Re: [radext] BoF request for IETF 115

[Jan-Frederik Rieckers <[e-mail]>]

On 03.10.22 10:46, Margaret Cullen wrote:> In our efforts to operate and 
support a large, proxied RADIUS fabric, we
> often wish we had a Status-Server equivalent that would cross proxies 
> (like a multi-hop RADIUS ping), with or without a path tracing capability.
> 
> I’d be happy to contribute to an effort to provide something like that, 
> if others agree it is needed.

Speaking as a national eduroam roaming operator in Germany, I had issues 
detecting routing problems and would definitely welcome a probing method 
that gives better information then "I've started eapol_test and looked 
at the response using wireshark combined with my radsecproxy logs and it 
looked ok™"

> Several years ago, a group of us designed a realm routing protocol for 
> ABFAB called the “Trust Router Protocol”.  It has been documented in an 
> Internet Draft, implemented as an open source project, and used (to a 
> limited degree) in a production service.  It could be a good starting 
> point if others agree that a realm routing protocol would be useful.

Having a routing protocol, especially one aware of HA-setups and 
failover scenarios, would definitely be helpful.

Probably nothing we should include in this new WG charter just now, 
getting RADIUS/UDP of the general internet is a much more important task 
IMHO, but I'd be happy to contribute to such a realm routing protocol.

Greetings

Janfred

-- 
E-Mail: [e-mail] | Fon: [phone] | Fax: [phone]
Pronomen: er/sein | Pronouns: he/him
__________________________________________________________________________________

DFN - Deutsches Forschungsnetz | German National Research and Education 
Network
Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1 | 10178 Berlin
www.dfn.de

Vorstand: Prof. Dr. Odej Kao (Vorsitzender) | Dr. Rainer Bockholt | 
Christian Zens
Geschäftsführung: Dr. Christian Grimm | Jochem Pattloch
VR AG Charlottenburg 7729B | USt.-ID. DE 1366/23822