Adrian Farrel | 1 Jul 2005 18:57
Picon

Re: Please comment draft-zhang-pce-comm-app-model-00

Hi,

Thanks for your draft.

I think it is important to contrast the situation where all paths are
computed by a central entity, and the case where there are multiple points
within the network that could compute a path. The former case is seen in
traditional transport networks where a central planning office is
responsible for determining paths. It also applies, as you state, where a
single PCE is responsible for a whole domain.

The latter case occurs, as you say, when there is more than one PCE in a
domain. We should note very clearly that this second case arises in
pre-PCE MPLS-TE or GMPLS networks where the ingress LSR is often given the
responsibility of computing the path of the LSP it is requested to
establish.

The case you are making is one for universal knowledge, and the you need
to make it clear that the trade-off is between the resource contention
that you describe, and the problems associated with distributing and
collecting a full knowledge set.

You should also contrast your requirements with the "stateful" PCE
described in the PCE Architecture draft.

It is important to observe that the PCE computes paths but does not cause
them to be established. A path computation might result in an LSP that
fails for some reason (perhaps a new fault in the network), or might never
be used to set up an LSP (it might be a path computed for information, or
to be kept in readiness for rapid restoration signaling). Thus, knowledge
(Continue reading)

RE : Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Hi Eric
 
We have a security section that is IMHO quite clear in terms of masquerade, forgery...
and indirectly addresses trust models you refer to.
But I agree with you that security requirements of a PCE discovery solution would better
be addressed in a dedicated section "PCE Discovery security requirements"  rather than in the default security section.
What about the following:
 
"5.9 PCE Discovery Security Requirements
 
The PCE Discovery mechanism MUST address security issues across multiple ASes.
Key consideration MUST be given in terms of how to establish a trusted model for PCE discovery.
The PCE discovery mechanism MUST explicitly support a specific set of trust models.
 
Particularly, mechanisms MUST be defined to avoid PCE masquerade and forgery.
It MUST be possible for PCEs to authenticate PCCs and for PCCs to authenticate PCEs.
 
Also, the PCE discovery mechanism MUST be able to restrict the scope of 
discovery to a set of authorized PCCs. The identity of any PCE MUST only be learnt by authorized PCCs.
It MUST be possible to encrypt  discovery information." 
Note that this requirement also implies the PCC-PCE communication protocol.
 
Is it fine with you if we add this section for next revision?
 
Best Regards
 
JL
 
 
 
 
-----Message d'origine-----
De : pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la part de Gray, Eric
Envoyé : jeudi 30 juin 2005 17:27
À : 'JP Vasseur'
Cc : pce <at> ietf.org
Objet : RE: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

JP,
 
    I believe this draft needs more work - particularly in the area of establishing
"security requirements" (as opposed to simple inclusion of a security section)
- before it is ready to be adopted as a WG document.
[JLLR]  
 
    Implicit in the PCE concept is the inherently undefined nature of the trust
model that may apply in any given deployment. Consequently it MUST be a
requirement that any PCE discovery mechanism explicitly supports a specific
set of trust models and that the complete set of possible solutions (assuming
the _possibility_ that one solution may not satisfy all requirements) supports
every reasonable combination of security trust models.
 
    It is imperative that this is established as a "requirement" of PCE discovery
solutions because this requirement will have a very definite effect on choices
the WG might make right away in seeking a solution.
 
    For example, assuming that we need to support a model where we assume
that it is possible for a foreign agency to mimic a valid PCE, this assumption
will severely limit the approaches that might be used - as long as it is also a
requirement to avoid approaches that require extensive manual configuration.
 
    To further illustrate this example, this requirement would make a choice of
discovery based on broadcast/multicast announcement mechanisms much
less workable - possibly directing us more toward an authenticated directory
service approach.
 
    To accept this document as a WG document without first nailing down the
specific security requirements that we want to apply would potentially send
the wrong message to the authors, the WG, the Internet community and -
possibly - the IESG.
 
    It is far more important to ensure that the work has started in the right
direction than it is to drive the work to conform more closely to a time table.
 
--
Eric
-----Original Message-----
From: pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org]On Behalf Of JP Vasseur
Sent: Thursday, June 30, 2005 9:53 AM
To: pce <at> ietf.org
Subject: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Dear WG,

draft-leroux-discovery-reqs has just been re-published, addressing several of comments received during the last meeting and on the list (very few remaining open items).

Could you provide us your feed-back on adopting draft-leroux-discovery-reqs-01.txt as a WG document ?

JP and Adrian.

