Re: [Roll] NSA extn review

Rahul Jadhav <nyrahul@outlook.com> Sat, 02 November 2019 12:57 UTC

Return-Path: <nyrahul@outlook.com>
X-Original-To: roll@ietfa.amsl.com
Delivered-To: roll@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00DFE120E0B for <roll@ietfa.amsl.com>; Sat, 2 Nov 2019 05:57:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outlook.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJC1YH7Mq9VY for <roll@ietfa.amsl.com>; Sat, 2 Nov 2019 05:57:51 -0700 (PDT)
Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-oln040092254085.outbound.protection.outlook.com [40.92.254.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D958B120059 for <roll@ietf.org>; Sat, 2 Nov 2019 05:57:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UC97ZXgvUNTSfNiqsYsQmJoVpznthzN21O7wqU0M8MvVaZqO80jA/H+XLomc2NZzTNnuBad+n9Ljld79/zUZ9c2Wlwkn8skFiLxKjMRTDZhiEc9Dt+vb7xCpnIcT8N0vpTt+Te21Qs30gmYMSmMzxbsK0cmrqFk1ETrIaYYBb+jXxHInpShJ3R9goBJmI3fAfupQsqM44DyW1JPPnNTSkDvr1TpjZ2EC2bsxSRCyLt/wXVYDqWRKjTthNrIaRQcPXjw+e2t0jGNMbc/mjhmA+mbSJodYA8RLHFXlhBFaqCOct0x7hVKlp5QxWJpBSwwgCIEfJoUEn/nEGyoFaw787w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gwpwxY90LEqjsL9HONiSTVN+Fz1nOn9gsvNaGm61vuA=; b=giyZ70ImoQ0JcYoO07t62VD9pd4+ZDuPGYcapEJ1iYHOIyg920Njwp/8LKdtGgVQEblUlELoi6Z10lkGvuK3QaxPAlgSJO9jdg4ZNO90WOIWz41PxIUyj8g0qiyAxe1LFSR3m9JE4tZAEBkVGWvUDWUlVZgNhwfu3Q8UVncYCTJZOlbjCsj+C7F5uQ4bw3FPUyk1paP9hvA//v1D5lzoySoBWMbGBigong/RBuSbWMVwBanx+bLFi0gModrso+Sjc3IC4rRDK0VVg2voSsaHXS/pLuXx+r5/BiUNkO87/T0rVNi/2YVszEoWiqM+QBELFOm0p5I6h4tQOyQz/d7nNQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gwpwxY90LEqjsL9HONiSTVN+Fz1nOn9gsvNaGm61vuA=; b=icu/ZqXf7aLEaBj1iHqjO8mman/pUy4gPeT5QyB7qG78Ka+XpNJi4ZsWTuywRigZFty6IfHJPInnXLhsfIXdLQy69SLCp+dK/b0IKdhwbKE8fAgiiH7qkCs9rcg7P5n9d3z4xyeOBCLGBTOcuOJdvDtHMg5Z8aQ2mOPfuLNWgV7mgKrFBJcE3MagPYMJDfZOgqOHkD6CR8E2AmIokzpXPK02YnKjcsub+EDfe/ntC0xSap5cv/5vQq47lxkwCEx4h+Zvp97sHwH/ZCnH06k6gHOWA++HS0K9OgzS73kIxjZqWmN11b3VCCyfL8ImSB4ncN+S7TmOFc2PHK+OmGI6Rg==
Received: from SG2APC01FT114.eop-APC01.prod.protection.outlook.com (10.152.250.59) by SG2APC01HT151.eop-APC01.prod.protection.outlook.com (10.152.251.128) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20; Sat, 2 Nov 2019 12:57:47 +0000
Received: from BM1PR01MB2612.INDPRD01.PROD.OUTLOOK.COM (10.152.250.54) by SG2APC01FT114.mail.protection.outlook.com (10.152.250.193) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20 via Frontend Transport; Sat, 2 Nov 2019 12:57:47 +0000
Received: from BM1PR01MB2612.INDPRD01.PROD.OUTLOOK.COM ([fe80::8a1:677d:4fb6:b932]) by BM1PR01MB2612.INDPRD01.PROD.OUTLOOK.COM ([fe80::8a1:677d:4fb6:b932%6]) with mapi id 15.20.2387.031; Sat, 2 Nov 2019 12:57:47 +0000
From: Rahul Jadhav <nyrahul@outlook.com>
To: Routing Over Low power and Lossy networks <roll@ietf.org>
Thread-Topic: [Roll] NSA extn review
Thread-Index: AQHVdMuVtXjwnXoULEiXZiBZ5jkGkadzc7UAgAScRMI=
Date: Sat, 02 Nov 2019 12:57:47 +0000
Message-ID: <BM1PR01MB2612DAF57338FF2525A0A773A97D0@BM1PR01MB2612.INDPRD01.PROD.OUTLOOK.COM>
References: <BM1PR01MB26128F018BFC1088353F7541A9810@BM1PR01MB2612.INDPRD01.PROD.OUTLOOK.COM>, <CAK76PrnWhMLiVSo1fkNJPuxo6GKmqpQaH28=QYzGfo6afp6g+g@mail.gmail.com>
In-Reply-To: <CAK76PrnWhMLiVSo1fkNJPuxo6GKmqpQaH28=QYzGfo6afp6g+g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:C188F17F570C4A02A71EDD455DC592B8F434C65517A9E40C18E805BBF28CC53D; UpperCasedChecksum:B5DB175E3C0EE361235C11E1A0CD881A88C2BB4958CBB33327632BF605B2539A; SizeAsReceived:6834; Count:43
x-tmn: [it5arn8D8/qqQGt5pjocgUt9Mxiy5Tua]
x-ms-publictraffictype: Email
x-incomingheadercount: 43
x-eopattributedmessage: 0
x-ms-traffictypediagnostic: SG2APC01HT151:
x-ms-exchange-purlcount: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: LrPIY0J06/sHpE1NkuoQ20E4SowamM+x0lC5GmUEc4WzxRaIFAi+uBJHH6M2f1u0nyNdvaa0EXZvomWHKtUkGUNVcMOadePGCiMeix+pdnFuvPhFQkTb9wFGJ5m0ngr0svIbce+dbugYL0CRTDBvjhqwgTiBSIxt9CzaUmet1KDnv6KgPFIpicrSkmPwbhtzuP1l1EHfNj8/pO5sCCWUciduC1qWgE8tcx1bkRqGVPU=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BM1PR01MB2612DAF57338FF2525A0A773A97D0BM1PR01MB2612INDP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 6d764562-2120-43c5-43a0-08d75f9442de
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2019 12:57:47.6606 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2APC01HT151
Archived-At: <https://mailarchive.ietf.org/arch/msg/roll/PkURVIynLUvw_1ZZQ9LMiawxiEA>
Subject: Re: [Roll] NSA extn review
X-BeenThere: roll@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Routing Over Low power and Lossy networks <roll.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/roll>, <mailto:roll-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/roll/>
List-Post: <mailto:roll@ietf.org>
List-Help: <mailto:roll-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/roll>, <mailto:roll-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 02 Nov 2019 12:57:55 -0000

