Re: [radext] Mirja Kühlewind's Discuss on draft-ietf-radext-ip-port-radius-ext-11: (with DISCUSS)

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Tue, 11 October 2016 16:34 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3D6912964E; Tue, 11 Oct 2016 09:34:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ycdyqNfiW8-x; Tue, 11 Oct 2016 09:34:47 -0700 (PDT)
Received: from mail-vk0-x229.google.com (mail-vk0-x229.google.com [IPv6:2607:f8b0:400c:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04C77129652; Tue, 11 Oct 2016 09:34:46 -0700 (PDT)
Received: by mail-vk0-x229.google.com with SMTP id 192so24995038vkl.2; Tue, 11 Oct 2016 09:34:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=d7WVRhgDMH3EQ1EnqW8PO9j3GdiDcN4K46GROT+K0Nc=; b=CT7id4jOoHJ/JoVEQqTFoWagg8Sul8hMlXXYmlQfGtm1OmgXo87R91kbSbs3vJeWvl a6HYZF9IlTzCZP+PqWXDQ8wub6OmKZH/hrldNYbtgA9MKXmwRD3i80oRvy/WsAqA2K03 0hTmg1bNiK4c0uppmnhI5D7x8mACeV+2eX8s7Z4zpm9YruBV4EnBDdq+EvNm79LgY+m4 FaWVH+A+xG5iQtrhiC/dAcs5vlGrEDLPnBAWGS3+4h2+9k/7ot63ALuIaYyakwTXlBkn 5XcWPwRRHAEwTI8V9y0k0XVVYCjbTUF/dxg+5oVadz9YG+qU66AUg/57W+9O6yp1LFWS 1vZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=d7WVRhgDMH3EQ1EnqW8PO9j3GdiDcN4K46GROT+K0Nc=; b=CaHMvBFKEl9v/eXRrv1Pjq59HlJLQ6T+c7lOhR3J/prNBbaYKdmlMKhCLuWsu6AGhP zQxq8VN3WX6z32zcVKrPyZeUdnrBntSZmgLJ0MMAoY15ha0KmlOEd+JQyJKZWyHYhmmk DU0vHGNHVfTbVUCCtxCaV+3rU44Xip0+2FvhKuwmzSgX8nyyMAZQWseDwtZwY6QDRedK Sz+kdKV/4oJpIRUTWVbxNSx7rrcZToQ1c6QdYVdGkQyNziaq6818PA+gBoW8srD+hYrC mAHfUciRbFZ9U2LbxO3jBFjv1zGn42EIQC+6RoPk1I6fkW2Sxw+5vCBHb7pzWwFRKTYd vwaQ==
X-Gm-Message-State: AA6/9Rk/VDOus4nXVTQE8RzpW1Q3WEx/rxp4kgsmhj63RldTwLeDkgMm77TsHLR4UcDUMy8LaoCQLbI9wJms/Q==
X-Received: by 10.31.69.16 with SMTP id s16mr4038833vka.115.1476203684555; Tue, 11 Oct 2016 09:34:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.176.82.68 with HTTP; Tue, 11 Oct 2016 09:34:44 -0700 (PDT)
In-Reply-To: <99B00097-B852-4A46-8CEB-6265DCBEA85D@trammell.ch>
References: <147144264456.12177.17817646214313923394.idtracker@ietfa.amsl.com> <74f2750c-10f3-402c-d771-2d93cef76ced@gmail.com> <CAHbuEH6vH3FJ_O7sva7kTDxAG479AOqL6Ari=Gi85LOw1bCK9w@mail.gmail.com> <30E44B2B-C7B2-4E4D-8B6C-70B0D95E317E@kuehlewind.net> <CAHbuEH6Q4hz=0hGkxzhuRD0zEEg-BOa=0Nu3YaLnVkZV=9fTvg@mail.gmail.com> <99B00097-B852-4A46-8CEB-6265DCBEA85D@trammell.ch>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Tue, 11 Oct 2016 12:34:44 -0400
Message-ID: <CAHbuEH45Ovt2YNW5=Ka0QXhwJz+wkOLd=4i7ZHbx0=OrR8eMcg@mail.gmail.com>
To: Brian Trammell <ietf@trammell.ch>
Content-Type: multipart/alternative; boundary="001a114db3ce3bf5e9053e997433"
Archived-At: <https://mailarchive.ietf.org/arch/msg/radext/MO6pTe0NMGxYB8xGfskPYhz-nbA>
Cc: draft-ietf-radext-ip-port-radius-ext@ietf.org, "radext@ietf.org" <radext@ietf.org>, Jouni Korhonen <jouni.nospam@gmail.com>, "<lionel.morand@orange.com>" <lionel.morand@orange.com>, "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>, The IESG <iesg@ietf.org>, radext-chairs@ietf.org
Subject: Re: [radext] Mirja Kühlewind's Discuss on draft-ietf-radext-ip-port-radius-ext-11: (with DISCUSS)
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Oct 2016 16:34:50 -0000

Hello Med,

Can you also respond to this message, it contains the details of the IPFIX
review.

