Re: [manet-dlep-rg] DLEP session establishment

Henning Rogge <hrogge@googlemail.com> Wed, 13 November 2013 10:19 UTC

Return-Path: <hrogge@googlemail.com>
X-Original-To: manet-dlep-rg@ietfa.amsl.com
Delivered-To: manet-dlep-rg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F04011E8110 for <manet-dlep-rg@ietfa.amsl.com>; Wed, 13 Nov 2013 02:19:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.943
X-Spam-Level:
X-Spam-Status: No, score=-1.943 tagged_above=-999 required=5 tests=[AWL=0.035, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AhA5LyyuVLFm for <manet-dlep-rg@ietfa.amsl.com>; Wed, 13 Nov 2013 02:19:28 -0800 (PST)
Received: from mail-qe0-x22f.google.com (mail-qe0-x22f.google.com [IPv6:2607:f8b0:400d:c02::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 1F22F21F9DE9 for <manet-dlep-rg@ietf.org>; Wed, 13 Nov 2013 02:19:28 -0800 (PST)
Received: by mail-qe0-f47.google.com with SMTP id b4so94221qen.34 for <manet-dlep-rg@ietf.org>; Wed, 13 Nov 2013 02:19:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; bh=iXwy1QcxBzr2wFfd45Ehzop2BPHgPGzWUzGLjn7SM0s=; b=JedY3oO6OGNBZoT8iFgcAgVu1URQxkmlFmzV8L/PxMJqDfXfAw+PN7Ly4f53P7+Z0a pfb373J9crIhYEjwLgx++83hXAOAc7L/6MDCr8ntQ27mPM4YalI3zdL0QkfLGnatyDHi mJYwigsjnggMhiuNITAfbQ0wDNtphfe5tILPyBpKOhHia42lrHSXv7HRouivbkYavx65 yFWJKg8WdPtRchFONk8fHpxMz2UE4IJRRrmzBeXFgOIhLBegJ6chNfL7LjGrIKPiMj+y R0vrSZTI/7QQnjLaFqmpN0tXr3zvt3HSz9UkkNCESOtoYvCGU3zO4Ig8Nxo6pgD7fXqW zs8g==
X-Received: by 10.49.86.35 with SMTP id m3mr64234641qez.7.1384337967463; Wed, 13 Nov 2013 02:19:27 -0800 (PST)
MIME-Version: 1.0
Received: by 10.224.36.200 with HTTP; Wed, 13 Nov 2013 02:19:07 -0800 (PST)
In-Reply-To: <B177F831FB91F242972D0C35F6A0733106FB081B@SUCNPTEXM01.com.ad.uk.ds.corp>
References: <72FB622921C13746AD6349E70A8D9F307D9192F7@EXC-MBX03.tsn.tno.nl> <CAK=bVC85XAXR3Zkwq+JwELF-dvgrKwbowWCvwvnjeVn7VStnbw@mail.gmail.com> <72FB622921C13746AD6349E70A8D9F307D9193CD@EXC-MBX03.tsn.tno.nl> <5A8A5085482DA84995F4E70F5093AB50268E6C@XCH-BLV-503.nw.nos.boeing.com> <B2BA430A-F4E6-4DED-A7BB-7282A22802B7@inf-net.nl> <D02397F1-9D1B-4B36-81D0-4585ACDBA34A@gmail.com> <5D184300-2D97-4EC1-8D91-76D4A79B2BDA@inf-net.nl> <DDAE98C5-520E-4F8F-9F9B-2AB9A15A70EF@cisco.com> <0541163b-2d1c-4afd-ad06-ba9a25744310@SUCNPTEXC01.COM.AD.UK.DS.CORP> <B177F831FB91F242972D0C35F6A0733106FB0425@SUCNPTEXM01.com.ad.uk.ds.corp> <14B5C326-6499-439D-BC23-BB39A376825C@cisco.com> <CAGnRvuoxD_dxdoD_8qbHhq--6AF=2B7wNFEE5Xz=vKNwnBhhZw@mail.gmail.com> <9EB171E6-62E6-4136-BFDB-6FEB8DF23B74@cisco.com> <cb165b80-275e-45ff-ae0e-8ca5354a3568@SUCNPTEXC01.COM.AD.UK.DS.CORP> <B177F831FB91F242972D0C35F6A0733106FB081B@SUCNPTEXM01.com.ad.uk.ds.corp>
From: Henning Rogge <hrogge@googlemail.com>
Date: Wed, 13 Nov 2013 11:19:07 +0100
Message-ID: <CAGnRvupOMDuu0wbvXmKO72zHAVhjMHHLCjZ9G7-d+yNPCAUk3A@mail.gmail.com>
To: "Taylor, Rick" <Rick.Taylor@cassidian.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Cc: "DLEP Research Group (manet-dlep-rg@ietf.org)" <manet-dlep-rg@ietf.org>, Teco Boot <teco@inf-net.nl>, Stan Ratliff <sratliff@cisco.com>
Subject: Re: [manet-dlep-rg] DLEP session establishment
X-BeenThere: manet-dlep-rg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DLEP Radio Group <manet-dlep-rg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/manet-dlep-rg>, <mailto:manet-dlep-rg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/manet-dlep-rg>
List-Post: <mailto:manet-dlep-rg@ietf.org>
List-Help: <mailto:manet-dlep-rg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/manet-dlep-rg>, <mailto:manet-dlep-rg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Nov 2013 10:19:29 -0000

