[Roll] giving back MPDAO to RFC editor

"Pascal Thubert (pthubert)" <pthubert@cisco.com> Wed, 04 September 2019 10:10 UTC

Return-Path: <pthubert@cisco.com>
X-Original-To: roll@ietfa.amsl.com
Delivered-To: roll@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6FBF1200D7 for <roll@ietfa.amsl.com>; Wed, 4 Sep 2019 03:10:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Ua7NSZwy; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=CKeTuTyk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5GpEiWzHR34 for <roll@ietfa.amsl.com>; Wed, 4 Sep 2019 03:10:06 -0700 (PDT)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E6321200CE for <roll@ietf.org>; Wed, 4 Sep 2019 03:10:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=51837; q=dns/txt; s=iport; t=1567591806; x=1568801406; h=from:to:subject:date:message-id:mime-version; bh=T3ZFPvLg1H0Oy6HQDv/xrGhdWtSyA7RRrFLnljEcFmM=; b=Ua7NSZwyXkSy3WAOWNz59+5xojG7xht7LvlZTWyESgKE90AxUecqxgXj ygdS/OiBhFJLuG8Z48Jv1LJvEgkB/lz6CDi83UFm9jlbnwr6yApmOhFn0 MToFEjwd3rxoZK+kePBDh+KRl+9fV2RXumUG+7Jr6RqPPQ6QzWfNiRSRL 8=;
IronPort-PHdr: 9a23:zKEh1RFg1taP4ULxjf+jdJ1GYnJ96bzpIg4Y7IYmgLtSc6Oluo7vJ1Hb+e4z1Q3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNVcejNkO2QkpAcqLE0r+eeb2bzEwEd5efFRk5Hq8d0NSHZW2ag==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CMBQBgjG9d/4wNJK1lHAEBAQQBAQcEAQGBZ4EWLyQsA21WIAQLKodoA4p1TYMNjwyHYoFCgRADVAkBAQEMAQEtAgEBhD8CgjIjOBMCAwgBAQQBAQECAQYEbYUuDIVjFQYTAQElCQoRAUABPyYBBBsagwGBHU0DHQECnlUCgTiIYYFyM4J8AQEFa4QmGIIWCYE0i3gYgUA/gRFGUYFGhH86gzuCJoxDD4d8iRCORwqCH44RhmaCNIc2jwCPL5cUAgQCBAUCDgEBBYFnIYFYcBUaIYJsgkIMF4NPilNzgSmOXgEB
X-IronPort-AV: E=Sophos;i="5.64,465,1559520000"; d="scan'208,217";a="319534083"
Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 04 Sep 2019 10:10:05 +0000
Received: from XCH-ALN-012.cisco.com (xch-aln-012.cisco.com [173.36.7.22]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id x84AA4AF022381 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for <roll@ietf.org>; Wed, 4 Sep 2019 10:10:05 GMT
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-012.cisco.com (173.36.7.22) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 4 Sep 2019 05:10:04 -0500
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 4 Sep 2019 06:10:03 -0400
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 4 Sep 2019 05:10:03 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GbEREoHEfevXdn5ylLyDJKDj0p89ZOnLgdHx3Gumj/V5eVH15cZMxqG1JbIEgi/jHh5ES8Ey0mTCruewiujnDN67p6TnUqqGyHAXpC1MBYkhT7M/79GTTvCCKFEkM1s5yTY7Mjd7gpQ98cXdm0cvoEi+3NHaXjg9E0l4ZzsqWBRVQ+O6oKfE+qTi1TCZ8OZ3jXzgj965REB3pgOQc8X+yYlZly4Bkr5llyjZO7Cd3nBENtY2T2PVqv3HGSsKP7/bQ0Bwij/Z+GLtze+SONRHxYIq8B6XYGF82Q1+wLnCXyTFyjRkSK7OyDxu3X6ILJF0KBSmF0pOMjj7yWTAPOh0cQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c2pGJxk2h8CPUossdsojKXlxpShk8nlmgdzGE75F7os=; b=dmRfx/zCO6oENJZ4XLycrbyFHDICoxoXN7lc+I20ayyK2JTHf0ucD/kC7mIOk1B6ug4CM2XVVkVPORx+vzPzy9It+xQzmv1oHipcrDnni4Q5ldTYR5gWhNVodFZBKu/ZaMnd4aNIxiY3HB3Xw4x4SWk9NoxWYXpRQNozQ+HZRvIEf0LCPHLwDtKHOtsZMmBZCGvCf2wIKBreTeVpt5KiypJG6maQNcpdgOHfa+p3aQhTIaFEFW1OZQU7fzv2F+I5AEifZNQuiYLPTE/jklelxyFs3xQDYePhuCN5r9rLhdDBX6L3TyIh46NeUV+JMVSLnSKk1XxPc3nbUFq3fP1mfw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c2pGJxk2h8CPUossdsojKXlxpShk8nlmgdzGE75F7os=; b=CKeTuTykKmBmVEvNuT2OuSV7lNcATRgJsFvbIat/GbOZEnnm7SDsww69WxiJNC3+cIW7wmvu2mOimY0JNYWW3zGZ1ThYUwRi2plZ7bkrZpb4m+J4vsO+u0xVTj2/GY8N9+b1LEbu8oU1+ZprnpRzC14ghTi7ErKA4CvbBaTYYWk=
Received: from MN2PR11MB3565.namprd11.prod.outlook.com (20.178.250.159) by MN2PR11MB3887.namprd11.prod.outlook.com (10.255.181.206) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2220.20; Wed, 4 Sep 2019 10:10:02 +0000
