Re: [OPSAWG] Benjamin Kaduk's No Objection on draft-ietf-opsawg-nat-yang-16: (with COMMENT)

Benjamin Kaduk <kaduk@mit.edu> Tue, 25 September 2018 21:44 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7722E130DD3; Tue, 25 Sep 2018 14:44:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GnqVdcsDUQVK; Tue, 25 Sep 2018 14:44:47 -0700 (PDT)
Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01C76130E39; Tue, 25 Sep 2018 14:44:42 -0700 (PDT)
X-AuditID: 12074423-ba5ff70000005420-0b-5baaac470e1e
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 22.AB.21536.84CAAAB5; Tue, 25 Sep 2018 17:44:40 -0400 (EDT)
Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w8PLicFl012026; Tue, 25 Sep 2018 17:44:38 -0400
Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w8PLiXdB002285 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 25 Sep 2018 17:44:36 -0400
Date: Tue, 25 Sep 2018 16:44:33 -0500
From: Benjamin Kaduk <kaduk@mit.edu>
To: mohamed.boucadair@orange.com
Cc: The IESG <iesg@ietf.org>, "draft-ietf-opsawg-nat-yang@ietf.org" <draft-ietf-opsawg-nat-yang@ietf.org>, Joe Clarke <jclarke@cisco.com>, "opsawg-chairs@ietf.org" <opsawg-chairs@ietf.org>, "opsawg@ietf.org" <opsawg@ietf.org>
Message-ID: <20180925214433.GH24695@kduck.kaduk.org>
References: <153790024204.5176.8102975803900099153.idtracker@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93302DFE6A66@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <20180925213438.GF24695@kduck.kaduk.org> <787AE7BB302AE849A7480A190F8B93302DFE6A9B@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302DFE6A9B@OPEXCLILMA3.corporate.adroot.infra.ftgroup>
User-Agent: Mutt/1.9.1 (2017-09-22)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrGKsWRmVeSWpSXmKPExsUixCmqrOuxZlW0wYzTVhb3ly5ntpjxZyKz xb6rfxgtDr99ym7x/MYfdosVJzczObB5TPm9kdVjyZKfTB4tz06yBTBHcdmkpOZklqUW6dsl cGVs733MVtCqVNGz+wJbA+NSqS5GTg4JAROJlj0XGUFsIYHFTBIHpmZ3MXIB2RsZJX48uMIO kbjKJPF5XyCIzSKgKnH0zh0WEJtNQEWiofsyM4gtIqAgsa+tnwWkmVmglUli9a1GsCJhgViJ yV1vgQZxcPACbbu+0Q5i5nImif3HAkBsXgFBiZMzn4CVMwvoSOzceocNpJxZQFpi+T8OiLC8 RPPW2WCrOAWSJE7O3gV2mqiAssTevkPsExgFZyGZNAvJpFkIk2YhmbSAkWUVo2xKbpVubmJm TnFqsm5xcmJeXmqRrplebmaJXmpK6SZGUBSwuyjvYHzZ532IUYCDUYmHd4PVqmgh1sSy4src Q4ySHExKorxxPUAhvqT8lMqMxOKM+KLSnNTiQ4wSHMxKIrxKfEA53pTEyqrUonyYlDQHi5I4 78SWxdFCAumJJanZqakFqUUwWRkODiUJ3jmrgBoFi1LTUyvSMnNKENJMHJwgw3mAhl8BqeEt LkjMLc5Mh8ifYtTl2HamcwazEEtefl6qlDiv+2qgIgGQoozSPLg5oOQlkb2/5hWjONBbwrzf QUbxABMf3KRXQEuYgJZM6FkBsqQkESEl1cCYuvHXW93vD3K5My/zvSlb9zvFZbpab+GW5x3W b0Mf1MVUnr+SenqtbYnXQoMla38//bDPkvX8Iq2Fuz9M2349LZSlccuqO50vIhy0i0o/u378 6a7aFeLbvLBx08+N/V5OlfqfnY/tmHSzoXLh/iwhnlms8k/jeBttdk2ZmqFz3Dp82WHXbqYW JZbijERDLeai4kQArm7zFzkDAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/fs6e67SU_Mt1r3A74npriFcIlqo>
Subject: Re: [OPSAWG] Benjamin Kaduk's No Objection on draft-ietf-opsawg-nat-yang-16: (with COMMENT)
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Sep 2018 21:44:56 -0000

