Re: [MBONED] Adam Roach's No Objection on draft-ietf-mboned-driad-amt-discovery-10: (with COMMENT)

"Holland, Jake" <jholland@akamai.com> Wed, 18 December 2019 22:03 UTC

Return-Path: <jholland@akamai.com>
X-Original-To: mboned@ietfa.amsl.com
Delivered-To: mboned@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74E3120089; Wed, 18 Dec 2019 14:03:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KjwK8YVDy6fT; Wed, 18 Dec 2019 14:03:42 -0800 (PST)
Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 874CA12001A; Wed, 18 Dec 2019 14:03:42 -0800 (PST)
Received: from pps.filterd (m0050102.ppops.net [127.0.0.1]) by m0050102.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id xBIM174k029863; Wed, 18 Dec 2019 22:03:40 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=L7zAYapUErBtFIDUM6BUOmttm5QaMCqd5/++wOPrTj0=; b=esEC1GvHASpbD3K+jw60iHy0ZzoY9Xd1SSGQQw6+IgEgGQHGQIaLVJltBIaIRfYx4kLc c5tJ5RQ5mHYz+odU1sV32mZwYiCeV53uR0r4MlwI/Tz5QE8g4yjpGgzVFtq0gGSvwGDQ cuSCDZJdrMR0C421vbHTSJDgBm5/MK6bgOXzkPaxQYFLChjk4BPQK0D8iViFJBZKiCmr qMjgGl7+VOSXy4jaGEyu9X/hnUx289JUqpxUGiId1twmJ3LXB0S4MGKIPw4/R4/8sz4c 9Z30LU2o5foF5GB+QJd8JlzcG6p/vjET3EKjZXHsiHNs37oxOcD+B4Wm9rWbM3z/L839 sg==
Received: from prod-mail-ppoint3 (prod-mail-ppoint3.akamai.com [96.6.114.86] (may be forged)) by m0050102.ppops.net-00190b01. with ESMTP id 2wxny3r4gm-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 18 Dec 2019 22:03:40 +0000
Received: from pps.filterd (prod-mail-ppoint3.akamai.com [127.0.0.1]) by prod-mail-ppoint3.akamai.com (8.16.0.27/8.16.0.27) with SMTP id xBIM1rEC019896; Wed, 18 Dec 2019 17:03:39 -0500
Received: from email.msg.corp.akamai.com ([172.27.165.117]) by prod-mail-ppoint3.akamai.com with ESMTP id 2wvuy23guu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 18 Dec 2019 17:03:39 -0500
Received: from ustx2ex-dag1mb6.msg.corp.akamai.com (172.27.165.124) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.165.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 18 Dec 2019 16:03:38 -0600
Received: from ustx2ex-dag1mb6.msg.corp.akamai.com ([172.27.165.124]) by ustx2ex-dag1mb6.msg.corp.akamai.com ([172.27.165.124]) with mapi id 15.00.1473.005; Wed, 18 Dec 2019 14:03:38 -0800
From: "Holland, Jake" <jholland@akamai.com>
To: Adam Roach <adam@nostrum.com>, The IESG <iesg@ietf.org>
CC: "draft-ietf-mboned-driad-amt-discovery@ietf.org" <draft-ietf-mboned-driad-amt-discovery@ietf.org>, "mboned-chairs@ietf.org" <mboned-chairs@ietf.org>, "mboned@ietf.org" <mboned@ietf.org>
Thread-Topic: [MBONED] Adam Roach's No Objection on draft-ietf-mboned-driad-amt-discovery-10: (with COMMENT)
Thread-Index: AQHVtW+FBE6tCRldCUuZOSvK3BXQ2afAcx+A
Date: Wed, 18 Dec 2019 22:03:38 +0000
Message-ID: <8DB7FD5F-1DAD-48C1-AD96-8F337D496BFB@akamai.com>
References: <157665185601.5070.6425556287817438740.idtracker@ietfa.amsl.com>
In-Reply-To: <157665185601.5070.6425556287817438740.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.20.0.191208
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.19.80.250]
Content-Type: text/plain; charset="utf-8"
Content-ID: <AF19556AB9CB3C4D961BFEEB54CE7023@akamai.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-12-18_07:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1911140001 definitions=main-1912180168
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-18_07:2019-12-17,2019-12-18 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 lowpriorityscore=0 adultscore=0 mlxlogscore=999 malwarescore=0 suspectscore=0 spamscore=0 bulkscore=0 clxscore=1011 phishscore=0 priorityscore=1501 mlxscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912180168
Archived-At: <https://mailarchive.ietf.org/arch/msg/mboned/Yy-apiY7MTiM-b-7eWoUKxhe6Pk>
Subject: Re: [MBONED] Adam Roach's No Objection on draft-ietf-mboned-driad-amt-discovery-10: (with COMMENT)
X-BeenThere: mboned@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Mail List for the Mboned Working Group <mboned.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mboned>, <mailto:mboned-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mboned/>
List-Post: <mailto:mboned@ietf.org>
List-Help: <mailto:mboned-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mboned>, <mailto:mboned-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Dec 2019 22:03:45 -0000

Hi Adam,

Thanks for the review.  Some comments below.

