Re: [pcp] Comments on draft-ietf-pcp-server-selection-01

"Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com> Mon, 12 August 2013 03:20 UTC

Return-Path: <tireddy@cisco.com>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A75821F9E7E for <pcp@ietfa.amsl.com>; Sun, 11 Aug 2013 20:20:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.569
X-Spam-Level:
X-Spam-Status: No, score=-10.569 tagged_above=-999 required=5 tests=[AWL=0.030, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id svUHxgIncQlw for <pcp@ietfa.amsl.com>; Sun, 11 Aug 2013 20:20:06 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id C0CFA21F9D2E for <pcp@ietf.org>; Sun, 11 Aug 2013 20:13:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2441; q=dns/txt; s=iport; t=1376277185; x=1377486785; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=/DH+Fb+llBTedN6sRfH9OY8RvcTwjxMmSYEeUVYEjMM=; b=co671ADD81jr0WxBMOFap6bZrM+8N5lB4iNfZ1IVk2Ru1IoiKfhG8YdF 3PCMzgInW1dwSqSlWmNwiAdCwQ653b++LDkLGneV5PSJIA8ppFLZl/yug eGEw7thlPlwGg2tVRD9Is2/LrBt8sCKLpkF+SqiDYQ04E7UlmkOcSUuy7 M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhAFAFVSCFKtJV2Z/2dsb2JhbABagwY1UL5VgRsWdIIkAQEBBDo/DAQCAQgOAwQBAQEKFAkHMhQJCAIEAQ0FCIgIDLVQkAoxBwaDFXYDmRCQJYMbgio
X-IronPort-AV: E=Sophos;i="4.89,859,1367971200"; d="scan'208";a="245881585"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-1.cisco.com with ESMTP; 12 Aug 2013 03:12:56 +0000
Received: from xhc-rcd-x02.cisco.com (xhc-rcd-x02.cisco.com [173.37.183.76]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r7C3Cu7g005082 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 12 Aug 2013 03:12:56 GMT
Received: from xmb-rcd-x10.cisco.com ([169.254.15.159]) by xhc-rcd-x02.cisco.com ([173.37.183.76]) with mapi id 14.02.0318.004; Sun, 11 Aug 2013 22:12:56 -0500
From: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com>
To: Dave Thaler <dthaler@microsoft.com>, Ted Lemon <Ted.Lemon@nominum.com>
Thread-Topic: [pcp] Comments on draft-ietf-pcp-server-selection-01
Thread-Index: Ac6SN4UBylvrgKNiQjOEzEfANBzc7AAMCTHwAFEmB5AAD8zuAAAOFskA///lHYCAAHUBcP//jZOAgAB1A1CAAC9dQIAATVqw//+h86A=
Date: Mon, 12 Aug 2013 03:12:55 +0000
Message-ID: <913383AAA69FF945B8F946018B75898A190100D9@xmb-rcd-x10.cisco.com>
References: <30b1cc1894564c29940db80068308797@BN1PR03MB267.namprd03.prod.outlook.com> <94C682931C08B048B7A8645303FDC9F36EE99C9035@PUEXCB1B.nanterre.francetelecom.fr> <09252e8f703e474e94db05bcf38d6571@BY2PR03MB269.namprd03.prod.outlook.com> <8D23D4052ABE7A4490E77B1A012B630775249BED@mbx-01.win.nominum.com> <c3510d5e33054cffb12156540cc16424@BY2PR03MB269.namprd03.prod.outlook.com> <8D23D4052ABE7A4490E77B1A012B630775249E3D@mbx-01.win.nominum.com> <3e7fd3c6a757446f8269079cecfffea0@BY2PR03MB269.namprd03.prod.outlook.com> <8D23D4052ABE7A4490E77B1A012B630775249F48@mbx-01.win.nominum.com> <d4c7ffbcdc9244d78c1af4bbeeea9be6@BY2PR03MB269.namprd03.prod.outlook.com> <913383AAA69FF945B8F946018B75898A1900EFA0@xmb-rcd-x10.cisco.com> <694128ccd41842df95f28fc29b7e0413@BY2PR03MB269.namprd03.prod.outlook.com>
In-Reply-To: <694128ccd41842df95f28fc29b7e0413@BY2PR03MB269.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.65.43.209]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "draft-ietf-pcp-server-selection@tools.ietf.org" <draft-ietf-pcp-server-selection@tools.ietf.org>, "pcp@ietf.org" <pcp@ietf.org>
Subject: Re: [pcp] Comments on draft-ietf-pcp-server-selection-01
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Aug 2013 03:20:11 -0000

Hi Dave,

Please see inline

> -----Original Message-----
> From: Dave Thaler [mailto:dthaler@microsoft.com]
> Sent: Thursday, August 08, 2013 7:58 PM
> To: Tirumaleswar Reddy (tireddy); Ted Lemon
> Cc: mohamed.boucadair@orange.com; pcp@ietf.org; draft-ietf-pcp-server-
> selection@tools.ietf.org
> Subject: RE: [pcp] Comments on draft-ietf-pcp-server-selection-01
> 
> 
> Tiru wrote:
> [...]
> > > If you buy Stuart's argument that communicating with just one IP
> > > address per
> >
> > If we consider the use-case http://tools.ietf.org/html/draft-ietf-pcp-
> server-
> > selection-01#appendix-A.1 there will be one PVD and two PCP server IP
> > addresses. If the ICE agent has ICE lite implementation, then it will have
> to
> > communicate with both the PCP controlled firewalls to permit incoming ICE
> > connectivity checks.
> 
> That's an interesting assertion but you didn't give any justification.
> 
> Stuart asserted that communicating with one is sufficient, and simpler for the
> client, because it's the PCP server's job to communicate with the other ones
> to permit incoming ICE connectivity checks.  If you disagree with that,
> please respond with a technical argument as to why having the client
> communicate with both is better than having one server communicate
> with the other.

Comparing the two approaches:

[1] PCP client will have to handle both the scenarios http://tools.ietf.org/html/draft-ietf-pcp-server-selection-01#appendix-A.1 (where both the Firewalls are managed by the same administrative domain) and http://tools.ietf.org/html/draft-patil-pcp-multihoming-00#section-5.1 (Network managed Firewall provided by each ISP). For the latter scenario PCP client would have to communicate with both the firewalls and there is no way for FW1 or FW2 to talk to each other. 

So if PCP client would already have the logic to handle multiple PCP-controlled Firewalls why make a special treatment just for http://tools.ietf.org/html/draft-ietf-pcp-server-selection-01#appendix-A.1 ?

[2] If it's compared with your suggestion then the PCP client will send all the PCP requests to only one of the routers (let's say rtr1 in appendix-A.1); rtr1 based on the source IP address of the PCP request will have to forward the request again to rtr2 causing additional delay, processing overhead.

-Tiru.

> 
> -Dave