IETF Logo Mail Archive

[tsvwg] Re: [EXTERNAL] Re: [gwhiteCL/NQBdraft] Should traffic protection be mandatory to implement? (Issue #48)

"Livingood, Jason" <jason_livingood@comcast.com> Wed, 24 July 2024 17:40 UTC

Return-Path: <prvs=193583cc01=jason_livingood@comcast.com>
X-Original-To: tsvwg@ietfa.amsl.com
Delivered-To: tsvwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BBF9C14F6E4; Wed, 24 Jul 2024 10:40:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=comcast.com header.b="TDztZfXk"; dkim=pass (1024-bit key) header.d=comcastcorp.onmicrosoft.com header.b="kXWgbiYo"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X8DNEoSWeaB3; Wed, 24 Jul 2024 10:40:03 -0700 (PDT)
Received: from mx0a-00143702.pphosted.com (mx0a-00143702.pphosted.com [148.163.145.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C362C14F69E; Wed, 24 Jul 2024 10:40:03 -0700 (PDT)
Received: from pps.filterd (m0184892.ppops.net [127.0.0.1]) by mx0a-00143702.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 46OHM1sZ029743; Wed, 24 Jul 2024 13:40:00 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.com; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:mime-version; s=20190412; bh=FRNFKurB+TVLPQvcV9xYh 2RzNd5PaB9uDvnBjmCPjlw=; b=TDztZfXk7xcnCBgyf4PSRXapxS3Zmn8JuyARm 7jhI7e7dJQhB1zDGbzL6Z1nGL8AZGqF5wnTo70GxX1XllurqIncRuXuMQUcyMKV9 R8abIj0LuWCuNY5UDHNe4W5mwH2NOB/2p1L5Vj+44iyzKm7ULkDigqF7SbajrTha zA7QbG2b54evydhSC9rESW8wbkvCvcJFLNj77BsCCzoT15jla6IhpDZJj24RYbiS pMiAkQRqCmP6qKiABglHeRJYyYTqAMxTk6FwIeg6vaTOMajrvRNsz1gPZWNzTowk 7Zk1Shb8lrZjAHWEBLZ8pFhXUljz4CGsP90lnDSpr7JcAo48w==
Received: from nam10-dm6-obe.outbound.protection.outlook.com (mail-dm6nam10lp2101.outbound.protection.outlook.com [104.47.58.101]) by mx0a-00143702.pphosted.com (PPS) with ESMTPS id 40k25wjbpb-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 24 Jul 2024 13:39:59 -0400 (EDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=OqFeySGs66uTfj/IcsXFcy81q6aOU2Xs64gGBAGGcp3zy0eWFtoGsTst+aEw/iL0xCOrVsi6Yv2XL50kt5k1EkQpa+MbQhdCttJt1Ap1HIPPYaDIA65AJhifVYwxoVyc/OARrkTKdT2OO0OkXj4ql0sz7hyCw8QbvfS0c1Qs2JDZD/BWHLB0YqhLS9GjHLbUW7/ADGhyO/ByuW8FR9m+GUtxtdHjLqWOtKtyFmXOEp1GAEcp9ACpEcXHevvy48A2kbg6AY1DA5rW6Y0uXEO3pd12N5zDMw8yL4FQNSCI8lmRx+ToO4oXR+9L4kFC8E+Bx6nv9jiu59wlK1pj0SuV2g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=FRNFKurB+TVLPQvcV9xYh2RzNd5PaB9uDvnBjmCPjlw=; b=hI+SVf+1ZyMOFQaRFZOezzual65X70aQrKqxRULBPy7NLM8eypn7bESGkg65JAYJdacy7BrMwaooy4x+BLL252Y+7wQVn0euLTvqIglTxkaR0oRLvb7Nu0gRw8w4hAByQDiFfvqs3oZZdzBi27r2AH7sIV941KDlLsuL01xwoRL2s8q9/uE7Xzp1N8aZ+gUTx0cL5/TBni1z/fXJaamfIoU5NvmXUQLHHqeTfyfOAQX1O6iKjAUYqm6aBfLadfhjW+HX+2TGfyrSHwhH9BqjE5JPqwiJdx77k6qKTcPdEeDdDI18Bzt7lL/uZuKwnciXXL8EI3kMKabBsMiI28nBkg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=comcast.com; dmarc=pass action=none header.from=comcast.com; dkim=pass header.d=comcast.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcastcorp.onmicrosoft.com; s=selector1-comcastcorp-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FRNFKurB+TVLPQvcV9xYh2RzNd5PaB9uDvnBjmCPjlw=; b=kXWgbiYoSyOqwaCRE8Iv5ax7mv7R3tyq4RAqXypoJYBykqmMQXIG1cF/gUSnqMia10OL9CWmbT8z5kiadMVQXx41jNfM4A+nE9PGpKuXw4J5Uk4Q5KfeI5OytRtZ20iZqaHeEhcKupQF6XvcjG22B3UoL3nrFsKuDg8u7gnIKxg=
