Re: Privacy considerations of multipath (Re: My BoF report: multipath)

Ian Swett <ianswett@google.com> Wed, 02 December 2020 16:29 UTC

Return-Path: <ianswett@google.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54B643A146B for <quic@ietfa.amsl.com>; Wed, 2 Dec 2020 08:29:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.599
X-Spam-Level:
X-Spam-Status: No, score=-17.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UqnLWmtOJn0l for <quic@ietfa.amsl.com>; Wed, 2 Dec 2020 08:29:18 -0800 (PST)
Received: from mail-yb1-xb32.google.com (mail-yb1-xb32.google.com [IPv6:2607:f8b0:4864:20::b32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D90C73A1436 for <quic@ietf.org>; Wed, 2 Dec 2020 08:29:17 -0800 (PST)
Received: by mail-yb1-xb32.google.com with SMTP id s8so2114768yba.13 for <quic@ietf.org>; Wed, 02 Dec 2020 08:29:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xC7KjiiV9Y04jaM3IDUVvIwlNVEjGmMlK5uOzSpu0G4=; b=X+IeAImyCzfkZtLpRbtZriK2jN/6KaDyXZ7L/eM64TwoSkXFbB0SEgKr4NwhC4hecY T8vGulVnOmIn/rzazAOsmiEQxX/UkmZJWKg2nSytOoW1jP8edVyOz/FDBbkLnn/jF7F3 hKr0JPVUDoCLVTHx6kam5E0N8gi3cVoC7HFHYkDltVNlhIslcJ3ziBXhLzgGHnwxxLbI EUu+86MsJGrveo2HURDQj5vCEQbUMg3qwWTnXMVcIiRfZyGL1F8FOm/UXbybYlOQZQZo 4XkeKnO7xLVgNDSxDU3l4n19aplAf9jfKqpoH/5gMvKcJos4WwjrlGFZjDWX47a3m9n9 farw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xC7KjiiV9Y04jaM3IDUVvIwlNVEjGmMlK5uOzSpu0G4=; b=iZMont5bU5+xbs7en3XDhUqcrIYfrDvvpTxY+AO+N7RYAx5/b/LdDiLobVlDmYGByj pr87f9aZ8rOHAvCitpeuLg8rcF6KyBL2FiPI6yxJslDdrpM29b0HnT/hksiq0XpDlBhs uVtioNAxcM9hwQ34ydg+eQTaWvjiHjpmAAZ67z5XEXfVZKfZmF4TP/jwOzvx5SRCLGvc a3vjMx0n+3BBCeGWu+HgQxqANBIja0rP7AG697P3EUiDBnaOpQnvtnC8B1nXyVJXtuTc 969p6ltE7lCfjSxw6+qfs2+3taOdjl/sZSZlnab/T7HWx1Z6KCpNuwKamGZs8RDNWctN hSBQ==
X-Gm-Message-State: AOAM532QnoPUjwIbAJF+PTH5gikIoNYI8qsALfe2bwwKw/Ftn9AXjofD boY1g1d6n2YJ6jluz9k3A+OrQ2a7MlRYg5Yt+REsQw==
X-Google-Smtp-Source: ABdhPJwCV3CJejDywr+IyzzoZkp8xDmNcdumkew5hB1mEgpOwTRJ0H5BSpTIOlamUqkk01gywxaLtwn96a46pbkxn8U=
X-Received: by 2002:a25:f88:: with SMTP id 130mr3771562ybp.130.1606926556737; Wed, 02 Dec 2020 08:29:16 -0800 (PST)
MIME-Version: 1.0
References: <d84c82b1-fa67-4676-9ce2-d2a53d81b5f7@www.fastmail.com> <5741601d-7e67-898e-5840-70feceb994e9@uclouvain.be> <CALGR9oZW0s6c6+N+3R8bD17yPBPQa4E_cVOaTOSNTVQPYy6sUg@mail.gmail.com> <CAC8QAcditJ0nzdCNHOhi-1xtezoXb0u=hrGBWtZ3Cj3XP6CW4g@mail.gmail.com> <CALGR9oZfw5LqfPyZw6Yb8JTmuqi0prTL0f0yT9Rdq6oz5u51fg@mail.gmail.com> <ccbd3f9a-883e-6262-5735-2b9f25c6c6c4@zinks.de> <CALGR9oaw_-dbYSu5oN1Usvwr2h8wp-gvcmzx+0+2HJM-4Ac+4A@mail.gmail.com> <c09ff2f3-771b-11df-68f3-c690efa998c7@zinks.de> <CAKKJt-exKQa8o6Gn1=-SdDFQSrRGMtDsWJy62=RAQMD_T=P7ZQ@mail.gmail.com> <818d4f85-faa6-110c-7a94-441d7fe53166@huitema.net> <CALGR9oZzznU9qTc-T6xVYJOOT4cEhC8tunYK94x+HkQNmHFvEg@mail.gmail.com> <BF0B6222-AA56-4B8C-B0C2-FE06D4761009@apple.com> <CALGR9oZEpTCVAyff7c6m94H+U9qsNNU=wc39=hdKeZ40nqHvxw@mail.gmail.com> <8D47043C-7401-4188-B1CB-0D920F566798@apple.com> <CAKcm_gNJxx35urnjttP5LdY-iVki-R5Xuh4iRHC-gGTnO8sTXw@mail.gmail.com> <ED60506E-B4FB-44E1-815D-76EE5779D674@ericsson.com> <CAC8QAcd4z5Yqh2xV_V4bsrrQecFbBZ_juz-GtksDbDwd0ecttQ@mail.gmail.com>
In-Reply-To: <CAC8QAcd4z5Yqh2xV_V4bsrrQecFbBZ_juz-GtksDbDwd0ecttQ@mail.gmail.com>
From: Ian Swett <ianswett@google.com>
Date: Wed, 02 Dec 2020 11:29:05 -0500
Message-ID: <CAKcm_gODh_krHES7iJCP4MvS2YatHykzPJJTqLQuBgPKT+vFcw@mail.gmail.com>
Subject: Re: Privacy considerations of multipath (Re: My BoF report: multipath)
To: sarikaya@ieee.org
Cc: Mirja Kuehlewind <mirja.kuehlewind@ericsson.com>, Eric Kinnear <ekinnear@apple.com>, Roland Zink <roland@zinks.de>, "taps-chairs@ietf.org" <taps-chairs@ietf.org>, Christian Huitema <huitema@huitema.net>, Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>, Lucas Pardue <lucaspardue.24.7@gmail.com>, QUIC WG <quic@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000098cb5a05b57dbe16"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/JAXojD-fr9crKSdjL9p-5Z0RrnE>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Dec 2020 16:29:20 -0000

