Re: [Masque] Adoption call for "Requirements for a MASQUE Protocol to Proxy IP Traffic"

Tommy Pauly <tpauly@apple.com> Wed, 07 October 2020 19:13 UTC

Return-Path: <tpauly@apple.com>
X-Original-To: masque@ietfa.amsl.com
Delivered-To: masque@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18DBF3A1317 for <masque@ietfa.amsl.com>; Wed, 7 Oct 2020 12:13:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.3
X-Spam-Level:
X-Spam-Status: No, score=-3.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QoZVMcyFvUNH for <masque@ietfa.amsl.com>; Wed, 7 Oct 2020 12:13:51 -0700 (PDT)
Received: from nwk-aaemail-lapp03.apple.com (nwk-aaemail-lapp03.apple.com [17.151.62.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D7193A1315 for <masque@ietf.org>; Wed, 7 Oct 2020 12:13:51 -0700 (PDT)
Received: from pps.filterd (nwk-aaemail-lapp03.apple.com [127.0.0.1]) by nwk-aaemail-lapp03.apple.com (8.16.0.42/8.16.0.42) with SMTP id 097JAKiM026550; Wed, 7 Oct 2020 12:13:47 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=vHjOZ8BIm0Xxn+xme8Uj/xVUB0q6cN3/UXWq88f3udo=; b=NXX4Mor9hheC8YQRwMCQdJCiHFLswSMqLtGdF46C6v6xoG0k1fkVRBIMV65tSutAWboS QVklSU8nBWQ0gWXmgl0MuWXwMD4odSiqCNYhZocZiklDRcnj6lWj2NM6+PJfU9bvJjYe Az9W3xzykiwpiJ47ddeVwSG6cDQEz5wQnpH2qP7DDCgALc890YoOJoV3Q8les5E6/9uf dk8P20cbFm0zPSb+J8NkcLqGsVXxNYDTUUgSLhb+/yXszYprYqSBuwBLRVjMNAEgt+4F 4vhssMimCcMEFHa1iMNSA+EVH1aOG4Hs1xmandFmtX4YK99dhPp1GFCnhmRE+0ZvqCO1 1Q==
Received: from rn-mailsvcp-mta-lapp01.rno.apple.com (rn-mailsvcp-mta-lapp01.rno.apple.com [10.225.203.149]) by nwk-aaemail-lapp03.apple.com with ESMTP id 33y90pd7ee-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 07 Oct 2020 12:13:47 -0700
Received: from rn-mailsvcp-mmp-lapp04.rno.apple.com (rn-mailsvcp-mmp-lapp04.rno.apple.com [17.179.253.17]) by rn-mailsvcp-mta-lapp01.rno.apple.com (Oracle Communications Messaging Server 8.1.0.6.20200729 64bit (built Jul 29 2020)) with ESMTPS id <0QHU00E5QIQZDP30@rn-mailsvcp-mta-lapp01.rno.apple.com>; Wed, 07 Oct 2020 12:13:47 -0700 (PDT)
Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp04.rno.apple.com by rn-mailsvcp-mmp-lapp04.rno.apple.com (Oracle Communications Messaging Server 8.1.0.6.20200729 64bit (built Jul 29 2020)) id <0QHU00K00IN3CA00@rn-mailsvcp-mmp-lapp04.rno.apple.com>; Wed, 07 Oct 2020 12:13:47 -0700 (PDT)
X-Va-A:
X-Va-T-CD: d9ccecb7d9fec9f5a38220676cb304f2
X-Va-E-CD: 796e03da8500f86258a602cc9d388e04
X-Va-R-CD: 398ed58ef961ffd9d4792faa88aad447
X-Va-CD: 0
X-Va-ID: 591cbac6-67a8-46ef-a1cb-f5c3a60653d4
X-V-A:
X-V-T-CD: d9ccecb7d9fec9f5a38220676cb304f2
X-V-E-CD: 796e03da8500f86258a602cc9d388e04
X-V-R-CD: 398ed58ef961ffd9d4792faa88aad447
X-V-CD: 0
X-V-ID: 40b64491-074c-4964-8bf5-3a8b08530609
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-07_10:2020-10-07, 2020-10-07 signatures=0
Received: from localhost.localdomain (unknown [17.234.7.156]) by rn-mailsvcp-mmp-lapp04.rno.apple.com (Oracle Communications Messaging Server 8.1.0.6.20200729 64bit (built Jul 29 2020)) with ESMTPSA id <0QHU006BMIQXY700@rn-mailsvcp-mmp-lapp04.rno.apple.com>; Wed, 07 Oct 2020 12:13:47 -0700 (PDT)
From: Tommy Pauly <tpauly@apple.com>
Message-id: <DC182CFE-361B-4352-AF61-ED6BB78BE465@apple.com>
Content-type: multipart/alternative; boundary="Apple-Mail=_66918A1D-A2B8-4F62-8A68-DD84A53E63D3"
MIME-version: 1.0 (Mac OS X Mail 14.0 \(3654.0.3.2.26\))
Date: Wed, 07 Oct 2020 12:13:44 -0700
In-reply-to: <A48AB057-3578-4DFF-A6D2-C3B15D171DE9@apple.com>
Cc: "masque@ietf.org" <masque@ietf.org>, Chris Wood <caw@heapingbits.net>
To: Eric Kinnear <ekinnear=40apple.com@dmarc.ietf.org>
References: <4f83a742-e6c3-4aef-a26b-1801ecf19cdf@www.fastmail.com> <d360df8c2870acdc4b312ab3f5f9031610a24703.camel@ericsson.com> <CAKKJt-fbdUgpCuBZ57sU+Nv=qB8+zBRCfjqUZ7KneZrEpxu0fQ@mail.gmail.com> <CAPDSy+7QpSUdpLzQFxb0HULgQrGL-vy3JJUP0pNfu=Q-hR6Zqw@mail.gmail.com> <ac53fcc2759c86fa3d4b108b68776b4fa571fa00.camel@ericsson.com> <d60f8c28-697b-4203-bc7e-58b59d8492f9@www.fastmail.com> <b1ff33a91c1c2f7f57c025bfd7a3700de394b37d.camel@ericsson.com> <A48AB057-3578-4DFF-A6D2-C3B15D171DE9@apple.com>
X-Mailer: Apple Mail (2.3654.0.3.2.26)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-07_10:2020-10-07, 2020-10-07 signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/masque/zOnNbqTQTIUM5p0SCVU5pUX2Ih0>
Subject: Re: [Masque] Adoption call for "Requirements for a MASQUE Protocol to Proxy IP Traffic"
X-BeenThere: masque@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiplexed Application Substrate over QUIC Encryption <masque.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/masque>, <mailto:masque-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/masque/>
List-Post: <mailto:masque@ietf.org>
List-Help: <mailto:masque-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/masque>, <mailto:masque-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Oct 2020 19:13:53 -0000

