Re: [Lsr] Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with COMMENT)

2020-07-13 Thread Benjamin Kaduk
Hi Les,

Looks good, thanks for making these tweaks.  (I was about to write
"hopefully final" but I see that half the IESG still has to weigh in ... so
I can't really expect this to be the last word quite yet.)

-Ben

On Tue, Jul 14, 2020 at 03:39:55AM +, Les Ginsberg (ginsberg) wrote:
> Ben -
> 
> I have prepared V3 of the draft to address your comments.
> As the window for draft submissions is temporarily closed, I have attached 
> the diffs for your review.
> 
> I will post the updated version once the window for submissions reopens.
> 
> A few more remarks inline.
> 
> > -Original Message-
> > From: Benjamin Kaduk 
> > Sent: Monday, July 13, 2020 4:24 PM
> > To: Les Ginsberg (ginsberg) 
> > Cc: The IESG ; draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-
> > cha...@ietf.org; lsr@ietf.org; Christian Hopps ;
> > aretana.i...@gmail.com
> > Subject: Re: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: 
> > (with
> > COMMENT)
> > 
> > Hi Les,
> > 
> > On Mon, Jul 13, 2020 at 11:05:35PM +, Les Ginsberg (ginsberg) wrote:
> > > Ben -
> > >
> > >
> > >
> > > Thanx for your review.
> > 
> > My pleasure; this is a nice document.  (A shame it's needed, of course, but
> > that's neither here nor there.)
> > 
> > > Responses inline.
> > >
> > >
> > >
> > > > -Original Message-
> > >
> > > > From: Benjamin Kaduk via Datatracker 
> > >
> > > > Sent: Monday, July 13, 2020 2:11 PM
> > >
> > > > To: The IESG 
> > >
> > > > Cc: draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-cha...@ietf.org; 
> > > > lsr@ietf.org;
> > >
> > > > Christian Hopps ; aretana.i...@gmail.com;
> > >
> > > > cho...@chopps.org
> > >
> > > > Subject: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: 
> > > > (with
> > >
> > > > COMMENT)
> > >
> > > >
> > >
> > > > Benjamin Kaduk has entered the following ballot position for
> > >
> > > > draft-ietf-lsr-isis-invalid-tlv-02: Yes
> > >
> > > >
> > >
> > > > When responding, please keep the subject line intact and reply to all
> > >
> > > > email addresses included in the To and CC lines. (Feel free to cut this
> > >
> > > > introductory paragraph, however.)
> > >
> > > >
> > >
> > > >
> > >
> > > > Please refer to https://www.ietf.org/iesg/statement/discuss-
> > criteria.html
> > >
> > > > for more information about IESG DISCUSS and COMMENT positions.
> > >
> > > >
> > >
> > > >
> > >
> > > > The document, along with other ballot positions, can be found here:
> > >
> > > > https://datatracker.ietf.org/doc/draft-ietf-lsr-isis-invalid-tlv/
> > >
> > > >
> > >
> > > >
> > >
> > > >
> > >
> > > > --
> > >
> > > > COMMENT:
> > >
> > > > --
> > >
> > > >
> > >
> > > > The shepherd writeup is a bit unclear as to why Proposed Standard is the
> > >
> > > > right document status (vs., e.g., Informational).  I guess it's desired
> > >
> > > > to have the Updates: relationship to the indicated documents, which
> > >
> > > > essentially forces it to be standards-track.  On the other hand, perhaps
> > >
> > > > the sense that ignoring a TLV that is specifically disallowed (as
> > >
> > > > opposed to "merely" unrecognized) is itself a newly specified
> > >
> > > > requirement, in which case the status as Proposed Standard makes sense
> > >
> > > > for that reason.  It might be worth a little more clarity on which (if
> > >
> > > > either) of these scenarios are intended.
> > >
> > > >
> > >
> > > [Les:] What prompted the writing of this document was a real world
> > interoperability scenario wherein one implementation generated a
> > malformed TLV and a receiving implementation rejected the entire PDU
> > because of it. This resulted in persistent LSPDB inconsistency in the 
> > network
> > f

Re: [Lsr] Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with COMMENT)

2020-07-13 Thread Les Ginsberg (ginsberg)
Ben -

I have prepared V3 of the draft to address your comments.
As the window for draft submissions is temporarily closed, I have attached the 
diffs for your review.

