Re: [multipathtcp] [Int-area] SOCKS 6 Draft

Vladimir Olteanu <vladimir.olteanu@cs.pub.ro> Fri, 07 July 2017 07:19 UTC

Return-Path: <vladimir.olteanu@cs.pub.ro>
X-Original-To: multipathtcp@ietfa.amsl.com
Delivered-To: multipathtcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3431126C23; Fri, 7 Jul 2017 00:19:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.89
X-Spam-Level:
X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQ0Ph3ok4Xei; Fri, 7 Jul 2017 00:19:03 -0700 (PDT)
Received: from vesa.cs.pub.ro (vesa.cs.pub.ro [141.85.227.187]) by ietfa.amsl.com (Postfix) with ESMTP id A4607131A4F; Fri, 7 Jul 2017 00:19:02 -0700 (PDT)
IronPort-PHdr: 9a23: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
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2DyAQC3NF9ZjAPjVY1cGwEBAQMBAQEJAQEBFQEBAQECAQEBAQgBAQEBgkSBTwOBEY58kHeYFC6FbgKEEwEBAQEBAQEBAgESAQEBJleCMyQBgkEBAgECLUwQCxgnB0YRBgEMBgIBAReKGAyyZymLCwEBAQEBAQQBAQEBAQEBARsFgyiDTIFhK4J5hEZahT4FkVSNSIIjk3OFS4NOhnqMZIhTAlaBCzEhhiSBdnMBhl6CPwEBAQ
X-IPAS-Result: A2DyAQC3NF9ZjAPjVY1cGwEBAQMBAQEJAQEBFQEBAQECAQEBAQgBAQEBgkSBTwOBEY58kHeYFC6FbgKEEwEBAQEBAQEBAgESAQEBJleCMyQBgkEBAgECLUwQCxgnB0YRBgEMBgIBAReKGAyyZymLCwEBAQEBAQQBAQEBAQEBARsFgyiDTIFhK4J5hEZahT4FkVSNSIIjk3OFS4NOhnqMZIhTAlaBCzEhhiSBdnMBhl6CPwEBAQ
X-IronPort-AV: E=Sophos;i="5.40,321,1496091600"; d="scan'208,217";a="877872"
Received: from mail.cs.pub.ro (HELO vmail.cs.pub.ro) ([141.85.227.3]) by vesa.cs.pub.ro with ESMTP; 07 Jul 2017 10:18:58 +0300
Received: from localhost (localhost [127.0.0.1]) by vmail.cs.pub.ro (Postfix) with ESMTP id E3D911A6014E; Fri, 7 Jul 2017 10:18:58 +0300 (EEST)
Received: from vmail.cs.pub.ro ([127.0.0.1]) by localhost (vmail.cs.pub.ro [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id QcVX8nJ2vKDU; Fri, 7 Jul 2017 10:18:58 +0300 (EEST)
Received: from vmail.cs.pub.ro (localhost [127.0.0.1]) by vmail.cs.pub.ro (Postfix) with ESMTPS id C49131A60142; Fri, 7 Jul 2017 10:18:58 +0300 (EEST)
Received: from [192.168.1.70] (unknown [95.76.128.201]) by vmail.cs.pub.ro (Postfix) with ESMTPSA id B56141A600E5; Fri, 7 Jul 2017 10:18:58 +0300 (EEST)
To: mohamed.boucadair@orange.com, David Schinazi <dschinazi@apple.com>
Cc: "Int-area@ietf.org" <Int-area@ietf.org>, multipathtcp <multipathtcp@ietf.org>
References: <149871247634.6490.5928844232347189122.idtracker@ietfa.amsl.com> <c215bf9d-5313-3a4b-ac47-dd34cb22766f@cs.pub.ro> <F42011E7-0F81-44DF-9DFC-A211B615DD33@apple.com> <004b4557-a926-9128-d3cf-0b3f41bef56e@cs.pub.ro> <AE3FC07A-DE86-4765-9D1F-00640942B4E4@apple.com> <3f975b41-78b0-9f50-6c46-cc8e30007f34@cs.pub.ro> <787AE7BB302AE849A7480A190F8B93300A000764@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <b33e4726-f255-75f7-5203-9e30faa36659@cs.pub.ro> <787AE7BB302AE849A7480A190F8B93300A000D16@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <a922a59f-2670-8d50-f3c5-99e1c29848ca@cs.pub.ro> <787AE7BB302AE849A7480A190F8B93300A001A07@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
From: Vladimir Olteanu <vladimir.olteanu@cs.pub.ro>
Message-ID: <6ca9c64f-c9ca-f245-e28f-16073fa46c39@cs.pub.ro>
Date: Fri, 07 Jul 2017 10:18:58 +0300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <787AE7BB302AE849A7480A190F8B93300A001A07@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
Content-Type: multipart/alternative; boundary="------------10EB8E1C299B1C20217CF829"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/multipathtcp/flTfARUJUlIXm9wJgofsFRHmZDY>
Subject: Re: [multipathtcp] [Int-area] SOCKS 6 Draft
X-BeenThere: multipathtcp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Multi-path extensions for TCP <multipathtcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/multipathtcp/>
List-Post: <mailto:multipathtcp@ietf.org>
List-Help: <mailto:multipathtcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Jul 2017 07:19:07 -0000

