Re: [Masque] WGLC for "Requirements for a MASQUE Protocol to Proxy IP Traffic"

Eric Rescorla <ekr@rtfm.com> Fri, 04 June 2021 15:53 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: masque@ietfa.amsl.com
Delivered-To: masque@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A47F3A1736 for <masque@ietfa.amsl.com>; Fri, 4 Jun 2021 08:53:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 96Lb3SMXPqMD for <masque@ietfa.amsl.com>; Fri, 4 Jun 2021 08:53:25 -0700 (PDT)
Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C01CF3A1732 for <masque@ietf.org>; Fri, 4 Jun 2021 08:53:25 -0700 (PDT)
Received: by mail-io1-xd2e.google.com with SMTP id o21so10534810iow.13 for <masque@ietf.org>; Fri, 04 Jun 2021 08:53:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7SRhPYQxsuwSJ02IYbUFxyu2uc3Mg6SZudEgq6r1qCE=; b=QfpAoiaaWl/doGUjxMw9JR/Zm2EAjQ2vLV7x+3hZQ8VJVxFjpoR7xBR5rOc80YKIBr LZFxj+kAFDSFByJVcA5uoXacG7QLEH3yoxrSxy7c/Ti4Je+s4TgrUwvDaLU0N4BrR3Yv e87k1Xq0LH1KSr60OYjveDykJewCPqeiIDfwoLydN8jJL23a9X+mmhHWdNKQm8Yl+QoA cPXeB31BHLTSQWF4gxPl5ADWRDMJQ8xGgfx7NoLAJ1ZfgUNvxRPS8LXuRB0mxPUxUDSv 17V038wWE1hneyJBl86TKNgJMb9y7zJkmP5n/HKnS/mSBdZzLJUZT8NVvZP+zMuX1M0h fPtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7SRhPYQxsuwSJ02IYbUFxyu2uc3Mg6SZudEgq6r1qCE=; b=k1+luB5SIDjbolZEBM95SaPQkRQWsFWRCtrGcs8nEAV3Ftnm/GksNzSlXifwXaQbAB 5A2hgLyfbqqGLwE9wGpJoMvLLOvFRAnVku1ggWFniYF657r4FMJcFGd3HggLCU9N+DTg dl3daXVp/VmyNU7XtSu8g9LN8mNpQQio7u6wg5SFySuk1OwQaXvCISyBHvlNyMTaLrV/ yoqOBZa4MGsmyrQ0xXDlfBhVd+O9BkGIsIUMDQnthZcI3HVcD/KrpKUHZgKHU2r6DFKg 3TQY6TPzffd0SfM9f7OR3Wo9a2CKPRiTVlbpEhwxHFbbqul1T6vwq4nG4Mcd3lxnUrGQ UgZw==
X-Gm-Message-State: AOAM532ZzRPIUgFPJbACAcrsug0EgQfBFtDn8oVe2ueGX95+dWyM/FMC wyUGHno5Se3jZiieiwaYdL9HxJ0Y48B4FSbRhVzTQA==
X-Google-Smtp-Source: ABdhPJzMg+TEndepr5YV5HVK/gHF27CwvjcGgy5DNN8nFUzaqpXeGvl7J5QVw2dOrQeCHJ+ReEyJGqqoAHjTlWM2K4A=
X-Received: by 2002:a6b:6205:: with SMTP id f5mr4292192iog.60.1622822004367; Fri, 04 Jun 2021 08:53:24 -0700 (PDT)
MIME-Version: 1.0
References: <d314198b-6c01-4b15-84d8-9896b5fdee80@www.fastmail.com> <HE1PR0702MB3772355483E2771650C6D679953F9@HE1PR0702MB3772.eurprd07.prod.outlook.com> <CABcZeBOXLy7VA=t7F5UC-DuKE4NPymOvXThaevKkKD3n_G5RaA@mail.gmail.com> <eda844f5db2a5f19e60a67e79e0509498285ba29.camel@ericsson.com>
In-Reply-To: <eda844f5db2a5f19e60a67e79e0509498285ba29.camel@ericsson.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Fri, 04 Jun 2021 08:52:48 -0700
Message-ID: <CABcZeBPrQoFjvpmVumpHLq3FdnU=U00_u9zbPZoGcoXq7gA5UA@mail.gmail.com>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
Cc: "masque@ietf.org" <masque@ietf.org>, "caw@heapingbits.net" <caw@heapingbits.net>
Content-Type: multipart/alternative; boundary="0000000000001abcaa05c3f2b1b6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/masque/zr7stdtFATtHM1StQu9Pny7kiMY>
Subject: Re: [Masque] WGLC for "Requirements for a MASQUE Protocol to Proxy IP Traffic"
X-BeenThere: masque@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiplexed Application Substrate over QUIC Encryption <masque.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/masque>, <mailto:masque-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/masque/>
List-Post: <mailto:masque@ietf.org>
List-Help: <mailto:masque-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/masque>, <mailto:masque-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Jun 2021 15:53:31 -0000

On Fri, Jun 4, 2021 at 7:57 AM Magnus Westerlund <
magnus.westerlund@ericsson.com> wrote:

> Hi,
>
> On Wed, 2021-06-02 at 15:32 -0700, Eric Rescorla wrote
>


> With the caveat that I am not a huge fan of requirements documents, this
> seems like it's just punting all requirements discussions to the protocol
> document. If we really don't have consensus on 2.4 (and without taking a
> position either way on that), then I would rather bracket that requirement
> and declare consensus on what we have.
>
>
> If with "bracketing" means clarify that these are potentially optional
> parts then I think that is a reasonable direction.
>

This is what I am suggesting.


> I don't personally strongly desire 2.4 but it's clear to me that 2.4 is an
> essential part of operating a large class of corporate VPNs, so if we want
> to have a generic VPN protocol, we need it, no? To the extent to which it
> is complicated, I would suggest we try to solve it (borrowing from IPsec as
> appropriate) and if we discover we cannot within a reasonable period of
> time, then we can consider punting it.
>
>
> So I am not objecting to the WG working on 2.4, and as you say it will be
> necessary. However, I would strongly prefer to have that functionality
> being an extension of a basic core.
>

What I am proposing here is that we:

- Mark this requirement as not having consensus in the reqts doc
- Try to develop it contemporaneously, and if it is done in time, put it in
the core document and if not, consider an extension.

-Ekr