Re: [radext] draft-ietf-radext-ip-port-radius-ext
Paul Aitken <paitken@brocade.com> Tue, 11 October 2016 20:43 UTC
Return-Path: <paitken@Brocade.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DFAB12959F for <radext@ietfa.amsl.com>; Tue, 11 Oct 2016 13:43:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.794
X-Spam-Level:
X-Spam-Status: No, score=-0.794 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, LOCALPART_IN_SUBJECT=1.107, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDXvLnVAHvmR for <radext@ietfa.amsl.com>; Tue, 11 Oct 2016 13:43:39 -0700 (PDT)
Received: from mx0a-000f0801.pphosted.com (mx0b-000f0801.pphosted.com [IPv6:2620:100:9005:71::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 281991294B7 for <radext@ietf.org>; Tue, 11 Oct 2016 13:43:39 -0700 (PDT)
Received: from pps.filterd (m0048192.ppops.net [127.0.0.1]) by mx0b-000f0801.pphosted.com (8.16.0.17/8.16.0.17) with SMTP id u9BKg5dF006111; Tue, 11 Oct 2016 13:43:35 -0700
Received: from hq1wp-exmb11.corp.brocade.com ([144.49.131.13]) by mx0b-000f0801.pphosted.com with ESMTP id 2615bmgaeu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 11 Oct 2016 13:43:35 -0700
Received: from hq1wp-excas12.corp.brocade.com (10.70.38.22) by Hq1wp-exmb11.corp.brocade.com (10.70.20.185) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 11 Oct 2016 13:43:32 -0700
Received: from [10.252.49.8] (10.252.49.8) by hq1wp-excas12.corp.brocade.com (10.70.38.102) with Microsoft SMTP Server (TLS) id 15.0.1210.3 via Frontend Transport; Tue, 11 Oct 2016 13:43:18 -0700
To: draft-ietf-radext-ip-port-radius-ext@tools.ietf.org
References: <eeb529fc-4639-5c1f-f2a2-4fe9fd722d35@brocade.com>
From: Paul Aitken <paitken@brocade.com>
Message-ID: <2aa8a0ae-6974-f167-21f4-249a2bc0d69a@brocade.com>
Date: Tue, 11 Oct 2016 21:43:25 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <eeb529fc-4639-5c1f-f2a2-4fe9fd722d35@brocade.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2016-10-11_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=13 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1609300000 definitions=main-1610110340
Archived-At: <https://mailarchive.ietf.org/arch/msg/radext/H3YUtVSSQPMI4Vd2AIxL0UUB6iw>
Cc: "bclaise@cisco.com" <bclaise@cisco.com>, radext@ietf.org, Kathleen.Moriarty.ietf@gmail.com
Subject: Re: [radext] draft-ietf-radext-ip-port-radius-ext
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Oct 2016 20:43:40 -0000
Authors I've been waiting 2 months, yet no reply? P. On 08/11/16 17:24, Paul Aitken wrote: > Dear Authors, some questions came to mind while reviewing section 3.2 > of your draft: > > > Q1: Why define a new TLV-Type 1..11 simply to encode an IPFIX > Information Element? > > Since there's a 1:1 mapping between the TLV-Type and IPFIX Element ID, > the scheme you propose would be more extensible if the IPFIX Element > ID was used instead of the TLV-Type since it would require one less > registry. True, one additional byte would be required in the encoding. > However, the advantage is that in future anyone could encode a new TLV > by using the relevant IPFIX ID, without having to also define a new > TLV-Type for it. > > > Q2: In each TLV, the Length field is redundant since it can always be > determined from the TLV-Type: it's always 6, with special cases for > TLV-Types 5 (Length is 18) and 11 (Length could be determined by a > NULL terminator on the string). This suggests that the length is not > required in the protocol, so why not remove it entirely? > > > However, many of the descriptions say "contains the data ... right > justified, and the unused bits in this field MUST be set to zero. " > > Q3: Wouldn't it be better to limit the length of the field to an > appropriate size for the data, and encode that size in the Length? > > > For example, the transportType in 3.2.1 is just one octet long > (unsigned8) - so there's no reason to encode it in 32 bits. Why not > encode it like so: > > 0 1 2 3 > 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > | TLV-Type = TBAx1 | Length | transportType | > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > > > The natEvent in 3.2.8 is also an unsigned8, so it would be encoded > similarly - except that the TLV-Type would be 230, which is the IE ID > of the IPFIX natEvent. > > > The natTransportLimit in 3.2.2 is an unsigned16 - so there's no need > to encode it in 32 bits. Why not encode it like so: > > 0 1 2 3 > 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > | TLV-Type = TBAx2 | Length |natTransportLimit ... > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > ... | > +-+-+-+-+-+-+-+-+ > > 3.2.9 and 3.2.10 would be similar. The encoding of 3.2.3, 3.2.4, and > 3.2.5 would all be as shown in the draft, except that the TLV-type > would be two octets long and contain the IPFIX IE ID. The > sourceTransportPort in 3.2.6 is an unsigned16 - so there's no need to > encode it in 32 bits. Why not encode it like so: > > 0 1 2 3 > 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > | TLV-Type = sourceTransportPort| Length | > sourceTransportPort ... > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > ... | > +-+-+-+-+-+-+-+-+ > > The encoding of 3.2.7 would be similar.
- [radext] draft-ietf-radext-ip-port-radius-ext Kathleen Moriarty
- Re: [radext] draft-ietf-radext-ip-port-radius-ext Paul Aitken
- Re: [radext] draft-ietf-radext-ip-port-radius-ext Dean cheng
- Re: [radext] draft-ietf-radext-ip-port-radius-ext Paul Aitken
- Re: [radext] draft-ietf-radext-ip-port-radius-ext Dean cheng