Re: [tram] Benjamin Kaduk's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT)

"Felipe Garrido (fegarrid)" <fegarrid@cisco.com> Mon, 08 July 2019 14:42 UTC

Return-Path: <fegarrid@cisco.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B81761201D6; Mon, 8 Jul 2019 07:42:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.5
X-Spam-Level:
X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=lIjIa9Cq; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=xQL5Q8s6
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fsBLXH9aJhJx; Mon, 8 Jul 2019 07:42:55 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D98C12018A; Mon, 8 Jul 2019 07:42:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12242; q=dns/txt; s=iport; t=1562596975; x=1563806575; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Ohpn1FmS6kocZ2tQ73rZl9WUp9Nuj97Xkx+5i9hgbRw=; b=lIjIa9CqojbmKWL67Q/79d/id87pg56/IFhqTBFoYd2x9WPkiG/5M7TK RuCoA1arPS6ZR+8TZ8VEtoxkFjEPDeEx6JXBifs8rgJRqcjffAnlaa6EV NDfdj9SMUSdpSE+l1MjDE26f4VI+k7+alTJwayBlyRM+nON0YMUTqhbQl U=;
IronPort-PHdr: 9a23:tCLlDxPh72Z19vd1IHMl6mtXPHoupqn0MwgJ65Eul7NJdOG58o//OFDEu6w/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETBoZkYMTlg0kDtSCDBj1IfHjdTY7EOxJVURu+DewNk0GUMs=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AIAACeVSNd/5ldJa1lDgwBAQEBAQIBAQEBBwIBAQEBgVMFAQEBAQsBgUNQA2pVIAQLKIQcg0cDhFKJdYJbl0aBLhSBEANUCQEBAQwBASMKAgEBhEACF4IhIzQJDgEDAQEEAQECAQVtijcMhUoBAQEBAgESEREMAQE3AQ8CAQgRAwECAQICJgICAjAVCAgCBA4FIoMAAYFqAw4PAQIMnl0CgTiIYHGBMoJ5AQEFgUZBgnIYghIDBoEMKAGLXheBQD+BEScfgkw+gmECAQIBgSoBEQIBCBaDCjKCJowegiMvm2YJAoIXhlaNLhuCLIchc4MZiiWUcI99AgQCBAUCDgEBBYFQOGdYEQhwFTsqAYJBgkEJGhSDOoUUhQQ7cgGBKIp4K4IlAQE
X-IronPort-AV: E=Sophos;i="5.63,466,1557187200"; d="scan'208";a="589313764"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Jul 2019 14:42:53 +0000
Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x68Egr3P001151 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 8 Jul 2019 14:42:53 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Jul 2019 09:42:52 -0500
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 8 Jul 2019 09:42:52 -0500
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 8 Jul 2019 09:42:51 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ohpn1FmS6kocZ2tQ73rZl9WUp9Nuj97Xkx+5i9hgbRw=; b=xQL5Q8s6aeLSP8QZ7HKpbSWy1d77/i+Vu9QRCPNe2mjLgfWxSchutD70riIPqyhm8fELBluKGuYfjYmRKa6//nWg/wqBYDpQeM+ERSsGsE2HnETYsFHhk2vASwfr6Pxl2yt54F103fG4r400crY5ao1FrupVE/p6lIhbSqD7ZQI=
Received: from SN6PR11MB2800.namprd11.prod.outlook.com (52.135.93.15) by SN6PR11MB3247.namprd11.prod.outlook.com (52.135.112.97) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.16; Mon, 8 Jul 2019 14:09:35 +0000
Received: from SN6PR11MB2800.namprd11.prod.outlook.com ([fe80::897:7870:e0c6:b2aa]) by SN6PR11MB2800.namprd11.prod.outlook.com ([fe80::897:7870:e0c6:b2aa%5]) with mapi id 15.20.2032.022; Mon, 8 Jul 2019 14:09:35 +0000
From: "Felipe Garrido (fegarrid)" <fegarrid@cisco.com>
To: Benjamin Kaduk <kaduk@mit.edu>
CC: "iesg@ietf.org" <iesg@ietf.org>, "draft-ietf-tram-stun-pmtud@ietf.org" <draft-ietf-tram-stun-pmtud@ietf.org>, "tram-chairs@ietf.org" <tram-chairs@ietf.org>, "tasveren@rbbn.com" <tasveren@rbbn.com>, "tram@ietf.org" <tram@ietf.org>
