IETF Logo Mail Archive

[v6ops] Re: Traffic control protocols (PCP and UPnP IGD)

Dan Wing <danwing@gmail.com> Thu, 01 August 2024 19:07 UTC

Return-Path: <danwing@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DEA6C1519AB for <v6ops@ietfa.amsl.com>; Thu, 1 Aug 2024 12:07:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rklINcXWNlTC for <v6ops@ietfa.amsl.com>; Thu, 1 Aug 2024 12:07:45 -0700 (PDT)
Received: from mail-pf1-x42c.google.com (mail-pf1-x42c.google.com [IPv6:2607:f8b0:4864:20::42c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9576CC151538 for <v6ops@ietf.org>; Thu, 1 Aug 2024 12:07:45 -0700 (PDT)
Received: by mail-pf1-x42c.google.com with SMTP id d2e1a72fcca58-70d1c655141so5605198b3a.1 for <v6ops@ietf.org>; Thu, 01 Aug 2024 12:07:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722539265; x=1723144065; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=u+H2LCQj11u9OOeg0WPdFH33qXXZe11x3KLiakqeRk8=; b=VQcUyrRWXLN8FJIM/ntrfYDbdYqqfVgo5l1hvJFLEjjlJ6kdQnXhu/cNHL+X5cUltl hU3nJBphIrLKvAyd953X8CMWNQVkXA1LTvgQIiwylnDji8iZtHxnlf5x7YE4KSWDlkJo 2q+eH+zHIPt7KnfUcEwy3CRmhUdAchMX34VlCR4fd3GdTAQsR6EeZ4BUjvKwR8C3B199 2JLICfkrGusRm03+fvB4njGodqW/VL5J5bU1vMXJUVcnSupsZ5UO/R6asVQGqpo2RdA1 QaHivhiBK/pfZF5JLp45lPBjAaC4LHQ4S/hjdnZZdmHt2uuBy0nTsdKB90icD85NYgz3 IC1Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722539265; x=1723144065; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=u+H2LCQj11u9OOeg0WPdFH33qXXZe11x3KLiakqeRk8=; b=r0tm807l2qcIaAbnVMQzLJ+0A9EBozZJV03DZ3JfKCz30kvHwO334U+Gdrz9D8p1re FTZ51gmJ1fo5Z3eqvTmKjY7FqaYhTVppyGJXKM2gTv0mz0NYnjZqrK5prjvwhF+8yseR /TA5ejPRBRWaHZVs/e5p14MCWzqkVSoQEhwTM4gGQddKmv0nOhdlMzzKoQtTX0LuoE6X BpWUIFQECfYVSyuHq5uLmn37DGYWJrOJRczrPmAfWfCXvavWUqVBSMk1KUE4z863ecBZ wfucXDvyqaqBPCeyenmvfbHDT2OWn63LQxsk0OenEArjonIEA1gb8gk2DlJvifzj9obU ubCw==
X-Forwarded-Encrypted: i=1; AJvYcCVpvsVoN9oB4JzVVFoMf7NMs3TONu2I9pnNF4KRru+sk2D+1AkijFhaDTsROKDJUtw7L9hSJ0rSNqaRblaGew==
X-Gm-Message-State: AOJu0YygtLbROjw+bnnpKnFN5C1MmDkLYSgxLIM8XPbjn5Vif9IcfSfY rC6uxln3nbXWOO2QwmGmiYdV6ayenw1D1c0Wn4UTPyiX6uUtBy1UC5lA7A==
X-Google-Smtp-Source: AGHT+IEU7dUbPaK6Ry0xDU66fDDIgpilyLbVF5W+AmpYSW6jg82stKTYtOR87Vgb6L56pzRRBohJuA==
X-Received: by 2002:a17:903:247:b0:1fd:8bad:6437 with SMTP id d9443c01a7336-1ff57495d9dmr17990795ad.49.1722539264610; Thu, 01 Aug 2024 12:07:44 -0700 (PDT)
Received: from smtpclient.apple ([47.208.219.53]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-1ff5928ef83sm2233245ad.228.2024.08.01.12.07.43 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 01 Aug 2024 12:07:43 -0700 (PDT)
From: Dan Wing <danwing@gmail.com>
Message-Id: <3B7CF16F-D6B8-4813-903C-88AF513AD8AF@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_D302202A-F77B-42FB-8726-FB26472F7E26"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51\))
Date: Thu, 01 Aug 2024 12:07:42 -0700
In-Reply-To: <CACyFTPEOgUNXZSjFz0vtgju549VfABaZvt8dtds_ekmUzKAaLQ@mail.gmail.com>
To: Daryll Swer <contact=40daryllswer.com@dmarc.ietf.org>
References: <TYVPR01MB10750FB6A5FA4EB034F9B5B8AD2B42@TYVPR01MB10750.jpnprd01.prod.outlook.com> <CAPt1N1kA9KETiVsK744m5AaXvCnspsN8zkdqRR1OcMo-ftkNfA@mail.gmail.com> <TYVPR01MB10750B17554096318B8C49BACD2B42@TYVPR01MB10750.jpnprd01.prod.outlook.com> <BF9C2E26-E49C-4764-9CEA-8E7738801819@employees.org> <TYVPR01MB1075001C9D2EC290201284F66D2B42@TYVPR01MB10750.jpnprd01.prod.outlook.com> <CACyFTPH7XJ=fV9jW0h59UH-TDL7OGWw_ifehPvbFzzoH2Ln0Ng@mail.gmail.com> <ZqQDMjckkFr3_hsv@Space.Net> <CAPt1N1mhMYck7Y-SOgFfpA7OD6b0H8Y5gAjsYHWSZLFfzdiRzA@mail.gmail.com> <ZqVh5oFVFSjAYqcL@Space.Net> <CAPt1N1=T+YYPuCJq64mffTqY-1Kp+Kv9hqt+TJa_5iMUh3QC4g@mail.gmail.com> <ZqYXiBz0oFsafbwC@Space.Net> <CAPt1N1m4Z4yBx60x9VPjN5kmbL3-DY5kpfpTnpSNi=z3e98-qw@mail.gmail.com> <CACyFTPEOgUNXZSjFz0vtgju549VfABaZvt8dtds_ekmUzKAaLQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3776.700.51)
Message-ID-Hash: LPIFA4OZGDWKEF6Y246BNGKCXEZSWRNK
X-Message-ID-Hash: LPIFA4OZGDWKEF6Y246BNGKCXEZSWRNK
X-MailFrom: danwing@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Ole Troan <otroan@employees.org>, "v6ops@ietf.org" <v6ops@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [v6ops] Re: Traffic control protocols (PCP and UPnP IGD)
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/PR3eykjswWHFbnbfQAIcHxP3LiM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

