Re: [spring] [Last-Call] Tsvart last call review of draft-ietf-spring-sr-replication-segment-14

Joel Halpern <jmh@joelhalpern.com> Fri, 16 June 2023 22:58 UTC

Return-Path: <jmh@joelhalpern.com>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F09DC151540; Fri, 16 Jun 2023 15:58:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.797
X-Spam-Level:
X-Spam-Status: No, score=-2.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=joelhalpern.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SvgFvSJc_QOl; Fri, 16 Jun 2023 15:58:53 -0700 (PDT)
Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87DBBC151546; Fri, 16 Jun 2023 15:58:53 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 4QjZMx26F4z1pdQF; Fri, 16 Jun 2023 15:58:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joelhalpern.com; s=2.tigertech; t=1686956333; bh=8lX4r4TlWqClh1HZQFAarsjqLXvKT9H23M7y15iS7mY=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=SgfiQ1lo4TiqbTx0VWWzUX1tWrXNsBUtkLuJSNjBD2SrthQk2cV+BPg9+JlkqDEPo ylu5vKu3hTmFqsVgNYNmlyng45ADBGrE3KyUUpknIZ/vyj2HFZcLIWJzH8Y3nMGRKO u6OzelbzxKiiUXPcg2RbjMUAoZzZFkvHb4E3Afc0=
X-Quarantine-ID: <mteCqP_fm7cH>
X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net
Received: from [192.168.22.80] (unknown [50.233.136.230]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 4QjZMw38FKz1nvPG; Fri, 16 Jun 2023 15:58:52 -0700 (PDT)
Message-ID: <e45960e3-bff1-f8d3-fc06-a4ae8420e978@joelhalpern.com>
Date: Fri, 16 Jun 2023 18:58:49 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.12.0
Content-Language: en-US
To: Wesley Eddy <wes@mti-systems.com>, tsv-art@ietf.org
Cc: draft-ietf-spring-sr-replication-segment.all@ietf.org, last-call@ietf.org, spring@ietf.org
References: <168694754378.21290.8223368158925884115@ietfa.amsl.com>
From: Joel Halpern <jmh@joelhalpern.com>
In-Reply-To: <168694754378.21290.8223368158925884115@ietfa.amsl.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/vlTr9g7RKTfh6yqFypoHviIkY4s>
Subject: Re: [spring] [Last-Call] Tsvart last call review of draft-ietf-spring-sr-replication-segment-14
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Jun 2023 22:58:57 -0000

I will leave it to the authors and shepherd to respond, including 
whether to add a reference for the pseudo-code in 2.2.1.

Just to save one piece of effort, the pseudo-code technique used here 
was introduced in RFC 8986, and is used in almost all the SRv6 related 
drafts / RFCs.  While I am not a fan of the particular formalism, it is 
what SRv6 uses, and so we all live with it.

Yours,

Joel

On 6/16/2023 4:32 PM, Wesley Eddy via Datatracker wrote:
> Reviewer: Wesley Eddy
> Review result: Almost Ready
>
> This document has been reviewed as part of the transport area review team's
> ongoing effort to review key IETF documents. These comments were written
> primarily for the transport area directors, but are copied to the document's
> authors and WG to allow them to address any issues raised and also to the IETF
> discussion list for information.
>
> When done at the time of IETF Last Call, the authors should consider this
> review as part of the last-call comments they receive. Please always CC
> tsv-art@ietf.org if you reply to or forward this review.
>
> (1) Since this defines a behavior where one incoming packet can create N
> outgoing packets, I was surprised that there is nothing mentioned in the
> security considerations about how access to replication nodes and ingress for
> them should be protected in order to prevent abuse.
>
> (2) The intended use seems mainly to be where some outer control system is
> responsible for making sure that the replication operation will put packets
> onto distinct network paths, and not create congestion either locally or on
> some potential shared network segment downstream.  It might be more clearly
> stated that it's assumed that building a proper multicast tree, managing group
> membership, and performing multicast congestion control need to be performed
> elsewhere.
>
> (3) I didn't recognize the syntax or pseudocode conventions in section 2.2.1;
> maybe this is common or defined somewhere else that could be referenced to be
> clear?
>
>