Re: [tram] Suresh Krishnan's Discuss on draft-ietf-tram-stun-path-data-03: (with DISCUSS and COMMENT)

Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com> Fri, 01 July 2016 12:32 UTC

Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCF8912D5AB; Fri, 1 Jul 2016 05:32:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1qjtuQx_aTAj; Fri, 1 Jul 2016 05:32:16 -0700 (PDT)
Received: from mail-qk0-x232.google.com (mail-qk0-x232.google.com [IPv6:2607:f8b0:400d:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 185BA12D593; Fri, 1 Jul 2016 05:32:16 -0700 (PDT)
Received: by mail-qk0-x232.google.com with SMTP id t127so198588740qkf.1; Fri, 01 Jul 2016 05:32:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=sopJkiB4zHI8sI+7YgK8PYwg2Z6aRO2mmKT1DHale7M=; b=KKFZlNBK8b3QFXR66Cn88/JntFUick4qnr/BHTenWfCHeevI1imx2rAwWNcg4mmhx9 qHLg36/XsdWcyhl1bZuASVh5x6Hf43mu+VrLqkM1TD+/kSUUQj0ptrSP1ClzR16V6cy5 ACfUevH+7PmXYziwDmLpMKUk8rUF331N7KuCPUyG2My/HqVBmGXtsg4W7azPlUJ2UWj8 f0rnwTzWgTWc8jLwGH1Khbm0t5dmdJWXmf+ejAjTqbOM99PJpP6VP87azB3NkkpWFKfD VRUz96GueQ/LZ4PRIuFIUvJ5zsR9dRqgtUzuOan6y7LOzalqniXoQ41tAI2J/++hSDng GyUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=sopJkiB4zHI8sI+7YgK8PYwg2Z6aRO2mmKT1DHale7M=; b=SFJaxy6xzUz65yuxOLDWrhFvHLoDtrpVUUbxH1SETMrdCuIKBWkDP02oVpkuggohFr 7czghbmx1UBUKnkNckiSEGH0KxBwpZdZSdmQAco/aG7T/N560FmI4jdLXEa1I8GfHhHO gKE43ivJbCM7BmwOUtAtS3Oq5YJBwREtLG5jtsbv+BwpoogMrIEzU3+Yrp/sUGRy/Xvu 5tK5H+JLNJL2u9apPbtjV9G3hKg7cS4cRsKnSgXlfrAO3aw/axm3P9gBhMY0Shw2bl2P YmYdQpHjfaq/FEKkCHVnDT6F9H0VIJR5dEuR7ZoxDoh1L6pG4uz3RT/Pp6W+3ixNEwmx /yUA==
X-Gm-Message-State: ALyK8tJkKOrLX9oUF+3KMyfZhtPh2Jvvyzv/GjqhuxSxGvEaSrm0Qsk+ByjfQd9+GRqPalbELwhMyZZwwxlD3w==
X-Received: by 10.129.41.205 with SMTP id p196mr9188780ywp.64.1467376335166; Fri, 01 Jul 2016 05:32:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.125.134 with HTTP; Fri, 1 Jul 2016 05:32:14 -0700 (PDT)
In-Reply-To: <86EAFAE4-CB79-4E4B-8117-B7ED21B55048@cisco.com>
References: <20160420225843.780.83631.idtracker@ietfa.amsl.com> <86EAFAE4-CB79-4E4B-8117-B7ED21B55048@cisco.com>
From: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Date: Fri, 01 Jul 2016 07:32:14 -0500
Message-ID: <CAKKJt-fkyVuJHyN70SG_KWTyRg0JuMCURdY9cvjYgzhUz=F2ag@mail.gmail.com>
To: Suresh Krishnan <suresh.krishnan@ericsson.com>
Content-Type: multipart/alternative; boundary="001a1141461235a0420536922dca"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tram/p4bfe6lhgzekghmEvPvK8oHn3qo>
Cc: "tram-chairs@ietf.org" <tram-chairs@ietf.org>, "Pal Martinsen (palmarti)" <palmarti@cisco.com>, tram mailing list <tram@ietf.org>, Simon Perreault <sperreault@jive.com>, The IESG <iesg@ietf.org>, "draft-ietf-tram-stun-path-data@ietf.org" <draft-ietf-tram-stun-path-data@ietf.org>
Subject: Re: [tram] Suresh Krishnan's Discuss on draft-ietf-tram-stun-path-data-03: (with DISCUSS and COMMENT)
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Jul 2016 12:32:19 -0000

