Re: Preparing for discussion on what to do about the multipath extension milestone

Martin Duke <martin.h.duke@gmail.com> Thu, 01 October 2020 16:36 UTC

Return-Path: <martin.h.duke@gmail.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 550623A10F5 for <quic@ietfa.amsl.com>; Thu, 1 Oct 2020 09:36:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cg_7dRcZ4Wjc for <quic@ietfa.amsl.com>; Thu, 1 Oct 2020 09:36:43 -0700 (PDT)
Received: from mail-io1-xd29.google.com (mail-io1-xd29.google.com [IPv6:2607:f8b0:4864:20::d29]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C9023A10F4 for <quic@ietf.org>; Thu, 1 Oct 2020 09:36:43 -0700 (PDT)
Received: by mail-io1-xd29.google.com with SMTP id z25so7349860iol.10 for <quic@ietf.org>; Thu, 01 Oct 2020 09:36:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ZgglymlyfSS0VPuGL4tQMwyeaen6YytCKjaapI1OSu4=; b=QrA5l/nYM3bb6SIojmGEGkE8Lvg8v/RTAejcBeTHIEeMuG9sy8TlLIvjqPuEcSqtU9 qaOZNi/eJRt4cAxs4CxVroqL/5co+HJXX8n3R6CoIqDEY2vs5YQjVlrski+vRqmc0VfK qrbtp34+FScRd9S1TE77DL2nD6EihIjpycDpYMSHI8VjZlxhjjOfAIbqHSdVA+JBc8FM 6aENzbLP9F/GrtIywPWw1ZfgUZIg7vj//vQloG+QyaD9/IuCZuL3RfiUa5JB4ItW3+lR edko8Yfuxjmx63zWU4G9ASt+KAP0OKbDlCPtTSSmwF/8koB7EzNUgtwENlVWt3SiNJHG 8W1Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ZgglymlyfSS0VPuGL4tQMwyeaen6YytCKjaapI1OSu4=; b=nz8f6c5wLnJyfDfLin+9w9Jdgs+OM/ZE6BMtvz+SeSuWMpQgpWcQj/mZYi3l2Ig3xc 7YnWrKVOYRD/DEJA4QRN0ar0amvUTyvZEJR9BkJFHrOLLq8e7AKuZPWefJ1//bPwQAMA 9meJUNWJYQGgNoVoPcTuwvUcEUZQQGD6yD9OAO57qhvwfqClhMRuqY5n877KNxWHBMOM AOCriWRerJ8ru0oKgD5KnSTXmg0pNW+sdBrpKe8TCLJEmdQdN+sYkNBWNtb8A/3EgDqc cbHI11ecUeGlvw/VIfEQGtSUm7fEMiAIsiOSyp/WxYrmBBj1svdZIluBPhHyYexCkjKB myeQ==
X-Gm-Message-State: AOAM5306Yg2xGTg2Yh+VBiQYqv/CWLX0CLLojuNwdwKRVNL3tMqChCO9 swTRyYgwMlUgO8WtzW3juxyAYFUfY6TfyMVa8EtpwaZ6Sm0=
X-Google-Smtp-Source: ABdhPJwrsa5NdiNZp9IZAyvsUgYdJipz8UhHngOHF6E4EPBI5NWm4lzdRvWa1BepxIap2vSAaVJSTA093trjjvX1bgw=
X-Received: by 2002:a05:6602:215a:: with SMTP id y26mr5752926ioy.97.1601570202156; Thu, 01 Oct 2020 09:36:42 -0700 (PDT)
MIME-Version: 1.0
References: <F0A5E38D-4117-4729-BFF8-72D97CAA9908@eggert.org> <CAKKJt-e=+XLZhNWqaG9YSLTRqyQRvDc-dagUSkFwHOByFwZ++Q@mail.gmail.com> <78651438-2fce-ba67-4f44-4228bbc79a75@uclouvain.be> <CADdTf+hOACZ1x=d8SV-aX0f3vc+_fyqTziRqi5gi+nJgppaz8A@mail.gmail.com> <CAKcm_gNF=0gwrPt=Mr1P=dF_-wmXfz-OJkavFSDe1qrXFeMa4A@mail.gmail.com> <CAM4esxRYyB3Y19P=0D8qzrGPTwGFWJT2T_eWQsODYrkJahX3Qw@mail.gmail.com> <CAKKJt-dvL3ccbLFDQ0CaS3yJLdQdRgbWZwdeAThB1t1+EQBn7g@mail.gmail.com> <CAKcm_gPoLbYEMx5HE1iBkMsufZoMDXgqzDf-x2RXGODXgW7=aw@mail.gmail.com> <c12c61b5-1720-a1c4-92ed-9cfe2f772c4f@huitema.net> <82f5dd2f-1b27-47a8-aa1e-415df31d6f69@www.fastmail.com> <CAM4esxR0EJHR4x35q+x+Fus7Rjkt5oX9ia-YpgSeGVPxDo7hig@mail.gmail.com> <CAKKJt-e-fEtV9Nr8sA9PjtOYmMu=w8svok3+Kyi79NaYpwCznQ@mail.gmail.com>
In-Reply-To: <CAKKJt-e-fEtV9Nr8sA9PjtOYmMu=w8svok3+Kyi79NaYpwCznQ@mail.gmail.com>
From: Martin Duke <martin.h.duke@gmail.com>
Date: Thu, 01 Oct 2020 09:36:30 -0700
Message-ID: <CAM4esxRD__3OoC+dttHmeNZN88R=bNNhguPvrerOzk0CyoU2=w@mail.gmail.com>
Subject: Re: Preparing for discussion on what to do about the multipath extension milestone
To: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Cc: IETF QUIC WG <quic@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fb847905b09e9ed5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/FH8JDTD5noAbnsSjr7s4sVuiI5o>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Oct 2020 16:36:46 -0000

