Re: [secdir] secdir re-review of draft-ietf-mpls-residence-time-14

Benjamin Kaduk <kaduk@mit.edu> Fri, 03 March 2017 01:44 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7C47129478; Thu, 2 Mar 2017 17:44:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.222
X-Spam-Level:
X-Spam-Status: No, score=-4.222 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kfu3Lb9TEjr7; Thu, 2 Mar 2017 17:44:14 -0800 (PST)
Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 806C71279EB; Thu, 2 Mar 2017 17:44:14 -0800 (PST)
X-AuditID: 1209190d-61fff70000007a3a-cc-58b8ca6ca9f8
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id 6E.9F.31290.C6AC8B85; Thu, 2 Mar 2017 20:44:12 -0500 (EST)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id v231iBKa008356; Thu, 2 Mar 2017 20:44:11 -0500
Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id v231i6ZY026556 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 2 Mar 2017 20:44:09 -0500
Date: Thu, 02 Mar 2017 19:44:06 -0600
From: Benjamin Kaduk <kaduk@mit.edu>
To: Greg Mirsky <gregimirsky@gmail.com>
Message-ID: <20170303014406.GL30306@kduck.kaduk.org>
References: <20170301222133.GH30306@kduck.kaduk.org> <CA+RyBmVJrHk5bfRpLmvKog_BbOOq4SFTbzSC-AKpuyrtp40edQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CA+RyBmVJrHk5bfRpLmvKog_BbOOq4SFTbzSC-AKpuyrtp40edQ@mail.gmail.com>
User-Agent: Mutt/1.6.1 (2016-04-27)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRmVeSWpSXmKPExsUixCmqrJtzakeEwd/5uhbf/+1jt/g27Smr xYw/E5ktPix8yOLA4rFz1l12jyVLfjIFMEVx2aSk5mSWpRbp2yVwZbSemsFUcF2o4uAS0wbG 1XxdjJwcEgImEnMmXmfqYuTiEBJoY5J49G8qlLOBUeJ190lGCOcKk8TV+Z+YQVpYBFQkdt+a zwRiswHZDd2XweIiAuoSnduOs4PYzAJZEufvdbOA2MICThKPfqxjBbF5gdZdePKADcQWEqiW 6Pu9jwUiLihxcuYTFoheLYkb/14CzecAsqUllv/jAAlzCgRKbDlzAaxVVEBZomHGA+YJjAKz kHTPQtI9C6F7ASPzKkbZlNwq3dzEzJzi1GTd4uTEvLzUIl0jvdzMEr3UlNJNjODAleTdwfjv rtchRgEORiUeXg37HRFCrIllxZW5hxglOZiURHmzTwCF+JLyUyozEosz4otKc1KLDzFKcDAr ifCm7QXK8aYkVlalFuXDpKQ5WJTEecU1GiOEBNITS1KzU1MLUotgsjIcHEoSvD0ngRoFi1LT UyvSMnNKENJMHJwgw3mAhrOfAhleXJCYW5yZDpE/xagoJc67D6RZACSRUZoH1wtKLBLZ+2te MYoDvSLM2wxSxQNMSnDdr4AGMwENfqGyFWRwSSJCSqqBUT933gr53Tc1fOUs958LmxltZp2o 6Nz2saKRd6XJwfoVut0bLt2du0dKWV+kMHJLesXa7r6/06aGL5BMfcqf4Vu14P28txeWxO1S LtzpttXmn7zZrsNNq9v9d7zd5dfleX69YLDgpUTXbwFbpOwd9XQvaPMXXKxQ3lG29mWOfQSP TMHposkPlFiKMxINtZiLihMByYyJQAcDAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/ekPG3iRZdf00IsW-V0v_pYrjLLo>
Cc: draft-ietf-mpls-residence-time.all@ietf.org, "iesg@ietf.org" <iesg@ietf.org>, secdir@ietf.org
Subject: Re: [secdir] secdir re-review of draft-ietf-mpls-residence-time-14
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Mar 2017 01:44:15 -0000

On Wed, Mar 01, 2017 at 09:39:55PM -0800, Greg Mirsky wrote:
> Hi Ben,
> sincerely appreciate your thorough review and the most helpful comments.
> Please fine my answers in-line and tagged GIM>>.
> 
> Regards,
> Greg
> 
> On Wed, Mar 1, 2017 at 2:21 PM, Benjamin Kaduk <kaduk@mit.edu> wrote:
> 
> >
> > On page 16, second paragraph:
> >
> >    The ingress node MAY inspect the I bit flag received in each RTM_SET
> >    TLV contained in the LSP_ATTRIBUTES object of a received Resv
> >    message.  Presence of the RTM_SET TLV with I bit field set to 1
> >    indicates that some RTM nodes along the LSP could be included in the
> >    calculation of the residence time.  An ingress node MAY choose to
> >    resignal the LSP to include all RTM nodes or simply notify the user
> >    via a management interface.
> >
> > Is that supposed to be "included" or "excluded"?  My reading of the
> > previous paragraph was that the I bit would be set when a node
> > failed to compute the next RTM-capable node along the path, and of
> > course, we expect normal operation to include the residence time for
> > all RTM-capable nodes, so signalling potential inclusion is odd.
> >
> GIM>> I think that I've missed 'not' in that sentence. So it should be
> Presence of the RTM_SET TLV with I bit field set to 1
>    indicates that some RTM nodes along the LSP could *not *be included in
> the
>    calculation of the residence time.
> I've made the change in -15. Would you agree that it makes text logical?

Yes, that seems much more logical.

> >
> >
> > I'll close off this review by noting that sections 4.3 through 4.6
> > seem to all talk about how to use other protocols to indicate that
> > RTM may be used and could perhaps be grouped into an intermediate
> > subsection,
> 
> GIM>> Would sub-section with title be acceptable?
> RTM Capability Advertisement in Routing Protocols

Yes, that sounds good.

> 
> > wondering whether the "Type" and "Length" fields in
> > Figure 2 are the same octets of the packet as in Figure 1,
> 
> GIM>> Yes indeed. Figure 1 displays generic TLV while Figure 2 displays
> particular TLV, PTP.

Ah, good to have that confirmed.

> > and
> > repeating my as-yet unfulfilled intention to send further minor
> > editorial patches to the authors.

(I am about halfway through typing them up.)

-Ben