I will post the updated version once the window for submissions reopens.

A few more remarks inline.

> -Original Message-
> From: Benjamin Kaduk 
> Sent: Monday, July 13, 2020 4:24 PM
> To: Les Ginsberg (ginsberg) 
> Cc: The IESG ; draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-
> cha...@ietf.org; lsr@ietf.org; Christian Hopps ;
> aretana.i...@gmail.com
> Subject: Re: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with
> COMMENT)
> 
> Hi Les,
> 
> On Mon, Jul 13, 2020 at 11:05:35PM +, Les Ginsberg (ginsberg) wrote:
> > Ben -
> >
> >
> >
> > Thanx for your review.
> 
> My pleasure; this is a nice document.  (A shame it's needed, of course, but
> that's neither here nor there.)
> 
> > Responses inline.
> >
> >
> >
> > > -Original Message-
> >
> > > From: Benjamin Kaduk via Datatracker 
> >
> > > Sent: Monday, July 13, 2020 2:11 PM
> >
> > > To: The IESG 
> >
> > > Cc: draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-cha...@ietf.org; 
> > > lsr@ietf.org;
> >
> > > Christian Hopps ; aretana.i...@gmail.com;
> >
> > > cho...@chopps.org
> >
> > > Subject: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with
> >
> > > COMMENT)
> >
> > >
> >
> > > Benjamin Kaduk has entered the following ballot position for
> >
> > > draft-ietf-lsr-isis-invalid-tlv-02: Yes
> >
> > >
> >
> > > When responding, please keep the subject line intact and reply to all
> >
> > > email addresses included in the To and CC lines. (Feel free to cut this
> >
> > > introductory paragraph, however.)
> >
> > >
> >
> > >
> >
> > > Please refer to https://www.ietf.org/iesg/statement/discuss-
> criteria.html
> >
> > > for more information about IESG DISCUSS and COMMENT positions.
> >
> > >
> >
> > >
> >
> > > The document, along with other ballot positions, can be found here:
> >
> > > https://datatracker.ietf.org/doc/draft-ietf-lsr-isis-invalid-tlv/
> >
> > >
> >
> > >
> >
> > >
> >
> > > --
> >
> > > COMMENT:
> >
> > > --
> >
> > >
> >
> > > The shepherd writeup is a bit unclear as to why Proposed Standard is the
> >
> > > right document status (vs., e.g., Informational).  I guess it's desired
> >
> > > to have the Updates: relationship to the indicated documents, which
> >
> > > essentially forces it to be standards-track.  On the other hand, perhaps
> >
> > > the sense that ignoring a TLV that is specifically disallowed (as
> >
> > > opposed to "merely" unrecognized) is itself a newly specified
> >
> > > requirement, in which case the status as Proposed Standard makes sense
> >
> > > for that reason.  It might be worth a little more clarity on which (if
> >
> > > either) of these scenarios are intended.
> >
> > >
> >
> > [Les:] What prompted the writing of this document was a real world
> interoperability scenario wherein one implementation generated a
> malformed TLV and a receiving implementation rejected the entire PDU
> because of it. This resulted in persistent LSPDB inconsistency in the network
> for a prolonged period with a significant impact on the proper functioning of
> the network. This failure was considered significant enough that Standards
> Track seemed appropriate.
> >
> >
> >
> > As the document developed, the authors were encouraged to address
> some other issues, one of which was clarifying disallowed TLV handling as
> well.
> >
> >
> >
> > I can understand why Informational track may seem appropriate to you. In
> early discussions with Alvaro I had suggested that there was no need to write
> the document - that existing specifications were sufficiently clear. But the
> fact that - despite existing standards - such an interoperability issue did 
> occur
> was compelling. The WG also embraced this as useful.
> 
> Thanks for the extra explanation.  I think PS makes sense, and the only
> text change I might (emphasis: *might*) consider is to emphasize that th