Received: from MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::89cf:9d:8a75:266e]) by MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::89cf:9d:8a75:266e%3]) with mapi id 15.20.2220.022; Wed, 4 Sep 2019 10:10:02 +0000
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: Routing Over Low power and Lossy networks <roll@ietf.org>
Thread-Topic: giving back MPDAO to RFC editor
Thread-Index: AdVjB/JIrm5BouKOTamY5+QcgzHTjg==
Date: Wed, 04 Sep 2019 10:09:36 +0000
Deferred-Delivery: Wed, 4 Sep 2019 10:08:59 +0000
Message-ID: <MN2PR11MB3565DAEEF4DD78D732EDE17DD8B80@MN2PR11MB3565.namprd11.prod.outlook.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pthubert@cisco.com;
x-originating-ip: [2001:420:44f3:1300:8170:98a7:7988:d19d]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 2552c9de-2ac5-4b34-8012-08d731200ce0
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600166)(711020)(4605104)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:MN2PR11MB3887;
x-ms-traffictypediagnostic: MN2PR11MB3887:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <MN2PR11MB38873F41D88381B0BD83584FD8B80@MN2PR11MB3887.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 0150F3F97D
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(376002)(39860400002)(366004)(346002)(199004)(189003)(102836004)(7736002)(71190400001)(6916009)(2906002)(76116006)(6116002)(790700001)(8936002)(14454004)(53936002)(66556008)(74316002)(53946003)(66446008)(81166006)(66946007)(66476007)(64756008)(81156014)(99286004)(8676002)(9686003)(256004)(5660300002)(71200400001)(6306002)(316002)(54896002)(52536014)(478600001)(186003)(55016002)(33656002)(7696005)(476003)(86362001)(46003)(6666004)(486006)(6436002)(25786009)(6506007)(14444005); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3887; H:MN2PR11MB3565.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: AjSPhaLPjQ/zZ1Z3158GV1Jlym6Ppb+ZL/C770tXhPEHlc3JVMP5/j5vhoLESZanODd4FfrMD9bu9uBPjNZbVmu4AHS9PzHzKNaPTr+yRm1AFeHX7BfcQ47I1+FZ3AC0RNmadI0Z0mc8HMKElDx9S0KxSOWJW6QQ18EvUeCQGrLKX4MQtbQbWGGFQZS4XbzTTEP2PLMWb6FpAiI2YNqq3x+7ssCanfDbaxD/dXIB+8WPTvDshGTx1zGlgMMrtHJV7nVuqD+prQeOy1LN74P4srS2+VY2SBCnseLiv8aT4KGLW78YlniMzrdhprItBalPr/zOJR5CZe8WoMq0lmbImdhAgYU4sLPE3fUceUXLw6gz2ltHHUMGd2IyfbaTooR05FNjOWlfz5Q+zMMZE2Tsr513z33wMxPE/wzCZMaBYE4=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MN2PR11MB3565DAEEF4DD78D732EDE17DD8B80MN2PR11MB3565namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 2552c9de-2ac5-4b34-8012-08d731200ce0
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2019 10:10:02.0568 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Pmt2OUe1klXo0CCJtKtkFrssRW/aixctgK+tA2xAA5J6+ivjUdqV5axyuJsAPkAe8zd48KRKq77nY5J5gnh10Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3887
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.22, xch-aln-012.cisco.com
X-Outbound-Node: alln-core-7.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/roll/M6byy3GtdTxuI6MqQoyN0tKOg5Q>
Subject: [Roll] giving back MPDAO to RFC editor
X-BeenThere: roll@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Routing Over Low power and Lossy networks <roll.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/roll>, <mailto:roll-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/roll/>
List-Post: <mailto:roll@ietf.org>
List-Help: <mailto:roll-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/roll>, <mailto:roll-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Sep 2019 10:10:10 -0000