Looking through the document, I believe that it is a good starting place for the milestone and ought to be adopted.

Like some of the others on this list, I personally have more interest in seeing the CONNECT-UDP work get solidified soon, but I think that IP proxying is an essential part of MASQUE, and good to keep discussing in parallel.

I’d like to the working group hash out of some of the requirements in detail—it seems like we’ll be reinventing a lot of the work of IKEv2 traffic selectors based on the current description. This can be complex, and we should avoid duplicating work where possible. I’m also curious if we see ways forward that allow IP proxying without some of that complexity. These can all be discussed after adoption, though.

Best,
Tommy

> On Sep 26, 2020, at 4:54 PM, Eric Kinnear <ekinnear=40apple.com@dmarc.ietf.org> wrote:
> 
> Hi all, 
> 
> Thanks to everyone who has responded to this call for adoption as a support document. We have both positive and negative viewpoints being expressed — thanks for the valuable discussion so far. 
> Ideally, we’d like to see a few more people chime in with their views and the discussion to continue towards a position from which we can move forwards.
> 
> To aid in that, we are extending the adoption call for an additional two weeks, ending October 7.
> We’re especially interested in focus on what should be covered by the requirements document and if this document can be used as a starting point to get there.
> 
> Thanks, 
> Eric and Chris
> 
> 
>> On Sep 25, 2020, at 12:32 AM, Magnus Westerlund <magnus.westerlund=40ericsson.com@dmarc.ietf.org <mailto:magnus.westerlund=40ericsson.com@dmarc.ietf.org>> wrote:
>> 
>> Hi Chris,
>> 
>> Understood. My personal view is that this adoption call was unnecessary rushing
>> things and that we don't know if the document is a suitable starting point until
>> we have had some more discussion. 
>> 
>> But lets get on discussing its content rather than the formalia. 
>> 
>> Cheers
>> 
>> Magnus
>> 
>> On Thu, 2020-09-24 at 05:04 -0700, Christopher Wood wrote:
>>> Magnus,
>>> 
>>> As noted in the kickoff email, the purpose was to "start an adoption call for
>>> this document in its current form as a starting point." We expect the document
>>> contents may change as we work towards consensus, and that's fine! We're just
>>> getting started.
>>> 
>>> Best,
>>> Chris
>>> 
>>> On Mon, Sep 21, 2020, at 3:00 AM, Magnus Westerlund wrote:
>>>> David,
>>>> 
>>>> I hope that we can agee on that if adopting this document at this stage
>>>> there
>>>> will be no implication on any of the content in document having WG
>>>> consensus. I
>>>> rather see that the WG would discuss the use cases and we have a document
>>>> where
>>>> the general content would have WG consensus when adopting it. 
>>>> I think adopting a document just becasue we know we are going to need it is
>>>> rushing thing for the wrong reasons. I rather adopt a document in 3 months
>>>> time
>>>> where we are agreeing more on the content. 
>>>> 
>>>> 
>>>> Cheers
>>>> 
>>>> Magnus
>>>> 
>>>> 
>>>> 
>>>> On Fri, 2020-09-18 at 09:45 -0700, David Schinazi wrote:
>>>>> Thank you for comments, Mirja, Spencer, and Magnus!
>>>>> 
>>>>> If I may summarize them in the following bullet points:
>>>>> - we should reach WG consensus on use-cases
>>>>> - we should clarify the last use-case
>>>>> - we should clarify which requirement relates to which use-case
>>>>> 
>>>>> (There were also detailed comments on individual requirements that
>>>>> would be better discussed on individual threads, or GitHub issues)
>>>>> 