<div>
<div><span class="521261316-04072005">Hi 
Eric</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">We 
have a security section that is IMHO quite clear in terms of masquerade, 
forgery...</span></div>
<div><span class="521261316-04072005">and 
indirectly addresses trust models you refer to.</span></div>
<div><span class="521261316-04072005">But I 
agree with you that&nbsp;security requirements of a PCE discovery 
solution&nbsp;would better</span></div>
<div><span class="521261316-04072005">be 
addressed in a&nbsp;dedicated&nbsp;section "PCE&nbsp;Discovery security 
requirements"&nbsp;&nbsp;rather than in the default&nbsp;security 
section.</span></div>
<div><span class="521261316-04072005">What 
about the following:</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">"5.9 
PCE Discovery Security Requirements</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">The&nbsp;PCE Discovery mechanism&nbsp;MUST address security issues across 
multiple ASes.</span></div>
<div><span class="521261316-04072005">Key 
consideration MUST be given in terms of how to establish a trusted model for PCE 
discovery.</span></div>
<div><span class="521261316-04072005">The PCE discovery mechanism MUST explicitly support a specific <span class="960210815-30062005">set of trust 
models.</span></span></div>
<div><span class="521261316-04072005"><span class="960210815-30062005">
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">Particularly, mechanisms MUST be defined to avoid PCE masquerade and 
forgery.</span></div></span></span></div>
<div><span class="521261316-04072005"><span class="960210815-30062005">It MUST be possible for PCEs to 
authenticate PCCs and for PCCs to authenticate 
PCEs.</span></span></div>
<div>
<span class="521261316-04072005"><span class="960210815-30062005"></span></span>&nbsp;</div>
<div><span class="521261316-04072005"><span class="960210815-30062005">Also, the PCE discovery mechanism MUST be able to restrict the 
scope of&nbsp;<br>discovery to a set of authorized PCCs. The identity of any PCE 
MUST&nbsp;only be learnt by authorized PCCs. 
</span></span></div>
<div><span class="521261316-04072005"><span class="960210815-30062005">It MUST be possible to 
encrypt&nbsp; discovery information."&nbsp; 
<br></span></span></div>
<div><span class="521261316-04072005">
<div><span class="521261316-04072005">Note 
that this requirement&nbsp;also implies the PCC-PCE communication 
protocol.</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">Is it 
fine with you if we add this section for next revision?</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">Best 
Regards</span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div><span class="521261316-04072005">JL</span></div></span></div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<div>
<span class="521261316-04072005"></span>&nbsp;</div>
<blockquote dir="ltr">
  <div></div>
  <div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">-----Message d'origine-----<br>De&nbsp;: 
  pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la part 
  de Gray, Eric<br>Envoy&eacute;&nbsp;: jeudi 30 juin 2005 
  17:27<br>&Agrave;&nbsp;: 'JP Vasseur'<br>Cc&nbsp;: 
  pce <at> ietf.org<br>Objet&nbsp;: RE: [Pce] Adoption of 
  draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
  <div><span class="960210815-30062005">JP,</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; I believe this draft needs more work - particularly in 
  the area of establishing</span></div>
  <div><span class="960210815-30062005">"security requirements" (as opposed to simple inclusion of a security 
  section)</span></div>
  <div><span class="960210815-30062005">- before it is ready to be adopted as a WG document.<br><span class="521261316-04072005">[JLLR]&nbsp;&nbsp;</span></span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; Implicit in the PCE concept is the inherently undefined 
  nature of the trust</span></div>
  <div><span class="960210815-30062005">model that may apply in any given deployment. Consequently it MUST be 
  a</span></div>
  <div><span class="960210815-30062005">requirement that any PCE discovery mechanism explicitly supports a 
  specific</span></div>
  <div><span class="960210815-30062005">set 
  of trust models and that the complete set of possible solutions 
  (assuming</span></div>
  <div><span class="960210815-30062005">the 
  _possibility_ that one solution may not satisfy all requirements) 
  supports</span></div>
  <div><span class="960210815-30062005">every reasonable combination of security trust 
  models.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is imperative that this is established as a 
  "requirement" of PCE discovery</span></div>
  <div><span class="960210815-30062005">solutions because this requirement will have a very definite effect on 
  choices</span></div>
  <div><span class="960210815-30062005">the 
  WG&nbsp;might make right away in seeking a solution.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; For example, assuming that we need to support a model 
  where we assume</span></div>
  <div><span class="960210815-30062005">that 
  it is possible for a foreign agency to mimic a valid PCE, this assumption 
  </span></div>
  <div><span class="960210815-30062005">will 
  severely limit the approaches that might be used - as long as it is also 
  a</span></div>
  <div><span class="960210815-30062005">requirement to avoid approaches that&nbsp;require extensive&nbsp;manual 
  configuration.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To further illustrate this example, this requirement 
  would make a choice of</span></div>
  <div><span class="960210815-30062005">discovery based on broadcast/multicast&nbsp;announcement mechanisms 
  much</span></div>
  <div><span class="960210815-30062005">less 
  workable - possibly directing us more toward an authenticated 
  directory</span></div>
  <div><span class="960210815-30062005">service approach.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To accept this document as a WG document without first 
  nailing down the</span></div>
  <div><span class="960210815-30062005">specific security requirements that we want to apply would potentially 
  send </span></div>
  <div><span class="960210815-30062005">the 
  wrong message to the authors, the WG, the Internet community&nbsp;and - 
  </span></div>
  <div><span class="960210815-30062005">possibly -&nbsp;the IESG.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is far more important to ensure that the work has 
  started in the right</span></div>
  <div><span class="960210815-30062005">direction than it is to drive the work to conform more closely to a 
  time table.</span></div>
  <div>
<span class="960210815-30062005"></span>&nbsp;</div>
  <div><span class="960210815-30062005">--</span></div>
  <div><span class="960210815-30062005">Eric</span></div>
  <blockquote dir="ltr">
    <div class="OutlookMessageHeader" dir="ltr" align="left">-----Original Message-----<br>From: pce-bounces <at> lists.ietf.org 
    [mailto:pce-bounces <at> lists.ietf.org]On Behalf Of JP 
    Vasseur<br>Sent: Thursday, June 30, 2005 9:53 AM<br>To: 
    pce <at> ietf.org<br>Subject: [Pce] Adoption of 
    draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
    <p><span class="Apple-style-span"><span class="Apple-style-span">Dear WG,</span></span></p>
    <p>draft-leroux-discovery-reqs has just been 
    re-published, addressing several of comments received during the last 
    meeting and on the list (very few remaining open items).</p>
    <p>Could you provide us your feed-back on 
    adopting draft-leroux-discovery-reqs-01.txt as a WG document ?</p>
    <p>JP and 
Adrian.</p>
</blockquote>
</blockquote>
</div>

RE : PCE Disco Reqs v01

Hi Dimitri
 
Thanks for these valuable comments
 
Please see inline
-----Message d'origine-----
De : Dimitri.Papadimitriou <at> alcatel.be [mailto:Dimitri.Papadimitriou <at> alcatel.be]
Envoyé : samedi 2 juillet 2005 16:26
À : LE ROUX Jean-Louis RD-CORE-LAN
Cc : pce <at> ietf.org
Objet : Re: [Pce] PCE Disco Reqs v01

hi jean-louis

thanks for the update, i have the following comments/feedback

1. in the introduction you refer to "some relevant PCE" and it is important to be more accurate since this plays a specific role in the discovery context of this document
[JLLR]  Yes, it means PCE for inter-domain path computation, we will clarify in next revision 

2. in the same section the document mentions MPLS-TE and GMPLS capable PCEs, i wonder whether you not simply mean here path computed such as to be subsequently used by RSVP-TE and GMPLS RSVP-TE taking into accound specific set of constraints that can be used by such PCEs;
[JLLR] Yes, I think that this is clear for everyone isn't it?

 also i think there is an inclusion relationship that should be pointed out here as the latter (a GMPLS-capable PCE) is by definition an MPLS- capable PCE
[JLLR] Agree 

3. section 5.1.2 it is unclear from this section whether the proposed discovery mechanism still allows for having multiple PCEs scoping a set of overlapping domains;
[JLLR] The answer is yes, 
[JLLR] But actually this is a question more related to the PCE architecture itself. It depends on what you mean by overlapping. In the inter-area context for instance there is some overlapping between domains as ABRs belong to two or more domains.

 and in particular when X PCEs scope a single domain how it is possible to target a given PCE if there scope in terms of reachable prefixes is non-overlapping
 
[JLLR] You raise a good point, we should add discovery of domain(s) towards which a PCE can compute a path

For instance in the example of section 4, R9 is a composite PCE that can take part in inter-AS path 
computation, responsible for path computation in AS1 towards AS2.
PCCs has to dynamically discover R9 as a PCE for inter-AS path computation as well as its path computation domain: AS1, and the domain towards which it can compute paths: AS2 

This will be added in next revision.