Thanks Mirja, that deployment setup sounds like it could make it difficult
to get deployment experience prior to publishing an RFC?  Given the
complexity of multipath, shipping an RFC without deployment experience
seems unappealing to me, but maybe there is an opportunity to get some
deployment experience earlier?

On Wed, Dec 2, 2020 at 10:41 AM Behcet Sarikaya <sarikaya2012@gmail.com>
wrote:

>
>
> On Wed, Dec 2, 2020 at 5:11 AM Mirja Kuehlewind <mirja.kuehlewind=
> 40ericsson.com@dmarc.ietf.org> wrote:
>
>> Hi Ian,
>>
>>
>>
>> one comment about using multipath QUIC in production and 3GPP: The
>> scenario in 3GPP has different players who need to implement this, the MNO
>> with the ATSSS function in the UPF and the UE on the other end. Therefore
>> it is not possible to just deploy something and try it out as Google often
>> does, without having a spec that is stable enough that these two systems
>> can interoperate. I’d say that is what we have standardization for.  3GPP
>> needs to refer something in their specs and that will then get implemented
>> and probably stay like that for a long time. We spend a lot of time to tell
>> 3GPP that it is not wise to refer individual drafts and I also don’t think
>> that we want 3GPP to standardize their own multipath QUIC spec. Luckily
>> 3GPP is not planning to do that, but I think we should try to help them as
>> much as we can, whatever that means.
>>
>>
>>
>
> +1
>
> Behcet
>
>> Mirja
>>
>>
>>
>>
>>
>> *From: *QUIC <quic-bounces@ietf.org> on behalf of Ian Swett <ianswett=
>> 40google.com@dmarc.ietf.org>
>> *Date: *Wednesday, 28. October 2020 at 22:22
>> *To: *Eric Kinnear <ekinnear=40apple.com@dmarc.ietf.org>
>> *Cc: *Roland Zink <roland@zinks.de>, "taps-chairs@ietf.org" <
>> taps-chairs@ietf.org>, Christian Huitema <huitema@huitema.net>, Spencer
>> Dawkins at IETF <spencerdawkins.ietf@gmail.com>, Lucas Pardue <
>> lucaspardue.24.7@gmail.com>, QUIC WG <quic@ietf.org>
>> *Subject: *Re: Privacy considerations of multipath (Re: My BoF report:
>> multipath)
>>
>>
>>
>> Based on what I've heard, I think there might be enough people to work on
>> this, but it may not be the people most involved in QUIC v1.  If Eric and
>> the 3GPP could agree on a common(minimal) feature set and design they'd
>> like to deploy, that would make me more interested in accepting this into
>> the working group.  At this point, I think we're a ways from that.
>>
>>
>>
>> In terms of the 3GPP liason request, if this is time sensitive, I'd
>> suggest publishing your own draft and once you have some deployment
>> experience, come back.  From personal experience, the IETF is not in the
>> business of preventing people from widely deploying experimental
>> technologies.  I would love to see people using QUIC multipath in
>> production, and I do believe there are use cases that would benefit.
>>
>>
>>
>> Ian
>>
>>
>>
>> On Wed, Oct 28, 2020 at 3:21 PM Eric Kinnear <ekinnear=
>> 40apple.com@dmarc.ietf.org> wrote:
>>
>> Thanks Lucas! Totally agree with what you’re saying here, was just noting
>> that there we’re broadening the scope of implementation/experimentation
>> possibility from “kernel vendors” to “platform/service vendors/someone who
>> really wants to put a lot of work into a single application” — this is
>> really really great, especially for many participants in the QUIC WG and
>> the IETF, and as you say there’s still going to be a lot of folks depending
>> on participants in the WG/platform/service vendors to supply APIs and
>> configuration options to exercise much of this functionality.
>>
>>
>>
>> I think one of the things that we’re coming to realize as we discuss
>> multipath is that many of the considerations around the different options
>> we could choose depend on external factors (like $$$ and policies of
>> different industry players) more than the actual technology that’s under
>> discussion. If we think those things will be solved (and probably not by
>> the IETF), then great!
>>
>>
>>
>> From a technology standpoint, we’ve opened up some really awesome
>> possibilities with QUIC in the realm of being able to move forwards more
>> rapidly with deployment, as you noted, and I think on that front I’d be
