Re: [Spud] related draft in TSVWG

Tom Herbert <tom@herbertland.com> Mon, 27 June 2016 23:34 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: spud@ietfa.amsl.com
Delivered-To: spud@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A71B412DA0D for <spud@ietfa.amsl.com>; Mon, 27 Jun 2016 16:34:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iOFmqS77Hv1z for <spud@ietfa.amsl.com>; Mon, 27 Jun 2016 16:34:50 -0700 (PDT)
Received: from mail-io0-x230.google.com (mail-io0-x230.google.com [IPv6:2607:f8b0:4001:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6E0012D92B for <spud@ietf.org>; Mon, 27 Jun 2016 16:34:49 -0700 (PDT)
Received: by mail-io0-x230.google.com with SMTP id g13so2644838ioj.1 for <spud@ietf.org>; Mon, 27 Jun 2016 16:34:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=/pXFWhEIBmUmij7VukjAjN2ff+fcXynodXuiAmaMOSU=; b=lfJlfKH0ZAFIH/qX12BadAGR1qded0gKZ/qOJzWaVZX20jyNg4gyp3OymjdNy0+p3o W6LGtRAXZsGkIbV3SChvo1/F8hePlEh7EXdVmx/KkgZ0wUtjZUJvewzHeB7aeWyYUFU5 2Q3FRqkC8umcz/pb93sb2ICyHv5r/+aOO6T/c4bVlIn5eKe3R6CgeE2oIRPMvYx+CKCU cQIJLxbLmOCZqgzWwe6DljL97dw+f1o+QpkhrUTBCT5M7tEnXTJk/3AvCxr/gNS9cThj +9VUgiQXJenvKjdilIGL+Bt74H+UviOl2A+0G8ttth+fh3aOXFVDukIThGSi79srhBqq NMyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=/pXFWhEIBmUmij7VukjAjN2ff+fcXynodXuiAmaMOSU=; b=Yf5n737A3sguNhAwjdH0D7ZNmlvll5OSLZPJaVR8SukyNP6huMIH2hSPSX9N/gnwCq 5MzZ1rF4L4x5F+J4LY79vnVT34fbfJNt7DLiZ8YX6PmfeZ7/9YEXtLN8QiPIVVWYF2s0 nknZAvukJq7tVVPiLDj4F+dUsPv7EaBDXqibfOgRK6j5VWxWBV5Q4ZWQhgzwIgMG5ZPV kYsqTuOzA87/tTS9aY7prje30XXD8GJRDlT7ax1veRGLKcXALxZD2WCPoWtJaZTR5xjp /PI6Y+BzcSFW3xplBYJyXB9KS+H/zGVvoi2JfULopfgboYCv4BqHKSVVRAuwJVNiS6X5 YG9A==
X-Gm-Message-State: ALyK8tLjmVpZ71MDXSaoUJdDaUbaCHUduOazSw+BuPHWrftwdAZ0uSMRHgvs9CNs3oE4IugDGcZIGpBp2KVU/A==
X-Received: by 10.107.162.12 with SMTP id l12mr423938ioe.84.1467070489138; Mon, 27 Jun 2016 16:34:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.31.134 with HTTP; Mon, 27 Jun 2016 16:34:48 -0700 (PDT)
In-Reply-To: <5771B2E9.6030304@isi.edu>
References: <57719746.6030304@isi.edu> <CALx6S34KiyVHs74TWhM=meypbB7BWkeJD-t_P76ZtkRY3Y+LXg@mail.gmail.com> <5771B2E9.6030304@isi.edu>
From: Tom Herbert <tom@herbertland.com>
Date: Mon, 27 Jun 2016 16:34:48 -0700
Message-ID: <CALx6S37Y4U7ueDaZDdXyrSWvMF=TR6qZK18qS_XWGQ6caD3A=w@mail.gmail.com>
To: Joe Touch <touch@isi.edu>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spud/p8GiOrKz0Pwa2QPmFo2zpBvDbXw>
Cc: Aaron Falk <aaron.falk@gmail.com>, Natasha Rooney <nrooney@gsma.com>, spud <spud@ietf.org>
Subject: Re: [Spud] related draft in TSVWG
X-BeenThere: spud@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Session Protocol Underneath Datagrams <spud.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spud>, <mailto:spud-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spud/>
List-Post: <mailto:spud@ietf.org>
List-Help: <mailto:spud-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spud>, <mailto:spud-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Jun 2016 23:34:52 -0000

> First, yes, if this were a strict requirement, than UDP implementations
> would discard UDP segments that were smaller than the IP payload -- in
> practice, they don't.
>
I would not be at all surprised if there are middle boxes that either
drop such packets or truncate them to UDP length in the name of
security.

> The good news is that there are no known specs (at least none I've heard
> of yet or know of otherwise) that use this trick except:
>
> a) UDP-lite, which uses a different transport protocol number and has
> different semantics
>     in UDP-lite, the entire IP payload is treated as the UDP payload,
> which isn't compatible with RFC768
>
>     i.e., it basically delivers both what UDP considers the payload AND
> the extended area to the app layer
>
> b) there's a defensive patent that talks about this, which we already
> know about but AFAIK never got beyond the though level
>
>     (it's the typical patent with permissions compatible with IETF
> standards, again AFAIK)
>
> This does appear to be the first system that will spec this out. We do
> include the new OCS (option checksum), which might help avoid accidental
> ambiguous use (I.e., UDP OCS ought to help avoid processing these other
> uses as UDP checksum).
>
You might want to look at magic numbers for this purpose also.
Unfortunately, similar to the idea of putting bits in UDP payload for
interpretation in the network, protocol correctness in this method is
only probabilistic. That is the best we could achieve is 99.999..%
correctness, not 100%.

> We can add text to address this issue, though we would appreciate also
> knowing if anyone is aware of existing uses other than the two above.
>
Probably should also expressly forbid the network to modify options in
flight, that is where things get really scary in the above ambiguous
identification problem.

Tom

> Joe
>
>>
>> Tom
>>
>>> NOTE: I'm not sure what space makes the most sense; for on-path info,
>>> IMO IP is a more appropriate location than transport, but IF there is
>>> info that is useful to exchange at the transport layer in the header,
>>> this might be useful for UDP.
>>>
>>> It will be briefly presented by the chairs in TSVWG.
>>>
>>> FYI.
>>>
>>> Joe
>>>
>>> _______________________________________________
>>> Spud mailing list
>>> Spud@ietf.org
>>> https://www.ietf.org/mailman/listinfo/spud
>