4. section 5.1.3 refers to the capability to handle "request prioritization" but it is unclear to which priority you are referring is this a specific and explicit information element as part of the request itself ?
[JLLR] Yes it is

Note that actually capability description is out of the scope of this document, and should be addressed in a separate doc

 or an implicit prioritization mechanism based on the requestor identity, the type of request it initiates, etc
 

5. section 4 refers to the PCE liveness detection, there are two issues here where this 60s come from - why is there a need for emitting such liveness information every 60s ?
[JLLR] I agree that the requirement has to be reformulated. Actually what we want is a way to discover that a PCE is no longer alive under 60s, and this does not necessarily require emitting such information every 60s, this could be event driven by the way.

  beside the overhead such mechanism would generate it is rather unclear why a discovery mechanism has to ensure such keep-alive mechanism even for PCCs that do not make any use of the PCE(s) issuing this information

6. section 5.8 is simply outside of the scope of the present document, PCE selection is decoupled from their discovery
[JLLR] OK, this will be removed

By the way do you have any feedback on section 5.5?

Again thanks for these useful comments

Best Regards

JL 

thanks,

- dimitri.

"LE ROUX Jean-Louis RD-CORE-LAN" <jeanlouis.leroux <at> francetelecom.com>
Sent by: pce-bounces <at> lists.ietf.org
06/29/2005 14:00 ZE2

To: <pce <at> ietf.org>
cc:
bcc:
Subject: [Pce] PCE Disco Reqs v01


Hi all,

Version 01 of the PCE discovery reqs ID has just been published
http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt

This version takes into account comments received during Minneapolis session and on the list.

Here are the major changes since 00:
-Added multi-area network case in the problem statement
-Added application scenario (section 4)
-Section 5.1 on capability discovery modified as per discussions on the list:
        -Discovery of PCE location, PCE scopes and domain(s) under control is mandatory
        -Capability discovery is no longer a MUST
       The list of capabilities is now out of the scope and should be addressed in a
       separate document.
      
-Added section 5.6 on extensibility
-Added Security section

Section 5.5 (Discovery of PCE capacity and congestion) requires WG feedback:
-Is there a need for the discovery of PCE capacity in terms of computation power? This static parameter could be used to ensure weighted load balancing of requests in case PCEs do not have the same capacity.

-Would it be useful that a PCE report its status as "congested" in case it is too busy? PCCs may then use this dynamic information to prefer a different PCE.

Your comments/feedback would be highly welcome, especially on the above point

Best Regards,

JL

_______________________________________________
Pce mailing list
Pce <at> lists.ietf.org
https://www1.ietf.org/mailman/listinfo/pce