Re: [Lsr] Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with COMMENT)

2020-07-13 Thread Benjamin Kaduk
Hi Les,

On Mon, Jul 13, 2020 at 11:05:35PM +, Les Ginsberg (ginsberg) wrote:
> Ben -
> 
> 
> 
> Thanx for your review.

My pleasure; this is a nice document.  (A shame it's needed, of course, but
that's neither here nor there.)

> Responses inline.
> 
> 
> 
> > -Original Message-
> 
> > From: Benjamin Kaduk via Datatracker 
> 
> > Sent: Monday, July 13, 2020 2:11 PM
> 
> > To: The IESG 
> 
> > Cc: draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-cha...@ietf.org; 
> > lsr@ietf.org;
> 
> > Christian Hopps ; aretana.i...@gmail.com;
> 
> > cho...@chopps.org
> 
> > Subject: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with
> 
> > COMMENT)
> 
> >
> 
> > Benjamin Kaduk has entered the following ballot position for
> 
> > draft-ietf-lsr-isis-invalid-tlv-02: Yes
> 
> >
> 
> > When responding, please keep the subject line intact and reply to all
> 
> > email addresses included in the To and CC lines. (Feel free to cut this
> 
> > introductory paragraph, however.)
> 
> >
> 
> >
> 
> > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> 
> > for more information about IESG DISCUSS and COMMENT positions.
> 
> >
> 
> >
> 
> > The document, along with other ballot positions, can be found here:
> 
> > https://datatracker.ietf.org/doc/draft-ietf-lsr-isis-invalid-tlv/
> 
> >
> 
> >
> 
> >
> 
> > --
> 
> > COMMENT:
> 
> > --
> 
> >
> 
> > The shepherd writeup is a bit unclear as to why Proposed Standard is the
> 
> > right document status (vs., e.g., Informational).  I guess it's desired
> 
> > to have the Updates: relationship to the indicated documents, which
> 
> > essentially forces it to be standards-track.  On the other hand, perhaps
> 
> > the sense that ignoring a TLV that is specifically disallowed (as
> 
> > opposed to "merely" unrecognized) is itself a newly specified
> 
> > requirement, in which case the status as Proposed Standard makes sense
> 
> > for that reason.  It might be worth a little more clarity on which (if
> 
> > either) of these scenarios are intended.
> 
> >
> 
> [Les:] What prompted the writing of this document was a real world 
> interoperability scenario wherein one implementation generated a malformed 
> TLV and a receiving implementation rejected the entire PDU because of it. 
> This resulted in persistent LSPDB inconsistency in the network for a 
> prolonged period with a significant impact on the proper functioning of the 
> network. This failure was considered significant enough that Standards Track 
> seemed appropriate.
> 
> 
> 
> As the document developed, the authors were encouraged to address some other 
> issues, one of which was clarifying disallowed TLV handling as well.
> 
> 
> 
> I can understand why Informational track may seem appropriate to you. In 
> early discussions with Alvaro I had suggested that there was no need to write 
> the document - that existing specifications were sufficiently clear. But the 
> fact that - despite existing standards - such an interoperability issue did 
> occur was compelling. The WG also embraced this as useful.

Thanks for the extra explanation.  I think PS makes sense, and the only
text change I might (emphasis: *might*) consider is to emphasize that the
"occurrence of non-conformant behavior seen in real world deployments" is
decidedly not hypothetical.  But I could understand if the current text is
seen to be saying that already, too.

