Re: [ippm] QUIC concerns relating to draft-ietf-ippm-explicit-flow-measurements

Tommy Pauly <tpauly@apple.com> Fri, 12 May 2023 14:02 UTC

Return-Path: <tpauly@apple.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EE91C151090 for <quic@ietfa.amsl.com>; Fri, 12 May 2023 07:02:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.401
X-Spam-Level:
X-Spam-Status: No, score=-4.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fh6_djI_HPm6 for <quic@ietfa.amsl.com>; Fri, 12 May 2023 07:01:55 -0700 (PDT)
Received: from ma-mailsvcp-mx-lapp01.apple.com (ma-mailsvcp-mx-lapp01.apple.com [17.32.222.22]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 095B0C14CE4A for <quic@ietf.org>; Fri, 12 May 2023 07:01:54 -0700 (PDT)
Received: from rn-mailsvcp-mta-lapp02.rno.apple.com (rn-mailsvcp-mta-lapp02.rno.apple.com [10.225.203.150]) by ma-mailsvcp-mx-lapp01.apple.com (Oracle Communications Messaging Server 8.1.0.22.20230228 64bit (built Feb 28 2023)) with ESMTPS id <0RUJ011ETTMQ9O10@ma-mailsvcp-mx-lapp01.apple.com> for quic@ietf.org; Fri, 12 May 2023 07:01:54 -0700 (PDT)
X-Proofpoint-GUID: A_q7G_cSFTnBoSdklznpjrk7bsGeH4P8
X-Proofpoint-ORIG-GUID: A_q7G_cSFTnBoSdklznpjrk7bsGeH4P8
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.573, 18.0.942 definitions=2023-05-10_04:2023-05-05, 2023-05-10 signatures=0
X-Proofpoint-Spam-Details: rule=interactive_user_notspam policy=interactive_user score=0 spamscore=0 bulkscore=0 mlxlogscore=999 adultscore=0 phishscore=0 suspectscore=0 malwarescore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2304280000 definitions=main-2305100145
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=20180706; bh=lcpujajHvqmde0+NIhpQikzs3SXf91sRadUQW6X9drE=; b=VkL40kdUrDPOvnwqKAUR3QfLUI5ZWu9fCjcJqtJSrcmfd9lHT1CbWwF5SNO36pg0CAv1 xw4UKM7n9fedozxjIy/e/GLToxWCdhFk70bE3x5S3tHNrR2dwygi+TLiC5oDaSIyA0WY Sw29+VaNi5hO1nA8I1WjTK329vrOv2XCWsztMtxEd0SW3n5kmiCUzzhoatLEPgUDM4nt PkaAGiqLCAhCHL1UuRm/llnJagtTv7qO4yfaA29leGI7nEEl0aYe0Kzndjc0vLk4ek6x ZCiOh8o72EbsoPYa/J0h6M34QNvgbE+FcdTfsPKzfBFNszhsQ1ZOTp5PkxBHpKof9jg5 ow==
Received: from rn-mailsvcp-mmp-lapp02.rno.apple.com (rn-mailsvcp-mmp-lapp02.rno.apple.com [17.179.253.15]) by rn-mailsvcp-mta-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.22.20230228 64bit (built Feb 28 2023)) with ESMTPS id <0RUJ00FWVTN3DI00@rn-mailsvcp-mta-lapp02.rno.apple.com>; Fri, 12 May 2023 07:01:52 -0700 (PDT)
Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp02.rno.apple.com by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.22.20230228 64bit (built Feb 28 2023)) id <0RUJ00E00TM6NG00@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Fri, 12 May 2023 07:01:51 -0700 (PDT)
X-Va-A:
X-Va-T-CD: 058bbac8ca772bcfc9e38720b87faa94
X-Va-E-CD: c5fdde0ad2d37a936b9aaa92db93e626
X-Va-R-CD: 4b31fff86391f1bca776c85fa9447c7b
X-Va-ID: b9c22cf5-b068-44ac-9da8-353b71fa8dc1
X-Va-CD: 0
X-V-A:
X-V-T-CD: 058bbac8ca772bcfc9e38720b87faa94
X-V-E-CD: c5fdde0ad2d37a936b9aaa92db93e626
X-V-R-CD: 4b31fff86391f1bca776c85fa9447c7b
X-V-ID: 055cfe6e-cf0b-45b0-9aef-84d3a3a35458
X-V-CD: 0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.573, 18.0.942 definitions=2023-05-12_08:2023-05-05, 2023-05-12 signatures=0
Received: from smtpclient.apple (unknown [17.11.105.167]) by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.22.20230228 64bit (built Feb 28 2023)) with ESMTPSA id <0RUJ00Z7GTN0Z300@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Fri, 12 May 2023 07:01:51 -0700 (PDT)
Content-type: text/plain; charset="utf-8"
MIME-version: 1.0 (Mac OS X Mail 16.0 \(3755.100.3\))
Subject: Re: [ippm] QUIC concerns relating to draft-ietf-ippm-explicit-flow-measurements
From: Tommy Pauly <tpauly@apple.com>
In-reply-to: <3f0ffd1d-191e-3d7a-cea5-fa9d89d3dd84@huitema.net>
Date: Fri, 12 May 2023 07:01:37 -0700
Cc: Martin Thomson <mt@lowentropy.net>, "Lubashev, Igor" <ilubashe=40akamai.com@dmarc.ietf.org>, "quic@ietf.org" <quic@ietf.org>
Content-transfer-encoding: quoted-printable
Message-id: <346D0343-FFC9-440A-85AE-46E59B108A8B@apple.com>
References: <CALGR9oZxFEXWD5hZZOJB7q+-f766FsjBGBTNjpuc1jyZyucz3Q@mail.gmail.com> <3103CBFB-5112-4FAC-A2F0-5209F52AB288@apple.com> <CALGR9oboNgFo-BA0Sqstog_JFPm+DL545VUSbksgF1chTnZ7VQ@mail.gmail.com> <791fd608-8112-bea7-9e22-5d0b8b9e8b1d@huitema.net> <5cf7edfcdf604f13b7fda36d206babfb@huawei.com> <18d470b2-ccfc-41a3-bbef-a572091502bb@betaapp.fastmail.com> <1cb7ab2a31394a19b20418ca7cd8ebb0@akamai.com> <4e85047d-2197-e75a-a665-211075925dad@huitema.net> <f7ee3a0d-c0f5-491f-a0f5-4fb41bb56ea8@betaapp.fastmail.com> <3f0ffd1d-191e-3d7a-cea5-fa9d89d3dd84@huitema.net>
To: Christian Huitema <huitema@huitema.net>
X-Mailer: Apple Mail (2.3755.100.3)
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/mqidFIBbFj5ZrSlHbp_tRUv-B6s>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 May 2023 14:02:01 -0000