Thanks Remous, Georgios for addressing the comments.

Regarding using a single OCP... looks like you agree we just need a single OCP.
Regarding security considerations .. looks like we agree also.
Regarding extending MRHoF, your argument sounds fine. Can you please post the updated text since the details on how to use parent set as constraints may not be as straightforward? It is better to update the text and make the proposition more clear like you suggested.

Best,
Rahul

________________________________
From: Roll <roll-bounces@ietf.org> on behalf of Remous-Aris Koutsiamanis <aris@ariskou.com>
Sent: Wednesday, October 30, 2019 2:31 PM
To: Routing Over Low power and Lossy networks <roll@ietf.org>
Subject: Re: [Roll] NSA extn review

Hello Rahul,

thank you so much for these comments and sorry for taking so long to answer.

I have some responses inline.

On Fri, Sep 27, 2019 at 3:27 AM Rahul Jadhav <nyrahul@outlook.com<mailto:nyrahul@outlook..com>> wrote:
Hello, Authors of NSA-extension,

I agreed to review the document in IETF105 and would like to provide my comments.

But before going into details, will it be possible to upload the XML version of the draft to the datatracker? Unlike other drafts, I do not see the XML form of this draft! Also, it would be much efficient if we sync using GitHub repo (where I can send PR for you to review).
I have just created a new repository as part of the ROLL WG github account called draft-ietf-roll-nsa-extension<https://github.com/roll-wg/draft-ietf-roll-nsa-extension>.
It contains the up-to-date draft XML file. Feel free to post PRs and we will quickly handle them.


My primary point of discussion would be the way MRHoF is handled in the draft.
The current text/OF described in the document seems insufficient.
MRHOF makes sense only for metrics that are additive in nature. The CAOFs presented in the document are not additive, and the text simply tries to somehow fit MRHOF in the context.
So I think maybe this is probably a misunderstanding.
The draft proposes two things:
1. An extension to the DIO DAGMC NSA object to include a subset of the sorted parent set (PS) of a node.
2. A set of Objective Functions, modeled around MRHOF, which take into account the PS in DIO messages to aid in alternative parent selection.
The key here is that the document requires the container DIO DAGMC NSA object to be a constraint, not a metric.
The basic idea is this, have an OF that functions identically to MRHOF, using any additive metric to calculate the rank of parents in the parent set, but filter out potential parent in the parent set for use as alternative parent using the DIO DAGMC NSA PS information.
So, the only-additive-metrics requirement in MRHOF is not disturbed at all, since for both preferred parent and alternative parent, the rank calculation is the same as MRHOF.
The extra constraint is only for filtering out alternative parents.

Does this make sense?
Maybe we could explain it in a clearer way?

In the text we say "In general, these OFs extend MRHOF by specifying how an AP is selected. The selection of the PP is kept the same as in MRHOF."
Maybe we should also note that the rank calculation is not changed for both PP and AP?

The draft reserves different OCPs for different Common Ancestor Policies (Strict, Medium, Relaxed). I thought that the policies are local in nature and different nodes in the same instance could use different policies. If we use different OCPs, then this is not possible. It is impractical to assume that certain policies (such as CA Strict policy) can be enforced using OCP.
You are right, and we thought about this issue. On the one hand different OCPs mean exactly one one per RPL Instance, while the same means that you have no idea what version (Strict, Medium, Relaxed) your neighbors are running, in case you do care.
The policies are indeed local in nature, so in this case I assume the correct thing to do would be to reserve just one OCP, and if nodes want to include the version of CAOF used that can do it in another DIO field or using another mechanism (e.g. statically pre-configured).
We will change the draft to only request one OCP.

  The promiscuous overhearing assumes different security settings. I read the refed draft in 6tisch and it explains the assumptions, however, I believe it is better we explain the security implication of promiscuous overhearing in the security considerations in this draft.
I have no problem with this. Avoiding too much duplication of text was my general guiding principle, so where possible we pointed to other sources.
This, incidentally, is also why we opted to use MRHOF as a base upon which to build the CAOFs, instead of creating a full description.


Again, thanks so much Rahul for the comments.

We eagerly look forward to your reply.

Best,
Aris