVCAECyeEDoNHA4RSilSCV4k4jWCBLoEkA1QOAQEjCYRAAheFTiI0CQ0BAQMBAQkBAgECbRwMhUoBAQEBAyMKEwEBMAcBDwIBCBEEAQEhCgICAh8RHQgCBAENBQgTgwiBEUwDFQECDKI2AooUcYEvH4JaAQEFhHgNC4IMAwWBMAGEXoQegkoXgUA/gRFGgkw+ghpHAQEDgWAVFoJdMYImijwSEoI2hC6HYIwvNgkCiAGEHoQeg16CBYNOgkgFiH2DP4tThiKBRIk8glwCBAIEBQIOAQEFgU84gVZwFRqCWQEzggqBJAECgkiFFIU/coEoj0UBAQ
X-IronPort-AV: E=Sophos;i="5.60,325,1549929600"; d="scan'208,217";a="258575158"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Apr 2019 12:58:57 +0000
Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id x38Cwve9001163 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 8 Apr 2019 12:58:57 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Apr 2019 07:58:57 -0500
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Apr 2019 07:58:56 -0500
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 8 Apr 2019 07:58:56 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rQdJxz8IakhxmVvxpkoEqgDqeIuI2T5oCcOB2TiwcJw=; b=MvfiSF7HtTSpokfaItq91oeQRVzD9G4qn0A9PzVEJbNKUKxwIjlFOryCQKvgcxYEqmix6lk2XxYl9bXo7keR5XmbXIXgL2lt6lekBLHpSq/XCCm7fsGY3f3luD8D1zE7bGDvAhU4hrXHGsgdbVk38VOrtHKw9wWnXIEqBf67NXw=
Received: from MN2PR11MB3565.namprd11.prod.outlook.com (20.178.250.159) by MN2PR11MB3758.namprd11.prod.outlook.com (20.178.253.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.19; Mon, 8 Apr 2019 12:58:54 +0000
Received: from MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::8cde:9e01:ad20:d10e]) by MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::8cde:9e01:ad20:d10e%6]) with mapi id 15.20.1771.021; Mon, 8 Apr 2019 12:58:54 +0000
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: Alexandre Petrescu <alexandre.petrescu@gmail.com>, "int-dir@ietf.org" <int-dir@ietf.org>
CC: "ietf@ietf.org" <ietf@ietf.org>, "its@ietf.org" <its@ietf.org>, "draft-ietf-ipwave-ipv6-over-80211ocb.all@ietf.org" <draft-ietf-ipwave-ipv6-over-80211ocb.all@ietf.org>
Thread-Topic: Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34
Thread-Index: AQHU7emlPOcIZ52P4EC65h2BrzII1KYyOFSQ
Date: Mon, 08 Apr 2019 12:58:39 +0000
Deferred-Delivery: Mon, 8 Apr 2019 12:56:57 +0000
Message-ID: <MN2PR11MB3565B2681F87340EE2B9A873D82C0@MN2PR11MB3565.namprd11.prod.outlook.com>
References: <155169869045.5118.3508360720339540639@ietfa.amsl.com> <a8aad636-069c-4451-dbf1-72c1db2204ef@gmail.com>
In-Reply-To: <a8aad636-069c-4451-dbf1-72c1db2204ef@gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pthubert@cisco.com;
x-originating-ip: [2001:420:c0c0:1005::2b3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 43113a05-ee16-4741-9279-08d6bc21f4c7
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(2017052603328)(7193020); SRVR:MN2PR11MB3758;
x-ms-traffictypediagnostic: MN2PR11MB3758:
x-ms-exchange-purlcount: 5
x-microsoft-antispam-prvs: <MN2PR11MB3758BDFD6DB69A49B2E0284FD82C0@MN2PR11MB3758.namprd11.prod.outlook.com>
x-forefront-prvs: 0001227049
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(346002)(39860400002)(376002)(136003)(189003)(199004)(33656002)(790700001)(86362001)(53936002)(6116002)(54896002)(105586002)(236005)(6246003)(7736002)(9686003)(966005)(4326008)(25786009)(6306002)(74316002)(55016002)(106356001)(478600001)(14454004)(2906002)(97736004)(446003)(11346002)(6666004)(76176011)(46003)(606006)(229853002)(476003)(110136005)(54906003)(316002)(486006)(7696005)(2501003)(186003)(71200400001)(6506007)(66574012)(99286004)(53546011)(102836004)(14444005)(68736007)(52536014)(8936002)(5660300002)(81166006)(81156014)(8676002)(6436002)(256004)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3758; H:MN2PR11MB3565.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: STD9xd9/X3r9ZKc0axoBwxNxlg/BuF5HlHJhC2FQA+Pn8KeY4psextXIA5OPJ09Bi02EXyOsuSxzBRxjyDXPJZgn77KGE5s7mDt4PZN0dmoG9Ije5gVCX0RZGfPKuShGHx3y1gZzKGMmqOp4AFz2opXwnCHL+lsZp0exxVEH+pPqGw85ue6rZkifBdVceVruRgvDHQmlGZfLmpN+V1lnWswXXKha1zvQCKEq+ko+gTeMVbq+9P2pD5vDTN4h0yAiJMMH+AalgIN+DJASbL3u9whr3TD1XA88nTGHqS1FUolyygYXoSVGyRLZMRBOcLzg66vLylAKwsvDjR707703lZoqHMAY0w7mUR8UC2Pcnp2tvAO7GCAPLphN6nKuQmGrmnbizxfBw1F1gJC7tymWnceItWKESRuFAgVs7+3nZds=
Content-Type: multipart/alternative; boundary="_000_MN2PR11MB3565B2681F87340EE2B9A873D82C0MN2PR11MB3565namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 43113a05-ee16-4741-9279-08d6bc21f4c7
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Apr 2019 12:58:54.5185 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3758
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com
X-Outbound-Node: alln-core-3.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/its/_Qhvp6D0HNX_coVH_Hwo5kyB0Uk>
Subject: Re: [ipwave] Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34
X-BeenThere: its@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IPWAVE - IP Wireless Access in Vehicular Environments WG at IETF <its.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/its>, <mailto:its-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/its/>
List-Post: <mailto:its@ietf.org>
List-Help: <mailto:its-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/its>, <mailto:its-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Apr 2019 12:59:10 -0000

