Re: [lisp] Request for WG document - draft-farinacci-lisp-name-encoding

"Joel M. Halpern" <jmh@joelhalpern.com> Tue, 29 September 2020 19:47 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74DF23A1113 for <lisp@ietfa.amsl.com>; Tue, 29 Sep 2020 12:47:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.29
X-Spam-Level:
X-Spam-Status: No, score=-1.29 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021, NICE_REPLY_A=-0.213, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4E2ekF5DgQUQ for <lisp@ietfa.amsl.com>; Tue, 29 Sep 2020 12:47:38 -0700 (PDT)
Received: from mailb1.tigertech.net (mailb1.tigertech.net [208.80.4.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B6823A1111 for <lisp@ietf.org>; Tue, 29 Sep 2020 12:47:38 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mailb1.tigertech.net (Postfix) with ESMTP id 4C190B0LwBz5bdDL for <lisp@ietf.org>; Tue, 29 Sep 2020 12:47:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1601408858; bh=UOVMM+05T3IKEl9aaMlT8VDMDvvpzTVU1EvLAj3fx64=; h=Subject:Cc:References:From:Date:In-Reply-To:From; b=b65hZDuvPRw+0ZXmmftA9fH4emDy/JShoI3fd8DzwTX986fxgakqHrYQsAMyDgdeG gvrKsOWyd843iO4AFgV4Or9D57bMZ8WVuKG1+39wUr5GmJiZYuR0nlhqiijfD4TuwM HxrQX9w/TqkuF7ZnN7zO5lNZmksKT1oviwU0SVp0=
X-Quarantine-ID: <4FjovQI8ImyD>
X-Virus-Scanned: Debian amavisd-new at b1.tigertech.net
Received: from [192.168.128.43] (209-255-163-147.ip.mcleodusa.net [209.255.163.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailb1.tigertech.net (Postfix) with ESMTPSA id 4C19094QfCz5bckg for <lisp@ietf.org>; Tue, 29 Sep 2020 12:47:37 -0700 (PDT)
Cc: "lisp@ietf.org list" <lisp@ietf.org>
References: <8ab7a055-3615-cf04-2749-446ecde2cc38@joelhalpern.com> <8A777782-AF51-48CA-936A-B6BD68C98334@gmail.com> <f6e19069-7df6-8507-67de-194edd9f625a@joelhalpern.com> <5B6F5137-C628-459A-9EB0-767635D5A622@gmail.com>
From: "Joel M. Halpern" <jmh@joelhalpern.com>
Message-ID: <1be68d18-37f4-47a8-2136-b74b45a3e392@joelhalpern.com>
Date: Tue, 29 Sep 2020 15:47:36 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.12.0
MIME-Version: 1.0
In-Reply-To: <5B6F5137-C628-459A-9EB0-767635D5A622@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/1FJJkJ7yM-9JFXkgNeHJwlaKkzs>
Subject: Re: [lisp] Request for WG document - draft-farinacci-lisp-name-encoding
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Sep 2020 19:47:40 -0000

In line, preserving all for now, but we will need to trim or top-post soon.
Yours,
Joel

On 9/29/2020 3:42 PM, Dino Farinacci wrote:
>> Looking again at this draft, and at the example Dino points to, I 
>> think there is a basic problem with the work and the usage.
>>
>> the problem is not a problem for the mapping system per se.  It is a 
>> problem for usage.
>>
>> The draft does not define any mechanism for structuring, allocating, 
>> or otherwise managing the space of names.  It does not say "URIs".  It 
>> does not say "DNS names"  It syas "ASCII string, terminated by 0".
> 
> Because it is designed as a non-structured field where a deployment can 
> decide what the structure is based on the mapping system it uses, or the 
> instance-ID within a mapping system it uses.
> 
> The draft’s intent is to define a general encoding for LISP messages. 
> How it will be used is left to other documents.

I think it really needs more structure.  One does not say "here is a 
shared database; use any key you like and hope not to collide with other 
users."

> 
>> If there is to be standard usage of this, and if there is to be more 
>> than one such usage, how are collisions avoided?  It is not sufficient 
>> to say "just don't" as different problems may end up needing 
>> overlapping name spaces.  The hash usage (below) assumes that the 
>> solution is to prepend the string "hash:' on the front.  But that is 
>> not formally defined, and as such is not actually a reliable mechanism.
>> (Frankly, for the hashes I would prefer to use a different EID LCAF 
>> that carries the binary hash.)
> 
> The ecdsa-auth use-case assumes that the hash length is largest where 
> collisions won’t happen. There are applications that use UUIDs and 
> encodes them in distinguished-name EIDs. UUIDs do not have an allocation 
> authority. And:

the ECDSA draft assumes that no other uses will begin with hash:.  This 
has nothing to do with length.  My concern is not collision amon hashes. 
  It is collision between hashes and other uses of the "distinguished 
name" LCAF.

Note that most uses in the industry for the last 40 yeaars of 
"distinguished name" have gone to some length to be clear how names are 
distinguished.  This does not.  That is what causes me concern.

> 
> 
>> I suspect that the people supporting this have expectations on how 
>> this will work.  But it seems sufficiently basic that the semantics, 
>> rather than the encoding, is where I would expect the WG to start. 
>>  Encodings are easy.
> 
> So lets have a look at each Internet Draft that 
> references draft-farinacci-lisp-name-encoding and lets review those 
> semantic encodings.

Looking at the couple of places you have chosen to use this, and have 
therefore been careful not to collide with yourself really does not tell 
us much.

If you want a sub-type under LCAF, then let's do that.  trying to 
pretend arbitrary strings have distinguishable semantics is asking for 
trouble.

> 
> For draft-farinacci-lisp-simple-nat-00, the RLOCs are encoded with human 
> readable RLOC-names so you can distinguish a multi-homed interface 
> through NATs. That has proved useful for my lispers.net 
> <http://lispers.net> implementation.
> 
>> I will also acknowledge that as chair I have concerns about turning 
>> LISP into an arbitrary database system.  Our charter is a mapping 
>> system in support of routing.  I understand why the ECDSA keys need to 
>> be in there.  But I do not want to fall into the BGP trap of trying to 
>> solve every problem with the hammer in my hand.
> 
> I could encode anything I want in an IPv6 EID and make the LISP mapping 
> system an arbitrary database. I don’t think anyone wants to do this. The 
> mapping system is used for routing, addressing, identity, and location 
> problems (at the network layer).
> 
> Dino
>