> 
> 
> > Section 1
> 
> >
> 
> >A corollary to ignoring unknown TLVs is having the validation of PDUs
> 
> >be independent from the validation of the TLVs contained in the PDU.
> 
> >
> 
> > nit: this doesn't exactly seem like a "corollary" specifically, but
> 
> > rather a choice that [ISO10589] made (and which keeps some overall sense
> 
> > of consistency between PDU and TLV handling).
> 
> >
> 
> [Les:] Rejecting a PDU because of some issue with a single TLV would mean 
> that the full set of updates contained in that LSP would not be propagated. 
> This has a significant impact on the correct operation of the protocol. So I 
> think this really isn’t an option.

I agree that doing anything else would have been a bad idea!  I was just
suggesting that a different word might be preferred (but am not trying to
press the issue).
&

Re: [Lsr] Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with COMMENT)

2020-07-13 Thread Les Ginsberg (ginsberg)
Ben -



Thanx for your review.

Responses inline.



> -Original Message-

> From: Benjamin Kaduk via Datatracker 

> Sent: Monday, July 13, 2020 2:11 PM

> To: The IESG 

> Cc: draft-ietf-lsr-isis-invalid-...@ietf.org; lsr-cha...@ietf.org; 
> lsr@ietf.org;

> Christian Hopps ; aretana.i...@gmail.com;

> cho...@chopps.org

> Subject: Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with

> COMMENT)

>

> Benjamin Kaduk has entered the following ballot position for

> draft-ietf-lsr-isis-invalid-tlv-02: Yes

>

> When responding, please keep the subject line intact and reply to all

> email addresses included in the To and CC lines. (Feel free to cut this

> introductory paragraph, however.)

>

>

> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html

> for more information about IESG DISCUSS and COMMENT positions.

>

>

> The document, along with other ballot positions, can be found here:

> https://datatracker.ietf.org/doc/draft-ietf-lsr-isis-invalid-tlv/

>

>

>

> --

> COMMENT:

> --

>

> The shepherd writeup is a bit unclear as to why Proposed Standard is the

> right document status (vs., e.g., Informational).  I guess it's desired

> to have the Updates: relationship to the indicated documents, which

> essentially forces it to be standards-track.  On the other hand, perhaps

> the sense that ignoring a TLV that is specifically disallowed (as

> opposed to "merely" unrecognized) is itself a newly specified

> requirement, in which case the status as Proposed Standard makes sense

> for that reason.  It might be worth a little more clarity on which (if

> either) of these scenarios are intended.

>

[Les:] What prompted the writing of this document was a real world 
interoperability scenario wherein one implementation generated a malformed TLV 
and a receiving implementation rejected the entire PDU because of it. This 
resulted in persistent LSPDB inconsistency in the network for a prolonged 
period with a significant impact on the proper functioning of the network. This 
failure was considered significant enough that Standards Track seemed 
appropriate.



As the document developed, the authors were encouraged to address some other 
issues, one of which was clarifying disallowed TLV handling as well.



I can understand why Informational track may seem appropriate to you. In early 
discussions with Alvaro I had suggested that there was no need to write the 
document - that existing specifications were sufficiently clear. But the fact 
that - despite existing standards - such an interoperability issue did occur 
was compelling. The WG also embraced this as useful.



> Section 1

>

>A corollary to ignoring unknown TLVs is having the validation of PDUs

>be independent from the validation of the TLVs contained in the PDU.

>

> nit: this doesn't exactly seem like a "corollary" specifically, but

> rather a choice that [ISO10589] made (and which keeps some overall sense

> of consistency between PDU and TLV handling).

>

[Les:] Rejecting a PDU because of some issue with a single TLV would mean that 
the full set of updates contained in that LSP would not be propagated. This has 
a significant impact on the correct operation of the protocol. So I think this 
really isn’t an option.





