Re: [MULTIMOBSEC-API] feedback from shim-api-00.txt

marcelo bagnulo braun <marcelo@it.uc3m.es> Tue, 16 May 2006 14:09 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fg0Es-0000Ef-A5; Tue, 16 May 2006 10:09:30 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Fg0Eq-0000EZ-Ft for multimobsec-api@ietf.org; Tue, 16 May 2006 10:09:28 -0400
Received: from stsc1260-eth-s1-s1p1-vip.va.neustar.com ([156.154.16.129] helo=chiedprmail1.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FfzFI-0005LL-KA for multimobsec-api@ietf.org; Tue, 16 May 2006 09:05:52 -0400
Received: from n2.nomadiclab.com ([193.234.219.2]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1FfylN-0005M5-Nw for multimobsec-api@ietf.org; Tue, 16 May 2006 08:35:03 -0400
Received: from n2.nomadiclab.com (localhost [127.0.0.1]) by n2.nomadiclab.com (Postfix) with ESMTP id B9877212C5D; Tue, 16 May 2006 15:34:55 +0300 (EEST)
Received: from outside.nomadiclab.com (d146.nomadiclab.com [193.234.218.146]) by n2.nomadiclab.com (Postfix) with ESMTP id 8369F212C59; Tue, 16 May 2006 15:34:55 +0300 (EEST)
Received: from outside.nomadiclab.com (localhost [127.0.0.1]) by outside.nomadiclab.com (Postfix) with ESMTP id 10BEFBDC40; Tue, 16 May 2006 15:34:55 +0300 (EEST)
Received: from [193.234.219.179] (w179.nomadiclab.com [193.234.219.179]) by outside.nomadiclab.com (Postfix) with ESMTP id CAE9DBDC38; Tue, 16 May 2006 15:34:54 +0300 (EEST)
In-Reply-To: <Pine.SOL.4.64.0605161123120.9383@kekkonen.cs.hut.fi>
References: <Pine.SOL.4.64.0605121237570.18320@kekkonen.cs.hut.fi> <20060515122938.E3B4.SHINTA@sfc.wide.ad.jp> <Pine.SOL.4.64.0605152343270.23493@kekkonen.cs.hut.fi> <abacd1cc1d62be71675b042d702c1290@it.uc3m.es> <Pine.SOL.4.64.0605161123120.9383@kekkonen.cs.hut.fi>
Mime-Version: 1.0 (Apple Message framework v623)
Content-Type: text/plain; charset="ISO-8859-1"; delsp="yes"; format="flowed"
Message-Id: <c05117fce05f49748c754f77b5c74c78@it.uc3m.es>
Content-Transfer-Encoding: quoted-printable
From: marcelo bagnulo braun <marcelo@it.uc3m.es>
Subject: Re: [MULTIMOBSEC-API] feedback from shim-api-00.txt
Date: Tue, 16 May 2006 15:34:54 +0300
To: Miika Komu <miika@iki.fi>
X-Mailer: Apple Mail (2.623)
X-Virus-Scanned: ClamAV using ClamSMTP
X-Virus-Scanned: ClamAV using ClamSMTP
X-Spam-Score: -2.6 (--)
X-Scan-Signature: 8f374d0786b25a451ef87d82c076f593
Cc: multimobsec-api@ietf.org
X-BeenThere: multimobsec-api@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Multihoming, mobility and security APIs" <multimobsec-api.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/multimobsec-api>, <mailto:multimobsec-api-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/multimobsec-api>
List-Post: <mailto:multimobsec-api@ietf.org>
List-Help: <mailto:multimobsec-api-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/multimobsec-api>, <mailto:multimobsec-api-request@ietf.org?subject=subscribe>
Errors-To: multimobsec-api-bounces@ietf.org

El 16/05/2006, a las 14:14, Miika Komu escribió:

> On Tue, 16 May 2006, marcelo bagnulo braun wrote:
>
>> El 16/05/2006, a las 0:01, Miika Komu escribió:
>>
>>> On Mon, 15 May 2006, Shinta Sugimoto wrote:
>>>> Mm, I am not sure if I want to be so specific at the beginning of
>>>> the document.  Wouldn't it be fine just to say "Socket API" ?
>>> According to the literature, it is "sockets API" with an "s".
>>> Maybe you can say in intro that the draft is illustrated using C  
>>> language. It is not a bad choice because the API bindings for other  
>>> languages are based on C anyway.
>>>> Ok, I will use 'event based'.  Does following sound better ?
>>>> <t>Notification from application to shim layer about outage.
>>>> Application should be able to inform shim layer about outage
>>>> in its communication.  Note that the notification is made
>>>> in event based manner.  The cause of outage could be for instance
>>>> a problem of network interface, congestions on the path and so on.
>>>> ICMP error messages delievered to the upper layer protocol is
>>>> normally clue for application to detect outgae.  REAP module
>>>> may be triggered by this indication to invoke procedure of
>>>> path exploration.</t>
>>> s/outgae/outage/. Again, it is undefined what kind of outage is in  
>>> question. Otherwise it is fine.
>>
>> i guess that it is any kind of outage that makes that an address pair  
>> is no longer working. And an address pair is said to be working is  
>> packet containing the first address from the pair as source address  
>> and the second address from the pair as destiantion address can  
>> safely travel from the source to the destiantion.
>
> Something like this should be also in the text.
>

ok

> (Maybe I am getting too detailed already now in the beginning)
>
>>>>>> However, this approach does not help the case where ID is not in  
>>>>>> form of
>>>>>> IP address (e.g.  HIT in HIP case).
>>>>> In HIP, a HIP enabled resolver can be used for setting up context  
>>>>> prior to
>>>>> the actual connection to HIT. Alternatively, DHTs support look-up  
>>>>> of
>>>>> non-hierarchical identifiers, such as HITs.
>>>> Yes.  But I think those (HIP enabled resolver and the DHT support)  
>>>> are
>>>> still in some HIP implementation or HIP experts' mind, aren't they ?
>>>> (I may be wrong, correct me if so)
>>>> So I was not sure if we could give conclusive statements about
>>>> these problems.
>>> I don't understand. HIP enabled resolvers and DHT support are mostly  
>>> supported by all of the three public implementations
>>
>> interesting.... which implementations are those?
>
> http://infrahip.hiit.fi/
> http://www.hip4inter.net/
> http://www.openhip.org/
>
> (I am not sure about the DHT support for Ericsson, you can ask  
> Kristian for details)
>
>>>> As for me, I am not sure if DHT based name resolution service could  
>>>> be easily done.
>>> It has been already done, but not really deployed in a large scale.  
>>> And also it has not been standardized in the IETF, but neither has  
>>> been e.g. skype :)
>>
>> i am not really following what comments you think there should be  
>> included about DHT?... could you send text so we can understand more  
>> precisely what you mean?
>
> I believe I misunderstood the context term. In HIP and BTNS, the  
> context really is a pair of IPsec SPs and the associated SAs, not a  
> "mapping" like I described earlier. The mapping I was referring to  
> means a HIT-to-IP mapping for the host.
>
> So, in section "6.1.  Initial Contact", please remove the last  
> sentence about HIP to avoid confusing things. Let's add a separate,  
> new paragraph after that:
>
> ---text begins
>
> In HIP, resolving HITs to IP addresses using DNS is not feasible  
> because HITs do not contain any hierarchical information. To migitate  
> this problem, there are few alternatives. First, resolver library on  
> end-host can modified to communication HIT-to-IP mappings with HIP  
> software module. Second, a distibuted hash table (DHT) service can be  
> used for storing and looking up the the mappings because it supports  
> non-hierarchical identifiers, such as HITs [*]. Third, it is possible  
> to use IP addresses in legacy applications as described in [**].
>
> [*] http://www.ietf.org/internet-drafts/draft-ietf-hip-arch-03.txt
> [**]  
> http://www.ietf.org/internet-drafts/draft-henderson-hip-applications 
> -02.txt
>
> ---text ends
>
> We should not really argue in the draft what approach is good and what  
> is bad, at least when it comes to HITs and DHT. Let's just list the  
> alternatives and give references, otherwise the discussion is just  
> getting into a sidetrack.
>

agree

regards, marcelo


> -- 
> Miika Komu              miika@iki.fi          http://www.iki.fi/miika/

_______________________________________________
MULTIMOBSEC-API mailing list
MULTIMOBSEC-API@ietf.org
https://www1.ietf.org/mailman/listinfo/multimobsec-api