Re: [multipathtcp] Comments on draft-deng-mptcp-proxy-00

Alper Yegin <alper.yegin@yegin.org> Fri, 22 August 2014 08:07 UTC

Return-Path: <alper.yegin@yegin.org>
X-Original-To: multipathtcp@ietfa.amsl.com
Delivered-To: multipathtcp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 803AA1A0154 for <multipathtcp@ietfa.amsl.com>; Fri, 22 Aug 2014 01:07:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.6
X-Spam-Level:
X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6-Np6DXGOSc for <multipathtcp@ietfa.amsl.com>; Fri, 22 Aug 2014 01:07:20 -0700 (PDT)
Received: from mout.perfora.net (mout.perfora.net [74.208.4.196]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C0EB1A013B for <multipathtcp@ietf.org>; Fri, 22 Aug 2014 01:07:20 -0700 (PDT)
Received: from [10.119.8.4] (178-32-114-132.ovh.net [178.32.114.132]) by mrelay.perfora.net (node=mreueus002) with ESMTP (Nemesis) id 0LpMSh-1WgASw27Eb-00f9xJ; Fri, 22 Aug 2014 10:07:15 +0200
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: multipart/alternative; boundary="Apple-Mail=_C02E86DE-9CFC-45C7-A1EA-8AA56994F881"
From: Alper Yegin <alper.yegin@yegin.org>
In-Reply-To: <01b801cfbdad$34a7d580$9df78080$@com>
Date: Fri, 22 Aug 2014 11:07:12 +0300
Message-Id: <B2FDBCA9-F338-427A-B898-4C5FA07D6A66@yegin.org>
References: <447815AF-06EA-40BA-9EF7-2A8282FAC97F@yegin.org> <01b801cfbdad$34a7d580$9df78080$@com>
To: 邓灵莉/Lingli Deng <denglingli@chinamobile.com>
X-Mailer: Apple Mail (2.1283)
X-Provags-ID: V02:K0:wPWa1VnJh1iefIWCv5tXBHl8BpJJE1begkYU5iQD3PG 73vZBn+4VJbLPeidd6l9ny2a5cQDIATJPRZmZshu00Bzt6Nud3 zWU0wof+AFnqg5ebVXvhLDHfuo0kFWQrNpRr0JifX6UIqSeWmj ojLd9P2POWcsIupEL8lX+667JOiCCHObKpRBumQmPWFDbGAF8e EUMT/3UJxJKYZdIngr2xzLsuDU0pBz/JoyG5sIv92Z6Z+baNCB dukabR1DcSA9yr9OkEKR1BpenPsaouDNf1a19DA02XUf8IeYkJ FFwQRpI8V4pvw/itGlldP1yYrraz1wIYyoEFqbPQW3Vm898XHx fl/iIVZz1ffiBrTVx9gEyHH16Gaf9Y7/8DgN6vVQi71/EUexlL lxRKp69AlPMIQ==
X-UI-Out-Filterresults: notjunk:1;
Archived-At: http://mailarchive.ietf.org/arch/msg/multipathtcp/Ylc_9YCRRvR-EgKSgxe6mc_oC3A
Cc: multipathtcp@ietf.org
Subject: Re: [multipathtcp] Comments on draft-deng-mptcp-proxy-00
X-BeenThere: multipathtcp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multi-path extensions for TCP <multipathtcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/multipathtcp/>
List-Post: <mailto:multipathtcp@ietf.org>
List-Help: <mailto:multipathtcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Aug 2014 08:07:25 -0000

Hello Lingli,

>    o Strip any MPTCP signal systematically when relaying TCP messages to
>    a remote server: This mode assumes servers are not widely MPTCP-
>    enabled. It has the advantage to not suffer from MPTCP fallback delay
>    when the remote server is not MPTCP-enabled.
>  
> Would the proxy be terminating the TCP connection with the UE, or would it be relaying the TCP packets (with modifications)?  I had assumed the former, but the above statement points to the latter.
> [邓灵莉/Lingli Deng] In this case, I believe the end-to-end connection is split by the proxy into MPTCP with the UE and TCP with the server. Maybe we can use another word instead of “relaying” to better clarify that. Thanks for pointing it out.