Received: from MN2PR11MB3709.namprd11.prod.outlook.com (2603:10b6:208:f3::22) by BN9PR11MB5322.namprd11.prod.outlook.com (2603:10b6:408:137::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.16; Wed, 24 Jul 2024 17:39:53 +0000
Received: from MN2PR11MB3709.namprd11.prod.outlook.com ([fe80::8ae6:3313:d9f8:20d7]) by MN2PR11MB3709.namprd11.prod.outlook.com ([fe80::8ae6:3313:d9f8:20d7%4]) with mapi id 15.20.7762.030; Wed, 24 Jul 2024 17:39:53 +0000
From: "Livingood, Jason" <jason_livingood@comcast.com>
To: "Black, David" <David.Black@dell.com>, "Black, David" <David.Black=40dell.com@dmarc.ietf.org>, "Overcash, Michael (CCI-Atlanta)" <michael.overcash@cox.com>, gwhiteCL/NQBdraft <reply+AB2VULW2XRH6MPK23ABRZQOEVLRFREVBNHHI5USV5Y@reply.github.com>, gwhiteCL/NQBdraft <NQBdraft@noreply.github.com>
Thread-Topic: [tsvwg] Re: [EXTERNAL] Re: [gwhiteCL/NQBdraft] Should traffic protection be mandatory to implement? (Issue #48)
Thread-Index: AQHa3JwfOJAPnnLUJEmQXstKT2fKJLIEXDAwgABbGACAAEtNcIAAifgAgAB7LoD//53DAIAAeasA//+TQAA=
Date: Wed, 24 Jul 2024 17:39:53 +0000
Message-ID: <62CCCB97-D4E2-406A-A214-F0834EE0D87E@comcast.com>
References: <gwhiteCL/NQBdraft/issues/48@github.com> <gwhiteCL/NQBdraft/issues/48/2244060936@github.com> <MN2PR19MB404591B9BAA1AEED7BBB900983A92@MN2PR19MB4045.namprd19.prod.outlook.com> <LV2PR01MB7622B7EA53C95951987C9B0B9FA92@LV2PR01MB7622.prod.exchangelabs.com> <MN2PR19MB4045E01E9923873F4A0BBD4883AA2@MN2PR19MB4045.namprd19.prod.outlook.com> <6F90E433-3EC7-4A07-851B-8DEDE30061D7@comcast.com> <MN2PR19MB4045D937AF1494C11D8218E083AA2@MN2PR19MB4045.namprd19.prod.outlook.com> <F8D37F2E-206C-414F-A25A-24FF32C607C3@comcast.com> <MN2PR19MB40457246F85DE00DE26D8B3883AA2@MN2PR19MB4045.namprd19.prod.outlook.com>
In-Reply-To: <MN2PR19MB40457246F85DE00DE26D8B3883AA2@MN2PR19MB4045.namprd19.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_ActionId=dc085fbd-ef1b-4368-adba-a856a5ad6fe3;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_ContentBits=0;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Enabled=true;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Method=Privileged;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_Name=Public No Visual Label;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_SetDate=2024-07-24T00:19:09Z;MSIP_Label_dad3be33-4108-4738-9e07-d8656a181486_SiteId=945c199a-83a2-4e80-9f8c-5a91be5752dd;
user-agent: Microsoft-MacOutlook/16.87.24071426
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: MN2PR11MB3709:EE_|BN9PR11MB5322:EE_
x-ms-office365-filtering-correlation-id: 33b9cdd3-8668-42ba-8056-08dcac07a031
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|7093399012|376014|1800799024|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MN2PR11MB3709.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(7093399012)(376014)(1800799024)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_62CCCB97D4E2406AA214F0834EE0D87Ecomcastcom_"