I think we can even leave out the TCP address (and maybe even the
port) by just demanding that the UDP Peer_Discovery has to come from
the relevant address (and port) of the TCP socket.

I cannot see an use case for using a different source port/address for
the UDP Peer_Discovery at the moment.

Henning Rogge

On Wed, Nov 13, 2013 at 11:12 AM, Taylor, Rick
<Rick.Taylor@cassidian.com> wrote:
> My thoughts:
>
> The principle of keeping the modem code as small and light as possible is good.  In general modems are not only getting bigger and smarter, they are also getting physically smaller and lower power.  Routers however are not getting so small so quickly, so even though there are full TCP stacks in many radios, we should not force a full server implementation on them.
>
> So, Lets keep the 3-way handshake we have discussed, but make the router the advertiser/server:
>
>
>    Router                                        Modem
>    ===================================================
>
> 1) TCP Listen()
>
> 2) UDP Peer_Discovery ------------------------------->
>      + Version TLV
>      + TCP address:port
>
> 3)                                       TCP Connect()
>
> 4) <-------------------------------- Peer_Initialize()
>                                       + Version TLV
>                                       + Ident TLV
>                                       + Mandatory TLVs
>
> 5) Peer_Initialize_Ack ------------------------------>
>      + Status TLV
>      + Ident TLV
>
> I withdraw my suggestion about cookies.  As Teco has pointed out, just do security properly (TLS or IPSec or whatever).  Putting in a lightweight/half-baked authentication process in the protocol may lead some implementers to assume this provides security.
>
> I have also suggested just Version TLV and TCP endpoint address in the UDP discovery packet to save space.  This should allow a listening modem to decide whether to start a session with a router before TCP connect.
>
> At step 5, the router has the opportunity to send a negative ACK, by including an error Status TLV in the Peer_Inialize_Ack and then shutdown the connection.  This captures Teco's SHOULD condition "The router SHOULD NOT start a session with a modem that does not advertise mandatory metric TLVs"
>
> Would it help to have a state machine in the draft?
>
> Comments?
>
> Rick Taylor
> The information contained within this e-mail and any files attached to this e-mail is private and in addition may include commercially sensitive information. The contents of this e-mail are for the intended recipient only and therefore if you wish to disclose the information contained within this e-mail or attached files, please contact the sender prior to any such disclosure. If you are not the intended recipient, any disclosure, copying or distribution is prohibited. Please also contact the sender and inform them of the error and delete the e-mail, including any attached files from your system. Cassidian Limited, Registered Office : Quadrant House, Celtic Springs, Coedkernew, Newport, NP10 8FZ Company No: 04191036 http://www.cassidian.com



-- 
We began as wanderers, and we are wanderers still. We have lingered
long enough on the shores of the cosmic ocean. We are ready at last to
set sail for the stars - Carl Sagan