Re: [Ntp] Antw: [EXT] Re: I-D Action: draft-ietf-ntp-port-randomization-04.txt

Steven Sommars <stevesommarsntp@gmail.com> Mon, 15 June 2020 22:27 UTC

Return-Path: <stevesommarsntp@gmail.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0ADC33A0EAD for <ntp@ietfa.amsl.com>; Mon, 15 Jun 2020 15:27:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMD30-Wk15KV for <ntp@ietfa.amsl.com>; Mon, 15 Jun 2020 15:27:25 -0700 (PDT)
Received: from mail-vs1-xe2a.google.com (mail-vs1-xe2a.google.com [IPv6:2607:f8b0:4864:20::e2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BAD83A0EA9 for <ntp@ietf.org>; Mon, 15 Jun 2020 15:27:25 -0700 (PDT)
Received: by mail-vs1-xe2a.google.com with SMTP id o2so10333646vsr.0 for <ntp@ietf.org>; Mon, 15 Jun 2020 15:27:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=VQQP0sh/Z+n3jPaDOFbsymQKdltc8G4slu+wSdGs5mM=; b=Rb7j0AYoxPSwbQmwoEmGDGZ8GsFTlcpJBEnLSn43j5oDewxzEwzvrM4W550reAlfCR EP3+UwVE8ukBaLHuUkGB7m5QPxNgqNnFGxJKJ+h23CW6bruxLfZ24e96iBYSeoF3YoVu q0SL6oIo2WNS8CAoa+T/btTzNRbE8ckCOeWUk2MA3XS/Q577vWtJRsK1KE5wyZ+woC6G zXDdSMCTrSPLyLDB6yeDA80xIfdd0tz0jpVf8rbdjQUvpqbaiuJQ+nnKVt5IT2YgyIgM lA/bUkF19hH4vDrOJiWZURd0ZjCmFiM4rSiWh6oyit3n3SfCWojQ+KnXBYUOFHYyd7Lc XYPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=VQQP0sh/Z+n3jPaDOFbsymQKdltc8G4slu+wSdGs5mM=; b=CL74xo6tFXwOUptP4OfOKkonacTRZCJ7kqLkYOCd6FpvDUjUn+EVOWSYRFOkYh8HKQ ODPrB3QNFMq+ifoScM6GRf0f/VeqSUMACFzFinMiRtyCWcO8U/prHyVSMiKw+YMFL15c YrJcDnvVKbt2v0NzISRXtQYY41ibriZwThApYdmV7RGc4bN5hJm9Sx6bUxY1RY2t3DDI xREhoc4pOhRDlKaNV7iA72rU9Ti+i/4I4oCX4uwstvIbUc2yP5wbtz3yvXD3IOkl6gri Gy7Py/PQYDHX+uHzrxnYCwJUSYxbjWZtisal5Z579uF1pNGD6Oaw4DKgZgaQ/8pwaB2x +Z0g==
X-Gm-Message-State: AOAM533z8fvtm/wA5EyoEh0IRmfjJRFlYvBHlh7J9AqnOXWN5yEaU946 jYa8cjsLQ4yzfRdwRJ1JdZv/8dIiXVokHZ2cxAc=
X-Google-Smtp-Source: ABdhPJzHCAH/zLG/isqqTR5q4QlTCxEtnHsdy6QJ7g+wVK3IUr4M5uN7CG84TcpEgT32slrzz0bPlEC/ZZXBWzOkdIY=
X-Received: by 2002:a05:6102:15b:: with SMTP id a27mr21566178vsr.141.1592260044288; Mon, 15 Jun 2020 15:27:24 -0700 (PDT)
MIME-Version: 1.0
References: <159178254834.16829.7558806224371600143@ietfa.amsl.com> <27326_1591858318_5EE1D48E_27326_38_1_20200611.155136.1977732866371143955.tsahara@iij.ad.jp> <5EE33298020000A10003985E@gwsmtp.uni-regensburg.de>
In-Reply-To: <5EE33298020000A10003985E@gwsmtp.uni-regensburg.de>
From: Steven Sommars <stevesommarsntp@gmail.com>
Date: Mon, 15 Jun 2020 17:27:13 -0500
Message-ID: <CAD4huA4ZbBPmNVc3MmmHPaFqV+iM+gGYtWJubZpT_RQ8u97CpQ@mail.gmail.com>
To: Ulrich Windl <Ulrich.Windl@rz.uni-regensburg.de>
Cc: "ntp@ietf.org" <ntp@ietf.org>, tsahara@iij.ad.jp
Content-Type: multipart/alternative; boundary="00000000000054764505a826ee59"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/OOiizfGsxNfL0e0iRzvBuMtmJ0s>
Subject: Re: [Ntp] Antw: [EXT] Re: I-D Action: draft-ietf-ntp-port-randomization-04.txt
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jun 2020 22:27:27 -0000

I suggested off-list that the authors add such text in order to reduce the
number of pointless server-directed ICMP port unreachables when per-request
randomization is used.  Two cases come to mind:  responses that arrive
slightly after the client decides to stop waiting and when multiple
responses arrive at the client.

Debugging sessions can be confused by seeing these ICMPs messages.

NTP has some differences compared to other UDP protocols.  Many NTP clients
have historically used fixed client ports; moving to per-request
randomization would increase ICMP frequency.  NTP is subject to middlebox
meddling: network delays are sometimes artificially increased.

This is a minor point.  If it is objectionable, then omit the text.

Steve Sommars

On Fri, Jun 12, 2020 at 2:45 AM Ulrich Windl <
Ulrich.Windl@rz.uni-regensburg.de> wrote:

> >>> Tomoyuki Sahara <tsahara@iij.ad.jp> schrieb am 11.06.2020 um 08:51 in
> Nachricht
>
> <27326_1591858318_5EE1D48E_27326_38_1_20200611.155136.1977732866371143955.tsahar
> @iij.ad.jp>:
> > Thank you for updating the draft.
> >
> > One comment on a new text:
> >
> >>      If a client implementation performs port randomization on a per‑
> >>      request basis, it SHOULD close the corresponding socket/port after
> >>      each request/response exchange.  The client SHOULD wait for
> >>      response packets from the server for at least 3 seconds before
> >>      closing the UDP socket/port, even if a successful response is
> >>      received.  This will prevent duplicate or delayed server packets
> >>      from eliciting ICMP port unreachable error messages at the client.
> >
> > This concern is common to many UDP‑based request/response protocols
> > but most protocols (if not all) do not try to deal with it.  I do not
> > think it is necessary to mention and recommend (by "SHOULD" word) it
> > in this document.
>
> I think if not mentioned explicitly, it should be mentioned by reference
> to a
> document describing that.
> The assumption is that the reader of the RFC does _not_ know all existing
> recommendations...
>
> >
> >
> > Thanks,
> > Tomoyuki
> >
> > _______________________________________________
> > ntp mailing list
> > ntp@ietf.org
> > https://www.ietf.org/mailman/listinfo/ntp
>
>
>
> _______________________________________________
> ntp mailing list
> ntp@ietf.org
> https://www.ietf.org/mailman/listinfo/ntp
>