Re: [lisp] Martin Duke's Block on charter-ietf-lisp-04-06: (with BLOCK and COMMENT)

Padma Pillay-Esnault <padma.ietf@gmail.com> Thu, 04 January 2024 19:36 UTC

Return-Path: <padma.ietf@gmail.com>
X-Original-To: lisp@ietfa.amsl.com
Delivered-To: lisp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAC50C14F6A0; Thu, 4 Jan 2024 11:36:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PGzOB0oLpvft; Thu, 4 Jan 2024 11:35:59 -0800 (PST)
Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FC4BC14F5F2; Thu, 4 Jan 2024 11:35:54 -0800 (PST)
Received: by mail-lj1-x236.google.com with SMTP id 38308e7fff4ca-2ccea11b6bbso7937461fa.0; Thu, 04 Jan 2024 11:35:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1704396952; x=1705001752; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Mo1sI8dDC+gh2tbcQC0fjjilQRnbu/UkZHI+IlOvdbY=; b=MIr4H7sAUpVUDrIs7dDqP2nX6N8xFiYQV6LipsqT9p8GdRajr96bS+hN5w2De38QPX AMK9QRwD5T38LPSw1CRC2ewE8GqSqYideFBrJFM22DEWEVOPxNyYyIeztrKt7UXYnnFE 5KdzdkqXg0hrGdpFCKqNba4gQU0jUp/uWpqlzPHB8UXdX9d2oaczqRlkWe2F8Hdw2o9x 8IE8UIgM7D3vIjwXGPbM7LrZWrjh9kNuBQjRNdN/sxeM26LFUtAsDb58OUt7Pl7EkBED AkfPJSZcgfh8vymUY2gvDCF3f1AAsV/Zpu2XXi+6q5xKvNL09crxwUHtzXZbNQlsFaTf UMfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704396952; x=1705001752; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Mo1sI8dDC+gh2tbcQC0fjjilQRnbu/UkZHI+IlOvdbY=; b=mandlXPdp7/tgDPxLScE3u7ykyxRFoZmOiVjrxh2/3sqnR12ZwDmlG+Eh014jVZLL/ vZ6FQY3wNzVP53wIR5tBnTmSRqu5sMS+KGhOn64xwUPdNNilCst6naQVZRv7E9R61lVF ITLdptxXUPNZdOu3s7ZxL28V6KRpC4QTdFv/vF3XpJLi6ctfrrnA1kv0rPqVTm5EYK6J kBhytlOmeNZE6g1p7oehp8MOmP999Ft5KfH3ZwKUIY+VkIm1iKWdXLUC+rGLGFYwX6jH NxF+SV9YHJ+a0ja+6vtXMCwJhG+8DfhpnjRPvMGD/bk38gLz9wX05kVC7AoaJkaym7zp y+Ng==
X-Gm-Message-State: AOJu0YyNDQ6jUg11OtOhVWBC++JEO3k6BH9MlMNrAkrKueIdBA6K2rlS Hf8Qy6KHDY/Tsp5BMKNK5dnu4oxvDJHQWFSOakZh4WW23q8=
X-Google-Smtp-Source: AGHT+IGLLOMmAWcJiGUOa9Uk5HyrDBPFBgTskSKxLYisaUcZ5vqjG/uJ6vvSdwGetsgI43ILUauUTWxTcxGDyKk9k+o=
X-Received: by 2002:a2e:a48e:0:b0:2cd:2957:3690 with SMTP id h14-20020a2ea48e000000b002cd29573690mr359661lji.23.1704396951868; Thu, 04 Jan 2024 11:35:51 -0800 (PST)
MIME-Version: 1.0
References: <170422502810.34367.16820980013126393868@ietfa.amsl.com> <CAG-CQxrKgCZJv0PtgaKEDgWYOW_Z0Z=vBJR=VhHigvREyH30Og@mail.gmail.com> <CAM4esxTGbBoQkDFiC8cg0U+xf3jfsBomi=Swn3hiPVKjtJ123g@mail.gmail.com> <CAG-CQxqFWwWrT8czB+pKUC=rKHbHzVEG+HYG7jobX_5AJYHrLA@mail.gmail.com> <CAM4esxTPcFW5zE6P6_qfQz5PHBQ77JtvOgtZh-6fyQCtrxK6BA@mail.gmail.com>
In-Reply-To: <CAM4esxTPcFW5zE6P6_qfQz5PHBQ77JtvOgtZh-6fyQCtrxK6BA@mail.gmail.com>
From: Padma Pillay-Esnault <padma.ietf@gmail.com>
Date: Thu, 04 Jan 2024 11:35:40 -0800
Message-ID: <CAG-CQxqaEpgNJUvrwLM-H9z-_Td=r9--Q_baYYyGJ1M0tM1p-g@mail.gmail.com>
To: Martin Duke <martin.h.duke@gmail.com>
Cc: The IESG <iesg@ietf.org>, lisp-chairs@ietf.org, lisp@ietf.org
Content-Type: multipart/alternative; boundary="000000000000df5853060e23d61a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lisp/RfXB9uZ1CTv8ld5_A1WXcKeGoJ4>
Subject: Re: [lisp] Martin Duke's Block on charter-ietf-lisp-04-06: (with BLOCK and COMMENT)
X-BeenThere: lisp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: List for the discussion of the Locator/ID Separation Protocol <lisp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lisp>, <mailto:lisp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lisp/>
List-Post: <mailto:lisp@ietf.org>
List-Help: <mailto:lisp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lisp>, <mailto:lisp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jan 2024 19:36:03 -0000

Sure. New proposed changes.

