Re: [pcp] #75 (third-party-id-option): Dave Thaler's comments on draft-ietf-pcp-third-party-id-option-00

Dave Thaler <dthaler@microsoft.com> Thu, 08 January 2015 20:30 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2612B1A1A4E for <pcp@ietfa.amsl.com>; Thu, 8 Jan 2015 12:30:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.602
X-Spam-Level:
X-Spam-Status: No, score=-101.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fC3Xq89Vs2F0 for <pcp@ietfa.amsl.com>; Thu, 8 Jan 2015 12:30:25 -0800 (PST)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0771.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::771]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B3B31A079D for <pcp@ietf.org>; Thu, 8 Jan 2015 12:30:25 -0800 (PST)
Received: from BY2PR03MB412.namprd03.prod.outlook.com (10.141.141.25) by BY2PR03MB410.namprd03.prod.outlook.com (10.141.141.16) with Microsoft SMTP Server (TLS) id 15.1.49.12; Thu, 8 Jan 2015 20:30:00 +0000
Received: from BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) by BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) with mapi id 15.01.0049.002; Thu, 8 Jan 2015 20:30:01 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: šŸ”“Dan Wing <dwing@cisco.com>, pcp issue tracker <trac@tools.ietf.org>
Thread-Topic: [pcp] #75 (third-party-id-option): Dave Thaler's comments on draft-ietf-pcp-third-party-id-option-00
Thread-Index: AQHQKstI6TjPZ6eDhEO58BMZtbBZppy2aKUAgABCxqA=
Date: Thu, 08 Jan 2015 20:30:00 +0000
Message-ID: <BY2PR03MB412C8D023FD0FAE70B8231EA3470@BY2PR03MB412.namprd03.prod.outlook.com>
References: <059.b391db7d29982cc510d59e4791c48b07@tools.ietf.org> <6F19A6AF-D403-439F-90A4-C1D3FC0DD1D5@cisco.com>
In-Reply-To: <6F19A6AF-D403-439F-90A4-C1D3FC0DD1D5@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [98.237.193.222]
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com;
x-dmarcaction: None
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(3005003);SRVR:BY2PR03MB410;
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa: BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB410;
x-forefront-prvs: 0450A714CB
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(51704005)(189002)(3905003)(13464003)(377454003)(24454002)(199003)(19580395003)(33656002)(122556002)(101416001)(2656002)(99396003)(87936001)(2900100001)(68736005)(77096005)(15975445007)(2950100001)(62966003)(102836002)(19580405001)(99286002)(74316001)(54606007)(50986999)(76176999)(54356999)(86362001)(120916001)(21056001)(105586002)(97736003)(92566001)(31966008)(230783001)(46102003)(66066001)(20776003)(64706001)(86612001)(54206007)(76576001)(4396001)(106116001)(106356001)(77156002)(107046002)(40100003); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB410; H:BY2PR03MB412.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.onmicrosoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jan 2015 20:30:01.0308 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB410
Archived-At: <http://mailarchive.ietf.org/arch/msg/pcp/7FHIji-uxZ8XgrPHnEw7pnvMYFM>
Cc: "draft-ietf-pcp-third-party-id-option@tools.ietf.org" <draft-ietf-pcp-third-party-id-option@tools.ietf.org>, "pcp@ietf.org" <pcp@ietf.org>
Subject: Re: [pcp] #75 (third-party-id-option): Dave Thaler's comments on draft-ietf-pcp-third-party-id-option-00
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp/>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Jan 2015 20:30:28 -0000

