Re: [MBONED] Adam Roach's No Objection on draft-ietf-mboned-driad-amt-discovery-10: (with COMMENT)

Adam Roach <adam@nostrum.com> Wed, 18 December 2019 23:28 UTC

Return-Path: <adam@nostrum.com>
X-Original-To: mboned@ietfa.amsl.com
Delivered-To: mboned@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9632212004D; Wed, 18 Dec 2019 15:28:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.281
X-Spam-Level:
X-Spam-Status: No, score=-1.281 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, KHOP_HELO_FCRDNS=0.399, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=nostrum.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIMnxC3rlSHM; Wed, 18 Dec 2019 15:28:15 -0800 (PST)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 736CB120013; Wed, 18 Dec 2019 15:28:15 -0800 (PST)
Received: from Svantevit.local (99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id xBINS5cd050274 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 18 Dec 2019 17:28:07 -0600 (CST) (envelope-from adam@nostrum.com)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nostrum.com; s=default; t=1576711688; bh=OqKAYiReG5RY3CCEfoAtAAcbCj/+bmx3GCMVHtEeERo=; h=Subject:To:Cc:References:From:Date:In-Reply-To; b=q1d0vLhJpTK92PQ03fj4V3cu6YAG0fT5SjpUTtPp+87n7yfiqJJnyjJL+HvkAraYM 8718hpg/QloLYsZt0vFmDDTnUTwV2xfo5JWgGyEDEOWrmuEcjzjUDzYvH4LUIvhAkn 90CoEwifOOLbK3TMkwYLMyDpTCAspXLCh3t2QyA8=
X-Authentication-Warning: raven.nostrum.com: Host 99-152-146-228.lightspeed.dllstx.sbcglobal.net [99.152.146.228] claimed to be Svantevit.local
To: "Holland, Jake" <jholland@akamai.com>, The IESG <iesg@ietf.org>
Cc: "mboned@ietf.org" <mboned@ietf.org>, "draft-ietf-mboned-driad-amt-discovery@ietf.org" <draft-ietf-mboned-driad-amt-discovery@ietf.org>, "mboned-chairs@ietf.org" <mboned-chairs@ietf.org>
References: <157665185601.5070.6425556287817438740.idtracker@ietfa.amsl.com> <8DB7FD5F-1DAD-48C1-AD96-8F337D496BFB@akamai.com>
From: Adam Roach <adam@nostrum.com>
Message-ID: <8fbd2e4b-f53d-94d2-dbb8-ec4c34ab1f33@nostrum.com>
Date: Wed, 18 Dec 2019 17:28:00 -0600
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <8DB7FD5F-1DAD-48C1-AD96-8F337D496BFB@akamai.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/mboned/VICAWUOXwKWPqnXrpmgn_1s5DIc>
Subject: Re: [MBONED] Adam Roach's No Objection on draft-ietf-mboned-driad-amt-discovery-10: (with COMMENT)
X-BeenThere: mboned@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Mail List for the Mboned Working Group <mboned.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mboned>, <mailto:mboned-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mboned/>
List-Post: <mailto:mboned@ietf.org>
List-Help: <mailto:mboned-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mboned>, <mailto:mboned-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Dec 2019 23:28:17 -0000

Thanks for the quick response! Some replies inline.

