Re: [tcpm] Exceeding value in MSS option?

Michael Tuexen <Michael.Tuexen@lurchi.franken.de> Wed, 21 October 2020 09:20 UTC

Return-Path: <Michael.Tuexen@lurchi.franken.de>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9F823A13EE for <tcpm@ietfa.amsl.com>; Wed, 21 Oct 2020 02:20:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.613
X-Spam-Level:
X-Spam-Status: No, score=-1.613 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.275, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1HylP0bsAK1j for <tcpm@ietfa.amsl.com>; Wed, 21 Oct 2020 02:20:25 -0700 (PDT)
Received: from drew.franken.de (drew.ipv6.franken.de [IPv6:2001:638:a02:a001:20e:cff:fe4a:feaa]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1C7B3A13ED for <tcpm@ietf.org>; Wed, 21 Oct 2020 02:20:24 -0700 (PDT)
Received: from [IPv6:2a02:8109:1140:c3d:c439:9bc4:39b0:bf29] (unknown [IPv6:2a02:8109:1140:c3d:c439:9bc4:39b0:bf29]) (Authenticated sender: lurchi) by mail-n.franken.de (Postfix) with ESMTPSA id C8DE2721A642E; Wed, 21 Oct 2020 11:20:19 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
From: Michael Tuexen <Michael.Tuexen@lurchi.franken.de>
In-Reply-To: <9d31403a88944c5b97eedbe9a465de6d@hs-esslingen.de>
Date: Wed, 21 Oct 2020 11:20:19 +0200
Cc: Martin Duke <martin.h.duke@gmail.com>, "tcpm@ietf.org Extensions" <tcpm@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <5EA759EB-3ECF-4889-BCFC-762E58EE7B64@lurchi.franken.de>
References: <CAM4esxQzydPBTjVQvtp3766mCH5L65LdRSkFzQkdeKgUfhKacA@mail.gmail.com> <78558F1C-9194-4797-BE22-E553E1412E46@lurchi.franken.de> <7ded391321f94d0fb90fb5296de9fe43@hs-esslingen.de> <6AEBE48D-11BC-4837-BDB1-13E93CE11C84@lurchi.franken.de> <9d31403a88944c5b97eedbe9a465de6d@hs-esslingen.de>
To: "Scharf, Michael" <Michael.Scharf@hs-esslingen.de>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpm/ennPcaZvv5tYnOwuWeZ1D6kWGd8>
Subject: Re: [tcpm] Exceeding value in MSS option?
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2020 09:20:28 -0000