Dear all

We are holding NP DAO for a change that does not impact the behavior of the node but improves traceability.
I would like to confirm consensus on this change rapidly so we can give the doc back to RFC editor.

The proposed change is as follows:

----------------------------------

diff --git "a/C:\\Users\\pthubert\\Dropbox\\IETF\\doc\\rpi\\draft-ietf-roll-efficient-npdao-15.xml" "b/C:\\Users\\pthubert\\Dropbox\\IETF\\doc\\rpi\\draft-ietf-roll-efficient-npdao-16.xml"
index 8a0acca..2ed0920 100644
--- "a/C:\\Users\\pthubert\\Dropbox\\IETF\\doc\\rpi\\draft-ietf-roll-efficient-npdao-15.xml"
+++ "b/C:\\Users\\pthubert\\Dropbox\\IETF\\doc\\rpi\\draft-ietf-roll-efficient-npdao-16.xml"
@@ -35,7 +35,7 @@
<?rfc subcompact="yes" ?>
<!-- keep one blank line between list items -->
<!-- end of list of popular I-D processing instructions -->
-<rfc category="std" docName="draft-ietf-roll-efficient-npdao-15" ipr="trust200902">
+<rfc category="std" docName="draft-ietf-roll-efficient-npdao-16" ipr="trust200902">
   <!-- category values: std, bcp, info, exp, and historic
      ipr values: full3667, noModification3667, noDerivatives3667
      you can add the attributes updates="NNNN" and obsoletes="NNNN"
@@ -582,11 +582,12 @@