Hi, Suresh,

On Thu, Apr 21, 2016 at 2:16 AM, Pal Martinsen (palmarti) <
palmarti@cisco.com> wrote:

>
> > On 21 Apr 2016, at 00:58, Suresh Krishnan <suresh.krishnan@ericsson.com>
> wrote:
> >
> > Suresh Krishnan has entered the following ballot position for
> > draft-ietf-tram-stun-path-data-03: Discuss
> >
> > When responding, please keep the subject line intact and reply to all
> > email addresses included in the To and CC lines. (Feel free to cut this
> > introductory paragraph, however.)
> >
> >
> > Please refer to
> https://www.ietf.org/iesg/statement/discuss-criteria.html
> > for more information about IESG DISCUSS and COMMENT positions.
> >
> >
> > The document, along with other ballot positions, can be found here:
> > https://datatracker.ietf.org/doc/draft-ietf-tram-stun-path-data/
> >
> >
> >
> > ----------------------------------------------------------------------
> > DISCUSS:
> > ----------------------------------------------------------------------
> >
> > The RespTransCnt mechanism seems to be a bit fragile and error prone
> > possibly leading to wrong conclusions on the client (please see my
> > example below). If you agree with my assessment, it is probably useful to
> > evaluate whether the added complexity of this RespTransCnt mechanism is
> > worth it for the potentially unreliable results it produces.
> >
> > Consider the following two cases (copy paste with a monospace font for
> > better readability)
> >
> > Case 1: Upstream loss of first "re"transmission
> >
> > |  Upstream loss  |
> > |  Client  Server |
> > +-+-+-+-+-+-+-+-+-+
> > |  1         x    |
> > |                 |
> > |  2         2,1  |
> > |    2,1          |
> >
> > Case 2: Downstream loss of response to first "re"transmission with
> > re-ordering
> >
> > | Downstream loss |
> > |  Client  Server |
> > +-+-+-+-+-+-+-+-+-+
> > |  1         1,2  |
> > |    x            |
> > |  2         2,1  |
> > |    2,1          |
> >
> > How does the client differentiate between these two cases?
> >
> So the problem is that the first retransmit (second transmit) of the STUN
> request arrives before the initial transmit and the response to the initial
> request is lost downstream.
>
> This means not able to distinguish between upstream reordering and
> downstream loss. I do not think adding complexity to solve this is worth
> it. If ICE is using this, it is still valuable information. And once (s)RTP
> starts flowing the reordering will quickly be discovered by out of orer
> packets.
>
> The draft needs to clearly spell out this limitation.
>
> My main worry now is the RTT calculation. Am I right if I assume that the
> packets usually are delayed when reorder, and not magically put in front of
> the queue? If that is the case the RTT measurement should still be ok


Could you take a look at -04, and let us know if the authors have
successfully addressed this Discuss?

Thanks!

Spencer


> >
> > ----------------------------------------------------------------------
> > COMMENT:
> > ----------------------------------------------------------------------
> >
> > Section 5: IANA Considerations
> >
> > Shouldn't the range for this option be in the 0x8000-0xBFFF range instead
> > of the 0x8000-0xFFFF range as currently stated by the draft?
>
> Yes. We want it to be part of the IETF Review comprehension-optional range.
>
> >
> > Section 6:
> >
> > I think this requirement is backwards and needs to be reworded.
> >
> > "Unauthenticated STUN message MUST NOT include the PATH-CHARACTERISTIC
> > attribute in order to prevent on-path attacker from influencing
> > decision-making."
> >
> > Suggest rewording to.
> >
> > "The PATH-CHARACTERISTIC attribute MUST NOT be included in
> > unauthenticated STUN messages in order to prevent an on-path attacker
> > from influencing decision-making.”
> >
>
> +1
> > I also agree with Alissa about the vagueness of the attribute name.
> >
> >
> +1
>
> .-.
> Pål-Erik
> > _______________________________________________
> > tram mailing list
> > tram@ietf.org
> > https://www.ietf.org/mailman/listinfo/tram
>
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram
>