On Jul 28, 2024, at 7:01 AM, Daryll Swer <contact=40daryllswer.com@dmarc.ietf.org> wrote:
> I'm all in for PCP signalling to open a port in the stateful firewall as I originally described, and PCP shouldn't encourage locking of the ecosystem to just TCP/UDP, it should support all standardised layer 4 protocols (DCCP, UDP-Lite, SCTP, maybe more).

https://datatracker.ietf.org/doc/html/rfc6887#section-2.2,
   The PCP Opcodes defined in this document are designed to support
   transport-layer protocols that use a 16-bit port number (e.g., TCP,
   UDP, Stream Control Transmission Protocol (SCTP) [RFC4960], and
   Datagram Congestion Control Protocol (DCCP) [RFC4340]).  Protocols
   that do not use a port number (e.g., Resource Reservation Protocol
   (RSVP), IP Encapsulating Security Payload (ESP) [RFC4303], ICMP, and
   ICMPv6) are supported for IPv4 firewall, IPv6 firewall, and NPTv6
   functions, but are out of scope for any NAT functions.

The protocol supports other protocols, but I bet most/all implementations do not bother handling anything beyond TCP and UDP.  That's pretty typical for lots of network gear (router ACLs, firewalls, and of course NAT/NAPT).  Running over UDP is a long-standing workaround ("solution") for various protocols like IPsec (RFC3948), SCTP (RFC6951), and DCCP (RFC6773).  The overhead of the UDP header is not ideal, but UDP is deployable on the Internet.

-d

v2.46.0 | Report a Bug | By Email | System Status