> -----Original Message-----
> From: šŸ”“Dan Wing [mailto:dwing@cisco.com]
> Sent: Thursday, January 8, 2015 8:21 AM
> To: pcp issue tracker
> Cc: draft-ietf-pcp-third-party-id-option@tools.ietf.org; Dave Thaler;
> pcp@ietf.org
> Subject: Re: [pcp] #75 (third-party-id-option): Dave Thaler's comments on
> draft-ietf-pcp-third-party-id-option-00
> 
> 
> On Jan 7, 2015, at 2:42 PM, pcp issue tracker <trac@tools.ietf.org> wrote:
> 
> > #75: Dave Thaler's comments on draft-ietf-pcp-third-party-id-option-00
> >
> > A copy with my comments inline is now at
> > http://research.microsoft.com/~dthaler/draft-ietf-pcp-third-party-id-
> > option-00.pdf
> >
> > Summary:
> > 1) Too many places are still worded to be about "tunnel ID" rather
> > than "third party ID".
> >    This draft shouldn't assume tunnels, that's just one example case.
> > 2) Need to explicitly state the assumption that the same PCP-IWF
> > serves multiple subscribers.
> >     (It was implicit currently, but should be explicit.)
> > 3) Need to explicitly state the assumption that the PCP client and PCP
> > server have some
> >     out-of-band mechanism to agree on what to put in the
> > THIRD_PARTY_ID field.
> >     (Again it was implicit, but should be explicit.)
> > 4) Section 5.2 on processing a request needs to cover the success
> > case, not just the error case.
> 
> Yes.  Section 5 is very short, and provides little-to-no guidance
> 
> >     And I believe that behavior changes the basic rules in RFC 6887
> 
> Yes, draft-ietf-pcp-third-party-id-option-00 requires that if THIRD_PARTY_ID is
> present, then THIRD_PARTY must also be present.  I'm not sure if that
> qualifies as an Update to RFC6887, though.  Are there other changes to 6887's
> basic rules?

Yes.  6887's use of a mapping table says nothing about any third party ID.
So there needs to be at least a sentence or two to say that the third party ID
is used when doing a lookup or creation in the mapping table, for instance.
Such text belongs in this section, which is about what to do when you get this
option.

Section 2 already says:
"Unlike a standard NAT, it
   includes a subscriber identifier in addition to the source IP address
   in entries of the NAT mapping table."

That's halfway there.  Now 5.2 just needs text that says how that affect
MAP/PEER processing when the id is received.

RFC 6887 section 11.3 states:
"   If the internal port, protocol, and internal address match an
   existing static mapping (which will have no nonce), then a PCP reply
   is sent giving the external address and port of that static mapping,
   using the nonce from the PCP request."

That's an example of a sentence that's Updated.  So we could just say
something along the lines of "If the id is legal, then the message is
processed as specified in RFC 6887, except that the third party id is
always used in addition to the internal address when accessing a
mapping table, whenever RFC 6887 would access a mapping with
a given internal address".

> 
> Certainly, the I-D should be much clearer that presence of THIRD_PARTY_ID
> means that THIRD_PARTY must also be present.  Existing wording in 5.1 is not
> sufficiently clear to make that point obvious when generating a request
> (needs a MUST and at least sentence restructuring).
> 
> -d
> 
> > and
> > hence this document
> >     should Update 6887.  I.e. you cannot simply implement this as a
> > layer on top of an
> >     unmodified 6887-compliant PCP implementation.
> > 5) Section 5.3 on processing a response has a new requirement "SHOULD
> > report an error"
> >      which is not in RFC 6887 section 11.4 or 12.4.   Is this really a
> > requirement?  I'm ok
> >     either way, but not sure why this specific error response would be
> > special in terms
> >     of what should be reported to somewhere.
> >
> > --
> > -------------------------+--------------------------------------------
> > -------------------------+-----
> > Reporter:               |      Owner:  draft-ietf-pcp-third-party-id-
> >  dthaler@microsoft.com  |  option@tools.ietf.org
> >     Type:  defect       |     Status:  new
> > Priority:  major        |  Milestone:  milestone1
> > Component:  third-       |    Version:  1.0
> >  party-id-option        |   Keywords:
> > Severity:  In WG Last   |
> >  Call                   |
> > -------------------------+--------------------------------------------
> > -------------------------+-----
> >
> > Ticket URL: <http://tools.ietf.org/wg/pcp/trac/ticket/75>
> > pcp <http://tools.ietf.org/pcp/>
> >
> > _______________________________________________
> > pcp mailing list
> > pcp@ietf.org
> > https://www.ietf.org/mailman/listinfo/pcp