Re: [Syslog] AD review discuss/comments for draft-ietf-syslog-dtls -DCCP and UDP

"David Harrington" <ietfdbh@comcast.net> Tue, 25 May 2010 03:39 UTC

Return-Path: <ietfdbh@comcast.net>
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F25A33A692B for <syslog@core3.amsl.com>; Mon, 24 May 2010 20:39:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.136
X-Spam-Level: **
X-Spam-Status: No, score=2.136 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FRT_STRONG2=1.535, J_CHICKENPOX_15=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d2kmQQWEhFl6 for <syslog@core3.amsl.com>; Mon, 24 May 2010 20:39:28 -0700 (PDT)
Received: from qmta15.emeryville.ca.mail.comcast.net (qmta15.emeryville.ca.mail.comcast.net [76.96.27.228]) by core3.amsl.com (Postfix) with ESMTP id 0EDB23A67EE for <syslog@ietf.org>; Mon, 24 May 2010 20:39:28 -0700 (PDT)
Received: from omta04.emeryville.ca.mail.comcast.net ([76.96.30.35]) by qmta15.emeryville.ca.mail.comcast.net with comcast id MY5P1e0060lTkoCAFffMpA; Tue, 25 May 2010 03:39:21 +0000
Received: from Harrington73653 ([207.59.110.215]) by omta04.emeryville.ca.mail.comcast.net with comcast id Mfey1e0024eszMr8Qff35B; Tue, 25 May 2010 03:39:19 +0000
From: David Harrington <ietfdbh@comcast.net>
To: "'t.petch'" <ietfc@btconnect.com>, jsalowey@cisco.com, 'Chris Lonvick' <clonvick@cisco.com>
References: <002f01caf9ce$1c28de20$4001a8c0@gateway.2wire.net>
Date: Mon, 24 May 2010 23:38:56 -0400
Message-ID: <093f01cafbbb$da81b470$0600a8c0@china.huawei.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <002f01caf9ce$1c28de20$4001a8c0@gateway.2wire.net>
Thread-Index: Acr53DDHyOvFQXIhTZCZb1hCmtLy2gBkxFew
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Cc: 'syslog' <syslog@ietf.org>
Subject: Re: [Syslog] AD review discuss/comments for draft-ietf-syslog-dtls -DCCP and UDP
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>, <mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>, <mailto:syslog-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 May 2010 03:39:29 -0000

Hi,

Lars provided advice quite a while back. I concur with his advice.

Implementers MUST implement support for DCCP (which should require
minimal changes from support for UDP),
so that if DCCP is available, and the operator chooses to use DCCPP,
the implementation will work with DCCP.

I view this as very similar to our standard security posture - stroing
security is MUST implement, so it is available if the operator wants
it. The operator is not required to use it.

dbh
 

> -----Original Message-----
> From: syslog-bounces@ietf.org 
> [mailto:syslog-bounces@ietf.org] On Behalf Of t.petch
> Sent: Saturday, May 22, 2010 12:44 PM
> To: jsalowey@cisco.com; Chris Lonvick
> Cc: syslog
> Subject: [Syslog] AD review discuss/comments for 
> draft-ietf-syslog-dtls -DCCP and UDP
> 
> Another issue that came up from the IESG is the relative 
> roles of UDP and DCCP
> as a substrate.  In this context, the discussions on tsvwg 
> which Lars is
> steering about SCTP, DCCP and UDP make interesting reading, with
some
> contributors asserting that the only way to get a packet 
> through a complex
> network is with UDP, that SCTP and DCCP are (comparative) 
> failures that just
> don't get recognised widely enough.
> 
> Certainly my (limited) view is that UDP is the MUST HAVE, the 
> one that will give
> maximum interoperability so while DCCP is technically 
> superior, making it the
> MUST implement will simply cause this I-D to be ignored by most.
> 
> I haven't seen any response from Lars on this issue.
> 
> Tom Petch
> 
> _______________________________________________
> Syslog mailing list
> Syslog@ietf.org
> https://www.ietf.org/mailman/listinfo/syslog
>