Thread-Topic: Benjamin Kaduk's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT)
Thread-Index: AQHVCZroxitzvIrR+0WCBXUGWDqVCaZzxlWAgAG/uACAN8t6gIAB1OYAgBGw2AA=
Date: Mon, 08 Jul 2019 14:09:34 +0000
Message-ID: <CA782C9C-4E48-4C7D-ACAD-92FB8AD07056@cisco.com>
References: <153791323613.5011.4854093713979605105.idtracker@ietfa.amsl.com> <6DB9C5F7-7150-431D-96D4-28594C918D31@cisco.com> <486F16F2-EE74-4ADE-89D8-4B69BEDB803E@cisco.com> <D526B162-A27A-46CC-99D0-213F52BC43BD@cisco.com> <060C02FE-9636-46C9-A4AA-FCB65C35E8B5@cisco.com> <20190627040011.GE18345@kduck.mit.edu>
In-Reply-To: <20190627040011.GE18345@kduck.mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1a.0.190609
authentication-results: spf=none (sender IP is ) smtp.mailfrom=fegarrid@cisco.com;
x-originating-ip: [2001:420:2280:1272:6501:8be9:d2b8:e11b]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a6bc3fec-b604-4e01-cc9d-08d703ade7de
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:SN6PR11MB3247;
x-ms-traffictypediagnostic: SN6PR11MB3247:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <SN6PR11MB3247C9E3EAA82711BB938F23C8F60@SN6PR11MB3247.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 00922518D8
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(39860400002)(396003)(366004)(136003)(346002)(51444003)(189003)(199004)(66446008)(8936002)(2171002)(66946007)(33656002)(66556008)(64756008)(6246003)(76176011)(2616005)(66476007)(66574012)(54906003)(316002)(6506007)(58126008)(53546011)(76116006)(81166006)(81156014)(53936002)(73956011)(8676002)(91956017)(4326008)(5660300002)(25786009)(486006)(86362001)(446003)(476003)(11346002)(71200400001)(71190400001)(229853002)(46003)(36756003)(6116002)(478600001)(6486002)(186003)(6512007)(6306002)(102836004)(7736002)(68736007)(256004)(14454004)(2906002)(966005)(14444005)(6436002)(305945005)(99286004)(6916009); DIR:OUT; SFP:1101; SCL:1; SRVR:SN6PR11MB3247; H:SN6PR11MB2800.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: K8pHP8nz6NNn4HQ5UgUDlS32RzQbVLRaJO81BjGdcdP01ScR2ebAUaWfeBhnSCM0xLN4RmNJgl7PhNl8dvkSxJJW15H3JE+iaVxWkqqx6uOcLa0F/pp+Gfbsv57TgHh6mVBICZHEx845XXDW4/MgmmMCYdr5tqfmIBN9BtTWNf/g2eLOKjtLtpHNWxWlGHJTzZvmo+zWtMo2Z5Fv3EdNeIOWk5E8JMRxcl4v8FkIByeJoa+cBz0Q4d88f/XbztWrcNOrQxh7rec7+lwpx0AYhZtmR+VpPNvPiMUzM5UD3kPKeUezaGAzRQECdmDAouytZ6DMDc4GmF9XTJ3ZGftAvfqn6/ir/s6YimflePzQxe5Ev4NdvSiA7O4F4LQVNfjOPaoSH+Rq7bEPL/PqKT3NupHh6rlVOC5U7WxISSgmsF4=
Content-Type: text/plain; charset="utf-8"
Content-ID: <5EF78D3D0869EF408E5D1F17ED41AAD3@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: a6bc3fec-b604-4e01-cc9d-08d703ade7de
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 14:09:34.9468 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: fegarrid@cisco.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB3247
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.30, xch-aln-020.cisco.com
X-Outbound-Node: rcdn-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/bsNRSSSTE5rfYupnN1qVyG--pFw>
Subject: Re: [tram] Benjamin Kaduk's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT)
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jul 2019 14:42:59 -0000

Hi Ben, 

Totally agree now that I've re-read it. 

