Re: [RTG-DIR] RtgDir review: draft-ietf-6tisch-architecture-21.txt

"Pascal Thubert (pthubert)" <pthubert@cisco.com> Mon, 24 June 2019 12:50 UTC

Return-Path: <pthubert@cisco.com>
X-Original-To: rtg-dir@ietfa.amsl.com
Delivered-To: rtg-dir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC2CE120179; Mon, 24 Jun 2019 05:50:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=DCwYqhpf; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=keI4rXq4
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0M6YOUCMT9aI; Mon, 24 Jun 2019 05:50:27 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6293120098; Mon, 24 Jun 2019 05:50:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23503; q=dns/txt; s=iport; t=1561380626; x=1562590226; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=c8Wi6jyndVXeIvkHefKfEkLqMhLzrQ3jwkzwlqzLEOw=; b=DCwYqhpfLmJplU3DRY2TWpOWCc3swytoB1GOeM0GH+1H3WedM1dhS0Dz MYJCswIjLi4oy4JkU6HzdBgBvBWUkOM8L+17eYhEcoRg0wg4XxBZQaUPX E4+7p7n/aLoqsaIJZRWjHBbSWKDJzkPZ9w3Fq2SxElt7iAbTMBSaFgUaq 8=;
IronPort-PHdr: 9a23:jbLhrRSBFpfWZYfUk22tWr6kQNpsv++ubAcI9poqja5Pea2//pPkeVbS/uhpkESXBNfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH15g640NmhA4RsuMCEn1NvnvOjQmHNlIWUV513q6KkNSXs35Yg6arw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CcAQCjxhBd/4ENJK1lHgEGBwaBUwkLAYFDUAOBPyAECygKhAyDRwOOYYJbiUWJEwyEVIEuFIEQA1QJAQEBDAEBLQIBAYRAAheCVSM0CQ4BAwEBBAEBAgEFbYo3DIVLAQEDARIRHQEBNwEECwIBCBItAwICAh8RFAMOAgQOBRsHgwCBHk0DDg8BAgGXTQKBOIhfcYExgnkBAQWEeg0LghEJgTQBhHCEJHaBUxeBQD+BEScfgkw+ghqBbiSDIjKCJowAgh8vhHmIVY0yPwkCghSIToJhhEWDbhQHgiiHDYhIgUSEBo5Vh22NZwIEAgQFAg4BAQWBUDiBWHAVZQGCQYJBDBeDTYpTcoEpjScBgSABAQ
X-IronPort-AV: E=Sophos;i="5.63,412,1557187200"; d="scan'208,217";a="578984069"
Received: from alln-core-9.cisco.com ([173.36.13.129]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Jun 2019 12:50:25 +0000
Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id x5OCoOtl009011 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 24 Jun 2019 12:50:25 GMT
Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 24 Jun 2019 07:50:24 -0500
Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 24 Jun 2019 07:50:23 -0500
Received: from NAM05-DM3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 24 Jun 2019 08:50:23 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=c8Wi6jyndVXeIvkHefKfEkLqMhLzrQ3jwkzwlqzLEOw=; b=keI4rXq4Z9tiNpfV0vs/8TfVSSp0Eagwz1sCc57d+ji85Y7KG+nhC+uPLIBOsQDBGvqAv/CmzIpb7SGcpURLp8cgbv1Lh6dkhjU4ASfbdnByCLUUIKqUiLs6rpy2cUqBLz7y0tL86lMsIRCijt9NqSW8Rh7h78XT/otY2rKUoyg=
Received: from MN2PR11MB3565.namprd11.prod.outlook.com (20.178.250.159) by MN2PR11MB3614.namprd11.prod.outlook.com (20.178.250.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2008.17; Mon, 24 Jun 2019 12:50:20 +0000
Received: from MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::1ce9:1582:146c:c50a]) by MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::1ce9:1582:146c:c50a%6]) with mapi id 15.20.2008.014; Mon, 24 Jun 2019 12:50:20 +0000
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: "Andrew G. Malis" <agmalis@gmail.com>
CC: "<rtg-ads@ietf.org>" <rtg-ads@ietf.org>, "rtg-dir@ietf.org" <rtg-dir@ietf.org>, "draft-ietf-6tisch-architecture.all@ietf.org" <draft-ietf-6tisch-architecture.all@ietf.org>, "6tisch@ietf.org" <6tisch@ietf.org>
