Re: Privacy considerations of multipath (Re: My BoF report: multipath)

Lucas Pardue <lucaspardue.24.7@gmail.com> Sat, 24 October 2020 02:35 UTC

Return-Path: <lucaspardue.24.7@gmail.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA8493A0C88; Fri, 23 Oct 2020 19:35:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.848
X-Spam-Level:
X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XxNdEPkDwNRs; Fri, 23 Oct 2020 19:35:53 -0700 (PDT)
Received: from mail-ej1-x62d.google.com (mail-ej1-x62d.google.com [IPv6:2a00:1450:4864:20::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADC783A0C84; Fri, 23 Oct 2020 19:35:52 -0700 (PDT)
Received: by mail-ej1-x62d.google.com with SMTP id s15so451341ejf.8; Fri, 23 Oct 2020 19:35:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=5aJ6AsWQAhRgUgj40s0ibsIzwov0RcIdexV9rPTIuss=; b=vWIO3Iazz+cbg5JuFXhUDW5h0gw8M89TPLSotGlukj71uV39tzK9BSRBlQ2hwj8ds2 gxC/PH2swk1/MDhR2Cm1oClS+Ug9Wapk05E3tl2a9yxgyCAhvejWWtpjJB6ta3T4iL0E h/A2/tKQw/ojd0r7zu94wiIhchydHzfxJD768z6NUq74ogbPKKfDFLBfJAYsNK/3qmfc VOpv053NOH5Zo1B6d2oS1+0TjQDfCojnGqzjA6eyIK7nc8yysFW8/QXZihyHGMprRpaT 855/RxyLf8WPUYbVzcOczge4ZPsuAqTpMRQDpsdLWcA6uWHBV+9yux5hOAUe1SJjR6km tmsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=5aJ6AsWQAhRgUgj40s0ibsIzwov0RcIdexV9rPTIuss=; b=iltC2DIZ9Zy2iRhqh+LYGGDVecRSJK/e19GTVPziZsyH7j4MNjUPxe+ZHx1hfbLUBm FaVhGXOwoFgJ6OGezX+oIZ9fAgG3CJ6I7bnTHlRwO4QSQk5+OpblSnPaqQ2YxGT3NjMT ZedbagyTEwOVGnetOTMcvPjzyfqL998Mkvo5FscETnbgT13yoYyVsfQkPunEU8ruXAiF q4BJAppk2bWlfNjSB3NbK0VSws46BMSFPppM5RPzEPNSCmHLDueO6HAV4nYpaCSUia6g m0e+DMm15b2tPTP7P4Hai4CPGMVagv1r0zb9l1d7cuusGm4a6O9aNavJg0zRCm6UNNol acMA==
X-Gm-Message-State: AOAM533pPuLIfP8tWWWZx/VmEsv6XjWtmkGMKGMF9fFpkZ2WdmfRhseI 37varuZUdxm3/IXLND39FJpxah7E3Qjv98RWWPY=
X-Google-Smtp-Source: ABdhPJzGf7sUSFHQW3s6vYtwcNs0S6WM2dtDWFewALrlZnGazpDogX0/BIi1pAsxMR9J0rvjplCwUtErg7587KC6aF4=
X-Received: by 2002:a17:906:a119:: with SMTP id t25mr5245693ejy.67.1603506951037; Fri, 23 Oct 2020 19:35:51 -0700 (PDT)
MIME-Version: 1.0
References: <d84c82b1-fa67-4676-9ce2-d2a53d81b5f7@www.fastmail.com> <5741601d-7e67-898e-5840-70feceb994e9@uclouvain.be> <CALGR9oZW0s6c6+N+3R8bD17yPBPQa4E_cVOaTOSNTVQPYy6sUg@mail.gmail.com> <CAC8QAcditJ0nzdCNHOhi-1xtezoXb0u=hrGBWtZ3Cj3XP6CW4g@mail.gmail.com> <CALGR9oZfw5LqfPyZw6Yb8JTmuqi0prTL0f0yT9Rdq6oz5u51fg@mail.gmail.com> <ccbd3f9a-883e-6262-5735-2b9f25c6c6c4@zinks.de> <CALGR9oaw_-dbYSu5oN1Usvwr2h8wp-gvcmzx+0+2HJM-4Ac+4A@mail.gmail.com> <c09ff2f3-771b-11df-68f3-c690efa998c7@zinks.de> <CAKKJt-exKQa8o6Gn1=-SdDFQSrRGMtDsWJy62=RAQMD_T=P7ZQ@mail.gmail.com> <818d4f85-faa6-110c-7a94-441d7fe53166@huitema.net> <CALGR9oZzznU9qTc-T6xVYJOOT4cEhC8tunYK94x+HkQNmHFvEg@mail.gmail.com> <BF0B6222-AA56-4B8C-B0C2-FE06D4761009@apple.com>
In-Reply-To: <BF0B6222-AA56-4B8C-B0C2-FE06D4761009@apple.com>
From: Lucas Pardue <lucaspardue.24.7@gmail.com>
Date: Sat, 24 Oct 2020 03:35:39 +0100
Message-ID: <CALGR9oZEpTCVAyff7c6m94H+U9qsNNU=wc39=hdKeZ40nqHvxw@mail.gmail.com>
Subject: Re: Privacy considerations of multipath (Re: My BoF report: multipath)
To: Eric Kinnear <ekinnear@apple.com>
Cc: Christian Huitema <huitema@huitema.net>, QUIC WG <quic@ietf.org>, taps-chairs@ietf.org, Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>, Roland Zink <roland@zinks.de>
Content-Type: multipart/alternative; boundary="00000000000036262f05b2618ee2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/rN9cl9lrMD7Fy6CezeIQfzRBAjI>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Oct 2020 02:35:55 -0000