Agreed, although I see a lot of this work as input to future versions of a protocol (QUIC or otherwise) that could allocate bits like QUICv1 did for the spin bit. The IPPM document essentially is a zoo of the various ways bits could be used for spin-bit style uses, such that future protocols and protocol versions could decide to implement one. In the meantime, I agree that the application to QUICv1 is more for experimental demonstrations than something you could have arbitrary middle boxes assume support for by default.

Tommy

> On May 11, 2023, at 4:50 PM, Christian Huitema <huitema@huitema.net> wrote:
> 
> 
> 
> On 5/11/2023 3:53 PM, Martin Thomson wrote:
>> On Fri, May 12, 2023, at 01:21, Christian Huitema wrote:
>>> Igor is right. In fact, the "square bit" that he describes is
>>> implemented in Picoquic, under an option negotiation.
>> It's not about whether endpoints could negotiate something that allows the use of these bits, it's about whether measurement systems are able to rely on that happening.
>> It's quite possible that some extension could be negotiated that creates a signal in these bits.  OK, so now you can deploy a measurement system that relies on that.  Most bits will be random, but some proportion will have the signal.  Enter statistical methods and you can recover some signal.
>> Well...almost.  This works until someone else decides to negotiate the use of those bits for carrying a different signal.  Now you have a harder statistical problem to solve.  Maybe you can boost your adaptation by observing connection initiation and looking for clients that advertise a certain version and set of transport parameters.
>>> The probability that these measurement features be turned on by default
>>> is extremely low, and the draft should be very explicit about it,
>>> including a description of the privacy/measurement tradeoff.
>> This is really the point of all this.
> 
> That. Which means that at a minimum the IPPM draft should discuss the issue: needle of measurement in a haystack of noise. It might work sometimes, such as when debugging the end to end path between two well known IP addresses, or when knowing the specific connection IDs used by the system participating in the measurement. It might perhaps work if the connection last long enough to distinguish the IPPM pattern from a random pattern. But as you say, the general case is almost impossible.
> 
> -- Christian Huitema
>