>>>>> I absolutely agree with these bullet points. As per our charter, the
>>>>> goal of this entire draft is for us to reach WG consensus on
>>>>> use-cases and requirements for IP proxying, before the WG starts
>>>>> work on a solution. However, none of those comments justify
>>>>> delaying adoption of the document. The call for adoption is there
>>>>> to ensure there is WG interest in the draft, and that folks are willing
>>>>> to review and comment - which your messages indicate! Adopting
>>>>> the draft will actually facilitate answering the three points above,
>>>>> since WG consensus is better reached on parts of WG documents,
>>>>> as opposed to individual submissions.
>>>>> 
>>>>> Thanks,
>>>>> David
>>>>> 
>>>>> 
>>>>> On Fri, Sep 18, 2020 at 8:43 AM Spencer Dawkins at IETF <
>>>>> spencerdawkins.ietf@gmail.com <mailto:spencerdawkins.ietf@gmail.com>> wrote:
>>>>>> So, just to start the discussion Magnus said we need to have (and I
>>>>>> agree
>>>>>> that we need to have it, whether before, or after, adoption), 
>>>>>> 
>>>>>> On Fri, Sep 18, 2020 at 3:27 AM Magnus Westerlund <
>>>>>> magnus.westerlund=40ericsson.com@dmarc.ietf.org <mailto:magnus.westerlund=40ericsson.com@dmarc.ietf.org>> wrote:
>>>>>> 
>>>>>> Which of these requirements (in 
>>>>>> https://www.ietf.org/id/draft-cms-masque-ip-proxy-reqs-01.txt <https://www.ietf.org/id/draft-cms-masque-ip-proxy-reqs-01.txt>)
>>>>>> 
>>>>>> 3.1.  IP Session Establishment
>>>>>> 3.2.  Proxying of IP packets
>>>>>> 3.3.  Maximum Transmission Unit
>>>>>> 3.4.  IP Assignment
>>>>>> 3.5.  Route Negotiation
>>>>>> 3.6.  Identity
>>>>>> 3.7.  Transport Security
>>>>>> 3.8.  Authentication
>>>>>> 3.9.  Reliable Transmission of IP Packets
>>>>>> 3.10.  Flow Control
>>>>>> 3.11.  Indistinguishability
>>>>>> 3.12.  Support HTTP/2 and HTTP/3
>>>>>> 3.13.  Multiplexing
>>>>>> 3.14.  Load balancing
>>>>>> 3.15.  Extensibility
>>>>>> 
>>>>>> belongs to each use case?
>>>>>> 
>>>>>>> 2.1.  Consumer VPN
>>>>>>> 2.2.  Point to Point Connectivity
>>>>>>> 2.3.  Point to Network Connectivity
>>>>>>> 2.4.  Network to Network Connectivity
>>>>>> 
>>>>>> (I'm happy to have this conversation in Github, but Magnus said we
>>>>>> needed to
>>>>>> have it here, so I'm following his excellent leadership)
>>>>>> 
>>>>>> Best,
>>>>>> 
>>>>>> Spencer 
>>>> 
>>>> -- 
>>>> Cheers
>>>> 
>>>> Magnus Westerlund 
>>>> 
>>>> 
>>>> ----------------------------------------------------------------------
>>>> Networks, Ericsson Research
>>>> ----------------------------------------------------------------------
>>>> Ericsson AB                 | Mobile +46 73 0949079
>>>> Torshamnsgatan 23           |
>>>> SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com <mailto:magnus.westerlund@ericsson.com>
>>>> ----------------------------------------------------------------------
>>>> 
>>>> 
>>>> 
>> -- 
>> Cheers
>> 
>> Magnus Westerlund 
>> 
>> 
>> ----------------------------------------------------------------------
>> Networks, Ericsson Research
>> ----------------------------------------------------------------------
>> Ericsson AB                 | Mobile +46 73 0949079
>> Torshamnsgatan 23           |
>> SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com <mailto:magnus.westerlund@ericsson.com>
>> ----------------------------------------------------------------------
>> 
>> 
>> -- 
>> Masque mailing list
>> Masque@ietf.org <mailto:Masque@ietf.org>
>> https://www.ietf.org/mailman/listinfo/masque <https://www.ietf.org/mailman/listinfo/masque>
> -- 
> Masque mailing list
> Masque@ietf.org
> https://www.ietf.org/mailman/listinfo/masque