<div>
<div><span class="014583706-05072005">Hi 
Dimitri</span></div>
<div>
<span class="014583706-05072005"></span>&nbsp;</div>
<div><span class="014583706-05072005">Thanks 
for these valuable comments</span></div>
<div>
<span class="014583706-05072005"></span>&nbsp;</div>
<div><span class="014583706-05072005">Please 
see inline</span></div>
<blockquote dir="ltr">
  <div></div>
  <div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">-----Message d'origine-----<br>De&nbsp;: 
  Dimitri.Papadimitriou <at> alcatel.be [mailto:Dimitri.Papadimitriou <at> alcatel.be] 
  <br>Envoy&eacute;&nbsp;: samedi 2 juillet 2005 16:26<br>&Agrave;&nbsp;: LE 
  ROUX Jean-Louis RD-CORE-LAN<br>Cc&nbsp;: 
  pce <at> ietf.org<br>Objet&nbsp;: Re: [Pce] PCE Disco Reqs 
  v01<br><br>
</div>
  <p>hi jean-louis</p>
  <p>thanks for the update, i have the following 
  comments/feedback</p>
  <p>1. in the introduction you refer to "some 
  relevant PCE" and it is important to be more accurate since this plays a 
  specific role in the discovery context of this document<br><span class="014583706-05072005">[JLLR]&nbsp; 
  Yes, it means PCE for inter-domain path computation, we will clarify in next 
  revision&nbsp;</span></p>
  <p>2. in the same section the document mentions 
  MPLS-TE and GMPLS capable PCEs, i wonder whether you not simply mean here path 
  computed such as to be subsequently used by RSVP-TE and GMPLS RSVP-TE taking 
  into accound specific set of constraints that can be used by such PCEs; 
  <br><span class="014583706-05072005">[JLLR]&nbsp;Yes, I think that this is clear for everyone isn't 
  it?</span></p>
  <p><span class="014583706-05072005">&nbsp;</span>also i think there is an inclusion 
  relationship that should be pointed out here as the latter (a GMPLS-capable 
  PCE) is by definition an MPLS-<span class="014583706-05072005">&nbsp;</span>capable PCE<br><span class="014583706-05072005">[JLLR]&nbsp;Agree&nbsp;</span></p>
  <p>3. section 5.1.2 it is unclear from this 
  section whether the proposed discovery mechanism still allows for having 
  multiple PCEs scoping a set of overlapping domains; <br><span class="014583706-05072005">[JLLR]&nbsp;The 
  answer is yes,&nbsp;</span><br><span class="014583706-05072005">[JLLR]&nbsp;But actually this is a question 
  more related to the PCE architecture itself. It depends on what you mean by 
  overlapping. </span><span class="014583706-05072005">In the inter-area context for instance there 
  is some overlapping between domains as ABRs belong to two or 
  more&nbsp;domains.</span></p>
  <p><span class="014583706-05072005">&nbsp;</span>and in particular when X PCEs scope a 
  single domain how it is possible to target a given PCE if there scope in terms 
  of reachable prefixes is non-overlapping<br><span class="014583706-05072005">&nbsp;</span><br><span class="014583706-05072005">[JLLR]&nbsp;You raise a good point, we 
  should add discovery of domain(s) towards which&nbsp;a PCE can compute a 
  path</span></p>
  <p><span class="014583706-05072005">For instance in the example of section 4, R9 is a composite PCE that can take part in inter-AS 
  path&nbsp;<br>computation, responsible for path computation in AS1 towards 
  AS2. </span><span class="014583706-05072005">PCCs has to dynamically discover R9 as a&nbsp;PCE for inter-AS path 
  computation as well as its path computation&nbsp;domain: AS1, and&nbsp;the 
  domain&nbsp;towards which it can compute paths: 
  AS2&nbsp;</span></p>
  <p><span class="014583706-05072005">This 
  will be added in next revision.</span><span class="014583706-05072005"><br></span></p>
</blockquote>
<blockquote dir="ltr">
  <p>4. section 5.1.3 refers to the capability to 
  handle "request prioritization" but it is unclear to which priority you are 
  referring is this a specific and explicit information element as part of the 
  request itself ? <br><span class="014583706-05072005">[JLLR]&nbsp;Yes it is</span></p>
  <p><span class="014583706-05072005"></span><span class="014583706-05072005">Note that actually capability 
  description is out of the scope of this document, and should be addressed in a 
  separate doc</span></p>
  <p><span class="014583706-05072005">&nbsp;</span>or 
  an implicit prioritization mechanism based on the requestor identity, the type 
  of request it initiates, etc<br><span class="014583706-05072005">&nbsp;</span></p>
  <p>5. section 4 refers to the PCE liveness 
  detection, there are two issues here where this 60s come from - why is there a 
  need for emitting such liveness information every 60s ?<br><span class="014583706-05072005">[JLLR]&nbsp;I 
  agree that the requirement has to be reformulated. Actually what we want is a 
  way to discover that a PCE is no longer alive under&nbsp;60s, and this does 
  not necessarily require emitting such information every 60s, this could be 
  event driven by the way.</span></p>
  <p><span class="014583706-05072005">&nbsp;</span> 
  beside the overhead such mechanism would generate it is rather unclear why a 
  discovery mechanism has to ensure such keep-alive mechanism even for PCCs that 
  do not make any use of the PCE(s) issuing this information</p>
  <p>6. section 5.8 is simply outside of the scope 
  of the present document, PCE selection is decoupled from their 
  discovery<br><span class="014583706-05072005">[JLLR]&nbsp;OK, this will be 
removed</span></p>
  <p><span class="014583706-05072005">By 
  the&nbsp;way do you have&nbsp;any feedback on section 5.5?</span></p>
  <p><span class="014583706-05072005">Again 
  thanks for these useful comments</span></p>
  <p><span class="014583706-05072005">Best 
  Regards</span></p>
  <p><span class="014583706-05072005">JL&nbsp;</span></p>
  <p>thanks,</p>
  <p>- dimitri.<br><br>"LE 
  ROUX Jean-Louis RD-CORE-LAN" 
  &lt;jeanlouis.leroux <at> francetelecom.com&gt;<br>Sent by: 
  pce-bounces <at> lists.ietf.org<br>06/29/2005 14:00 
  ZE2<br><br>To: &lt;pce <at> ietf.org&gt;<br>cc: <br>bcc: <br>Subject: [Pce] PCE 
  Disco Reqs v01<br><br><br></p>
  <p>Hi all, <br><br>Version 01 of the PCE discovery reqs ID 
  has just been published <br><a href="http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt">http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt</a> <br><br>This version takes into account comments 
  received during Minneapolis session and on the list. 
  <br><br>Here are the major changes since 00: 
  <br>-Added multi-area network case in the problem statement <br>-Added application scenario (section 4) <br>-Section 5.1 on 
  capability discovery modified as per discussions on the list: 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  -Discovery of PCE location, PCE scopes and domain(s) under control is 
  mandatory <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Capability discovery 
  is no longer a MUST 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The list of capabilities is 
  now out of the scope and should be addressed in a 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; separate document. 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>-Added section 5.6 on 
  extensibility <br>-Added Security section <br><br>Section 
  5.5 (Discovery of PCE capacity and congestion) requires WG feedback: <br>-Is there a need for the discovery of 
  PCE capacity in terms of computation power? This static parameter could be 
  used to ensure weighted load balancing of requests in case PCEs do not have 
  the same capacity. <br><br>-Would it be useful that a PCE report its status as 
  "congested" in case it is too busy? PCCs may then use this dynamic information 
  to prefer a different PCE. <br><br>Your comments/feedback would be highly 
  welcome, especially on the above point <br><br>Best 
  Regards, <br><br>JL <br><br>_______________________________________________<br>Pce 
  mailing list<br>Pce <at> lists.ietf.org<br><a href="https://www1.ietf.org/mailman/listinfo/pce">https://www1.ietf.org/mailman/listinfo/pce</a></p>
</blockquote>
</div>
Gray, Eric | 5 Jul 2005 13:37

RE: RE : Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

JL,
 
    As long as we include explicit security requirements, and define some trust models
that we expect to support, then we are definitely moving in the right direction. We can
figure out wording details as we go along.  In other words, I do not know that the text
you propose is what the WG is looking for, but including your proposed text gives the
WG something to respond to.
 
    One relatviely small point is that there is a list of high-level requirements in section
3.2 (Requirements Overview) that should include some mention of security requirements.
 
--
Eric
-----Original Message-----
From: LE ROUX Jean-Louis RD-CORE-LAN [mailto:jeanlouis.leroux <at> francetelecom.com]
Sent: Tuesday, July 05, 2005 2:37 AM
To: Gray, Eric; JP Vasseur
Cc: pce <at> ietf.org
Subject: RE : [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Hi Eric
 
We have a security section that is IMHO quite clear in terms of masquerade, forgery...
and indirectly addresses trust models you refer to.
But I agree with you that security requirements of a PCE discovery solution would better
be addressed in a dedicated section "PCE Discovery security requirements"  rather than in the default security section.
What about the following:
 
"5.9 PCE Discovery Security Requirements
 
The PCE Discovery mechanism MUST address security issues across multiple ASes.
Key consideration MUST be given in terms of how to establish a trusted model for PCE discovery.
The PCE discovery mechanism MUST explicitly support a specific set of trust models.
 
Particularly, mechanisms MUST be defined to avoid PCE masquerade and forgery.
It MUST be possible for PCEs to authenticate PCCs and for PCCs to authenticate PCEs.
 
Also, the PCE discovery mechanism MUST be able to restrict the scope of 
discovery to a set of authorized PCCs. The identity of any PCE MUST only be learnt by authorized PCCs.
It MUST be possible to encrypt  discovery information." 
Note that this requirement also implies the PCC-PCE communication protocol.
 
Is it fine with you if we add this section for next revision?
 
Best Regards
 
JL
 
 
 
 
-----Message d'origine-----
De : pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la part de Gray, Eric
Envoyé : jeudi 30 juin 2005 17:27
À : 'JP Vasseur'
Cc : pce <at> ietf.org
Objet : RE: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

JP,
 
    I believe this draft needs more work - particularly in the area of establishing
"security requirements" (as opposed to simple inclusion of a security section)
- before it is ready to be adopted as a WG document.
[JLLR]  
 
    Implicit in the PCE concept is the inherently undefined nature of the trust
model that may apply in any given deployment. Consequently it MUST be a
requirement that any PCE discovery mechanism explicitly supports a specific
set of trust models and that the complete set of possible solutions (assuming
the _possibility_ that one solution may not satisfy all requirements) supports
every reasonable combination of security trust models.
 
