Re: [pcp] Comments on draft-ietf-pcp-optimize-keepalives-00

"Reinaldo Penno (repenno)" <repenno@cisco.com> Mon, 02 December 2013 10:32 UTC

Return-Path: <repenno@cisco.com>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D7DD1AE303 for <pcp@ietfa.amsl.com>; Mon, 2 Dec 2013 02:32:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r9GO9HBZI0iq for <pcp@ietfa.amsl.com>; Mon, 2 Dec 2013 02:32:54 -0800 (PST)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE5F1AE10F for <pcp@ietf.org>; Mon, 2 Dec 2013 02:32:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=21189; q=dns/txt; s=iport; t=1385980372; x=1387189972; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=/zmr0VKzbc9zDbbdabQ6vi/iZsidCnlPfvKfe6hOtJw=; b=FXGgNsl+55KSPMokWJABjTtVvXNoP4vOQe8NGzpjvzxQNaBrcj7jhfEB SGvsQKdOKMEnexLfigeBIQjz22x/l8woekurI0W7mmlPzYxJBRogNHE2L L3Rgz64zM8bs+7TXGBrr+CjqTSqH293WIAy1VKcOhFqTpT4DLi1Ps6VA6 Y=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhoFAKVgnFKtJV2Z/2dsb2JhbABZgkNEOFO4V4EiFnSCJQEBAQQtXgEIEQMBAQEhBzkUCQgCBAESiAG/JReOdxcBhDMDmBSSE4Mpgio
X-IronPort-AV: E=Sophos; i="4.93,810,1378857600"; d="scan'208,217"; a="288741056"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-3.cisco.com with ESMTP; 02 Dec 2013 10:32:52 +0000
Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id rB2AWmnA014859 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <pcp@ietf.org>; Mon, 2 Dec 2013 10:32:49 GMT
Received: from xmb-rcd-x04.cisco.com ([169.254.8.232]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.03.0123.003; Mon, 2 Dec 2013 04:32:48 -0600
From: "Reinaldo Penno (repenno)" <repenno@cisco.com>
To: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com>, "Prashanth Patil (praspati)" <praspati@cisco.com>, "pcp@ietf.org" <pcp@ietf.org>
Thread-Topic: [pcp] Comments on draft-ietf-pcp-optimize-keepalives-00
Thread-Index: AQHOxnM3cE0GfrO1FEuZq+aBikbnCppA62nQ///5BoA=
Date: Mon, 02 Dec 2013 10:32:47 +0000
Message-ID: <CEC1A115.6CFB%repenno@cisco.com>
In-Reply-To: <913383AAA69FF945B8F946018B75898A24271415@xmb-rcd-x10.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.2.3.120616
x-originating-ip: [10.21.94.183]
Content-Type: multipart/alternative; boundary="_000_CEC1A1156CFBrepennociscocom_"
MIME-Version: 1.0
Subject: Re: [pcp] Comments on draft-ietf-pcp-optimize-keepalives-00
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp/>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2013 10:32:57 -0000

Thanks, looking forward to the new version

From: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com<mailto:tireddy@cisco.com>>
Date: Monday, December 2, 2013 at 1:55 AM
To: "Prashanth Patil (praspati)" <praspati@cisco.com<mailto:praspati@cisco.com>>, Cisco Employee <repenno@cisco.com<mailto:repenno@cisco.com>>, "pcp@ietf.org<mailto:pcp@ietf.org>" <pcp@ietf.org<mailto:pcp@ietf.org>>
Subject: RE: [pcp] Comments on draft-ietf-pcp-optimize-keepalives-00

Hi Reinaldo,

Responding to your comments in the pdf

Comment1> The application keepalive would keep the state alive in the FW/NAT as well, right ? This sentence seems out of place here.

Reply1> No. The time interval to send keepalives for maintaining state on the Application Server could be greater than FW/NAT mapping lifetime. In this case application keepalives will not maintain the FW/NAT mappings. For example in case where application keepalive interval every 60 minutes is required whereas FW/NAT keepalive interval is 30 minutes.

Comment2>  I believe this section should have an introduction and two sub-sections. One sub¬section should be called “PCP based detection” and have the first paragraph part of it since it only talks about PCP based detection. The second sub¬section should talk about application based detection.

Reply2> Agreed, updated the draft.

Comment3> Then the title of this section needs to change to “NAT Topologies and Detection”

Reply3> Yes, changed the title.

Comment4> Suggest to change title to “Detection of..”. But more generally, I wonder if this discussion of detection belongs in this draft. Can this  section be removed ?

Reply4> Yes, changed the title. In the previous WG discussions there was specific ask to add this section explaining the "Detection of PCP Unaware Firewalls".

Comment5> Needs RFC reference
Reply4> RFC reference is already provided

Comment 6>It will insert if it supports this experimental RFC, if it has another IP address, etc. I believe some more clarification is needed.
Reply6> Agreed, updated the text.

Comment 7> Application layer protocols ?
Reply7> Yes

Comment 8> This is all STUN, why this is in this draft ?
Reply8> In the previous WG discussions there was specific ask from Dave to add this section and explain the Keepalive Interval determination procedure when PCP unaware Firewall or NAT is detected.

-Tiru.
From: Prashanth Patil (praspati)
Sent: Monday, October 21, 2013 3:51 AM
To: Reinaldo Penno (repenno); pcp@ietf.org<mailto:pcp@ietf.org>
Subject: Re: [pcp] Comments on draft-ietf-pcp-optimize-keepalives-00

Hi Reinaldo,
Sections "3.3 Detect PCP Unaware Firewall" and "4. Keepalive Interval Determination Procedure when PCP unaware Firewall or NAT is detected" were added based on Dave's recommendation.

Section 3.3 does not introduce anything new, it only provides an example on how a PCP unaware firewall can be detected using STUN. Section 4 is also a recommendation on what can be potentially done if a PCP unaware firewall was detected.

Dave, what are your thoughts on this?

-Prashanth

On 11/10/13 4:45 PM, "Reinaldo Penno (repenno)" <repenno@cisco.com<mailto:repenno@cisco.com>> wrote:

I reviewed this draft for a possible WGLC but I do not think it is ready.
My summary is that this draft has lots of text related to detection of PCP
unaware NAT/FW using STUN which IMO belong in a separate draft, or some
other document since it is generic text. Maybe the WG sees value in having
a separate document that talks exclusively about detection of PCP unaware
FWs.

This draft could just say "assuming all NAT/FW in the path are PCP
aware..." and take it from there since the goal is optimizing keep-alive
and not standardizing detection mechanisms.

Removing all detection text would make this draft quite short and easier
to understand its purpose.

Thanks,

Reinaldo