Hello Alexandre

All the best,please see below

From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Sent: lundi 8 avril 2019 17:01
To: Pascal Thubert (pthubert) <pthubert@cisco.com>; int-dir@ietf.org
Cc: ietf@ietf.org; its@ietf.org; draft-ietf-ipwave-ipv6-over-80211ocb.all@ietf.org
Subject: Re: Intdir early review of draft-ietf-ipwave-ipv6-over-80211ocb-34


As a note: please improve the title of this.

It is not an early review.

It is a late review.

  *   In the context of document publication I believe this is coming before all the other areas directorates isn’t it. That’s what early means here…



There have been several reviews of this document until here, and two shepherd reviews.

Alex
Le 04/03/2019 à 12:24, Pascal Thubert a écrit :

Reviewer: Pascal Thubert

Review result: Not Ready



Reviewer: Pascal Thubert

Review result: Not ready. Need to clarify IEEE relationship, IOW which SDO

defines the use of L2 fields, what this spec enforces vs. recognizes as being

used that way based on IEEE work. The use of IPv6 ND requires a lot more

thoughts, recommendation to use 6LoWPAN ND. The definition of a subnet is

unclear. It seems that RSUs would have prefixes but that is not discussed.



I am an assigned INT and IOT directorates reviewer for <

draft-ietf-ipwave-ipv6-over-80211ocb-34 >. These comments were written

primarily for the benefit of the Internet Area Directors. Document editors and

shepherd(s) should treat these comments just like they would treat comments

from any other IETF contributors and resolve them along with any other Last

Call comments that have been received. For more details on the INT Directorate,

see https://datatracker.ietf.org/group/intdir/about/



Majors issues

-----------------



“



o  Exceptions due to different operation of IPv6 network layer on

      802.11 than on Ethernet.



“

Is this doc scoped to OCB or 802.11 in general? Is there an expectation that an

implementer of IPv6 over Wi-Fi refers to this doc? Spelled as above, it seems

that you are defining the LLC. Figure 1 shows the proposed adaptation layer as

IEEE LLC work. Who defines those fields, IETF or IEEE, or mixed? Who defines

their use? If this spec defines a new LLC header (vs. how to use an IEEE field)

 then it should be very clear, and the newly defined fields should be isolated

from IEEE fields.



"

   The IPv6 packet transmitted on 802.11-OCB MUST be immediately

   preceded by a Logical Link Control (LLC) header and an 802.11 header.



"

Is there anything new or specific to OCB vs. classical 802.11 operations?

If/when this is echoing the IEEE specs then this text should not use uppercase

but say something like: 'Per IEEE Std 802.11, the IPv6 packet transmitted on

802.11-OCB is immediately  preceded by a Logical Link Control (LLC) header and

an 802.11 header ...'



different things? Why define both?



"   An 'adaptation' layer is inserted between a MAC layer and the

   Networking layer.  This is used to transform some parameters between

   their form expected by the IP stack and the form provided by the MAC

   layer.

