RE: Expected Client Response to SERVER_BUSY

Nick Banks <nibanks@microsoft.com> Wed, 20 February 2019 15:19 UTC

Return-Path: <nibanks@microsoft.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2845130DF6 for <quic@ietfa.amsl.com>; Wed, 20 Feb 2019 07:19:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mden6FJ36hzE for <quic@ietfa.amsl.com>; Wed, 20 Feb 2019 07:19:57 -0800 (PST)
Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680097.outbound.protection.outlook.com [40.107.68.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3F09129741 for <quic@ietf.org>; Wed, 20 Feb 2019 07:19:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q2U3Va/En6kkle4sVj3j+w5bA4KjpC/Fbu1LYZG7uVs=; b=ZzbWJp2zinwuDdX3pWDmxWVIhC39hZ1t3iQrYP/+xmuKCjb2gtEPO74Il4MJuHwMkVCz2tyoCSRvhlTSZ/5AqOZey4fCECpHOQhFlVdHCcDscSoWgv8XmiRZRlmZsm2K6dKzsQf3QYCBZqedBSyBvBv01Ay4ih6dtzVJeZ2JUCE=
Received: from CY4PR21MB0854.namprd21.prod.outlook.com (10.173.192.143) by CY4PR21MB0631.namprd21.prod.outlook.com (10.175.115.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1665.2; Wed, 20 Feb 2019 15:19:54 +0000
Received: from CY4PR21MB0854.namprd21.prod.outlook.com ([fe80::ccd2:aa1d:e646:fa46]) by CY4PR21MB0854.namprd21.prod.outlook.com ([fe80::ccd2:aa1d:e646:fa46%3]) with mapi id 15.20.1665.002; Wed, 20 Feb 2019 15:19:54 +0000
From: Nick Banks <nibanks@microsoft.com>
To: Töma Gavrichenkov <ximaera@gmail.com>, Ian Swett <ianswett@google.com>, "Brian Trammell (IETF)" <ietf@trammell.ch>, IETF QUIC WG <quic@ietf.org>, Mirja Kühlewind <mirja.kuehlewind@tik.ee.ethz.ch>
Subject: RE: Expected Client Response to SERVER_BUSY
Thread-Topic: Expected Client Response to SERVER_BUSY
Thread-Index: AdTInrfRZAbJSsLZSlWCCrlUkiWX7AAgkIeAAACdzgAAAbynAAAAN6coAACOYoAAAIKXwA==
Date: Wed, 20 Feb 2019 15:19:54 +0000
Message-ID: <CY4PR21MB0854E1E9AAF564CD8B12305CB37D0@CY4PR21MB0854.namprd21.prod.outlook.com>
References: <CY4PR21MB0854341128C64E450E7C2DA2B37C0@CY4PR21MB0854.namprd21.prod.outlook.com> <CAKcm_gPmQiMhzfXnkEB4u+X+84bCbL8FE3Lj3ZdPPQBBu+4uPg@mail.gmail.com> <1AF7E952-4542-4C40-8652-BFFBFA61784A@trammell.ch> <CAKcm_gN11=DcV2v-JrX+Ym88D7P1Ey3rDvYomTf1seemsWDSwA@mail.gmail.com> <CY4PR21MB0854D8F7383CDF72EEDAE9FBB37D0@CY4PR21MB0854.namprd21.prod.outlook.com> <CALZ3u+Zmau+167msd9+OGcU+V00+__yLK83ByNEqvWhm7yFORg@mail.gmail.com>
In-Reply-To: <CALZ3u+Zmau+167msd9+OGcU+V00+__yLK83ByNEqvWhm7yFORg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=nibanks@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-02-20T15:19:52.9119086Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=0ed0b7f0-3625-4591-8628-e67a458f56c8; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [2001:4898:80e8:3:682d:1a0f:7fc0:ca5c]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a7335720-6f62-40dd-dc2e-08d69746de14
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600110)(711020)(4605104)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:CY4PR21MB0631;
x-ms-traffictypediagnostic: CY4PR21MB0631:
x-microsoft-exchange-diagnostics: 1;CY4PR21MB0631;23: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
x-microsoft-antispam-prvs: <CY4PR21MB0631E3762CC48BC500295580B37D0@CY4PR21MB0631.namprd21.prod.outlook.com>
x-forefront-prvs: 0954EE4910
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(136003)(366004)(346002)(396003)(199004)(189003)(13464003)(71190400001)(10090500001)(6246003)(33656002)(99286004)(446003)(86612001)(316002)(93886005)(106356001)(110136005)(8990500004)(11346002)(68736007)(105586002)(6506007)(22452003)(9686003)(71200400001)(86362001)(25786009)(97736004)(55016002)(478600001)(53936002)(6116002)(81166006)(81156014)(53546011)(6436002)(14454004)(74316002)(229853002)(486006)(5660300002)(8936002)(6346003)(102836004)(305945005)(7736002)(8676002)(14444005)(256004)(46003)(476003)(186003)(76176011)(66574012)(10290500003)(7696005)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0631; H:CY4PR21MB0854.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=nibanks@microsoft.com;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: xpOCB6FZhuOiukVIxwSdVvEVGlFxRcyMMLpC/2sFhyGI+p7A8J3NHKZDr3Y48LvAoXwr/6Z8v5WCzS8V7qqS99oZHLeOEQ+PCrW0cGr8AXnzSLM723uUTTxLtQs5g+gL10LKoxVA7Sn2GHFqG/Z3xpbsuKRlrM9rR+18IRQwsGEvKUO5kOl7t9V7P1xLxQijXIcknDQyxzcH96SNP+Knob24+DsGifgZ037cBdInGfhYkshV08F7j9Xa4dLF5iVeh71hhXaaWbq1Uv2sf6wsejxR7u2hUgifZnrQvqMRFmRjHunqTwtD59/ucDSiLGUBerhgK5BzsLPRHp85DPmXL9QC4uWjtBxpX6x+uFOOAc4zMiZw+5FDqeSvy45EGS9BMW07cW12/1I4SRZoXHafXJTIbKqaydbZYjlVVVZY9/Q=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a7335720-6f62-40dd-dc2e-08d69746de14
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Feb 2019 15:19:54.7436 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0631
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/SdjNf62ND0ctkiuecN4BZU-OzwE>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Feb 2019 15:20:00 -0000

I want to support something a bit more efficient than simple rate limiting and packet drops. The client might have relatively large timeout in that case before falling back to TCP. If possible, I want to be able to give an immediate indication that it should try to fallback.

- Nick

-----Original Message-----
From: Töma Gavrichenkov <ximaera@gmail.com> 
Sent: Wednesday, February 20, 2019 7:04 AM
To: Nick Banks <nibanks@microsoft.com>
Cc: Ian Swett <ianswett@google.com>; Brian Trammell (IETF) <ietf@trammell.ch>; IETF QUIC WG <quic@ietf.org>; Mirja Kühlewind <mirja.kuehlewind@tik.ee.ethz.ch>
Subject: Re: Expected Client Response to SERVER_BUSY

On Wed, Feb 20, 2019 at 6:50 AM Nick Banks <nibanks=40microsoft.com@dmarc.ietf.org> wrote:
> It would be nice to have a way for the server to say “QUIC is 
> temporarily unavailable right now, please go use TCP instead.”

One issue here is that under a DDoS attack an ISP would just apply selective blackholing or flow specification which would simply drop all the incoming UDP traffic to protect the last mile. Depends on the attack pattern somewhat, sometimes blackholing might be more granular, but all in all you should expect that.

The only hope here is that a client would interpret response timeout in the same way as SERVER_BUSY.

--
Töma