Re: Connection Establishment

Henk Langeveld - NL <Henk.Langeveld@Sun.COM> Fri, 08 February 2002 00:10 UTC

Date: Fri, 08 Feb 2002 01:10:44 +0100
From: Henk Langeveld - NL <Henk.Langeveld@Sun.COM>
Subject: Re: Connection Establishment
To: tcp-impl@grc.nasa.gov
Message-id: <3C631784.1030908@Sun.COM>
Organization: IT Technology Office EMEA
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
X-Accept-Language: en-us
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 (CK-anonymous)
References: <200202061823.g16INNc03372@sunuk.UK.Sun.COM> <3C62F41F.802C2ED6@umkc.edu>
Sender: owner-tcp-impl@grc.nasa.gov
Precedence: bulk
Status: RO
Content-Length: 1378
Lines: 31

> Jeremy Harris - Network Service Providers Division wrote:
>>I believe that an HTTP GET which hits an in-kernel cache satisfies the
>>above constraints; the transaction can then be reduced to a minimum of
>>three packets.


David Nicol wrote:
> fascinating -- you're suggesting HTTP over datagrams.  Or at least
> acting like datagrams when all you really want is a datagram.  You
> can dispense with the connection when all you want is a datagram.

This is beginning to look like the DNS approach:  Just use udp
on the first attempt, and revert to tcp when the result would be
too large?

Frankly, given that one of the conditions given was sufficient
resistance/defence against DoS attacks,  I doubt this will ever
escape the lab.  A proper defence against DoS attacks is miserly
conduct with your resources, until you've established at least
some validity in the request - this will require a round trip from
server to client.

If you're going to allow initial datagrams carrying data, you'll
have to limit the size of that data, possibly using the same
constraints as the DNS udp/tcp switch referred to above.  You might
be thinking of a specific application for this web-service, where
you'd control the network stack of both client and server *and*
the network in between.  Then you've got your value-add network,
with your own application protocol - why use http?

Henk