Original:
NAT-Traversal: Support for a NAT-traversal solution in deployments where
LISP tunnel endpoints are separated from by a NAT (e.g., LISP mobile node).

Proposed:
NAT-Traversal: *LISP protocol extensions to* support a NAT-traversal
solution in deployments where LISP tunnel endpoints are separated from by a
NAT (e.g., LISP mobile node). The LISP WG will collaborate with the TSVWG
working on NAT-Transversal.

On Thu, Jan 4, 2024 at 11:12 AM Martin Duke <martin.h.duke@gmail.com> wrote:

> Sure, but please add the TSVWG reference for NAT.
>
>
>
> On Thu, Jan 4, 2024 at 11:10 AM Padma Pillay-Esnault <padma.ietf@gmail.com>
> wrote:
>
>> Would these changes address your feedback?
>>
>> Clarified the text as we are not building a new NAT solution but rather
>> adding LISP extensions needed to make it work.
>>
>> Original:
>> NAT-Traversal: Support for a NAT-traversal solution in deployments where
>> LISP tunnel endpoints are separated from by a NAT (e.g., LISP mobile node).
>>
>> Proposed:
>> NAT-Traversal: *LISP protocol extensions to* support a NAT-traversal
>> solution in deployments where LISP tunnel endpoints are separated from by a
>> NAT (e.g., LISP mobile node)
>>
>> and
>>
>> Original:
>> Map Server Reliable Transport: LISP control plane messages are
>> transported over UDP, however, in some cases, the use of a reliable
>> transport protocol is a better fit, since it actually helps reduce periodic
>> signaling.
>>
>> Proposed:
>> Map Server Reliable Transport: LISP control plane messages are
>> transported over UDP, however, in some cases, the use of a reliable
>> transport protocol *(such as TCP)*  is a better fit, since it actually
>> helps reduce periodic signaling.
>> Thanks
>> Padma
>>
>> On Thu, Jan 4, 2024 at 9:00 AM Martin Duke <martin.h.duke@gmail.com>
>> wrote:
>>
>>> SG, please mention these points in the text.
>>>
>>> On Thu, Jan 4, 2024 at 8:38 AM Padma Pillay-Esnault <
>>> padma.ietf@gmail.com> wrote:
>>>
>>>> Hi Martin
>>>>
>>>> Please see PPE for my comments inline
>>>>
>>>> On Tue, Jan 2, 2024 at 11:50 AM Martin Duke via Datatracker <
>>>> noreply@ietf.org> wrote:
>>>>
>>>>> Martin Duke has entered the following ballot position for
>>>>> charter-ietf-lisp-04-06: Block
>>>>>
>>>>> When responding, please keep the subject line intact and reply to all
>>>>> email addresses included in the To and CC lines. (Feel free to cut this
>>>>> introductory paragraph, however.)
>>>>>
>>>>>
>>>>>
>>>>> The document, along with other ballot positions, can be found here:
>>>>> https://datatracker.ietf.org/doc/charter-ietf-lisp/
>>>>>
>>>>>
>>>>>
>>>>> ----------------------------------------------------------------------
>>>>> BLOCK:
>>>>> ----------------------------------------------------------------------
>>>>>
>>>>> Is the NAT traversal work going to prioritize existing solutions (e.g.
>>>>> STUN,
>>>>> TURN, ICE), or have all those already been determined to be
>>>>> inadequate? If the
>>>>> latter, LISP should coordinate with TSVWG on its NAT traversal
>>>>> solution.
>>>>>
>>>>> PPE - The symmetric or endpoint-address-and-port-dependent mapping
>>>>> NATs (ICE, TURN..) have been  have been determined to be inadequate
>>>>> due to the nature of LISP that is typically unidirectional traffic and its
>>>>> usage of UDP port 4341 without specification of source port.
>>>>>
>>>> Yes - on coordination with TSVWG.
>>>>>
>>>>
>>>>
>>>>> ----------------------------------------------------------------------
>>>>> COMMENT:
>>>>> ----------------------------------------------------------------------
>>>>>
>>>>> Is the reliable transport protocol required to be secure? (e.g., are
>>>>> you
>>>>> looking at TCP/TLS, QUIC, and SCTP/DTLS, or just bare TCP/SCTP)
>>>>>
>>>>> PPE - The current reliable transport draft has a proposal for the use
>>>>> of bare TCP and fallback to UDP using the existing mechanisms for security
>>>>> in LISP. The document is being evaluated and reviewed.
>>>>>
>>>>>
>>>> Thanks
>>>> Padma
>>>>
>>>