On 12/18/19 4:03 PM, Holland, Jake wrote:
> §2.2:
>
>>                         Figure 2: DRIAD Messaging
>>
>> This example uses IPv4 rather than IPv6. Please either add a similar diagram
>> showing IPv6 usage, or change this diagram to use IPv6. See
>> https://www.iab.org/2016/11/07/iab-statement-on-ipv6/ for further information.
> [JH] The point is well taken, thanks.
>
> I have no objection to changing the AMT Relay address in the diagram from
> 203.0.113.15 to an IPv6 example address, like so:
>
> NEW:
>     \  /          +---------------+
>      \/           |   AMT Relay   |
>                   |  2001:db8::f  |
>                   +---------------+
>                           |        4: Gateway connects to Relay,
>                                       sends Join(S,G) over tunnel
>                           |
>                  Unicast
>                   Tunnel  |
>
>       ^                   |        3: --> DNS Query: type=AMTRELAY,
>       |                           /         15.100.51.198.in-addr.arpa.
>       |                   |      /    <-- Response:
>   Join/Leave       +-------------+          AMTRELAY=2001:db8::f
>    Signals         | AMT gateway |
>
>
> However, the full application of this suggestion introduces an unfortunate
> formatting challenge for changing the (S,G) to use IPv6, namely that the
> reverse DNS name for e.g. 2001:db8:c::f would become this:
>
> f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.c.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa
>
> This domain name does not even legally fit into a single line.  In text
> I guess I would follow the example from section 2.5 of RFC 3596 and wrap
> the "arpa." to the next line:
> https://tools.ietf.org/html/rfc3596#section-2.5
>
> But no sane way to fit it into the diagram has occurred to me yet.  If you
> have a suggestion that doesn't lose clarity I'd be happy to use it instead,


How do you feel about the following?


                  +---------------+
                  |    Sender     |
   |    |         | 2001:db8:c::f |
   |    |         +---------------+
   |Data|                 |
   |Flow|      Multicast  |
  \|    |/      Network   |
   \    /                 |        5: Propagate RPF for Join(S,G)
    \  /          +---------------+
     \/           |   AMT Relay   |
                  |  2001:db8::f  |
                  +---------------+
                          |        4: Gateway connects to Relay,
                                      sends Join(S,G) over tunnel
                          |
                 Unicast           3: --> DNS Query: type=AMTRELAY,
                  Tunnel  |       / f.0.0.0.0.0.0.0.0.0.0.0.
                                 / 0.0.0.0.0.0.0.0.c.0.0.0.
      ^                   |     / 8.b.d.0.1.0.0.2.ip6.arpa
      |                        /
      |                   |   /       <-- Response:
  Join/Leave       +-------------+ AMTRELAY=2001:db8::f
   Signals         | AMT gateway |
      |            +-------------+
      |                   |        2: Propagate RPF for Join(S,G)
      |        Multicast  |
                Network   |
                          |        1: Join(S=2001:db8:c::f,G=ff33::cd)
                   +-------------+
                   |   Receiver  |
                   |  (end user) |
                   +-------------+


> ---------------------------------------------------------------------------
>
> §2.6:
>
>>   AMTRELAY records MAY also appear in other
>>   zones...
>> What would this mean? Is this intended for future specifications to
>> take advantage, or is the document assuming that the reader is able
>> to figure out the semantics of AMTRELAY RRs elsewhere in the DNS tree?
>> If the latter, please spell it out explicitly. If the former, please
>> indicate that using records in this way may be specified in future
>> documents.
> Ah, thanks for noticing this was unclear, I think I didn't explain
> this well.
>
> The main point is because the reverse zones are often delegated to a
> named zone, and in these cases it's necessary in practice to put the
> record in the delegated zone.


Ah, okay. Yep, that's what I missed.


>
> Does this make it more clear?
>
> NEW:
>     AMTRELAY records MAY also appear in other
>     zones, since this may be necessary to perform delegation from the
>     reverse zones (see for example Section 5.2 of [RFC2317]), but the use
>     case enabled by this document requires a reverse IP mapping for the
>     source from an (S,G) in order to be useful to most AMT gateways.


That addresses my concern. Thanks!


> I was intending to leave undefined the use of such records in other
> ways.  Do you think it's helpful to add to the end of the above something
> like "This document does not define semantics for the use of AMTRELAY
> records obtained in a way other than by a reverse IP lookup."?
>

I think it's useful, in that it makes it clear that future documents can 
do so without conflicting with this document (should a situation arise 
for which that makes sense).

/a