> On 21. Oct 2020, at 09:31, Scharf, Michael <Michael.Scharf@hs-esslingen.de> wrote:
> 
>>> On 20. Oct 2020, at 21:56, Scharf, Michael <Michael.Scharf@hs-
>> esslingen.de> wrote:
>>> 
>>> Hi all,
>>> 
>>> Sorry for the delayed reply. More inline...
>>> 
>>>>> On 19. Oct 2020, at 21:22, Martin Duke <martin.h.duke@gmail.com>
>> wrote:
>>>>> 
>>>>> Hello tcpm,
>>>>> 
>>>>> Section 4.2.2.6 of RFC 1122 is pretty clear that the TCP sender MUST
>>>> consider all IP and TCP options when sizing payloads with respect to the
>>>> advertised MSS option.
>>>>> 
>>>>> I'm reviewing a document that advises that some endpoints may want to
>>>> reduce their advertised MSS on IPv6 connections in case the peer isn't
>>>> respecting that guidance. Is noncompliance with this provision a problem
>> in
>>>> the internet? Are there middleboxes injecting options that cause PMTU
>>>> drops or fragmentation?
>>>> Hi Martin,
>>>> 
>>>> the document you are reviewing says:
>>>> 
>>>>  An IPv6 datagram size exceeding 1280 bytes can be avoided by setting
>>>>  the TCP MSS not larger than 1220 bytes.  This assumes that the remote
>>>>  sender will use no TCP options, aside from possibly the MSS option,
>>>>  which is only used in the initial TCP SYN packet.
>>>> 
>>>> The first sentence is correct. The second is not. I would suggest to simply
>>>> remove it.
>>> 
>>> The statements regarding the MSS were discussed and also rewritten many
>> times. And, sorry, apparently I have not carefully read the second sentence
>> (but, well, that sentence was also in the version of the draft that was last
>> called in TCPM...)
>>> 
>>> Given this discussion now, I agree that the second sentence could probably
>> be removed.
>>> 
>>>> Then the text says:
>>>> 
>>>>  In order to accommodate unrequested TCP options that may be used by
>>>>  some TCP implementations, a constrained device may advertise an MSS
>>>>  smaller than 1220 bytes (e.g. not larger than 1200 bytes).  Note that
>>>>  it is advised for TCP implementations to consume payload space
>>>>  instead of increasing datagram size when including IP or TCP options
>>>>  in an IP packet to be sent [RFC6691].  Therefore, the suggestion of
>>>>  advertising an MSS smaller than 1220 bytes is likely to be
>>>>  overcautious and its suitability should be considered carefully.
>>>> 
>>>> I read this as "use a smaller MSS", but this is "likely to be
>>>> overcautious and its suitability should be considered carefully."
>>>> 
>>>> I think the careful consideration is to remove this paragraph.
>>> 
>>> I am not sure if we should simply remove the whole paragraph, including
>> e.g. the reference to RFC 6691. Readers
>> The paragraph starts with:
>> 
>> In order to accommodate unrequested TCP options that may be used by
>> some TCP implementations, a constrained device may advertise an MSS
>> smaller than 1220 bytes (e.g. not larger than 1200 bytes).
>> 
>> I don't think the selection of the MSS should depend on TCP options.
>> A TCP stack may send an MSS option with a value lower then 1220, but
>> it should not do it due to any TCP options.
> 
> OK, thanks, now I actually get the point. Sorry, it was late yesterday. I agree. This is all what RFC 6691 is about.
No problem.
> 
> But I still wonder whether we should keep a reference to RFC 6691, given that this topic has repeatedly caused confusion.
That makes sense.
> 
>> That is the reason, why
>> I suggested to remove the paragraph.
> 
> What about the following shorter paragraph with three sentences:
> 
>   An IPv6 datagram size exceeding 1280 bytes can be avoided by setting
>   the TCP MSS not larger than 1220 bytes. Note that
>   it is advised for TCP implementations to consume payload space
>   instead of increasing datagram size when including IP or TCP options
>   in an IP packet to be sent [RFC6691]. Therefore, it is not required to
>   advertise an MSS smaller than 1220 bytes in order to accommodate
>   TCP options. 
> 
> Would that be reasonable?
Sounds reasonable. Much better than the original text.

Best regards
Michael
> 
> Michael
> 
>> 
>> Best regards
>> Michael
>> 
>>> of this document may not be aware of RFC 6691, so a pointer may be
>> useful, no? Also, during the IETF last call there was a discussion on MSS
>> values significantly smaller than 1220 byte. People apparently *do* think
>> about smaller MSS values on constrained devices and this document is a
>> place to provide guidance to that community (as far as possible). This specific
>> wording came up in earlier reviews of the draft, too. Thus, the final proposal
>> "likely to be overcautious and its suitability should be considered carefully" is
>> a result of several past discussions. IMHO we should carefully consider
>> changes to this statement...
>>> 
>>> BTW, personally, I really wonder if using an MSS of 1220 byte (for IPv6)
>> indeed causes real-world problems on constrained devices, i.e., if in year
>> 2020 there is any real-world benefit of an MSS smaller than 1220 byte. But,
>> unfortunately, I don't have measurement data that would back a different
>> statement in the draft.
>>> 
>>> Michael
>>> 
>>>> Best regards
>>>> Michael
>>>> 
>>>> 
>>>> 
>>>> 
>>>>> 
>>>>> I have not heard of such problems, but thought I'd check with the
>>>> community to see if this precaution makes any sense at all.
>>>>> 
>>>>> Thanks,
>>>>> Martin
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> tcpm mailing list
>>>>> tcpm@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/tcpm
>>>> 
>>>> _______________________________________________
>>>> tcpm mailing list
>>>> tcpm@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/tcpm
>