Re: [lisp] Martin Duke's Block on charter-ietf-lisp-04-06: (with BLOCK and COMMENT)

Martin Duke <martin.h.duke@gmail.com> Thu, 04 January 2024 19:55 UTC

Return-Path: <martin.h.duke@gmail.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B9C3C14F75F; Thu, 4 Jan 2024 11:55:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lynV9cfuy8-u; Thu, 4 Jan 2024 11:55:30 -0800 (PST)
Received: from mail-ua1-x936.google.com (mail-ua1-x936.google.com [IPv6:2607:f8b0:4864:20::936]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DAAFC14F713; Thu, 4 Jan 2024 11:55:30 -0800 (PST)
Received: by mail-ua1-x936.google.com with SMTP id a1e0cc1a2514c-7cc4647543aso289629241.0; Thu, 04 Jan 2024 11:55:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1704398129; x=1705002929; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=vTzi8G004DzTjbmJfeu4kSb0QOYHVsgC8HToDpppbbE=; b=MqLgU48m1JwqNxSGFOSq+w52SXbz8GEAXY4ZEpf30XG3E8neGc+gpaLEya8Hk9cHPa 6eTXAUTiH1ocMdBeD26UtnUYmE2KDA1Zu5ckJleXn1IkvggaygPzhKO/q7D2hOHZHfD9 om4xeGLsD5fEnYzcIRvepkC7W6JW/oYyoEkkfObGNe9p2syOiyttIzRltGq4qvuCfMSj VUsYcKFdhYW/cFKFstiMVmItdwIqHwFxlSU5QUQKXKH2pQqtVISg6bJCkZeFH7QHUhfB NZZ5GYzIV7Ib6aWNXf+G6pa2S67il1RZJa4eHsLgwUrb2Q3PH8iHaDsteY7eVnwkvvof t2vw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704398129; x=1705002929; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=vTzi8G004DzTjbmJfeu4kSb0QOYHVsgC8HToDpppbbE=; b=p41WruwylgoRQnyfXXJSOt9ib6G3/etQ7IAGz46npQI+h6byy79+h6k24ZCSbakVPz qwZDetFbN54MV/UkVVqCFU8nTC9CD1nt4T9UQzJWayoE3wo717w3OByslwS52SgtOJDs 7YBuJgz3bDgM7t/DhVIfEfUK1gERvbqzvGAv2z8j7TBUaykh4Iz0Urz+7bPzDGVYBZ/i t6MkIbmlZ1B+1HjaOAE7Gyvgl90T1dCiq9ta9UcHhhZqLE/HxHE6VD/t1g47VwsPhBNd koF/xVWYhLlt5psyePusv70HAlCZ2tBG0uBiNH5alppZRP5avlMqFAgE66CCwo5x4qWE kRIQ==
X-Gm-Message-State: AOJu0YxxII0TRAejk4WWJIDBE73qDDEzjHTt2/lCBvjQGDFzHjiBqI7m WPmAwDJsvShXdoIlIqhFf/O0eMR4bHxTOwDV3sU=
X-Google-Smtp-Source: AGHT+IGowqLnCRFYXVN1KJCBLJ3lrNj3JK58Y9vuF/in1AtkzU0UAP0NjplOBk6zl/2VETBdoAgLfiRYli5mv8ppxSo=
X-Received: by 2002:a05:6102:dcb:b0:466:ead1:375b with SMTP id e11-20020a0561020dcb00b00466ead1375bmr1027703vst.21.1704398129014; Thu, 04 Jan 2024 11:55:29 -0800 (PST)
MIME-Version: 1.0
References: <170422502810.34367.16820980013126393868@ietfa.amsl.com> <CAG-CQxrKgCZJv0PtgaKEDgWYOW_Z0Z=vBJR=VhHigvREyH30Og@mail.gmail.com> <CAM4esxTGbBoQkDFiC8cg0U+xf3jfsBomi=Swn3hiPVKjtJ123g@mail.gmail.com> <CAG-CQxqFWwWrT8czB+pKUC=rKHbHzVEG+HYG7jobX_5AJYHrLA@mail.gmail.com> <CAM4esxTPcFW5zE6P6_qfQz5PHBQ77JtvOgtZh-6fyQCtrxK6BA@mail.gmail.com> <CAG-CQxqaEpgNJUvrwLM-H9z-_Td=r9--Q_baYYyGJ1M0tM1p-g@mail.gmail.com>
In-Reply-To: <CAG-CQxqaEpgNJUvrwLM-H9z-_Td=r9--Q_baYYyGJ1M0tM1p-g@mail.gmail.com>
From: Martin Duke <martin.h.duke@gmail.com>
Date: Thu, 04 Jan 2024 11:55:16 -0800
Message-ID: <CAM4esxSnXpvS7WnQY+PvqK5F7vxL=HV3vWFXoWTsucsviaFDcg@mail.gmail.com>
To: Padma Pillay-Esnault <padma.ietf@gmail.com>
Cc: The IESG <iesg@ietf.org>, lisp-chairs@ietf.org, lisp@ietf.org
Content-Type: multipart/alternative; boundary="000000000000093016060e241dbb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/6zlk7InGTlpyrWZVwI4cVo9HYyw>
Subject: Re: [lisp] Martin Duke's Block on charter-ietf-lisp-04-06: (with BLOCK and COMMENT)
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jan 2024 19:55:34 -0000

Looks good to me.

