Re: [tcpm] Fw:New Version Notification for draft-wang-tcpm-tcp-service-affinity-option-03.txt

Yoshifumi Nishida <nsd.ietf@gmail.com> Mon, 23 October 2023 06:45 UTC

Return-Path: <nsd.ietf@gmail.com>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D72CDC14EB19 for <tcpm@ietfa.amsl.com>; Sun, 22 Oct 2023 23:45:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IJQkbwItHTuc for <tcpm@ietfa.amsl.com>; Sun, 22 Oct 2023 23:45:20 -0700 (PDT)
Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07BA2C14CEF9 for <tcpm@ietf.org>; Sun, 22 Oct 2023 23:45:20 -0700 (PDT)
Received: by mail-wr1-x42f.google.com with SMTP id ffacd0b85a97d-32d8c2c6dfdso1872401f8f.1 for <tcpm@ietf.org>; Sun, 22 Oct 2023 23:45:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1698043517; x=1698648317; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=7tOx4pEIxhh14JaOsQ6KLwFf1QSt0MpTiMnDen1xkC8=; b=CRasvBEqJOZemcxqGWD2/4g7fbETkDHgrBJ6ud6gUPZ57saToYHRpySU7NwmEjaA7X A2vgsAo11DzBoKSAcbUFoBieRECxFTjxhgyFYcBUz0LwJPSiwVlLSvCyL2bK+frg3nYh T248wXk0YRNW7F16wGdPmOvcE8qs4w8wWxn7aPVzpxGHmAx34LocikH32/xg05zEP+zE u4OtEQ9zZETlK/KFDGQOCZhyzvTWm0LqomZBTYV72RdpbR2eOJyiD3HlxINl6S1PRdiR km8z2tQtnQmc/5/68XhUoGimmSz647qobcE9wILeDUw9NkMrdYZXwARspSq1yL3bGPj3 3F+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1698043517; x=1698648317; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=7tOx4pEIxhh14JaOsQ6KLwFf1QSt0MpTiMnDen1xkC8=; b=th4nIxJ/R4cl/X0MO4r/hw/FANe16HmPlcmy1cCd+3V/fcw1eG9TsJuBDKtHc6fWLz Z0x046d6ofZXG7PsNZTfw35b40clMLWhpZBommrvr6oJnN2xUicR4lYa3Mw/R0anBaB6 O8HeVlppFCWPti0PvmDvEX9xGsyvpJsexBj08/LFyRL3J3FtSWF6IWHbVSk/a+FkOLVY ZyB9ajecJ1yc5z47GQcsHWohty1+VHOIrwDKdpQAru9331EOnmqezPFcAmt0PdAU+kuH DnIXXhrH8ilPkTiBTQCUIQJhhsFnUji3G7uKbg+T4In/9sB3UhjURb4UcuJAEwfEFKA+ O/qA==
X-Gm-Message-State: AOJu0Yzh0ra0IwV5wEeO2+y1gc2/TaMPqaGZjI3i9MGzWfFGrD3R5V07 u8JAx3Xcc/Xb7EZyudgXIMvWEV6AP27nQjbhy9vhkqDu
X-Google-Smtp-Source: AGHT+IHbQRmKQyYLZZuVPftm3/SLR6FzNdqjGKkQLAywgcJNT7HFIfZXdRe2HLvGAYAMCttlhZOCDZf/YZZbh09H64g=
X-Received: by 2002:a5d:4d47:0:b0:32d:b06c:80b5 with SMTP id a7-20020a5d4d47000000b0032db06c80b5mr5689233wru.2.1698043517248; Sun, 22 Oct 2023 23:45:17 -0700 (PDT)
MIME-Version: 1.0
References: <tencent_97F9F912B6D44CC828B2B6A8F6033DE33907@qq.com>
In-Reply-To: <tencent_97F9F912B6D44CC828B2B6A8F6033DE33907@qq.com>
From: Yoshifumi Nishida <nsd.ietf@gmail.com>
Date: Sun, 22 Oct 2023 23:45:06 -0700
Message-ID: <CAAK044SCJNKtbct6qvDTcuuFfb=v144-Cc6hFNKvT=wOJKHnfw@mail.gmail.com>
To: Wei Wang <weiwang94@foxmail.com>
Cc: tcpm <tcpm@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a8a6e906085c903a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpm/FR593rnmZqeWn4sf8BVqUZDkofE>
Subject: Re: [tcpm] Fw:New Version Notification for draft-wang-tcpm-tcp-service-affinity-option-03.txt
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Oct 2023 06:45:23 -0000