In that case, this does not qualify as  "TCP proxy" as TCP does not terminate on the proxy.
But it qualifies as "MPTCP proxy" as MPTCP bits do terminate on that middle node.
Just making an observation...


>  
>  
> Off-path proxy and steering: How does the steering work? Is it based on proxy adding an IP address using MPTCP signaling?
> [邓灵莉/Lingli Deng] There are many options I think. The one you mentioned is actually one of them.
>  


For that particular solution, the initial sub-flow is assumed to go thru on-path proxy. Otherwise the proxy cannot catch the connection to steer. 
(I know your draft is not about solutions, nevertheless discussion from you or other folks on solution aspect is welcome as well.)


>  
>  
>    Note that by applying local breakout scheme, where the small cell
>    doing IP-layer forwarding itself rather than relying on other 3GPP
>    routing devices, it is expected that no extensions to existing 3GPP
>    specs are needed for its integration with an MPTCP Proxy.
>  
>  
> The WiFi AP could also use SAMOG and tunnel traffic to PGW, in which case there'd not be a need for MPTCP. I think this is what the text is referring to above.
> [邓灵莉/Lingli Deng] Right.
>  

It could be useful to elaborate the text in the draft. Even if SAMOG is not mentioned, at least describing its affect at a high-level would help the readers understand what "relying on other 3GPP routing devices" mean.



> So, is this about using MPTCP only when WiFi is using local breakout?
> [邓灵莉/Lingli Deng] using MPTCP only when WiFi is *not* using local breakout.
>  

I have a different understanding, possibly due to a terminology issue.

If WiFi traffic is back hauled to the PGW using SAMOG, then that does not qualify as "local breakout". And that's when we don't need MPTCP.

When WiFi traffic is offloaded to Internet (no backhauling to the core network), then that's "local breakout" and that's where MPTCP comes into the picture.



>  
>    (b) Transparency: An on-path MPTCP Proxy supports negotiation with
>    and acting towards the M-UE like a M-server on behalf of N-Server,
>    while acting towards the N-Server like a N-UE on behalf of the M-UE.
>  
>  
> Are the authors envisioning an explicit signaling (an extension to MPTCP), or is this done transparent to the UE (hence it becomes a matter of implementation on the proxy)?
> [邓灵莉/Lingli Deng] We hoped that an on-path proxy is “invisible” to the UE, whenever possible. So there would be no explicit signaling to the UE for an on-path proxy.
>  
>    (d) Globally Routable Address: an off-path MPTCP Proxy that enables
>    resource pooling from the same ISP's networks SHOULD expose a
>    globally routable address to allow explicit steering of subsequent
>    subflow traffic after they hit the public Internet.
>  
> We also need to consider the security issues stemming from introduction of the proxy, which acts as MitM.
> End-to-end security solutions, e.g., TCPinc, would break -- unless we make this a non-transparent solution and design security accordingly.
> [邓灵莉/Lingli Deng] Point taken. But for our use-case, we saw benefits for deployment and operation for transparent on-path proxies owned by the ISP.
>  
>  
>    (e) Network Access Type Information: an MPTCP proxy SHOULD be able to
>    make use of a reliable information sharing/reporting mechanism to
>    acquire a subflow's Network Access Type information/update on a real-
>    time basis.
>  
>  
> Would this be handled out-of band with respect to MPTCP?
> [邓灵莉/Lingli Deng] I guess so.
> Any specific protocols in mind?
> [邓灵莉/Lingli Deng] As we are thinking about deploying the proxy onto the PGW, it is actually an internal information exchange between components. Right?
>  


OK.

Thanks.

Alper


>  
> Cheers,
>  
> Alper