Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-rfc6810-bis-03

David Mandelberg <david@mandelberg.org> Wed, 01 April 2015 02:44 UTC

Return-Path: <david@mandelberg.org>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1AA01A033B for <sidr@ietfa.amsl.com>; Tue, 31 Mar 2015 19:44:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hnVR_OyjVoho for <sidr@ietfa.amsl.com>; Tue, 31 Mar 2015 19:44:06 -0700 (PDT)
Received: from nm2-vm10.access.bullet.mail.bf1.yahoo.com (nm2-vm10.access.bullet.mail.bf1.yahoo.com [216.109.114.83]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31EAD1A1B95 for <sidr@ietf.org>; Tue, 31 Mar 2015 19:44:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1427856242; bh=nVvUCkqG0ufbYcfTy0AU2TtpFM5BTaw6IG/kI5MdgoI=; h=Date:From:To:Subject:In-Reply-To:References:From:Subject; b=umwwCylOVaoyCBusqFRNAD7JVOY5XN1UrrdAj5ixY1aXtHKMTu8gFg3v4zOhJj+/bU9f9MOQrcBjrhx0ljW8GSVGAWlfAGinMQpbuTE8MV5lauWrrDdorlPWZhis8DTIb0V846hRDtKh0g83QPnWJzrManvQMx8HtcDoud9Q6u07SyE5ULXZcMDyg0+HHXQ23PzRQqocDlb7zrGXEHq70E6dTWJYBYpvqQ7DuEGntopsS4AMd/me+tHFjLXI7mJXe08Y5MLbPOSPT15TbIsAFV9CAn+sy+6fEhoc7UZyXEQjFC24W1WdBPPDOHemZj85X4CngkbcQ9hkIMuu3mevZQ==
Received: from [66.196.81.158] by nm2.access.bullet.mail.bf1.yahoo.com with NNFMP; 01 Apr 2015 02:44:02 -0000
Received: from [98.138.226.242] by tm4.access.bullet.mail.bf1.yahoo.com with NNFMP; 01 Apr 2015 02:44:02 -0000
Received: from [127.0.0.1] by smtp113.sbc.mail.ne1.yahoo.com with NNFMP; 01 Apr 2015 02:44:02 -0000
X-Yahoo-Newman-Id: 368782.89180.bm@smtp113.sbc.mail.ne1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: ZNHEJs8VM1nC6XOq.qCKbxEnrERpwSPZpdoXF_x.Ads4lJM RwcLsm7S3sAKSMUbGuz36La.GnS06Nj.e4m2vDKENEyE1GoIlB8d6Yj.rlX8 2TFrVPbG1hs1uZwOToeSMC4aokyoZthTxXPPfFYjD7Lo0VmO43DJL4IlGEDq vyxHXJ_VBkKdaCMT69sAizqfoNeDhiT4iqvnTzvWXIEO3jF6ZEIQoa4rKkWG OmUg.N56mJrMVMt8seQqFDb2XiKUEyoxp6kEZxBdChCec0kvyuKC3V4lUMkv 896GZPeTNvlmajvl.pqR6Xrmfo30cVRYzYXsRgwCb1_tVJZV86VIN7yOV1gW t8Uekc7IKopydBhCAFmgLaUFUZSByEucTbJfAt62wUBbJxdHggVMJjZowjpF VyK8dYrfg1gnC.0rSXS1k8FLGfE9MFHGXagSY5JGPHF0dOQnDF38SOePAJff goyBpYzPFppz6Vf0DEZj.RafHR22_bo4ntv1tGAH0F7wv.T9FlsltUTZXeDW uscIChb5go8F.94OfynhSunP.bV4aCkofcgRdluks3S8SA.a5IKoZxcPj2ly ahc97v3pVV5j.GHhd8rfoMD9qiSJlkxei7lNtCPLbC44Y58yQvg--
X-Yahoo-SMTP: 4kJJK.qswBDPuwyc5wW.BPAQqNXdy5j09UNyeAS0pyOQ708-
Received: from secure.mandelberg.org (c-76-24-31-176.hsd1.ma.comcast.net [76.24.31.176]) by uriel.mandelberg.org (Postfix) with ESMTPSA id 439CA1C6095 for <sidr@ietf.org>; Tue, 31 Mar 2015 22:44:01 -0400 (EDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Date: Tue, 31 Mar 2015 21:44:01 -0500
From: David Mandelberg <david@mandelberg.org>
To: sidr@ietf.org
In-Reply-To: <D13889F3.2237A%oliver.borchert@nist.gov>
References: <D13889F3.2237A%oliver.borchert@nist.gov>
Message-ID: <048e9e0eb7a311408c1cb07d192c8894@mail.mandelberg.org>
X-Sender: david@mandelberg.org
User-Agent: Roundcube Webmail/0.7.2
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/sidr/-IDpf1a9-FpVyg5038cwrQf5Hhc>
Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-rfc6810-bis-03
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Apr 2015 02:44:08 -0000

On 2015-03-25 16:13, Borchert, Oliver wrote:
> A correction for my previous email, I mixed up session id and serial
> number.
> I think to keep it simple for version 0 - 1 switches and future 
> changes, a
> change
> Within the session id and version id should trigger a “Cache Reset” 
> by the
> cache
> And the client must resynch with the server.

If the router sends a serial query, yes I agree.

> And yes, wording in this matter might need to be added - but still it 
> also
> could
> Be an implementation issue.

After talking with you in Dallas, I agree that we should try to give 
implementors some leeway here. I still think there's an issue to address 
though. Here's the case I want to prevent:

1. Router has all the data for version 0, session X, serial Y.
2. Router upgrades to version 1, disconnects, reconnects, and sends a 
serial query with version = 1, session = X, and serial = Y.
3. Cache replies with all the changes from (1, X, Y) to (1, X, Y+1), 
instead of from (0, X, Y) to (1, X, Y+1).

As you pointed out in person, one way to avoid this is for the cache to 
give each router a different session ID and track which version is used 
by each router. Then the cache can respond in step 3 with the changes 
from (0, X, Y) to (1, X, Y+1). Another way to avoid this is the first 
part of what I originally suggested: effectively requiring the cache to 
respond with a cache reset in step 3. Or the second part of what I 
suggested: requiring the router to issue a reset query instead of a 
serial query in step 2. I'm having trouble coming up with *simple* text 
that prevents the issue while allowing any solution. If you can think of 
something, that would be great. Otherwise, I'd prefer to at least pick 
one of the solutions that does not require a cache to track its routers 
individually.

-- 
David Eric Mandelberg / dseomn
http://david.mandelberg.org/