Here's the new proposed wording. 

"The packets that are to be associated to an identifier are selected according to Section 5.2 of [RFC4821]."

Here's the full text. 

A server supporting this specification will keep the identifiers of
all packets received in a chronologically ordered list.  The
packets that are to be associated to an identifier are selected 
according to Section 5.2 of [RFC4821]."

Thanks,
-Felipe

On 6/27/19, 12:00 AM, "Benjamin Kaduk" <kaduk@mit.edu> wrote:

    Hi Felipe,
    
    Thanks for following up -- it looks like I filed away the original mail
    without responding to it, somehow(!)
    The Discuss point's resolution is fine; I just have one more question
    (inline).
    
    -Ben
    
    On Wed, Jun 26, 2019 at 04:01:58AM +0000, Felipe Garrido (fegarrid) wrote:
    > Hi Benjamin,
    > 
    > Just following up on my previous email. Let me know if the below response satisfies your comments.
    > 
    > Thanks,
    > -Felipe
    > 
    > From: "Felipe Garrido (fegarrid)" <fegarrid@cisco.com>
    > Date: Tuesday, May 21, 2019 at 11:59 AM
    > To: "kaduk@mit.edu" <kaduk@mit.edu>, "iesg@ietf.org" <iesg@ietf.org>
    > Cc: "draft-ietf-tram-stun-pmtud@ietf.org" <draft-ietf-tram-stun-pmtud@ietf.org>, "tram-chairs@ietf.org" <tram-chairs@ietf.org>, "tasveren@rbbn.com" <tasveren@rbbn.com>, "tram@ietf.org" <tram@ietf.org>
    > Subject: Benjamin Kaduk's Discuss on draft-ietf-tram-stun-pmtud-10: (with DISCUSS and COMMENT)
    > 
    > 
    > Hi Benjamin,
    > 
    > Apologies for the delay in responding, the current authors are having scheduling conflicts and have added me to address the current concerns. Please see my responses inline.
    > 
    > thanks
    > -Felipe
    > 
    > 
    > Benjamin Kaduk has entered the following ballot position for
    > draft-ietf-tram-stun-pmtud-10: Discuss
    > 
    > When responding, please keep the subject line intact and reply to all
    > email addresses included in the To and CC lines. (Feel free to cut this
    > introductory paragraph, however.)
    > 
    > 
    > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
    > for more information about IESG DISCUSS and COMMENT positions.
    > 
    > 
    > The document, along with other ballot positions, can be found here:
    > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-pmtud/
    > 
    > 
    > 
    > ----------------------------------------------------------------------
    > DISCUSS:
    > ----------------------------------------------------------------------
    > 
    > I was going to report the same thing as Adam, but will just say that I support his Discuss.
    > [FG]: I’ll be addressing this Discuss in Adam’s feedback.
    > 
    > I also have one other (also minor and easy to resolve) Discuss point:  Section 4.2.6 needs
    > to state what the Length field is measuring the length of.
    > [FG]: Agree that this is required. Adding the following text to Section 4.2.6.
    > “The Length field specifies the length in bytes of the sequence number and application data fields.”
    >
    > ----------------------------------------------------------------------
    > COMMENT:
    > ----------------------------------------------------------------------
    > 
    > I understand that this document inherently has to be incomplete and "vague",
    > since the procedure specified within is only meaningful in the context of a
    > STUN usage or other protocol.  But in general it seems like there could be
    > greater clarity even within the constraints that we must work under.  My
    > points are probably less interesting than the ones Adam raised already, though.
    > The only general observation in this space that I can offer is that some parts of
    > the text read as if only the Probe packets are going to be monitored for the
    > report (but this is clearly not the case given the document as a whole).
    > 
    > Section 4.2
    > 
    >   The Complete Probing mechanism is implemented by sending one or more
    >   Probe Indications with a PADDING attribute over UDP with the DF bit
    >   set in the IP header followed by a Report Request to the same server.
    >   A router on the path to the server can reject this Indication with an
    >   ICMP message or drop it.
    > 
    > nit: I don't think "this" is the right word; perhaps "each" would be
    > better.
    > 
    > 
    > 
    > [FG]: Agree, updates will be made.
    > 
    > Section 4.2.3
    > 
    >   A server supporting this specification will keep the identifiers of
    >   all packets received in a chronologically ordered list.  The packets
    >   that are to be associated to a list are selected according to
    >   Section 5.2 of [RFC4821].  [...]
    > 
    > 4821 doesn't talk about "list"s at all, and in fact the indicated section
    > seems to be talking more about where to store a PMTU value after it has
    > been determined, rather than what packets to be considering for a report.
    > So I'm pretty confused about what this sentence is trying to say.
    > 
    > 
    > 
    > [FG]: Agree. Updated wording to make the statement easier to read.
    > “The selection process specified in Section 5.2 of [RFC4821] is to be used to determine whether a packet is added with a list.”
    