             <t>
                 This document specifies a change in the Transit Information Option to
-                contain the "Invalidate previous route" (I) flag. This I-flag signals
+                contain the "Invalidate previous route" (I) flag. This 'I' flag signals
                 the common ancestor node to generate a DCO on behalf of the
-                target node. The I-flag is carried in the Transit Information
+                target node with a RPL Status of 130 indicating that the address
+                has moved. The 'I' flag is carried in the Transit Information
                 Option which augments the reachability information for a given
-                set of RPL Target(s). Transit Information Option with I-flag
+                set of RPL Target(s). Transit Information Option with 'I' flag
                 set should be carried in the DAO message when route
                 invalidation is sought for the corresponding target(s).
             </t>
@@ -615,8 +616,8 @@
             </t>
             <t>
                 The common ancestor node SHOULD generate a DCO message in
-                response to this I-flag when it sees that the routing
-                adjacencies have changed for the target. The I-flag is
+                response to this 'I' flag when it sees that the routing
+                adjacencies have changed for the target. The 'I' flag is
                 intended to give the target node control over its own route
                 invalidation, serving as a signal to request DCO generation.
             </t>
@@ -638,7 +639,7 @@
0                   1                   2                   3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
-| RPLInstanceID |K|D|   Flags   |   Reserved    | DCOSequence   |
+| RPLInstanceID |K|D|   Flags   |  RPL  Status  | DCOSequence   |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                                                               +
@@ -683,8 +684,15 @@
                 the sender and MUST be ignored by the receiver.
             </t>
             <t>
-                Reserved: 8-bit unused field. The field MUST be initialized to
-                zero by the sender and MUST be ignored by the receiver.
+                RPL Status: The RPL Status as defined in section 6.5.1 of <xref
+                target="RFC6550"/>.
+                Indicative of the reason why the DCO happened, the RPL Status
+                MUST NOT be changed as the DCO is propagated down the route
+                being invalidated.
+                This value is informative and does not affect the behavior of
+                the receiver. In particular, unknown values are ignored by the
+                receiver.
+                Only Rejection Codes (value above 128) are expected in a DCO.
             </t>
             <t>
                 DCOSequence: 8-bit field incremented at each unique DCO message
@@ -759,7 +767,7 @@
0                   1                   2                   3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
-| RPLInstanceID |D|   Flags     |  DCOSequence  |    Status     |
+| RPLInstanceID |D|   Flags     |  DCOSequence  | DCO-ACK Status|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                                                               +
@@ -788,8 +796,10 @@
                     copied from the DCOSequence received in the DCO message.
                 </t>
                 <t>
-                    Status: Indicates the completion. Status 0 is defined as
-                    unqualified acceptance in this specification. Status 1 is
+                    DCO-ACK Status: Indicates the completion. A value of 0 is
+                    defined as
+                    unqualified acceptance in this specification. A value of 1
+                    is
                     defined as "No routing-entry for the Target found". The
                     remaining status values are reserved as rejection codes.
                 </t>
@@ -910,7 +920,7 @@
                     nodes will generate their respective DAOs to update their
                     paths, and the previous route invalidation for those nodes
                     should work in the similar manner described for switching
-                    node. The dependent node may set the I-flag in the Transit
+                    node. The dependent node may set the 'I' flag in the Transit
                     Information Option as part of regular DAO so as to
                     request invalidation of previous route from the common
                     ancestor node.
@@ -920,7 +930,7 @@
                     of their parents in turn have decided to switch their
                     parent. Thus for route invalidation the dependent nodes may
                     choose to always set the 'I' flag in all its DAO message's
-                    Transit Information Option. Note that setting the I-flag is
+                    Transit Information Option. Note that setting the 'I' flag is
                     not counterproductive even if there is no previous
                     route to be invalidated.
                 </t>
@@ -1103,7 +1113,7 @@

         <t>
             IANA is requested to allocate bit 1 from the Transit Information
-            Option Flags registry for the I-flag (<xref target="transit_opt_changes"/>)
+            Option Flags registry for the 'I' flag (<xref target="transit_opt_changes"/>)
         </t>
         <section title="New Registry for the Destination Cleanup Object (DCO) Flags">
             <t>
@@ -1210,22 +1220,29 @@
             This document introduces the ability for a common ancestor node to
             invalidate a route on behalf of the target node. The common
             ancestor node could be directed to do so by the target node using
-            the I-flag in DCO's Transit Information Option. However, the common
+            the 'I' flag in DCO's Transit Information Option. However, the common
             ancestor node is in a position to unilaterally initiate the route
             invalidation since it possesses all the required state information,
             namely, the Target address and the corresponding Path Sequence.
             Thus a rogue common ancestor node could initiate such an
            invalidation and impact the traffic to the target node.
         </t>
+        <t> The DCO carries a RPL Status value, which is informative. New Status
+            values may be created over time and a node will ignore an unknown
+            Status value. Which makes it so that the RPL Status field may be
+            used as a cover channel. But the channel only works once since the
+            message destroys its own medium, that is the existing route that it
+            is removing.
+        </t>
         <t>
-            This document also introduces an I-flag which is set by the target
+            This document also introduces an 'I' flag which is set by the target
             node and used by the ancestor node to initiate a DCO if the
             ancestor sees an update in the route adjacency. However,
             this flag could be spoofed by a malicious 6LR in the path and can
             cause invalidation of an existing active path. Note that invalidation
             will happen only if the other conditions such as Path Sequence
             condition is also met. Having said that, such a malicious 6LR may
-            spoof a DAO on behalf of the (sub) child with the I-flag set and
+            spoof a DAO on behalf of the (sub) child with the 'I' flag set and
             can cause route invalidation on behalf of the (sub) child node.
             Note that, using existing mechanisms offered by <xref
                 target="RFC6550"/>, a malicious 6LR might also spoof a DAO with


Chairs, could we please last call or whatever so we can move on?

Many thanks!

Pascal