Hey Eric,

On Sat, Oct 24, 2020 at 2:16 AM Eric Kinnear <ekinnear@apple.com> wrote:

> I generally agree with some of the thinking here, but I can definitely see
> a case where “everyone gets it for free” is a thing.
> For example, one could imagine that Cloudflare might use quiche to allow
> its customers to enable HTTP/3 “for free” via a checkbox in their
> configuration, or even just enable it on their websites.
>
> That’s not necessarily fully in sync with what the “QUIC is in userspace
> and therefore everyone should bring their own implementation that they can
> change at will” thinking is going towards, but I do expect there are quite
> a few folks creating end-user-facing software who don’t know that much
> about networking and are more interested in “hit this REST endpoint” than
> “tune my congestion control for the specific quirks of my traffic content
> that are unique to me and only me”.
>
> I’m not saying anything against that type of tuning, that’s often how we
> can push the boundaries and really move things forward.
> I also think QUIC is in a really good place to enable a lot of awesome
> experimentation in that area.
>
> But I do think we can acknowledge that there are folks (even if I
> personally might tend towards the “let’s experiment and push the
> boundaries” side of things) who have a very legitimate desire to abstract
> that away underneath something that generally does a “pretty good” job of
> handling it. If that's better than what exists today in terms of end-user
> visible benefits, even if not 100% optimally tuned for their specific
> traffic patterns, that seems like a good start.
>
> There’s definitely a balance to strike between ultimate experimentation
> and moving meaningful numbers of people forward who either don’t have time
> or aren’t interested in that experimentation. Where are the cases where
> it’s most useful, leads to the most end-user benefit, or enables things not
> previously possible? Those seem like the things to focus on *not* abstracting
> away — is multipath in QUIC one of those? (I genuinely don’t have an answer
> to that.)
>

To clarify a little. The point I was trying to make is that just adding
some support for $multipath frames$ parsing to something like quiche would
not be a complete solution. Something would still have to glue it to a
network. And I'm not sure if there's a consistent network API across
platforms that exposes path information required for something like that to
work. So the application has a lot of work to do to. If they have to build
to the nuances of every platform API, firmware or middleware, that's more
than just free. To build on Christian's earlier point, many projects have
picked their own way to do things, for good or bad.

The QUIC WG has benefited from its ability to openly and agily
interoperate. Many implementations are there for people to just pick up and
start running with. I'm not steadfast in belief that everyone has to use a
user-space library and bundle up everything. There's absolutely a value in
making technology accessible to folks that just want to get on with
business via simpler or stabler means. And both these worlds can exist (and
most definately should interoperate!). But I think it's prescient to
consider the accessibility of new transport features to different parts of
the community.

Cheers
Lucas