    It is imperative that this is established as a "requirement" of PCE discovery
solutions because this requirement will have a very definite effect on choices
the WG might make right away in seeking a solution.
 
    For example, assuming that we need to support a model where we assume
that it is possible for a foreign agency to mimic a valid PCE, this assumption
will severely limit the approaches that might be used - as long as it is also a
requirement to avoid approaches that require extensive manual configuration.
 
    To further illustrate this example, this requirement would make a choice of
discovery based on broadcast/multicast announcement mechanisms much
less workable - possibly directing us more toward an authenticated directory
service approach.
 
    To accept this document as a WG document without first nailing down the
specific security requirements that we want to apply would potentially send
the wrong message to the authors, the WG, the Internet community and -
possibly - the IESG.
 
    It is far more important to ensure that the work has started in the right
direction than it is to drive the work to conform more closely to a time table.
 
--
Eric
-----Original Message-----
From: pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org]On Behalf Of JP Vasseur
Sent: Thursday, June 30, 2005 9:53 AM
To: pce <at> ietf.org
Subject: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Dear WG,

draft-leroux-discovery-reqs has just been re-published, addressing several of comments received during the last meeting and on the list (very few remaining open items).

Could you provide us your feed-back on adopting draft-leroux-discovery-reqs-01.txt as a WG document ?

JP and Adrian.

<div>
<div><span class="584442011-05072005">JL,</span></div>
<div>
<span class="584442011-05072005"></span>&nbsp;</div>
<div><span class="584442011-05072005">&nbsp;&nbsp;&nbsp; As long as we include explicit security requirements, and 
define some trust models</span></div>
<div><span class="584442011-05072005">that 
we expect to support, then we are definitely moving in the right direction. We 
can</span></div>
<div><span class="584442011-05072005">figure 
out&nbsp;wording details&nbsp;as we go along.&nbsp; In other words, I do not 
know that the text </span></div>
<div><span class="584442011-05072005">you 
propose is what the WG is looking for, but including your proposed text gives 
the</span></div>
<div><span class="584442011-05072005">WG 
something to respond to.</span></div>
<div>
<span class="584442011-05072005"></span>&nbsp;</div>
<div><span class="584442011-05072005">&nbsp;&nbsp;&nbsp; One&nbsp;relatviely small point&nbsp;is that there is a 
list of high-level requirements in section </span></div>
<div>
<span class="584442011-05072005">3.2 
(Requirements Overview) that </span><span class="584442011-05072005">should include some mention of security 
requirements.</span>
</div>
<div>
<span class="584442011-05072005"></span>&nbsp;</div>
<div><span class="584442011-05072005">--</span></div>
<div><span class="584442011-05072005">Eric</span></div>
<blockquote dir="ltr">
  <div class="OutlookMessageHeader" dir="ltr" align="left">-----Original Message-----<br>From: LE ROUX Jean-Louis 
  RD-CORE-LAN [mailto:jeanlouis.leroux <at> francetelecom.com]<br>Sent: 
  Tuesday, July 05, 2005 2:37 AM<br>To: Gray, Eric; JP 
  Vasseur<br>Cc: pce <at> ietf.org<br>Subject: RE : [Pce] Adoption of 
  draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
  <div><span class="521261316-04072005">Hi 
  Eric</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">We 
  have a security section that is IMHO quite clear in terms of masquerade, 
  forgery...</span></div>
  <div><span class="521261316-04072005">and 
  indirectly addresses trust models you refer to.</span></div>
  <div><span class="521261316-04072005">But 
  I agree with you that&nbsp;security requirements of a PCE discovery 
  solution&nbsp;would better</span></div>
  <div><span class="521261316-04072005">be 
  addressed in a&nbsp;dedicated&nbsp;section "PCE&nbsp;Discovery security 
  requirements"&nbsp;&nbsp;rather than in the default&nbsp;security 
  section.</span></div>
  <div><span class="521261316-04072005">What 
  about the following:</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">"5.9 
  PCE Discovery Security Requirements</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">The&nbsp;PCE Discovery mechanism&nbsp;MUST address security issues 
  across multiple ASes.</span></div>
  <div><span class="521261316-04072005">Key 
  consideration MUST be given in terms of how to establish a trusted model for 
  PCE discovery.</span></div>
  <div><span class="521261316-04072005">The PCE discovery mechanism MUST explicitly support a specific 
  <span class="960210815-30062005">set of trust 
  models.</span></span></div>
  <div><span class="521261316-04072005"><span class="960210815-30062005">
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">Particularly, mechanisms MUST be defined to avoid PCE masquerade and 
  forgery.</span></div></span></span></div>
  <div><span class="521261316-04072005"><span class="960210815-30062005">It MUST be possible for PCEs to 
  authenticate PCCs and for PCCs to authenticate 
  PCEs.</span></span></div>
  <div>
<span class="521261316-04072005"><span class="960210815-30062005"></span></span>&nbsp;</div>
  <div><span class="521261316-04072005"><span class="960210815-30062005">Also, 
  the PCE discovery mechanism MUST be able to 
  restrict the scope of&nbsp;<br>discovery to a set of authorized PCCs. The 
  identity of any PCE MUST&nbsp;only be learnt by authorized PCCs. 
  </span></span></div>
  <div><span class="521261316-04072005"><span class="960210815-30062005">It MUST 
  be possible to encrypt&nbsp; discovery information."&nbsp; 
  <br></span></span></div>
  <div><span class="521261316-04072005">
  <div><span class="521261316-04072005">Note 
  that this requirement&nbsp;also implies the PCC-PCE communication 
  protocol.</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">Is 
  it fine with you if we add this section for next revision?</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">Best 
  Regards</span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div><span class="521261316-04072005">JL</span></div></span></div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <div>
<span class="521261316-04072005"></span>&nbsp;</div>
  <blockquote dir="ltr">
    <div></div>
    <div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">-----Message d'origine-----<br>De&nbsp;: 
    pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la part 
    de Gray, Eric<br>Envoy&eacute;&nbsp;: jeudi 30 juin 2005 
    17:27<br>&Agrave;&nbsp;: 'JP Vasseur'<br>Cc&nbsp;: 
    pce <at> ietf.org<br>Objet&nbsp;: RE: [Pce] Adoption of 
    draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
    <div><span class="960210815-30062005">JP,</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; I believe this draft needs more work - particularly in 
    the area of establishing</span></div>
    <div><span class="960210815-30062005">"security requirements" (as opposed to simple inclusion of a security 
    section)</span></div>
    <div><span class="960210815-30062005">- before it is ready to be adopted as a WG 
    document.<br><span class="521261316-04072005">[JLLR]&nbsp;&nbsp;</span></span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; Implicit in the PCE concept is the inherently undefined 
    nature of the trust</span></div>
    <div><span class="960210815-30062005">model that may apply in any given deployment. Consequently it MUST be 
    a</span></div>
    <div><span class="960210815-30062005">requirement that any PCE discovery mechanism explicitly supports a 
    specific</span></div>
    <div><span class="960210815-30062005">set of trust models and that the complete set of possible solutions 
    (assuming</span></div>
    <div><span class="960210815-30062005">the _possibility_ that one solution may not satisfy all requirements) 
    supports</span></div>
    <div><span class="960210815-30062005">every reasonable combination of security trust 
    models.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is imperative that this is established as a 
    "requirement" of PCE discovery</span></div>
    <div><span class="960210815-30062005">solutions because this requirement will have a very definite effect 
    on choices</span></div>
    <div><span class="960210815-30062005">the WG&nbsp;might make right away in seeking a 
    solution.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; For example, assuming that we need to support a model 
    where we assume</span></div>
    <div><span class="960210815-30062005">that it is possible for a foreign agency to mimic a valid PCE, this 
    assumption </span></div>
    <div><span class="960210815-30062005">will severely limit the approaches that might be used - as long as it 
    is also a</span></div>
    <div><span class="960210815-30062005">requirement to avoid approaches that&nbsp;require 
    extensive&nbsp;manual configuration.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To further illustrate this example, this requirement 
    would make a choice of</span></div>
    <div><span class="960210815-30062005">discovery based on broadcast/multicast&nbsp;announcement mechanisms 
    much</span></div>
    <div><span class="960210815-30062005">less workable - possibly directing us more toward an authenticated 
    directory</span></div>
    <div><span class="960210815-30062005">service approach.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To accept this document as a WG document without first 
    nailing down the</span></div>
    <div><span class="960210815-30062005">specific security requirements that we want to apply would 
    potentially send </span></div>
    <div><span class="960210815-30062005">the wrong message to the authors, the WG, the Internet 
    community&nbsp;and - </span></div>
    <div><span class="960210815-30062005">possibly -&nbsp;the IESG.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is far more important to ensure that the work has 
    started in the right</span></div>
    <div><span class="960210815-30062005">direction than it is to drive the work to conform more closely to a 
    time table.</span></div>
    <div>
<span class="960210815-30062005"></span>&nbsp;</div>
    <div><span class="960210815-30062005">--</span></div>
    <div><span class="960210815-30062005">Eric</span></div>
    <blockquote dir="ltr">
      <div class="OutlookMessageHeader" dir="ltr" align="left">-----Original Message-----<br>From: 
      pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org]On Behalf 
      Of JP Vasseur<br>Sent: Thursday, June 30, 2005 9:53 
      AM<br>To: pce <at> ietf.org<br>Subject: [Pce] Adoption of 
      draft-leroux-pce-discovery-reqs-01.txt as WG document 
      ?<br><br>
</div>
      <p><span class="Apple-style-span"><span class="Apple-style-span">Dear WG,</span></span></p>
      <p>draft-leroux-discovery-reqs has just been 
      re-published, addressing several of comments received during the last 
      meeting and on the list (very few remaining open items).</p>
      <p>Could you provide us your feed-back on 
      adopting draft-leroux-discovery-reqs-01.txt as a WG document ?</p>
      <p>JP and 
Adrian.</p>
</blockquote>
</blockquote>
</blockquote>
</div>