Thread-Topic: RtgDir review: draft-ietf-6tisch-architecture-21.txt
Thread-Index: AQHVKHhN2/HVBDnJh0K18wKrXZJX1aaqXpvwgABkVYCAAALiYQ==
Date: Mon, 24 Jun 2019 12:50:20 +0000
Message-ID: <EC0A7982-5AD9-4DE7-AA83-5D57C447BDD1@cisco.com>
References: <CAA=duU12f2eqQZsOAkm_LVR63Y1AXgruokm=eH9MVz-+mPZ_jA@mail.gmail.com> <MN2PR11MB3565C4B48980A0E4463C7206D8E00@MN2PR11MB3565.namprd11.prod.outlook.com>, <CAA=duU2TPEycinyFPFM7GEZyhNcEArPZk++vXcixYMqQ7W_b=w@mail.gmail.com>
In-Reply-To: <CAA=duU2TPEycinyFPFM7GEZyhNcEArPZk++vXcixYMqQ7W_b=w@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pthubert@cisco.com;
x-originating-ip: [91.69.164.91]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 14d97f50-005d-4e62-421d-08d6f8a28450
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:MN2PR11MB3614;
x-ms-traffictypediagnostic: MN2PR11MB3614:
x-microsoft-antispam-prvs: <MN2PR11MB36142570276A2FB363C7E38DD8E00@MN2PR11MB3614.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 007814487B
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(136003)(396003)(346002)(366004)(39860400002)(189003)(199004)(64756008)(66446008)(66556008)(66476007)(53936002)(71190400001)(71200400001)(6246003)(6436002)(36756003)(6916009)(66066001)(66946007)(73956011)(476003)(5660300002)(76176011)(66574012)(6116002)(54896002)(6512007)(236005)(76116006)(3846002)(14454004)(68736007)(86362001)(446003)(11346002)(2906002)(186003)(2616005)(5070765005)(26005)(478600001)(1411001)(102836004)(25786009)(33656002)(486006)(4326008)(6506007)(53546011)(14444005)(256004)(316002)(91956017)(6486002)(99286004)(7736002)(8676002)(81156014)(8936002)(229853002)(81166006); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3614; H:MN2PR11MB3565.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: OuO8ujGNqZxgUOK1Ca3pxoj4B83B4m1CYTNto40t1nagNejcp1/VFSnI5YK/adVRO5blvSCjdFcA8sobZa6rAyNfm1Ccsk5toZ7j3OOmCcL37Q6jU9By8fNLKaZwa15rIYLKfdJ+6bg2PnHL8LKphhj5fUayrbzLDpzjtZ2s17EEd9lqGOdcIP7448NuJ3Q2Fu7lMYwRxcPFo2OWtBJbaayPmuI+YfNUmn9LgcZ+Y+BokhQt5b/ZIijAMs4KM5ICFYEHuxCTq9v7N6+M3+bzaHnF5eL8Q5d/hDw0NnK/DM9JatFtqlXcN1HEzJ++ORxj6U6+KcKIACs8EU8K+zJ03JujsxB1aY5Ww1KRy0Df3Zxq9d6ecUoE7NM8kzOyJSjAkeqhMZpCHw4WL50zYVf5YdaWb19Raelo/kMn0xyx9Zw=
Content-Type: multipart/alternative; boundary="_000_EC0A79825AD94DE7AA835D57C447BDD1ciscocom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 14d97f50-005d-4e62-421d-08d6f8a28450
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2019 12:50:20.6487 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pthubert@cisco.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3614
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.26, xch-aln-016.cisco.com
X-Outbound-Node: alln-core-9.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtg-dir/BkYdj2nRpdAm9DlizsUQOM4T6Bc>
Subject: Re: [RTG-DIR] RtgDir review: draft-ietf-6tisch-architecture-21.txt
X-BeenThere: rtg-dir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Routing Area Directorate <rtg-dir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtg-dir>, <mailto:rtg-dir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtg-dir/>
List-Post: <mailto:rtg-dir@ietf.org>
List-Help: <mailto:rtg-dir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtg-dir>, <mailto:rtg-dir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Jun 2019 12:50:30 -0000

