Re: [Lwip] Discussion about IoT Device Classes

Michael Richardson <mcr+ietf@sandelman.ca> Thu, 02 February 2017 15:04 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: lwip@ietfa.amsl.com
Delivered-To: lwip@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FFDD129465 for <lwip@ietfa.amsl.com>; Thu, 2 Feb 2017 07:04:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.1
X-Spam-Level:
X-Spam-Status: No, score=-5.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rYDcPIuaoRjb for <lwip@ietfa.amsl.com>; Thu, 2 Feb 2017 07:04:19 -0800 (PST)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C40F3129459 for <lwip@ietf.org>; Thu, 2 Feb 2017 07:04:19 -0800 (PST)
Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 9C52D2009E; Thu, 2 Feb 2017 10:25:03 -0500 (EST)
Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 13DE9636BB; Thu, 2 Feb 2017 10:04:19 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <f0bab42a-008a-a6fb-8bdb-d5c759dad0f8@gmx.net>
References: <2e19e2da-f86d-3889-690d-4d624a2c4489@gmx.net> <132DAB99-A623-47CD-9636-7DF67D75C188@tzi.org> <F3B7F8F0-F8B4-4B57-92F6-22701D85787B@tzi.org> <2d9cf5f4-431c-a7ba-08a5-fd506b15912d@gmail.com> <CANK0pbZ8GAqfkZBk7u1xHVCL=befZHm7DY_Y0jZurwZKcU9i0w@mail.gmail.com> <f7bc46a7-8999-d1fa-9f1f-8c11975d7f5c@gmx.net> <20910.1485973931@obiwan.sandelman.ca> <f0bab42a-008a-a6fb-8bdb-d5c759dad0f8@gmx.net>
X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.5.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Date: Thu, 02 Feb 2017 10:04:19 -0500
Message-ID: <368.1486047859@obiwan.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lwip/AtEdNf8b_yMNrZGzKJDC6OrKE2g>
Cc: "lwip@ietf.org" <lwip@ietf.org>
Subject: Re: [Lwip] Discussion about IoT Device Classes
X-BeenThere: lwip@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Lightweight IP stack <lwip.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lwip>, <mailto:lwip-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lwip/>
List-Post: <mailto:lwip@ietf.org>
List-Help: <mailto:lwip-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lwip>, <mailto:lwip-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Feb 2017 15:04:21 -0000

Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
    >> And there is also some sub-classes of "Linux" that are relevant.

    > I personally care less about those sub-categories since I can map these
    > class 1 devices to Cortex M class processors and class 2 devices to
    > Cortex A class processors. For Intel, there are similar categories.

I'm not sure I understand how ARM or Intel classifications help us
communicate across product lines.

There are systems with <4M of flash and 2M of ram running a Linux kernel,
and some application specific /sbin/init-equivalent.  If you think about the
capablities of these system, they are basically early 386-class machines.
Many of these systems wind up being non-field upgradeable due to lack of
space.  While if they were running a smaller RTOS, they would be very well
provisioned, but they'd have no MMU protection.  Some run VxWorks kernels
with MMU protection enabled.  There are several generations of home routers
which fit into this size category, btw.
Adding a new security feature (or algorithm) to the above systems can be very
difficult.

Then there are the somewhat large openwrt-class devices which are just a bit
bigger.  They often have shells, interpreters and sophisticated (and sadly
insecure) mechanisms.  4M of flash and 8M of ram seems to be a lower
threshold to make this work.  It can still be very hard to field upgrade
such small systems, but it is often possible.
Adding a new security feature (or algorithm) to the above systems can be
quiet easy.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-