RE : RE : Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Hi Eric
 
> One relatviely small point is that there is a list of high-level requirements in section
>3.2 (Requirements Overview) that should include some mention of security requirements.
 
You are right, this will be done in next revision
 
Thanks for these relevant comments
 
JL
 
-----Message d'origine-----
De : Gray, Eric [mailto:Eric.Gray <at> marconi.com]
Envoyé : mardi 5 juillet 2005 13:37
À : LE ROUX Jean-Louis RD-CORE-LAN
Cc : pce <at> ietf.org; JP Vasseur
Objet : RE: RE : [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

JL,
 
    As long as we include explicit security requirements, and define some trust models
that we expect to support, then we are definitely moving in the right direction. We can
figure out wording details as we go along.  In other words, I do not know that the text
you propose is what the WG is looking for, but including your proposed text gives the
WG something to respond to.
 
    One relatviely small point is that there is a list of high-level requirements in section
3.2 (Requirements Overview) that should include some mention of security requirements.
 
--
Eric
-----Original Message-----
From: LE ROUX Jean-Louis RD-CORE-LAN [mailto:jeanlouis.leroux <at> francetelecom.com]
Sent: Tuesday, July 05, 2005 2:37 AM
To: Gray, Eric; JP Vasseur
Cc: pce <at> ietf.org
Subject: RE : [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Hi Eric
 
We have a security section that is IMHO quite clear in terms of masquerade, forgery...
and indirectly addresses trust models you refer to.
But I agree with you that security requirements of a PCE discovery solution would better
be addressed in a dedicated section "PCE Discovery security requirements"  rather than in the default security section.
What about the following:
 
"5.9 PCE Discovery Security Requirements
 
The PCE Discovery mechanism MUST address security issues across multiple ASes.
Key consideration MUST be given in terms of how to establish a trusted model for PCE discovery.
The PCE discovery mechanism MUST explicitly support a specific set of trust models.
 
Particularly, mechanisms MUST be defined to avoid PCE masquerade and forgery.
It MUST be possible for PCEs to authenticate PCCs and for PCCs to authenticate PCEs.
 
Also, the PCE discovery mechanism MUST be able to restrict the scope of 
discovery to a set of authorized PCCs. The identity of any PCE MUST only be learnt by authorized PCCs.
It MUST be possible to encrypt  discovery information." 
Note that this requirement also implies the PCC-PCE communication protocol.
 
Is it fine with you if we add this section for next revision?
 
Best Regards
 
JL
 
 
 
 
-----Message d'origine-----
De : pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la part de Gray, Eric
Envoyé : jeudi 30 juin 2005 17:27
À : 'JP Vasseur'
Cc : pce <at> ietf.org
Objet : RE: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

JP,
 
    I believe this draft needs more work - particularly in the area of establishing
"security requirements" (as opposed to simple inclusion of a security section)
- before it is ready to be adopted as a WG document.
[JLLR]  
 
    Implicit in the PCE concept is the inherently undefined nature of the trust
model that may apply in any given deployment. Consequently it MUST be a
requirement that any PCE discovery mechanism explicitly supports a specific
set of trust models and that the complete set of possible solutions (assuming
the _possibility_ that one solution may not satisfy all requirements) supports
every reasonable combination of security trust models.
 