> Section 3.1

>

>[ISO10589] defines the behavior required when a PDU is received

>containing a TLV which is "not recognised".  It states (see Sections

>9.3 - 9.13):

>

> This is Sections 9.5 (not 9.3) to 9.13 in the copy I have.

>

[Les:] Well spotted. I see you have put your newly acquired  copy of ISO 10589 
to good use. Bravo!! 



> Section 3.2

>

>Similarly, the extensions defined by [RFC6233] are not compatible

>with the behavior defined in [RFC5304], therefore can only be safely

>enabled when all nodes support the extensions.

>

> nit: I'd argue that technically the extensions are *defined* by 6232, even

> though 6233 is what makes their nature (as "allowed in purge") easily

> discoverable.

>

[Les:] Fair enough. I will change this to RFC6232 - which is one of documents 
updated by this draft.



>It is RECOMMENDED that implementations provide controls for the

>enablement of behaviors that are not backward compatible.

>

> We also specifically want the ability to generate but not

> process/require at least some of them, right?  Is that worth calling out

> in addition to just "controls for the enablement"?



[Les:] This sentence is serving as a guideline for new behaviors that have 
backwards compatibi

[Lsr] Benjamin Kaduk's Yes on draft-ietf-lsr-isis-invalid-tlv-02: (with COMMENT)

2020-07-13 Thread Benjamin Kaduk via Datatracker
Benjamin Kaduk has entered the following ballot position for
draft-ietf-lsr-isis-invalid-tlv-02: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-lsr-isis-invalid-tlv/



--
COMMENT:
--

The shepherd writeup is a bit unclear as to why Proposed Standard is the
right document status (vs., e.g., Informational).  I guess it's desired
to have the Updates: relationship to the indicated documents, which
essentially forces it to be standards-track.  On the other hand, perhaps
the sense that ignoring a TLV that is specifically disallowed (as
opposed to "merely" unrecognized) is itself a newly specified
requirement, in which case the status as Proposed Standard makes sense
for that reason.  It might be worth a little more clarity on which (if
either) of these scenarios are intended.

Section 1

   A corollary to ignoring unknown TLVs is having the validation of PDUs
   be independent from the validation of the TLVs contained in the PDU.

nit: this doesn't exactly seem like a "corollary" specifically, but
rather a choice that [ISO10589] made (and which keeps some overall sense
of consistency between PDU and TLV handling).

Section 3.1

   [ISO10589] defines the behavior required when a PDU is received
   containing a TLV which is "not recognised".  It states (see Sections
   9.3 - 9.13):

This is Sections 9.5 (not 9.3) to 9.13 in the copy I have.

Section 3.2

   Similarly, the extensions defined by [RFC6233] are not compatible
   with the behavior defined in [RFC5304], therefore can only be safely
   enabled when all nodes support the extensions.

nit: I'd argue that technically the extensions are *defined* by 6232, even
though 6233 is what makes their nature (as "allowed in purge") easily
discoverable.

   It is RECOMMENDED that implementations provide controls for the
   enablement of behaviors that are not backward compatible.

We also specifically want the ability to generate but not
process/require at least some of them, right?  Is that worth calling out
in addition to just "controls for the enablement"?

Section 3.3

   a given sub-TLV is allowed.  Section 2 of [RFC5305] is updated by the
   following sentence:

  "As with TLVs, it is required that sub-TLVs which
   are disallowed MUST be ignored on receipt.".

Do we want to say where this logical insertion occurs?

Section 3.4

   The correct setting for "LSP" is "n".  This document updates
   [RFC6232] by correcting that error.

It's slightly interesting that there doesn't seem to be a corresponding
Errata Report (but may not be worth doing anything about given that this
update is about to be approved).

Section 8.1

It's not entirely clear that RFC 7356 is referenced in a normative
manner.



___
Lsr mailing list
Lsr@ietf.org
https://www.ietf.org/mailman/listinfo/lsr