>> totally interested in defining a multipath extension for folks to go
>> deploy, collect data, and then present the delta between those benefits for
>> an end-user vs. connection migration. We can decide on how far down the
>> standards process we’d want that to go, one could argue that we’re already
>> at that point with the various I-Ds that are present.
>>
>>
>>
>> Thanks,
>>
>> Eric
>>
>>
>>
>>
>>
>> On Oct 23, 2020, at 7:35 PM, Lucas Pardue <lucaspardue.24.7@gmail.com>
>> wrote:
>>
>>
>>
>> Hey Eric,
>>
>>
>>
>> On Sat, Oct 24, 2020 at 2:16 AM Eric Kinnear <ekinnear@apple.com> wrote:
>>
>> I generally agree with some of the thinking here, but I can definitely
>> see a case where “everyone gets it for free” is a thing.
>>
>> For example, one could imagine that Cloudflare might use quiche to allow
>> its customers to enable HTTP/3 “for free” via a checkbox in their
>> configuration, or even just enable it on their websites.
>>
>>
>>
>> That’s not necessarily fully in sync with what the “QUIC is in userspace
>> and therefore everyone should bring their own implementation that they can
>> change at will” thinking is going towards, but I do expect there are quite
>> a few folks creating end-user-facing software who don’t know that much
>> about networking and are more interested in “hit this REST endpoint” than
>> “tune my congestion control for the specific quirks of my traffic content
>> that are unique to me and only me”.
>>
>>
>>
>> I’m not saying anything against that type of tuning, that’s often how we
>> can push the boundaries and really move things forward.
>>
>> I also think QUIC is in a really good place to enable a lot of awesome
>> experimentation in that area.
>>
>>
>>
>> But I do think we can acknowledge that there are folks (even if I
>> personally might tend towards the “let’s experiment and push the
>> boundaries” side of things) who have a very legitimate desire to abstract
>> that away underneath something that generally does a “pretty good” job of
>> handling it. If that's better than what exists today in terms of end-user
>> visible benefits, even if not 100% optimally tuned for their specific
>> traffic patterns, that seems like a good start.
>>
>>
>>
>> There’s definitely a balance to strike between ultimate experimentation
>> and moving meaningful numbers of people forward who either don’t have time
>> or aren’t interested in that experimentation. Where are the cases where
>> it’s most useful, leads to the most end-user benefit, or enables things not
>> previously possible? Those seem like the things to focus on *not* abstracting
>> away — is multipath in QUIC one of those? (I genuinely don’t have an answer
>> to that.)
>>
>>
>>
>> To clarify a little. The point I was trying to make is that just adding
>> some support for $multipath frames$ parsing to something like quiche would
>> not be a complete solution. Something would still have to glue it to a
>> network. And I'm not sure if there's a consistent network API across
>> platforms that exposes path information required for something like that to
>> work. So the application has a lot of work to do to. If they have to build
>> to the nuances of every platform API, firmware or middleware, that's more
>> than just free. To build on Christian's earlier point, many projects have
>> picked their own way to do things, for good or bad.
>>
>> Absolutely! I do think it would be really nice to have a common set of
>> ways to represent much of this functionality (even just connect-by-name is
>> nice, long before you get to multipath).
>>
>>
>> The QUIC WG has benefited from its ability to openly and agily
>> interoperate. Many implementations are there for people to just pick up and
>> start running with. I'm not steadfast in belief that everyone has to use a
>> user-space library and bundle up everything. There's absolutely a value in
>> making technology accessible to folks that just want to get on with
>> business via simpler or stabler means. And both these worlds can exist (and
>> most definately should interoperate!). But I think it's prescient to
>> consider the accessibility of new transport features to different parts of
>> the community.
>>
>>
>>
>> Cheers
>>
>> Lucas
>>
>>
>>
>>