On Tue, Sep 25, 2018 at 09:41:32PM +0000, mohamed.boucadair@orange.com wrote:
> Re-, 
> 
> Please see inline. 
> 
> Cheers,
> Med
> 
> > -----Message d'origine-----
> > De : Benjamin Kaduk [mailto:kaduk@mit.edu]
> > Envoyé : mardi 25 septembre 2018 23:35
> > À : BOUCADAIR Mohamed IMT/OLN
> > Cc : The IESG; draft-ietf-opsawg-nat-yang@ietf.org; Joe Clarke; opsawg-
> > chairs@ietf.org; opsawg@ietf.org
> > Objet : Re: Benjamin Kaduk's No Objection on draft-ietf-opsawg-nat-yang-16:
> > (with COMMENT)
> > 
> > On Tue, Sep 25, 2018 at 09:27:08PM +0000, mohamed.boucadair@orange.com wrote:
> > > Hi Benjamin,
> > >
> > > Thank you for the comments.
> > >
> > > Please see inline.
> > 
> > Also inline.
> > 
> > > Cheers,
> > > Med
> > >
> > > > -----Message d'origine-----
> > > > De : Benjamin Kaduk [mailto:kaduk@mit.edu]
> > > > Envoyé : mardi 25 septembre 2018 20:31
> > > > À : The IESG
> > > > Cc : draft-ietf-opsawg-nat-yang@ietf.org; Joe Clarke; opsawg-
> > chairs@ietf.org;
> > > > jclarke@cisco.com; opsawg@ietf.org
> > > > Objet : Benjamin Kaduk's No Objection on draft-ietf-opsawg-nat-yang-16:
> > (with
> > > > COMMENT)
> > > >
> > > > Benjamin Kaduk has entered the following ballot position for
> > > > draft-ietf-opsawg-nat-yang-16: No Objection
> > > >
> > > > When responding, please keep the subject line intact and reply to all
> > > > email addresses included in the To and CC lines. (Feel free to cut this
> > > > introductory paragraph, however.)
> > > >
> > > >
> > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> > > > for more information about IESG DISCUSS and COMMENT positions.
> > > >
> > > >
> > > > The document, along with other ballot positions, can be found here:
> > > > https://datatracker.ietf.org/doc/draft-ietf-opsawg-nat-yang/
> > > >
> > > >
> > > >
> > > > ----------------------------------------------------------------------
> > > > COMMENT:
> > > > ----------------------------------------------------------------------
> > > >
> > > > Thanks for the easy-to-read document!  I just have a few comments and
> > > > potential nits
> > > > I noticed.
> > > >
> > > > It was somewhat interesting to me that basically everything is config rw,
> > > > including ports and
> > > > addresses that would normally be assigned internally by the NAT, but I
> > don't
> > > > see this as
> > > > problematic.
> > >
> > > [Med] This is a good point. Actually, we are using rw because the same
> > structure is also used for static mappings. That is, the external port and IP
> > address are also provided.
> > 
> > I had even internalized that, just somehow didn't make the connection.
> > Thanks for setting me straight.
> > 
> > > >
> > > > Section 2.1
> > > >
> > > >                               Considerations about instructing explicit
> > > >    dynamic means (e.g., [RFC6887], [RFC6736], or [RFC8045]) are out of
> > > >    scope.  [...]
> > > >
> > > > I'm having trouble parsing this; is it maybe "instructing by explicit
> > > > dynamic means" or "explicit dynamic mappings"?
> > >
> > > [Med] Changed to "Considerations about instructing by explicit dynamic
> > means". Thanks.
> > >
> > > >
> > > > Section 3
> > > >
> > > > What's the relationship between hold-down-timeout and hold-down-max --
> > that
> > > > is, if the maximum number of ports in the pool gets hit, to the oldest
> > > > ports in the pool get ejected even if they haven't timed out, or what
> > > > happens?
> > > >
> > >
> > > [Med] deallocated ports are added to the hold-down pool till a max is
> > reached; ports are removed from that pool upon the expiry of the hold-down-
> > timeout. New deallocated ports cannot be added if the pool reaches its max.
> > 
> > Okay, so if the hold-down pool is full and a mapping's expiration timer
> > expires, does that port immediately become free to use
> 
> [Med] Yes.

Got it, thanks.

I wonder if the text other than "Maximum ports in the Hold down timer pool"
in the description for hold-down-max (which, incidentally, seems to just be
a differently formatted version of the description for hold-down-timeout)
could be removed, then.  I think that would have made me less likely to be
confused about which value takes precedence.

-Benjamin