MIME-Version: 1.0
X-OriginatorOrg: comcast.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR11MB3709.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 33b9cdd3-8668-42ba-8056-08dcac07a031
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2024 17:39:53.1859 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 906aefe9-76a7-4f65-b82d-5ec20775d5aa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: IkRZ1OwNPUY9W/wG2TnCZeYT6JCaQXWtOHrB7ra4RcqzbtVrbg+Ew9tG0qt9P8wR0Cqwg8riV3TpMAFsCt+YL5FwHJ+o+0RdOWTOp2Lm0VQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN9PR11MB5322
X-Proofpoint-GUID: b1CuL84Dce0J-FA7pz8FFm7uGjvYOHNh
X-Proofpoint-ORIG-GUID: b1CuL84Dce0J-FA7pz8FFm7uGjvYOHNh
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-07-24_18,2024-07-24_01,2024-05-17_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 lowpriorityscore=0 suspectscore=0 phishscore=0 adultscore=0 mlxscore=0 bulkscore=0 impostorscore=0 malwarescore=0 clxscore=1015 spamscore=0 mlxlogscore=860 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2407110000 definitions=main-2407240127
Message-ID-Hash: FXBYZ7UJ3WYCRCMT22TWXNVMQZNUNT22
X-Message-ID-Hash: FXBYZ7UJ3WYCRCMT22TWXNVMQZNUNT22
X-MailFrom: prvs=193583cc01=jason_livingood@comcast.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tsvwg.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tsvwg IETF list <tsvwg@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [tsvwg] Re: [EXTERNAL] Re: [gwhiteCL/NQBdraft] Should traffic protection be mandatory to implement? (Issue #48)
List-Id: Transport Area Working Group <tsvwg.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/t0AS50J78bBOPtYuOYueDCLMC6A>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Owner: <mailto:tsvwg-owner@ietf.org>
List-Post: <mailto:tsvwg@ietf.org>
List-Subscribe: <mailto:tsvwg-join@ietf.org>
List-Unsubscribe: <mailto:tsvwg-leave@ietf.org>

>> [JL] First hop access gear would typically still have per user/device/home flow boundaries

>Would it be reasonable to specify those boundaries in a bit more detail and limit usage of this PHB to equipment that enforces such boundaries?

>If that were to be done, then ...

>> [JL] In any case, the user/device/home cannot exceed the bandwidth they have been provisioned.

>... would be a fine "abuser can only shoot itself in the foot" conclusion to most of the security concerns because the boundaries prevent damage to others.

[JL] Would that be best in this draft or a more generalized anti-DoS-resilience sort of draft, since this behavior can occur irrespective of whether NQB is used? It could be a very short BCP, basically saying it is best practice in an access network to enforce per-user/device/home bandwidth limits so that one user cannot exceed their provisioned bandwidth and negatively affect other users. On the other hand, it seems obvious that if you have provisioned X bandwidth that it would be impossible to exceed that provisioned bandwidth.

v2.27.6 | Report a Bug | By Email | System Status