Hi Mohamed,

I'm replying specifically to the parts quoted below.

SOCKS is used by explicit proxies; anything related to transparent 
proxies is beyond its scope. It does not preclude the deployment of 
anything transparent. In other words, I merely propose it as an 
alternative to MP_CONVERT.

Discussing PCP, IPv6 source address preservation, UPnP etc. makes no 
sense in this context.

Cheers,
Vlad


On 7/6/2017 3:56 PM, mohamed.boucadair@orange.com wrote:
>
> *De :*Vladimir Olteanu [mailto:vladimir.olteanu@cs.pub.ro]
> *Envoyé :* mercredi 5 juillet 2017 18:39
> *À :* BOUCADAIR Mohamed IMT/OLN; David Schinazi
> *Cc :* Int-area@ietf.org; multipathtcp
> *Objet :* Re: [Int-area] SOCKS 6 Draft
>
>  <SNIP>
>
> On 7/5/2017 9:00 AM, mohamed.boucadair@orange.com 
> <mailto:mohamed.boucadair@orange.com> wrote:
>
>     <SNIP>
>
>     *De :*Vladimir Olteanu [mailto:vladimir.olteanu@cs.pub.ro]
>     *Envoyé :* mercredi 5 juillet 2017 01:35
>     *À :* BOUCADAIR Mohamed IMT/OLN; David Schinazi
>     *Cc :* Int-area@ietf.org <mailto:Int-area@ietf.org>; multipathtcp
>     *Objet :* Re: [Int-area] SOCKS 6 Draft
>
>     <SNIP>
>
> Can you please let me know if the proposal supports the following 
> features:
>
> ·Support incoming connections (Proxy<---Remote Host): That is the 
> proxy intercept a TCP connection that it transforms into an MPTCP one.
>
> Yes. See section 7.2. The client makes a request and then has to keep 
> the connection to the proxy open. When the proxy accepts a connection 
> from a remote host, it informs the client of the remote host's address 
> and starts relaying data. SOCKS 5 has the exact same feature. You are 
> limited to one incoming connection per request, though.
>
> [Med] In the plain mode, there is no such limitation because we are 
> leveraging on PCP (RFC6887).
>
> ·If such feature is supported, how a host located behind a CPE 
> (Host----CPE-----Proxy----Remote Host) can instruct dynamically the 
> CPE so that it can forward appropriately incoming connections?
>
> It does not have to. The connection on the host-proxy leg is initiated 
> by the client.
>
> [Med] I’m not sure to understand your answer here. Let’s consider that 
> your host is using UPnP IGD to talk with the CPE to accept incoming 
> connections + those connections are eligible to the MPTCP service. How 
> the solution would work?
>
> <SNIP>
>
> ·IPv6 source address/prefix preservation
>
> I'm not sure what you mean by that.
>
> [Med] Please see slide 18 of 
> https://www.ietf.org/proceedings/98/slides/slides-98-mptcp-sessa-network-assisted-mptcp-03.pdf 
>
>