    It is imperative that this is established as a "requirement" of PCE discovery
solutions because this requirement will have a very definite effect on choices
the WG might make right away in seeking a solution.
 
    For example, assuming that we need to support a model where we assume
that it is possible for a foreign agency to mimic a valid PCE, this assumption
will severely limit the approaches that might be used - as long as it is also a
requirement to avoid approaches that require extensive manual configuration.
 
    To further illustrate this example, this requirement would make a choice of
discovery based on broadcast/multicast announcement mechanisms much
less workable - possibly directing us more toward an authenticated directory
service approach.
 
    To accept this document as a WG document without first nailing down the
specific security requirements that we want to apply would potentially send
the wrong message to the authors, the WG, the Internet community and -
possibly - the IESG.
 
    It is far more important to ensure that the work has started in the right
direction than it is to drive the work to conform more closely to a time table.
 
--
Eric
-----Original Message-----
From: pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org]On Behalf Of JP Vasseur
Sent: Thursday, June 30, 2005 9:53 AM
To: pce <at> ietf.org
Subject: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WG document ?

Dear WG,

draft-leroux-discovery-reqs has just been re-published, addressing several of comments received during the last meeting and on the list (very few remaining open items).

Could you provide us your feed-back on adopting draft-leroux-discovery-reqs-01.txt as a WG document ?

JP and Adrian.