"

Is this different from what an AP does when it bridges Wi-Fi to Ethernet? Is

this IETF business?



"

   The Receiver and Transmitter Address fields in the 802.11 header MUST

   contain the same values as the Destination and the Source Address

   fields in the Ethernet II Header, respectively.

"

Same,  this is IEEE game isn't it?



"



Solutions for these problems SHOULD

   consider the OCB mode of operation.

"

This is not specific enough to be actionable. I suggest to remove this sentence.

It would be of interest for the people defining those solutions to understand

the specific needs of OCB vs. Wi Fi, but I do not see text about that.



"



The method of forming IIDs

   described in section 4 of [RFC2464] MAY be used during transition

   time.

"

Contradicts section 4.3 that says

"

Among these types of

   addresses only the IPv6 link-local addresses MAY be formed using an

   EUI-64 identifier.

"



"



This

   subnet MUST use at least the link-local prefix fe80::/10 and the

   interfaces MUST be assigned IPv6 addresses of type link-local.

"

If this is conforming IPv6 then the MUST is not needed.



"

   A subnet is formed by the external 802.11-OCB interfaces of vehicles

   that are in close range (not by their in-vehicle interfaces).

"

Is the definition transitive? Do we really get a subnet?

 A is close to  B who is close to C .... to Z, makes Paris one subnet! Are you

 talking about a link, rather?



"

   The Neighbor Discovery protocol (ND) [RFC4861] MUST be used over

   802.11-OCB links.

"



IPv6 ND is not suited for a non-broadcast network. How does DAD work?

Maybe you could consider RFC 6775 / RFC 8505 instead.



"

In the moment the MAC address is changed

   on an 802.11-OCB interface all the Interface Identifiers of IPv6

   addresses assigned to that interface MUST change.

"

Why is that? This is unexpected, and hopefully wrong.



Minor issues

---------------



"   OCB (outside the context of a basic service set - BSS): A mode of

   operation in which a STA is not a member of a BSS and does not

   utilize IEEE Std 802.11 authentication, association, or data

   confidentiality.



   802.11-OCB: mode specified in IEEE Std 802.11-2016 when the MIB

   attribute dot11OCBActivited is true.  Note: compliance with standards

   and regulations set in different countries when using the 5.9GHz

   frequency band is required.

"



Are these 2 different things?



"

Among these types of

 addresses only the IPv6 link-local addresses MAY be formed using an

  EUI-64 identifier.

"

This text should not be in a LL specific section since it deals with the other

addresses. Maybe rename the section to "addressing" or something?



"

   For privacy, the link-local address MAY be formed according to the

   mechanisms described in Section 5.2.

"

The MAY is not helpful. I suggest to remove the sentence that does not bring

value vs. 5.2



Could you make sections 4.3 and 4.5 contiguous?



"

If semantically

   opaque Interface Identifiers are needed, a potential method for

   generating semantically opaque Interface Identifiers with IPv6

   Stateless Address Autoconfiguration is given in [RFC7217].



   Semantically opaque Interface Identifiers, instead of meaningful

   Interface Identifiers derived from a valid and meaningful MAC address

   ([RFC2464], section 4), MAY be needed in order to avoid certain

   privacy risks.



...



   In order to avoid these risks, opaque Interface Identifiers MAY be

   formed according to rules described in [RFC7217].  These opaque

   Interface Identifiers are formed starting from identifiers different

   than the MAC addresses, and from cryptographically strong material.

   Thus, privacy sensitive information is absent from Interface IDs, and

   it is impossible to calculate the initial value from which the

   Interface ID was calculated.



"

Duplicate and mis ordered text, isn't it?



" For this reason, an attacker may realize many

   attacks on privacy.

"

Do we attack privacy? Maybe say that privacy is a real concern, and maybe move

that text to security section?



"

   The way Interface Identifiers are used MAY involve risks to privacy,

   as described in Section 5.1.

"

Also duplicate



Nits

------



"

   IP packets MUST be transmitted over 802.11-OCB media as QoS Data

   frames whose format is specified in IEEE Std 802.11.

"

Please add link to the reference



" the 802.11 hidden node"

Do not use 802.11 standalone (multiple occurrences).

=> "the IEEE Std. 802.11 [ ref ] hidden node", or just "the hidden terminal".



BCP 14 text:



Suggest to use this text:

“

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",

   "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and

   "OPTIONAL" in this document are to be interpreted as described in

   https://tools.ietf.org/html/bcp14 https://tools.ietf.org/html/bcp14

   [https://tools.ietf.org/html/rfc2119][RFC8174] when, and only when, they

   appear in all capitals, as shown here.



“



All the best



Pascal