    I still don't understand what "the selection process specified in Section
    5.2 of [RFC4821]" is -- can you point me to the text from RFC 4821
    describing the process in question?
    
    > Section 4.2.4
    > 
    > nit: I think that all instances of "the Probe Indication" should be
    > replaced with "a Probe Indication", in this section.
    > 
    > 
    > 
    > [FG]: Agree, updates will be made.
    > 
    > Section 4.2.5
    > 
    >   When using a checksum as a packet identifier, the client calculates
    >   the checksum for each packet sent over UDP that is not a STUN Probe
    >   Indication or Request and keeps this checksum in a chronologically
    >   ordered list.  The client also keeps the checksum of the STUN Probe
    >   Indication or Request sent in that same chronologically ordered list.
    >   The algorithm used to calculate the checksum is similar to the
    >   algorithm used for the FINGERPRINT attribute (i.e., the CRC-32 of the
    >   payload XOR'ed with the 32-bit value 0x5354554e [ITU.V42.2002]).
    > 
    > (editorial) It's pretty confusing to start out with the split between STUN
    > and non-STUN messages, only later to clarify that this is because the
    > FINGERPRINT is used for STUN messages.  So maybe:
    > 
    >  When using a checksum as a packet identifier, the client keeps a
    >  chronologically ordered list of the packets it transmits, along with an
    >  associated checksum value.  For STUN Probe Indication or Request packets,
    >  the associated checksum value is the FINGERPRINT value from the packet; for
    >  other packets a checksum value is computed using a similar algorithm to the
    >  FINGERPRINT calculation.
    > 
    > 
    > 
    > [FG]: Agree with changing of the language. It doesn’t change the content and easier to read.
    > 
    > Section 4.2.6
    > 
    >   When using sequence numbers, a small header similar to the TURN
    >   ChannelData header [...]
    > 
    > Probably want an informative reference for this header.
    > 
    > 
    > 
    > [FG]: Agree, updates will be made to reference.
    > Section 6.2
    > 
    > 6.2.  PMTUD-SUPPORTED
    > 
    >   The PMTUD-SUPPORTED attribute indicates that its sender supports this
    >   specification.  This attribute has no value part and thus the
    >   attribute length field is 0.
    > 
    > "this specification" is not sufficiently detailed to interoperate, so I
    > think this needs to be qualified as more like "supports this mechanism, as
    > incorporated into the STUN usage or protocol being used".
    > 
    > 
    > 
    > [FG]: Agree, updates will be made.
    > 
    > Section 7
    > 
    > The contents of the PADDING do not seem to be specified anywhere, so it
    > could in theory be used as a side channel to convey other information,
    > which has some potential privacy considerations.  Nowadays we tend to ask
    > for the value of the padding bytes to be deterministic (but validation
    > remains optional); I forget if there are STUN-specific considerations that
    > would discourage just setting them all to zero.
    > 
    > 
    > 
    > [FG]: Agree.  Adding language to state contents of PADDING.
    > “The padding bits MUST be set to zero on sending and MUST be ignored by the receiver.”
    > 
    > 
    > 
    > 
    >