On Thu, Jan 4, 2024 at 11:35 AM Padma Pillay-Esnault <padma.ietf@gmail.com>
wrote:

> Sure. New proposed changes.
>
> Original:
> NAT-Traversal: Support for a NAT-traversal solution in deployments where
> LISP tunnel endpoints are separated from by a NAT (e.g., LISP mobile node).
>
> Proposed:
> NAT-Traversal: *LISP protocol extensions to* support a NAT-traversal
> solution in deployments where LISP tunnel endpoints are separated from by a
> NAT (e.g., LISP mobile node). The LISP WG will collaborate with the TSVWG
> working on NAT-Transversal.
>
> On Thu, Jan 4, 2024 at 11:12 AM Martin Duke <martin.h.duke@gmail.com>
> wrote:
>
>> Sure, but please add the TSVWG reference for NAT.
>>
>>
>>
>> On Thu, Jan 4, 2024 at 11:10 AM Padma Pillay-Esnault <
>> padma.ietf@gmail.com> wrote:
>>
>>> Would these changes address your feedback?
>>>
>>> Clarified the text as we are not building a new NAT solution but rather
>>> adding LISP extensions needed to make it work.
>>>
>>> Original:
>>> NAT-Traversal: Support for a NAT-traversal solution in deployments where
>>> LISP tunnel endpoints are separated from by a NAT (e.g., LISP mobile node).
>>>
>>> Proposed:
>>> NAT-Traversal: *LISP protocol extensions to* support a NAT-traversal
>>> solution in deployments where LISP tunnel endpoints are separated from by a
>>> NAT (e.g., LISP mobile node)
>>>
>>> and
>>>
>>> Original:
>>> Map Server Reliable Transport: LISP control plane messages are
>>> transported over UDP, however, in some cases, the use of a reliable
>>> transport protocol is a better fit, since it actually helps reduce periodic
>>> signaling.
>>>
>>> Proposed:
>>> Map Server Reliable Transport: LISP control plane messages are
>>> transported over UDP, however, in some cases, the use of a reliable
>>> transport protocol *(such as TCP)*  is a better fit, since it actually
>>> helps reduce periodic signaling.
>>> Thanks
>>> Padma
>>>
>>> On Thu, Jan 4, 2024 at 9:00 AM Martin Duke <martin.h.duke@gmail.com>
>>> wrote:
>>>
>>>> SG, please mention these points in the text.
>>>>
>>>> On Thu, Jan 4, 2024 at 8:38 AM Padma Pillay-Esnault <
>>>> padma.ietf@gmail.com> wrote:
>>>>
>>>>> Hi Martin
>>>>>
>>>>> Please see PPE for my comments inline
>>>>>
>>>>> On Tue, Jan 2, 2024 at 11:50 AM Martin Duke via Datatracker <
>>>>> noreply@ietf.org> wrote:
>>>>>
>>>>>> Martin Duke has entered the following ballot position for
>>>>>> charter-ietf-lisp-04-06: Block
>>>>>>
>>>>>> When responding, please keep the subject line intact and reply to all
>>>>>> email addresses included in the To and CC lines. (Feel free to cut
>>>>>> this
>>>>>> introductory paragraph, however.)
>>>>>>
>>>>>>
>>>>>>
>>>>>> The document, along with other ballot positions, can be found here:
>>>>>> https://datatracker.ietf.org/doc/charter-ietf-lisp/
>>>>>>
>>>>>>
>>>>>>
>>>>>> ----------------------------------------------------------------------
>>>>>> BLOCK:
>>>>>> ----------------------------------------------------------------------
>>>>>>
>>>>>> Is the NAT traversal work going to prioritize existing solutions
>>>>>> (e.g. STUN,
>>>>>> TURN, ICE), or have all those already been determined to be
>>>>>> inadequate? If the
>>>>>> latter, LISP should coordinate with TSVWG on its NAT traversal
>>>>>> solution.
>>>>>>
>>>>>> PPE - The symmetric or endpoint-address-and-port-dependent mapping
>>>>>> NATs (ICE, TURN..) have been  have been determined to be inadequate
>>>>>> due to the nature of LISP that is typically unidirectional traffic and its
>>>>>> usage of UDP port 4341 without specification of source port.
>>>>>>
>>>>> Yes - on coordination with TSVWG.
>>>>>>
>>>>>
>>>>>
>>>>>> ----------------------------------------------------------------------
>>>>>> COMMENT:
>>>>>> ----------------------------------------------------------------------
>>>>>>
>>>>>> Is the reliable transport protocol required to be secure? (e.g., are
>>>>>> you
>>>>>> looking at TCP/TLS, QUIC, and SCTP/DTLS, or just bare TCP/SCTP)
>>>>>>
>>>>>> PPE - The current reliable transport draft has a proposal for the use
>>>>>> of bare TCP and fallback to UDP using the existing mechanisms for security
>>>>>> in LISP. The document is being evaluated and reviewed.
>>>>>>
>>>>>>
>>>>> Thanks
>>>>> Padma
>>>>>
>>>>