Re: [v6ops] PMTUD issue discussion

Joe Touch <touch@isi.edu> Mon, 25 August 2014 20:49 UTC

Return-Path: <touch@isi.edu>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8ED51A034A for <v6ops@ietfa.amsl.com>; Mon, 25 Aug 2014 13:49:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.568
X-Spam-Level:
X-Spam-Status: No, score=-2.568 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.668] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HckSywr4iYex for <v6ops@ietfa.amsl.com>; Mon, 25 Aug 2014 13:49:58 -0700 (PDT)
Received: from darkstar.isi.edu (darkstar.isi.edu [128.9.128.127]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 446D71A0332 for <v6ops@ietf.org>; Mon, 25 Aug 2014 13:49:58 -0700 (PDT)
Received: from [128.9.184.196] ([128.9.184.196]) (authenticated bits=0) by darkstar.isi.edu (8.13.8/8.13.8) with ESMTP id s7PKnoHq008842 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 25 Aug 2014 13:49:51 -0700 (PDT)
Message-ID: <53FBA174.2040302@isi.edu>
Date: Mon, 25 Aug 2014 13:49:56 -0700
From: Joe Touch <touch@isi.edu>
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: "Fred Baker (fred)" <fred@cisco.com>, IPv6 Ops WG <v6ops@ietf.org>
References: <0D370E74-688B-4EB3-A691-309A03AF20BA@cisco.com>
In-Reply-To: <0D370E74-688B-4EB3-A691-309A03AF20BA@cisco.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: touch@isi.edu
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/JH3blgZPtovG7o_rbMQaY4iR9wU
Subject: Re: [v6ops] PMTUD issue discussion
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Aug 2014 20:50:00 -0000

Hi, all,

Speaking from TCPM-land, I would observe the following:

- PMTUD already has many known problems, which is why PLMTUD is 
recommended instead

- the issue here appears to be a device that routes TCP and UDP packets 
based on a hash, but does not apply that hash to the ICMP messages
	that's clearly an oversight of those devices.
	ICMP feedback is a known part of the Internet architecture,
	and any device that demultiplexes packets based on transport
	info needs to similarly process ICMP messages

	that goes for NATs, load balancers, or anything else.

I'm not sure what would be added other than to say "we found this 
problem here too". It's a bug that ought to be fixed, but endpoints that 
intend to be robust already know not to rely on ICMP.

Joe

On 8/25/2014 10:20 AM, Fred Baker (fred) wrote:
> http://datatracker.ietf.org/doc/draft-v6ops-pmtud-ecmp-problem
> http://tools.ietf.org/html/draft-v6ops-pmtud-ecmp-problem
>   "Close encounters of the ICMP type 2 kind (near misses with ICMPv6
>   PTB)", Matt Byerly, Matt Hite, Joel Jaeggli, 2014-08-24,
>
> As requested at IETF 90, Joel has edited and reposted his draft. There are two questions before the house:
>   - do we want to make this a working group draft?
>   - what do we want to do next?
>
> Note that, by charter, what we are not permitted to do is change implementations or protocols; we are allowed to define operational procedure. That said, we *can* make recommendations to other working groups, asking them to change something.
>
> So, for example, we might ask 6man to do something specific, or we might ask tcpm to do something specific. Something specific that we might ask tcpm to do would be to get operational experience with RFC 4821 and commit it back to open source, for example.
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>