Re: [secdir] secdir re-review of draft-ietf-mpls-residence-time-14

Greg Mirsky <gregimirsky@gmail.com> Thu, 02 March 2017 05:39 UTC

Return-Path: <gregimirsky@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF08E1293FE; Wed, 1 Mar 2017 21:39:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kmpEQHQQjC0d; Wed, 1 Mar 2017 21:39:56 -0800 (PST)
Received: from mail-oi0-x234.google.com (mail-oi0-x234.google.com [IPv6:2607:f8b0:4003:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B801F127077; Wed, 1 Mar 2017 21:39:56 -0800 (PST)
Received: by mail-oi0-x234.google.com with SMTP id 2so33995643oif.0; Wed, 01 Mar 2017 21:39:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=2e7a1jG6yEG14bdNfOsn6mSmItbq0R0BJfuNffwXg00=; b=qtUblWWUT+jAoBR4BFlB4GWR4IF+SUABJ4UkgheDNnlecuaETvLBUm85RoZzB4CPux QGkTWrkV/RCBhrMQaotiNH3Rgv0ZpSq0MbkAsqLJlRCZ7gACH+brRuFCDgANMgfCUf8Y zQxQLr2OHYXhhxePzU57cS4veAWhpImhA4w0EAjBE0Gi4H0vBDUvkfNaZDsxuauqaE9M bMtah4yi2HeXyu44HJUZH4ZYa8zhBRNO/2p0GrSPTGeWhYft9zPNUgN+tV+NRj2GhJCj /smYLGkRq3KM20OdKNkXW9THB+9oiDVCnW7EvcWgnV/V5P4K0oI57KhllNOEsCP7g8zP fFqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=2e7a1jG6yEG14bdNfOsn6mSmItbq0R0BJfuNffwXg00=; b=MNJZTrrwhbfnYKoHXkiQHVXunxBJSOqafWWRmg1+MCQ5LeZmFAg5YtPf/4/jgWTqnM y3I3hHXAgIptx/ifeJVE0W+0T5XMY3n+8zCElMlZeH+Xw4tofMhn4Ah8NW43Gp4BthEc k6Z4r7Jc88BQniiowQs8SmNqJY238YUSNzzIQu+IAi+sIw1lK11shsOvA3zRKOL+VkV0 QY7S6z37BMp8aekLb5v9dJ/wDDQtzkC6IP6+eCqcvyaZD2hgbEMF/Z917+wO53+uLaCm rdSUUmueNF3ieOnHMcKfCDR9wr0q6ntdYVu6NKr1jVRx7D4q72eTOwVAaepbMxxdFN7E NacA==
X-Gm-Message-State: AMke39kbakvGuTzcOKHotp6vAsgXX7iAl/ODnDFuMRFXLEZ1x0C7oOCp79v8/PMSgmqLjjNVZIjAegYOmMBjCA==
X-Received: by 10.202.114.77 with SMTP id p74mr6804666oic.44.1488433195847; Wed, 01 Mar 2017 21:39:55 -0800 (PST)
MIME-Version: 1.0
Received: by 10.157.21.21 with HTTP; Wed, 1 Mar 2017 21:39:55 -0800 (PST)
In-Reply-To: <20170301222133.GH30306@kduck.kaduk.org>
References: <20170301222133.GH30306@kduck.kaduk.org>
From: Greg Mirsky <gregimirsky@gmail.com>
Date: Wed, 01 Mar 2017 21:39:55 -0800
Message-ID: <CA+RyBmVJrHk5bfRpLmvKog_BbOOq4SFTbzSC-AKpuyrtp40edQ@mail.gmail.com>
To: Benjamin Kaduk <kaduk@mit.edu>
Content-Type: multipart/alternative; boundary="001a1134fd38e918700549b8db80"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/SyVFpMuxTeiNuKjvCVgL3TnXlsM>
Cc: draft-ietf-mpls-residence-time.all@ietf.org, "iesg@ietf.org" <iesg@ietf.org>, secdir@ietf.org
Subject: Re: [secdir] secdir re-review of draft-ietf-mpls-residence-time-14
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Mar 2017 05:39:59 -0000

Hi Ben,
sincerely appreciate your thorough review and the most helpful comments.
Please fine my answers in-line and tagged GIM>>.

Regards,
Greg

On Wed, Mar 1, 2017 at 2:21 PM, Benjamin Kaduk <kaduk@mit.edu> wrote:

> I previously reviewed the -12
> (https://www.ietf.org/mail-archive/web/secdir/current/msg07110.html);
> the -14 seems much improved.  On this re-read, I have a better sense
> of how the various TLVs and sub-TLVs fit together to achieve the
> goal of having the RTM-capable nodes identify each other and
> collaborate to account for residence time when processing timing
> packets.
>
> I have no security concerns with the document, as the updated
> security considerations address the concerns previously raised.
>
> However, there are a couple of issues that should probably block
> publication (but ought to be easy to resolve):
>
> Figure 7 appears to only be 31 bits wide, not 32 -- 'Type' is 7
> bits, 'Length' 8, 'I' 1, and 'Reserved' 15.  Presumably Type is
> intended to be the full 8 bits, given the assigned values in the
> registry.
>
GIM>> Great catch, thank you. Indeed, Type is 8 bits-long. Corrected for
-15 version.

>
> On page 16, second paragraph:
>
>    The ingress node MAY inspect the I bit flag received in each RTM_SET
>    TLV contained in the LSP_ATTRIBUTES object of a received Resv
>    message.  Presence of the RTM_SET TLV with I bit field set to 1
>    indicates that some RTM nodes along the LSP could be included in the
>    calculation of the residence time.  An ingress node MAY choose to
>    resignal the LSP to include all RTM nodes or simply notify the user
>    via a management interface.
>
> Is that supposed to be "included" or "excluded"?  My reading of the
> previous paragraph was that the I bit would be set when a node
> failed to compute the next RTM-capable node along the path, and of
> course, we expect normal operation to include the residence time for
> all RTM-capable nodes, so signalling potential inclusion is odd.
>
GIM>> I think that I've missed 'not' in that sentence. So it should be
Presence of the RTM_SET TLV with I bit field set to 1
   indicates that some RTM nodes along the LSP could *not *be included in
the
   calculation of the residence time.
I've made the change in -15. Would you agree that it makes text logical?

>
>
> I'll close off this review by noting that sections 4.3 through 4.6
> seem to all talk about how to use other protocols to indicate that
> RTM may be used and could perhaps be grouped into an intermediate
> subsection,

GIM>> Would sub-section with title be acceptable?
RTM Capability Advertisement in Routing Protocols


> wondering whether the "Type" and "Length" fields in
> Figure 2 are the same octets of the packet as in Figure 1,

GIM>> Yes indeed. Figure 1 displays generic TLV while Figure 2 displays
particular TLV, PTP.

> and
> repeating my as-yet unfulfilled intention to send further minor
> editorial patches to the authors.


> -Ben
>