Hi Wei,

Thanks for updating the draft.
I have several personal comments on this. As stated below, I am personally
thinking that clarifying the focus might be an important point for the
draft to proceed.
But, other folks might have different opinions. If you have any thoughts,
please share!

1: I am thinking that the draft needs to clarify the focus.
    If the focus is to inform the preferred address for the service to TCP
sender, I think the draft needs to mention how TCP layer will interact with
the entity that knows such information.
    Because I think transport protocols should not have such info by
itself.
    Or, if the focus of the draft is to migrate a TCP connection from one
address to another, I think service affinity will be just one use case.
    In this case, the title of the draft might need to be updated to
clarify it as well as other parts of the draft.

2: if the draft focuses on service affinity, I think the draft needs to
elaborate more on the differences between other solutions. Such as load
balancer, HTTP redirect, using DNS, etc.(as some folks already pointed out)
    Some say the proposed method can be done only with TCP, however,
affinity information will be outside of TCP.
    So, I personally think it won't be a TCP only solution and need to
utilize application level entities.

3: In any case, I think the draft needs to update the security parts.
Attackers can easily take over TCP connections if they can modify or insert
service affinity options.
    The proposed scheme should have a way to prevent it as this will be a
significant threat for TCP connections.

Thanks,
--
Yoshi

On Tue, Oct 17, 2023 at 1:06 AM Wei Wang <weiwang94@foxmail.com> wrote:

> TCPM WG:
>
>     We have uploaded a new version for draft-wang-tcpm-tcp-service-affinity-option.
> Since it has been presented on the IETF meeting for 2 times, we hope to
> put forward it further.
>     Any suggestions or comments are welcome!
>
> Best Regards,
> Wei
> China Telecom
> ------------------ Original ------------------
> *From:* "internet-drafts" <internet-drafts@ietf.org>;
> *Date:* Fri, Oct 13, 2023 09:45 AM
> *To:* "Aijun Wang"<wangaj3@chinatelecom.cn>;"Wei Wang"<
> weiwang94@foxmail.com>;
> *Subject:* New Version Notification for
> draft-wang-tcpm-tcp-service-affinity-option-03.txt
>
> A new version of Internet-Draft
> draft-wang-tcpm-tcp-service-affinity-option-03.txt has been successfully
> submitted by Wei Wang and posted to the
> IETF repository.
>
> Name:     draft-wang-tcpm-tcp-service-affinity-option
> Revision: 03
> Title:    Service Affinity Solution for TCP based Application in Anycast
> Situation
> Date:     2023-10-13
> Group:    Individual Submission
> Pages:    9
> URL:
> https://www.ietf.org/archive/id/draft-wang-tcpm-tcp-service-affinity-option-03.txt
> Status:
> https://datatracker.ietf.org/doc/draft-wang-tcpm-tcp-service-affinity-option/
> HTMLized:
> https://datatracker.ietf.org/doc/html/draft-wang-tcpm-tcp-service-affinity-option
> Diff:
> https://author-tools.ietf.org/iddiff?url2=draft-wang-tcpm-tcp-service-affinity-option-03
>
> Abstract:
>
>    This draft proposes a service affinity solution between client and
>    server based on the newly defined TCP Options.  This solution can
>    avoid the waste of resources caused by saving a large amount of
>    customer status data in the network equipment, and realize the
>    optimized scheduling of resources based on network conditions and
>    computing resources in the computing-aware traffic steering scenario,
>    so as to realize the reasonable operation of cloud network resources.
>
>
>
> The IETF Secretariat
>
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm
>