Hi Spencer,

This is Magnus's charter so I don't want to be expansive in my comments as
AD.

I think the next step would be for the WG to come to consensus on
this work, whatever that happens to be. My gentle suggestion is that a
standards-track design for simultaneous flow on multiple paths is
premature, and probably not QUIC-specfiic. However, a short experimental
draft to enable this in QUIC would allow the research community to make
progress faster.

On Thu, Oct 1, 2020 at 7:40 AM Spencer Dawkins at IETF <
spencerdawkins.ietf@gmail.com> wrote:

> Hi, Martin,
>
> On Thu, Oct 1, 2020 at 9:21 AM Martin Duke <martin.h.duke@gmail.com>
> wrote:
>
>> The concerns that Christian and MT raise are the same ones I was alluding
>> to, but I do think a draft like this one that adds the necessary bits of
>> protocol to enable multipath experimentation is the right scope. I don't
>> feel strongly whether we should adopt this and fix it, or fix it and then
>> adopt it.
>>
>
> I had asked you and Magnus yesterday what our next steps on multicast
> should be.
>
> Am I reading this correctly as "start working on this draft, on the QUIC
> mailing list, and let the working group do the right thing"?
>
> I'd be fine with that, but wanted to check.
>
> Best,
>
> Spencer
>
>
>> Martin
>>
>> On Thu, Oct 1, 2020 at 1:23 AM Martin Thomson <mt@lowentropy.net> wrote:
>>
>>> I share Christian's concerns about the draft, but it's not just ACKs,
>>> it's the entire Uniflow concept that I would call into question.
>>>
>>> On Thu, Oct 1, 2020, at 17:25, Christian Huitema wrote:
>>> > I am not sure that the current "mpquic" draft is the right approach.
>>> > Specifically, I do not agree that having one packet number space per
>>> > path is the right approach. This contradicts the design of QUIC V1, in
>>> > which data sent on multiple paths shares a common packet number space.
>>> > For example, in QUIC V1, we can start a connection on one path,
>>> migrate
>>> > to another path, and keep the same packet number space throughout. I
>>> > find that a very nice property -- and also an essential property if we
>>> > want to support NAT rebinding. Handling multipath with a single number
>>> > space requires some book-keeping on the sender side to match
>>> > acknowledgements and sending paths, but we have working code for that.
>>> >
>>> > I am also not convinced that we properly understand the concept of
>>> > "path". There is very little in the QUIC V1 protocol that requires
>>> > transmission paths to be symmetric: any packet sent from a node to a
>>> > valid address of the peer will be accepted, provided the crypto works.
>>> > The linkage such requirement comes from the statement that a server
>>> > starts directing traffic to a validated path when it sees the client
>>> > using the same pair of addresses. This is an "implicit" linkage; I
>>> > would expect that the first role of a multipoint extension would be to
>>> > replace that by an "explicit" statement of preferences.
>>> >
>>> > I am worried that we have a set of unresolved security issues around
>>> > paths, largely linked to the requirement to support NAT rebinding. If
>>> > we support NAT, the IP headers must be outside the authentication
>>> > envelope of the crypto. There are plausible attacks in which the
>>> > attacker splices a cryptographically valid packet and a forged IP
>>> > header. We have some defensive heuristics, but if we study multipath I
>>> > hope we will end up with something better.
>>> >
>>> > -- Christian Huitema
>>> >
>>> > On 9/30/2020 5:51 PM, Ian Swett wrote:
>>> > > Given the responses, can we narrow down the way forward(ideally on a
>>> different thread) to directions that are less open-ended?  I'll suggest
>>> some options, but the chairs and/or ADs need to decide.
>>> > >  1) No future work on multipath in the QUIC WG, in the belief the
>>> existing connection migration functionality is sufficient.
