Re: [tcpm] timestamp options (was Re: New Version Notification for draft-touch-tcpm-tcp-edo-01.txt)

Joe Touch <touch@isi.edu> Mon, 02 June 2014 18:09 UTC

Return-Path: <touch@isi.edu>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8720B1A034E for <tcpm@ietfa.amsl.com>; Mon, 2 Jun 2014 11:09:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.551
X-Spam-Level:
X-Spam-Status: No, score=-2.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.651] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gD_0brdkJ7D7 for <tcpm@ietfa.amsl.com>; Mon, 2 Jun 2014 11:09:43 -0700 (PDT)
Received: from darkstar.isi.edu (darkstar.isi.edu [128.9.128.127]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90D581A0341 for <tcpm@ietf.org>; Mon, 2 Jun 2014 11:09:43 -0700 (PDT)
Received: from [192.168.1.93] (pool-71-105-87-112.lsanca.dsl-w.verizon.net [71.105.87.112]) (authenticated bits=0) by darkstar.isi.edu (8.13.8/8.13.8) with ESMTP id s52I7BbY017185 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 2 Jun 2014 11:07:14 -0700 (PDT)
Message-ID: <538CBD52.6050209@isi.edu>
Date: Mon, 02 Jun 2014 11:07:14 -0700
From: Joe Touch <touch@isi.edu>
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: mallman@icir.org
References: <20140602175057.1216F780B80@lawyers.icir.org>
In-Reply-To: <20140602175057.1216F780B80@lawyers.icir.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: touch@isi.edu
Archived-At: http://mailarchive.ietf.org/arch/msg/tcpm/Zy74XuNjPtDFZ0lHS8zvvyYEcvw
Cc: "tcpm@ietf.org" <tcpm@ietf.org>
Subject: Re: [tcpm] timestamp options (was Re: New Version Notification for draft-touch-tcpm-tcp-edo-01.txt)
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jun 2014 18:09:44 -0000


On 6/2/2014 10:50 AM, Mark Allman wrote:
>
>> Late negotiation has too many problems, as have been repeatedly
>> raised on this list:
>>
>> 	- prevents use of the timestamp to help address PAWS for
>> 	the initial SYN
>
> In the limit you're right that it is better to have a stronger
> indication that the arriving SYN / SYN+ACK is not way old.  It is hard
> to argue against such an ideal.  But, we run a whole bunch of
> connections without timestamps today and it doesn't seem to have caused
> us a whole bunch of problems.  So, while I can see your point I think it
> is pretty esoteric.
>
> Also, I'd like to know if OSes actually do consult the TS value in the
> 3WHS to try to hunt for old packets.  I have no idea.  Does anyone know?
> (Either answer wouldn't surprise me, actually.)

The TWHS establishes the TS for the new connection, which means old 
packets will be seen as old and discarded by TS processing.

>> 	- a new connection that either avoids TS in SYN or
>> 	uses just "use TS" (two-byte) flag can't know when
>> 	to engage the timestamp and what initial value to use
>
> This is just bogus.  On both counts.

FWIW, I'm saying that receiver has these problems. You're correct that 
the first TS value in an *acked* segment should be the one used and that 
the sender can know when to turn it on.

However, what if the receiver doesn't support TS at that point? How does 
it say so? At the least, TS-capable must be negotiated during the TWHS.

One question is - how many connections use TS that don't expect to use 
long connections or large numbers of connections where the sequence 
number wrap is an issue?

Joe