Re: [v6ops] new draft: draft-taylor-v6ops-fragdrop

Joel Jaeggli <jjaeggli@zynga.com> Thu, 01 November 2012 20:11 UTC

Return-Path: <prvs=645c476ba=jjaeggli@zynga.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13D8721F9637 for <v6ops@ietfa.amsl.com>; Thu, 1 Nov 2012 13:11:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ftMk8YZNSkaO for <v6ops@ietfa.amsl.com>; Thu, 1 Nov 2012 13:11:53 -0700 (PDT)
Received: from c7-ip02.zynga.com (c7-ip02.zynga.com [72.5.237.24]) by ietfa.amsl.com (Postfix) with ESMTP id 0B32821F9631 for <v6ops@ietf.org>; Thu, 1 Nov 2012 13:11:53 -0700 (PDT)
Authentication-Results: c7-ip02.corp.zynga.com; dkim=neutral (message not signed) header.i=none
Received-SPF: None identity=pra; client-ip=10.101.0.38; receiver=c7-ip02.corp.zynga.com; envelope-from="jjaeggli@zynga.com"; x-sender="jjaeggli@zynga.com"; x-conformance=sidf_compatible.downgrade_pra
Received-SPF: Pass identity=mailfrom; client-ip=10.101.0.38; receiver=c7-ip02.corp.zynga.com; envelope-from="jjaeggli@zynga.com"; x-sender="jjaeggli@zynga.com"; x-conformance=sidf_compatible.downgrade_pra; x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=10.101.0.38; receiver=c7-ip02.corp.zynga.com; envelope-from="jjaeggli@zynga.com"; x-sender="postmaster@C7-EX-CASHT01.corp.zynga.com"; x-conformance=sidf_compatible.downgrade_pra
Received: from c7-ex-casht01.corp.zynga.com ([10.101.0.38]) by c7-ip02.corp.zynga.com with ESMTP; 01 Nov 2012 13:11:52 -0700
Received: from C7-EX-MAIL02.corp.zynga.com ([fe80::d4d:df70:ccb7:16db]) by C7-EX-CASHT01.corp.zynga.com ([::1]) with mapi id 14.01.0355.002; Thu, 1 Nov 2012 13:11:52 -0700
From: Joel Jaeggli <jjaeggli@zynga.com>
To: Joe Touch <touch@isi.edu>
Thread-Topic: [v6ops] new draft: draft-taylor-v6ops-fragdrop
Thread-Index: AQHNq5wf84m0GKx0106nyUn/qEDQIJe8s9wAgAABjYCAAATUAIAAAHaAgAABbACAAD0fAIAADlEAgAD23oCAABrRgIAAZZwAgAAMGQCAAALJAIAAAuoAgAE/FICAFJxhgIAABmwAgAA9FYCAAASGgIAAAhgAgAEnp4CAAA02AIAACRIAgAAEOYA=
Date: Thu, 01 Nov 2012 20:11:51 +0000
Message-ID: <48C09AC6-4068-4DEB-BFEF-26E1BED5305B@zynga.com>
References: <CAKD1Yr1BvZQudt8nrcTaFtJRTVXWH6m5M68jJ2=rQmpG8i+KcQ@mail.gmail.c! om> <CAKD1Yr1BvZQudt8nrcTaFtJRTVXWH6m5M68jJ2=rQmpG8i+KcQ@mail.gmail.com> <5092C14B.7090704@isi.edu> <20121101.202416.112557190.sthaug@nethelp.no> <5092D3FC.2010902@isi.edu>
In-Reply-To: <5092D3FC.2010902@isi.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.99.6.121]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <551B360096E8BD48956D3E60A6A85940@zynga.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailman-Approved-At: Thu, 01 Nov 2012 13:25:29 -0700
Cc: "<v6ops@ietf.org>" <v6ops@ietf.org>, "<draft-taylor-v6ops-fragdrop@tools.ietf.org>" <draft-taylor-v6ops-fragdrop@tools.ietf.org>
Subject: Re: [v6ops] new draft: draft-taylor-v6ops-fragdrop
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Nov 2012 20:11:54 -0000

On Nov 1, 2012, at 12:56 PM, Joe Touch <touch@isi.edu>
 wrote:

> 
> 
> On 11/1/2012 12:24 PM, sthaug@nethelp.no wrote:
>>> IMO, a router that looks beyond the IP headers is doing DPI. I realize
>>> others think DPI means looking at the E2E data.
>>> 
>>> However, to avoid confusion, I'll just state that:
>>> 
>>> - anything that looks only at an IP packet is a router
>>> 
>>> - anything that looks at higher layer headers isn't a router anymore. it
>>> might be a firewall, filter, etc., and whether the box can do that at
>>> line rate is a question customers should ask their vendors, not a
>>> problem the IETF should solve.
>> 
>> This looks like a nice theoretical classification that is rather useless
>> in practice.
>> 
>> A modern router with multiple 10G interfaces (say a Juniper MX or Cisco
>> ASR9K) can be configured to look at higher layers. The primary function
>> of these routers is forwarding packets at high speeds. The fact that
>> these routers *can* look at higher layers is not going to make me stop
>> calling them routers. I don't think I'm alone here :-)
> 
> Fine.

not really it isn't. What got me down this rathole was l3+l4 hashing.

> Then either get your vendors - of whatever boxes you want to call them - to support the current option structure, or choose not to support IPv6.

That's not an operationally useful statement. and it's not what's cooked into silicon by a number of companies that are well represented at the IETF.

> There are choices here.

Indeed, and the observable phenomena on the internet indicate what operators and their vendors arrived at indepedantly. 

> Joe