>>> > >  2) Adopt the existing draft as a starting point for QUIC
>>> multipath(draft-deconinck-multipath-quic <
>>> https://tools.ietf.org/html/draft-deconinck-multipath-quic>), with the
>>> explicit goal of not expanding the scope of the document.
>>> > >  3) Adopting multipath as a core QUIC WG deliverable.
>>> > >
>>> > > I favor #2, but these may not be the right options.  Normally I'd
>>> say people should work this out in person, but that doesn't seem viable at
>>> the moment.  I'm happy to set up a long(3-4+hr) Google Meet to discuss this
>>> via videoconference if that helps move the discussion forward.
>>> > >
>>> > > Or we can form a design team, which typically takes O(3 months) to
>>> finish.
>>> > >
>>> > > Ian
>>> > >
>>> > > On Wed, Sep 30, 2020 at 3:15 PM Spencer Dawkins at IETF <
>>> spencerdawkins.ietf@gmail.com> wrote:
>>> > >> Hi, Martin,
>>> > >>
>>> > >> Just a couple of thoughts here:
>>> > >>
>>> > >> On Wed, Sep 30, 2020 at 12:16 PM Martin Duke <
>>> martin.h.duke@gmail.com> wrote:
>>> > >>> (Speaking as an individual)
>>> > >>>
>>> > >>> There is some back-and-forth as to whether these are useful cases
>>> are not. I'll take it on faith, given the proponents, that there is a real
>>> hope of deploying this. However, I share the desire to not have the WG
>>> fully consumed by MP-QUIC for the foreseeable future.
>>> > >>
>>> > >> That sounds right. I'm assuming that getting the core QUIC
>>> specifications published and doing any cleanup work necessary SHOULD/MUST
>>> take priority, in the BCP 14 sense of those words.
>>> > >>
>>> > >> As Lars' initial note said, I'd also like to see the manageability,
>>> applicability, and datagram extension working group drafts, already adopted
>>> by QUIC, moving forward.
>>> > >>
>>> > >>> I don't think the community has well-established solutions for
>>> many problems in this space (e.g. scheduling). However, I think QUIC is a
>>> far better platform for experimentation than the alternatives, and would
>>> support a draft similar to draft-deconinck-multipath-quic <
>>> https://tools.ietf.org/html/draft-deconinck-multipath-quic> that
>>> provided the required protocol extensions to make that happen [1].
>>> > >>
>>> > >> I agree that scheduling is challenging - 3GPP is certainly spending
>>> time defining different strategies for behaviors, even in addition to the
>>> ones we described in
>>> https://datatracker.ietf.org/doc/draft-bonaventure-quic-atsss-overview/.
>>> > >>
>>> > >> And I agree that the QUIC protocol would be a better platform for
>>> experimentation than anything I can think of (other suggestions are, of
>>> course, welcome).
>>> > >>
>>> > >>> IIUC the hard, unsolved problems are common to all MP protocols,
>>> so I don't think further research and future standards in this area are
>>> specific to QUIC or appropriate for the QUIC Working Group. But
>>> experimental QUIC extensions would accelerate this work, are appropriate
>>> for the WG, and may get us to a place where we could confidently develop
>>> standards about it.
>>> > >>
>>> > >> Targeting Experimental status for work in this area sounds like a
>>> fine plan to me (much better than not thinking about multicast in the IETF
>>> for a while longer).
>>> > >>
>>> > >> I know you have a variety of tools at your disposal to direct this
>>> work (MP-TCP was done in its own working group, for both Experimental and
>>> Standards-Track versions of the protocol specifications). Do the right
>>> thing, of course.
>>> > >>
>>> > >> What do you and Magnus need from members of the community, to help
>>> move forward on this?
>>> > >>
>>> > >> Best,
>>> > >>
>>> > >> Spencer
>>> > >>
>>> > >>> Martin Duke
>>> > >>>
>>> > >>> [1] I would prefer that this draft be Experimental, and have
>>> numerous nits about the design that are not relevant to this thread.
>>> > >>
>>> > >>
>>>
>>>