Re: [multipathtcp] q about on-path proxy

[<[e-mail]>]

Hi Yoshi,

Please see inline.

Cheers,
Med

De : multipathtcp [mailto:[e-mail]] De la part de Yoshifumi Nishida
Envoyé : mercredi 22 mars 2017 10:04
À : multipathtcp
Objet : [multipathtcp] q about on-path proxy

Hello,

I am trying to understand on-path proxy scenarios.
(BTW, I'm referring draft-nam-mptcp-deployment-considerations-01 and draft-boucadair-mptcp-plain-mode-10)

In case of on-path proxy (implicit mode),the dest of the primary subflow will be the receiver. It's not very clear to me how MCP intercepts the packets in this subflow.
[Med] In this mode, the MCP is placed on a default forwarding path. It will inspect TCP traffic it sees to determine the MPTCP one that needs to be proxied.

The draft says:

   Unlike the explicit mode, the implicit mode assumes that the MCP is
   located on a default forwarding path (primary path).  As such, the
   first subflow must always be placed over that primary path so that
   the MCP can intercept MPTCP flows.  Once intercepted, the MCP
   advertises its reachability information by means of MPTCP signals
   (MP_JOIN or ADD_ADDR).

The text does not specify which hook is used locally to inspect the traffic because this is implementation-specific.

The MCP splits the connection between two nodes and send forged packets to the sender?
[Med] Yes, the MCP splits the connection only if there is a MP_PREFER_PROXY signal received from the sender; forged packets are sent to the sender. draft-nam-mptcp-deployment-considerations also describes a deployment case where the MCP supports a configuration parameter to be removed from the connection if the destination is also MPTCP-capable. An example is shown in this figure:


   +----+                     +-----+                     +--+

   | H1 |                     | MCP |                     |RM|

   +----+                     +-----+                     +--+

   h1@h2@                       mcp@                       rm@

    | |                          |                          |

    | |src:h1             dst:rm@|src:h1             dst:rm@|

    | |=====SYN+MP_CAPABLE======>|====SYN+MP_CAPABLE=======>|

    | |<=====SYN/ACK+MP_CAPABLE==|<====SYN/ACK+MP_CAPABLE===|

    | |=====ACK+MP_CAPABLE======>|====ACK+MP_CAPABLE=======>|

    | | __________________________________________________  |

    | |/            Secondary subflow                      \|

    | |=====================SYN+MP_JOIN====================>|

    | |<===================SYN/ACK(MPJOIN)==================|

    | |=====================ACK(MP_JOIN)===================>|

    | |                       ...                           |

Also, in the two proxy scenario, does the downstream MCP have to be on-path?
[Med] Yes, the same considerations apply for both case (single proxy, dual proxy).


Thanks,
--
Yoshi