Hello Andrew

Please see below

Le 24 juin 2019 à 14:40, Andrew G. Malis <agmalis@gmail.com<mailto:agmalis@gmail.com>> a écrit :

Pascal,

On Mon, Jun 24, 2019 at 4:24 AM Pascal Thubert (pthubert) <pthubert@cisco.com<mailto:pthubert@cisco.com>> wrote:
Hello Andrew:

Many thanks for your in-depth review.

Please see below:



>  The primary editor of this draft is also active in the DetNet working group, and leverages the work being done there to support the work in this draft. The draft does reference some DetNet technologies that have not yet been completely specified to the point where they can be implemented such as PREOF (Packet Replication, Elimination and Ordering Functions), although such specifications are an expected deliverable in the DetNet WG. So a full implementation of this architecture may have to wait for the completion of the related DetNet specification work.

<PT> Very true. Note that 6TiSCH was not chartered to deliver specifications to implement the deterministic side of the architecture. We hope to form RAW to do that, and RAW would inherit from DetNet’s specifications that are on the works now. At the architecture level, the reference we need is the DetNet architecture that introduces PREOFs, not the specs. And as you know, the DetNet architecture will be RFC before this. So I guess we do not have an issue there but rather a clear order in which things will get done, do we?

I wasn't aware that while deterministic delivery was in the architecture draft, it's not yet in the charter. Perhaps it should be made more explicit in the architecture. Right now, "deterministic" is everywhere in the draft, starting with the abstract.


Rightly so. The architecture was in the charter. We even had a data model chartered to configure tracks but we dropped the item. It was too early; even before DetNet formed. Instead some of us went in and helped form DetNet with a goal to inherit in a consistent way. Since we never rechartered for tracks. We feel that the RAW WG should do it.


> With respect to routing and forwarding, this draft builds upon the work already done in the 6lowpan WG, such as RPL for routing and 6lowpan header compression. It adds the necessary scheduling and time synchronization functions needed to support the TSCH aspects of IEEE 802.15.4, which is the point of this work. But other than these new aspects, routing and forwarding should continue to work to the extent that they work in the 6lowpan specifications. My one concern regarding IPv6 forwarding is the use of draft-svshah-tsvwg-lln-diffserv-recommendations in section 4.7.2. See my major issues below for more on this concern.

<PT> That will be entirely removed, please see below.

Thanks.


Major issues:

--------------

I'm concerned with the number of references to individual drafts (even if informational) in a major architecture specification, since the rest of the work on this technology, including solution documents, will rest on the correctness and completeness of the architecture. If these references are essential, then I would recommend that publication of the architecture be delayed until it's more clear whether these individual drafts will be adopted by a WG, and any abandoned individual drafts be removed. Otherwise, how can a published architecture depend on unpublished, abandoned work? Speaking of which, I note that one of those referenced drafts, draft-svshah-tsvwg-lln-diffserv-recommendations, hasn't been updated in over four years, and should either be removed or adopted by the 6tisch WG. Another, draft-thubert-bier-replication-elimination, hasn't been updated in over a year. Is it still alive? At least the remaining individual drafts have fairly recent updates.

<PT> Yes, the link to svshah-tsvwg-lln-diffserv-recommendations is not really used in the architecture, it’s more of a pointer to work that we thought years ago would happen at TSVWG and never did. DetNet never seemed to depend on it either. I should really have removed that link on my own in addition to the changes I did in reaction to Gorry’s review, it will be gone in -22. I’ll also remove what is section 4.8.3 in -21. Looking at the other non-WG doc references, I do not think that the same reasoning applies, but I’m happy to discuss that in more depth.

Of the other references, I'm most concerned about draft-thubert-bier-replication-elimination. It would be really good for both 6tisch and DetNet if you could work with the bier WG to get it active and adopted there.


Actually we are working on a RAW OAM spec and when published I could update the reference.


Minor issue:

To the extent that this architecture makes use of centralized control mechanisms such as PCE, the security considerations should mention this dependency and perhaps have a short discussion of effects on the network if connectivity between the centralized controller and the network nodes is lost, either due to an outage or a deliberate attack, and how such effects could be mitigated.

<PT> Makes sense to me. The inheritance from DetNet applies to both the protection of the control path and of the time distribution, which I’m discussing with David in parallel.
Proposed text:
”
The operation of 6TiSCH Tracks inherits its high level operation from DetNet and is subject to the observations in section 5 of [ietf-detnet-architecture]. As discussed there, measures must be taken to protect the time synchronization, and for 6TiSCH this includes ensuring that the ASN, which is used for the computation of NONCE,  is not compromised. Also, the installation and maintenance of 6TiSCH Tracks depends in the availability of a controller with a PCE to compute and push them in the network. When that connectivity is lost, existing Tracks may continue to operate until the end of their lifetime, but cannot be removed or updated, and new Tracks cannot be installed. As with DetNet in general, the communication with the PCE must be secured and should be protected against DoS attacks, and the discussion on the security considerations defined for Abstraction and Control of Traffic Engineered Networks (ACTN) applies equally to 6TiSCH.
“

Very nice, thanks!


Good I’ll publish to make sure the next reviewers see those corrections. I also updated the data tracker status to informational.


Many thanks !

Pascal

Cheers,
Andy