On 2019-12-17, 22:51, "Adam Roach via Datatracker" <noreply@ietf.org> wrote:

> Please expand "AMT" in the title.

[JH] Good catch, thanks.
OLD:
                      DNS Reverse IP AMT Discovery

NEW:
      DNS Reverse IP AMT (Automatic Multicast Tunneling) Discovery


---------------------------------------------------------------------------

§2.2:

>                        Figure 2: DRIAD Messaging
>
> This example uses IPv4 rather than IPv6. Please either add a similar diagram
> showing IPv6 usage, or change this diagram to use IPv6. See
> https://www.iab.org/2016/11/07/iab-statement-on-ipv6/ for further information.

[JH] The point is well taken, thanks.

I have no objection to changing the AMT Relay address in the diagram from
203.0.113.15 to an IPv6 example address, like so:

NEW:
   \  /          +---------------+
    \/           |   AMT Relay   |
                 |  2001:db8::f  |
                 +---------------+
                         |        4: Gateway connects to Relay,
                                     sends Join(S,G) over tunnel
                         |
                Unicast
                 Tunnel  |

     ^                   |        3: --> DNS Query: type=AMTRELAY,
     |                           /         15.100.51.198.in-addr.arpa.
     |                   |      /    <-- Response:
 Join/Leave       +-------------+          AMTRELAY=2001:db8::f
  Signals         | AMT gateway |


However, the full application of this suggestion introduces an unfortunate
formatting challenge for changing the (S,G) to use IPv6, namely that the
reverse DNS name for e.g. 2001:db8:c::f would become this:

f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.c.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa

This domain name does not even legally fit into a single line.  In text
I guess I would follow the example from section 2.5 of RFC 3596 and wrap
the "arpa." to the next line:
https://tools.ietf.org/html/rfc3596#section-2.5

But no sane way to fit it into the diagram has occurred to me yet.  If you
have a suggestion that doesn't lose clarity I'd be happy to use it instead,
but I was wondering whether it would be reasonable to just add a paragraph
to the end of section 2.2 providing the substitutions if using IPv6?  I'm
hoping this would do the same job:

NEW:
   In the case of an IPv6 (S,G), the only difference in the AMT relay
   discovery process is the use of the ip6.arpa reverse IP domain name,
   as described in Section 2.5 of [RFC3596]), instead of the in-
   addr.arpa domain name.

   For example, if the (S,G) is (2001:db8:c::f, ffe3::80fc:2), the
   reverse domain name for the AMTRELAY query would be:

   f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.c.0.0.0.8.b.d.0.1.0.0.2.ip6.
                                                                  arpa.


I agree it's useful to give an example like this, in that it gives
implementors and operators something pasteable to compare against.  But
absent a proposed edit to the diagram that's still reasonable-looking and
correct, would these edits adequately addresses your concerns?

---------------------------------------------------------------------------

§2.6:

>  AMTRELAY records MAY also appear in other
>  zones...

> What would this mean? Is this intended for future specifications to
> take advantage, or is the document assuming that the reader is able
> to figure out the semantics of AMTRELAY RRs elsewhere in the DNS tree?
> If the latter, please spell it out explicitly. If the former, please
> indicate that using records in this way may be specified in future
> documents.

Ah, thanks for noticing this was unclear, I think I didn't explain
this well.

The main point is because the reverse zones are often delegated to a
named zone, and in these cases it's necessary in practice to put the
record in the delegated zone.

Does this make it more clear?

NEW:
   AMTRELAY records MAY also appear in other
   zones, since this may be necessary to perform delegation from the
   reverse zones (see for example Section 5.2 of [RFC2317]), but the use
   case enabled by this document requires a reverse IP mapping for the
   source from an (S,G) in order to be useful to most AMT gateways.

I was intending to leave undefined the use of such records in other
ways.  Do you think it's helpful to add to the end of the above something
like "This document does not define semantics for the use of AMTRELAY
records obtained in a way other than by a reverse IP lookup."?