Thank you,
Kathleen

On Fri, Sep 2, 2016 at 1:07 PM, Brian Trammell <ietf@trammell.ch> wrote:

> hi Kathleen, all,
>
> Sorry, this fell off my radar, due to the present emergency.
>
> Review text below:
>
> In general, the Information Elements in draft-ietf-radext-ip-port-radius-ext
> are so underspecified as to be unimplementable. They should not be added to
> the registry in their present form. The authors are advised to read RFC
> 7013, especially Section 4, which provides useful information on defining
> Information Elements. Specifically:
>
> The Information Element transportType is underspecified: (a) I presume
> this is in reference to sourceTransportPort and destinationTransportPort,
> but the description must say this if it is the case; (b) It's not clear at
> all from the description in what context this distinction is useful; (c)
> What's an ICMP identifier?
>
> In addition, the description of transportType appears to create a table
> which should probably be handled as a subregistry. See See RFC7013 section
> 4.7. for advice on the creation of tables without subregistries (in short,
> "don't".)
>
> The Information Element natTransportLimit has an inappropriate name; it
> does not describe that which it (presumably) is supposed to represent (see
> RFC 7013 section 4.1). In addition, it is underspecified. It is impossible
> to implement from the description. Is the field IPv4 specific, or is IPv6
> supported as well? (If not, why not?)
>
> The Information Element localID has an inappropriate name; it is far too
> general (see RFC 7013 section 4.1). It uses an inappropriate abstract data
> type (addresses should never be represented as UTF-8 strings in IPFIX, see
> RFC 7013 section 4.2). It is underspecified as well as poorly designed.
> Without the ability to disambiguate the type of information in the field,
> this is not a useful Information Element. Without a complete enumeration of
> possible types (n.b. 'etc.' in the description), it is not a useful
> Information Element.  Its purpose is unclear from its description; further,
> it appears to violate the following guidance in RFC 7013 section 4: "The
> Information Element must be unique within the registry, and its description
> must represent a substantially different meaning from that of any existing
> Information Element.  An existing Information Element that can be reused
> for a given purpose should be reused."
>
> Best regards,
>
> Brian Trammell (for the IE-Doctors)
>
>
> > On 02 Sep 2016, at 18:41, Kathleen Moriarty <
> kathleen.moriarty.ietf@gmail.com> wrote:
> >
> > On Fri, Sep 2, 2016 at 7:44 AM, Mirja Kuehlewind (IETF)
> > <ietf@kuehlewind.net> wrote:
> >> Did finally send someone the review to the right people or should I
> ping Brian (again)?
> >
> > That would be helpful, I believe we are still waiting for the review.
> >
> > Thanks,
> > Kathleen
> >
> >>
> >> Mirja
> >>
> >>
> >>> Am 17.08.2016 um 19:18 schrieb Kathleen Moriarty <
> kathleen.moriarty.ietf@gmail.com>:
> >>>
> >>> Apparently, Brian did the review.  I'm adding him to this thread so he
> >>> can send the review to the draft distribution list.
> >>>
> >>> Thank you,
> >>> Kathleen
> >>>
> >>> On Wed, Aug 17, 2016 at 1:13 PM, Jouni Korhonen <
> jouni.nospam@gmail.com> wrote:
> >>>> Hi,
> >>>>
> >>>> Would it be possible to see the IE doctor's feedback? The authors
> might find
> >>>> it useful as well. If it has been distributed already, my apologies
> if I
> >>>> missed it.
> >>>>
> >>>> regards,
> >>>>       Jouni
> >>>>
> >>>> 8/17/2016, 7:04 AM, Mirja Kuehlewind kirjoitti:
> >>>>>
> >>>>> Mirja Kühlewind has entered the following ballot position for
> >>>>> draft-ietf-radext-ip-port-radius-ext-11: Discuss
> >>>>>
> >>>>> When responding, please keep the subject line intact and reply to all
> >>>>> email addresses included in the To and CC lines. (Feel free to cut
> this
> >>>>> introductory paragraph, however.)
> >>>>>
> >>>>>
> >>>>> Please refer to https://www.ietf.org/iesg/
> statement/discuss-criteria.html
> >>>>> for more information about IESG DISCUSS and COMMENT positions.
> >>>>>
> >>>>>
> >>>>> The document, along with other ballot positions, can be found here:
> >>>>> https://datatracker.ietf.org/doc/draft-ietf-radext-ip-port-
> radius-ext/
> >>>>>
> >>>>>
> >>>>>
> >>>>> ------------------------------------------------------------
> ----------
> >>>>> DISCUSS:
> >>>>> ------------------------------------------------------------
> ----------
> >>>>>
> >>>>> I fully support Alissa's discussion points and have two more to
> >>>>> add:https://datatracker.ietf.org/doc/draft-ietf-radext-ip-
> port-radius-ext/
> >>>>>
> >>>>> 1) IP-Port-Type TLV only covers UDP, TCP and ICMP. This is not very
> >>>>> future-proof: there are other transport protocols that have ports or
> >>>>> identifiers that may want to be supported in future. Also it is not
> clear
> >>>>> to me from the document why this information is needed at all in the
> >>>>> described use cases. Therefore I see two possible ways forward:
> Either
> >>>>> remove the IP-Port-Type TLV or extend it to also cover other cases.
> >>>>>
> >>>>> Related to this point I would like to mention that RFC6887 is not
> >>>>> restricted to UDP/TCP and therefore the following sentence in
> section 2
> >>>>> is not correct:
> >>>>> "Note that the definitions of [...] "internal port", [...] "external
> >>>>> port" [...] are the same as defined in Port Control Protocol (PCP)
> >>>>> [RFC6887]"
> >>>>>
> >>>>> 2) The IE doctors have provide feedback to IANA that the Information
> >>>>> Elements in this doc are underspecified (not confirm with rules in
> RFC
> >>>>> 7013) and should therefore be not registered.  Addressing this
> feedback
> >>>>> could lead to a mayor rewrite of this doc, especially in the
> relation to
> >>>>> the use and definition of transportType and receptively IP-Port-Type
> TLV,
> >>>>> and should therefore be done before a final IESG decision.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>>
> >>> --
> >>>
> >>> Best regards,
> >>> Kathleen
> >>>
> >>
> >
> >
> >
> > --
> >
> > Best regards,
> > Kathleen
>
>


-- 

Best regards,
Kathleen