IETF Logo Mail Archive

Re: [radext] configuration auto-discovery [was: draft-cullen-radextra-status-realm-00]

Alan DeKok <aland@deployingradius.com> Fri, 11 August 2023 13:45 UTC

Return-Path: <aland@deployingradius.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E0A4C151539 for <radext@ietfa.amsl.com>; Fri, 11 Aug 2023 06:45:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.909
X-Spam-Level:
X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xMShSC2_E1_C for <radext@ietfa.amsl.com>; Fri, 11 Aug 2023 06:45:44 -0700 (PDT)
Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC5A2C151530 for <radext@ietf.org>; Fri, 11 Aug 2023 06:45:44 -0700 (PDT)
Received: from smtpclient.apple (135-23-95-173.cpe.pppoe.ca [135.23.95.173]) by mail.networkradius.com (Postfix) with ESMTPSA id 39F6251B; Fri, 11 Aug 2023 13:45:42 +0000 (UTC)
Authentication-Results: NetworkRADIUS; dmarc=none (p=none dis=none) header.from=deployingradius.com
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
From: Alan DeKok <aland@deployingradius.com>
In-Reply-To: <BE751CB0-3347-4765-92D5-E57A26115812@gmail.com>
Date: Fri, 11 Aug 2023 09:45:40 -0400
Cc: Alexander Clouter <alex+ietf@coremem.com>, radext@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <0FCC9942-32CE-4B98-8F71-175F410882E7@deployingradius.com>
References: <ccc54e38-4a51-4e27-b19e-9650bc29c484@app.fastmail.com> <BE751CB0-3347-4765-92D5-E57A26115812@gmail.com>
To: Margaret Cullen <mrcullen42@gmail.com>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/radext/AXGy6pk7d8crVEfGKSid3lu4r2w>
Subject: Re: [radext] configuration auto-discovery [was: draft-cullen-radextra-status-realm-00]
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Aug 2023 13:45:46 -0000

On Aug 8, 2023, at 10:25 PM, Margaret Cullen <mrcullen42@gmail.com> wrote:
> 
> Some of us proposed a RADIUS routing protocol in 2013, aimed at the ABFAB group. The text would need updates to make it more generic, but the trust router protocol would work as a routing protocol in any RADIUS network. I’d be happy to produce an updated version for discussion.

  I'll have to review that in detail to understand it better.

  Any RADIUS routing protocol is going to take time to do.  The existence of dynamic discovery (RFC7585) makes it less critical in some areas.

  The main short-term difficulty is proxy to proxy communication.  There are a few open issues:

* capability negotiation (historically strenuously avoided by the WG)

  * What kind of packets does this connection accept?

  * other functionality (large packets, etc)

* routing signalling

  * e.g. I can't forward packet X, please re-route it on a different path.

  I'm sure there's more.  We would need a detailed requirements document (even a Wiki page) before moving ahead with a design.

  Alan DeKok.

v2.35.0 | Report a Bug | By Email | System Status