Re: [multipathtcp] High-level design decisions /architecture

Scott Brim <scott.brim@gmail.com> Tue, 03 November 2009 15:00 UTC

Return-Path: <scott.brim@gmail.com>
X-Original-To: multipathtcp@core3.amsl.com
Delivered-To: multipathtcp@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3416D3A6A31 for <multipathtcp@core3.amsl.com>; Tue, 3 Nov 2009 07:00:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.551
X-Spam-Level:
X-Spam-Status: No, score=-2.551 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yqp1sJTjk6u6 for <multipathtcp@core3.amsl.com>; Tue, 3 Nov 2009 07:00:08 -0800 (PST)
Received: from mail-yx0-f192.google.com (mail-yx0-f192.google.com [209.85.210.192]) by core3.amsl.com (Postfix) with ESMTP id 542683A67E4 for <multipathtcp@ietf.org>; Tue, 3 Nov 2009 07:00:08 -0800 (PST)
Received: by yxe30 with SMTP id 30so6448289yxe.29 for <multipathtcp@ietf.org>; Tue, 03 Nov 2009 07:00:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :x-enigmail-version:content-type:content-transfer-encoding; bh=2N4dUp/ml955oOHal+ydXstHMW1hmtubgcRCFdAlF0g=; b=bTKypFIV0XBJRU6qNwSlNEtFq3EpDiXhig1b72Y9p80RYykUXSf6kG6jIvgk4vigyG 4E541uHrbnLjfpjAP2NYdLkpHJdf6jBQAWRPqM0tOCvldpOE6eS+BShn/SAE/JQRhsFr OsWDt0Uw/UaS97q/524o1AylmqLuQR34HPlUc=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; b=UolgjjaA0AVixqHDmKmDTxe/DPueg36B+RzgO3lBHboTg2TAYqUjNF64Pr0JEA5Srv GVX83oHuQ6HN1T+DJjtiirKhF3eL8LfU1pmosYk1ah1RB5rZBoTo0w8cCyD8qhHuxO1W fJYsRy2gWm4j2dduByP5U/oynuOsL9Tprpm6s=
Received: by 10.101.179.24 with SMTP id g24mr127929anp.62.1257260426489; Tue, 03 Nov 2009 07:00:26 -0800 (PST)
Received: from sbrim-mbp.local (198-135-0-233.cisco.com [198.135.0.233]) by mx.google.com with ESMTPS id 7sm54382ywc.21.2009.11.03.07.00.23 (version=TLSv1/SSLv3 cipher=RC4-MD5); Tue, 03 Nov 2009 07:00:24 -0800 (PST)
Message-ID: <4AF04585.2050700@gmail.com>
Date: Tue, 03 Nov 2009 10:00:21 -0500
From: Scott Brim <scott.brim@gmail.com>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: William Herrin <bill@herrin.us>
References: <4A916DBC72536E419A0BD955EDECEDEC06363A62@E03MVB1-UKBR.domain1.systemhost.net> <3c3e3fca0911021328h2ef65493v9f0290f384f7b800@mail.gmail.com>
In-Reply-To: <3c3e3fca0911021328h2ef65493v9f0290f384f7b800@mail.gmail.com>
X-Enigmail-Version: 0.96.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: multipathtcp@ietf.org
Subject: Re: [multipathtcp] High-level design decisions /architecture
X-BeenThere: multipathtcp@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Multi-path extensions for TCP <multipathtcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/multipathtcp>
List-Post: <mailto:multipathtcp@ietf.org>
List-Help: <mailto:multipathtcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Nov 2009 15:00:12 -0000

William Herrin allegedly wrote on 11/02/2009 4:28 PM:
> On Mon, Nov 2, 2009 at 1:47 PM,  <philip.eardley@bt.com> wrote:
>> The MPTCP connection is identified, from an apps perspective, by the
>> addresses associated with the original path (even if that subflow /path
>> closes)
> 
> I'm concerned about this idea. One of the corner cases where shim6
> falls apart is: once the connection migrates away from the original
> addresses, how do the endpoints decide whether a new connection
> request for the original addresses means the migrated addresses or the
> current holder of the addresses? Think: FTP.

An e2e security mechanism / token that identifies the flow.  See the
security bullet.

But there are corner cases where it is extremely difficult to establish
a stable src/dst address pair.  In particular if BGP and NAT are set up
such that you contact me on one address, I reply on my other address ...
and you do the same on your end.  Since NAT is now architecture, it is
important that initial setup be as independent from addresses as
possible.  I believe we're essentially there but we have to prove it.

>> A SYN/ACK exchange (on a single path) checks that both ends support MPTCP,
>> with automatic fall-back to TCP if not
> 
> We have an awful lot of TCP options that are only valid in the
> SYN-SYN/ACK exchange and only 40 bytes to put them all. What's wrong
> with starting all TCP connections in non-MP mode and allowing the
> connection's initiator to request MPTCP starting with any packet that
> expects an ACK?

See previous paragraph.

>> each MPTCP subflow looks exactly like an ordinary, semantically independent
>> TCP flow. MPTCP effectively runs on top. So re-transmission, FINs etc are
>> independent on each subflow
> 
> I'm almost sold on the idea of subflows. Can you give me a run down on
> the pros and cons, particularly the cons?

My biggest con is if your destination is multiply connected behind two
non-synchronized intrusion prevention devices.

Scott