<div>
<div><span class="714120312-05072005">Hi 
Eric</span></div>
<div><span class="714120312-05072005"><span class="584442011-05072005"></span>&nbsp;</span></div>
<div>
<div><span class="584442011-05072005"><span class="714120312-05072005">&gt;</span>&nbsp;One&nbsp;relatviely small point&nbsp;is that there is a list of 
high-level requirements in section </span></div>
<div>
<span class="584442011-05072005"><span class="714120312-05072005">&gt;</span>3.2 
(Requirements Overview) that </span><span class="584442011-05072005">should 
include some mention of security 
requirements.</span>
</div>
</div>
<div>
<span class="714120312-05072005"></span>&nbsp;</div>
<div><span class="714120312-05072005">You 
are right, this will be done in next revision</span></div>
<div>
<span class="714120312-05072005"></span>&nbsp;</div>
<div><span class="714120312-05072005">Thanks 
for these&nbsp;relevant comments</span></div>
<div>
<span class="714120312-05072005"></span>&nbsp;</div>
<div><span class="714120312-05072005">JL</span></div>
<div>
<span class="714120312-05072005"></span>&nbsp;</div>
<blockquote dir="ltr">
  <div></div>
  <div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">-----Message d'origine-----<br>De&nbsp;: Gray, Eric 
  [mailto:Eric.Gray <at> marconi.com] <br>Envoy&eacute;&nbsp;: mardi 5 juillet 2005 
  13:37<br>&Agrave;&nbsp;: LE ROUX Jean-Louis RD-CORE-LAN<br>Cc&nbsp;: 
  pce <at> ietf.org; JP Vasseur<br>Objet&nbsp;: RE: RE : [Pce] Adoption of 
  draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
  <div><span class="584442011-05072005">JL,</span></div>
  <div>
<span class="584442011-05072005"></span>&nbsp;</div>
  <div><span class="584442011-05072005">&nbsp;&nbsp;&nbsp; As long as we include explicit security requirements, and 
  define some trust models</span></div>
  <div><span class="584442011-05072005">that 
  we expect to support, then we are definitely moving in the right direction. We 
  can</span></div>
  <div><span class="584442011-05072005">figure out&nbsp;wording details&nbsp;as we go along.&nbsp; In other 
  words, I do not know that the text </span></div>
  <div><span class="584442011-05072005">you 
  propose is what the WG is looking for, but including your proposed text gives 
  the</span></div>
  <div><span class="584442011-05072005">WG 
  something to respond to.</span></div>
  <div>
<span class="584442011-05072005"></span>&nbsp;</div>
  <div><span class="584442011-05072005">&nbsp;&nbsp;&nbsp; One&nbsp;relatviely small point&nbsp;is that there is a 
  list of high-level requirements in section </span></div>
  <div>
<span class="584442011-05072005">3.2 
  (Requirements Overview) that </span><span class="584442011-05072005">should include 
  some mention of security requirements.</span>
</div>
  <div>
<span class="584442011-05072005"></span>&nbsp;</div>
  <div><span class="584442011-05072005">--</span></div>
  <div><span class="584442011-05072005">Eric</span></div>
  <blockquote dir="ltr">
    <div class="OutlookMessageHeader" dir="ltr" align="left">-----Original Message-----<br>From: LE ROUX Jean-Louis 
    RD-CORE-LAN [mailto:jeanlouis.leroux <at> francetelecom.com]<br>Sent: 
    Tuesday, July 05, 2005 2:37 AM<br>To: Gray, Eric; JP 
    Vasseur<br>Cc: pce <at> ietf.org<br>Subject: RE : [Pce] Adoption of 
    draft-leroux-pce-discovery-reqs-01.txt as WG document ?<br><br>
</div>
    <div><span class="521261316-04072005">Hi 
    Eric</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">We 
    have a security section that is IMHO quite clear in terms of masquerade, 
    forgery...</span></div>
    <div><span class="521261316-04072005">and indirectly addresses trust models you refer 
    to.</span></div>
    <div><span class="521261316-04072005">But I agree with you that&nbsp;security requirements of a PCE 
    discovery solution&nbsp;would better</span></div>
    <div><span class="521261316-04072005">be 
    addressed in a&nbsp;dedicated&nbsp;section "PCE&nbsp;Discovery security 
    requirements"&nbsp;&nbsp;rather than in the default&nbsp;security 
    section.</span></div>
    <div><span class="521261316-04072005">What about the following:</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">"5.9 PCE Discovery Security Requirements</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">The&nbsp;PCE Discovery mechanism&nbsp;MUST address security issues 
    across multiple ASes.</span></div>
    <div><span class="521261316-04072005">Key consideration MUST be given in terms of how to establish a 
    trusted model for PCE discovery.</span></div>
    <div><span class="521261316-04072005">The PCE discovery mechanism MUST explicitly support a specific 
    <span class="960210815-30062005">set of trust 
    models.</span></span></div>
    <div><span class="521261316-04072005"><span class="960210815-30062005">
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">Particularly, mechanisms MUST be defined to avoid PCE masquerade and 
    forgery.</span></div></span></span></div>
    <div><span class="521261316-04072005"><span class="960210815-30062005">It MUST be possible for PCEs to 
    authenticate PCCs and for PCCs to authenticate 
    PCEs.</span></span></div>
    <div>
<span class="521261316-04072005"><span class="960210815-30062005"></span></span>&nbsp;</div>
    <div><span class="521261316-04072005"><span class="960210815-30062005">Also, 
    the PCE discovery mechanism MUST be able 
    to restrict the scope of&nbsp;<br>discovery to a set of authorized PCCs. The 
    identity of any PCE MUST&nbsp;only be learnt by authorized PCCs. 
    </span></span></div>
    <div><span class="521261316-04072005"><span class="960210815-30062005">It MUST 
    be possible to encrypt&nbsp; discovery information."&nbsp; 
    <br></span></span></div>
    <div><span class="521261316-04072005">
    <div><span class="521261316-04072005">Note that this requirement&nbsp;also implies the PCC-PCE 
    communication protocol.</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">Is 
    it fine with you if we add this section for next 
    revision?</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">Best Regards</span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div><span class="521261316-04072005">JL</span></div></span></div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <div>
<span class="521261316-04072005"></span>&nbsp;</div>
    <blockquote dir="ltr">
      <div></div>
      <div class="OutlookMessageHeader" lang="fr" dir="ltr" align="left">-----Message d'origine-----<br>De&nbsp;: 
      pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org] De la 
      part de Gray, Eric<br>Envoy&eacute;&nbsp;: jeudi 30 juin 2005 
      17:27<br>&Agrave;&nbsp;: 'JP Vasseur'<br>Cc&nbsp;: 
      pce <at> ietf.org<br>Objet&nbsp;: RE: [Pce] Adoption of 
      draft-leroux-pce-discovery-reqs-01.txt as WG document 
      ?<br><br>
</div>
      <div><span class="960210815-30062005">JP,</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; I believe this draft needs more work - particularly 
      in the area of establishing</span></div>
      <div><span class="960210815-30062005">"security requirements" (as opposed to simple inclusion of a 
      security section)</span></div>
      <div><span class="960210815-30062005">- before it is ready to be adopted as a WG 
      document.<br><span class="521261316-04072005">[JLLR]&nbsp;&nbsp;</span></span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; Implicit in the PCE concept is the inherently 
      undefined nature of the trust</span></div>
      <div><span class="960210815-30062005">model that may apply in any given deployment. Consequently it MUST 
      be a</span></div>
      <div><span class="960210815-30062005">requirement that any PCE discovery mechanism explicitly supports a 
      specific</span></div>
      <div><span class="960210815-30062005">set of trust models and that the complete set of possible solutions 
      (assuming</span></div>
      <div><span class="960210815-30062005">the _possibility_ that one solution may not satisfy all 
      requirements) supports</span></div>
      <div><span class="960210815-30062005">every reasonable combination of security trust 
      models.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is imperative that this is established as a 
      "requirement" of PCE discovery</span></div>
      <div><span class="960210815-30062005">solutions because this requirement will have a very definite effect 
      on choices</span></div>
      <div><span class="960210815-30062005">the WG&nbsp;might make right away in seeking a 
      solution.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; For example, assuming that we need to support a model 
      where we assume</span></div>
      <div><span class="960210815-30062005">that it is possible for a foreign agency to mimic a valid PCE, this 
      assumption </span></div>
      <div><span class="960210815-30062005">will severely limit the approaches that might be used - as long as 
      it is also a</span></div>
      <div><span class="960210815-30062005">requirement to avoid approaches that&nbsp;require 
      extensive&nbsp;manual configuration.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To further illustrate this example, this requirement 
      would make a choice of</span></div>
      <div><span class="960210815-30062005">discovery based on broadcast/multicast&nbsp;announcement mechanisms 
      much</span></div>
      <div><span class="960210815-30062005">less workable - possibly directing us more toward an authenticated 
      directory</span></div>
      <div><span class="960210815-30062005">service approach.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; To accept this document as a WG document without 
      first nailing down the</span></div>
      <div><span class="960210815-30062005">specific security requirements that we want to apply would 
      potentially send </span></div>
      <div><span class="960210815-30062005">the wrong message to the authors, the WG, the Internet 
      community&nbsp;and - </span></div>
      <div><span class="960210815-30062005">possibly -&nbsp;the IESG.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">&nbsp;&nbsp;&nbsp; It is far more important to ensure that the work has 
      started in the right</span></div>
      <div><span class="960210815-30062005">direction than it is to drive the work to conform more closely to a 
      time table.</span></div>
      <div>
<span class="960210815-30062005"></span>&nbsp;</div>
      <div><span class="960210815-30062005">--</span></div>
      <div><span class="960210815-30062005">Eric</span></div>
      <blockquote dir="ltr">
        <div class="OutlookMessageHeader" dir="ltr" align="left">-----Original Message-----<br>From: 
        pce-bounces <at> lists.ietf.org [mailto:pce-bounces <at> lists.ietf.org]On 
        Behalf Of JP Vasseur<br>Sent: Thursday, June 30, 2005 9:53 
        AM<br>To: pce <at> ietf.org<br>Subject: [Pce] Adoption of 
        draft-leroux-pce-discovery-reqs-01.txt as WG document 
        ?<br><br>
</div>
        <p><span class="Apple-style-span"><span class="Apple-style-span">Dear WG,</span></span></p>
        <p>draft-leroux-discovery-reqs has just 
        been re-published, addressing several of comments received during the 
        last meeting and on the list (very few remaining open items).</p>
        <p>Could you provide us your feed-back on 
        adopting draft-leroux-discovery-reqs-01.txt as a WG document ?</p>
        <p>JP and 
  Adrian.</p>
</blockquote>
</blockquote>
</blockquote>
</blockquote>
</div>
Zafar Ali (zali | 6 Jul 2005 08:40
Picon
Favicon

Re: Adoption of draft-leroux-pce-discovery-reqs-01.txt as WGdocument ?

In favor.
 
Thanks
 
Regards... Zafar
<div>
<div><span class="626363906-06072005">In favor. 
</span></div>
<div>
<span class="626363906-06072005"></span>&nbsp;</div>
<div><span class="626363906-06072005">Thanks</span></div>
<div>
<span class="626363906-06072005"></span>&nbsp;</div>
<div><span class="626363906-06072005">Regards... 
Zafar</span></div>
</div>
Picon
Favicon

RE: Adoption of draft-leroux-pce-discovery-reqs-01.txt asWGdocument?

> Could you provide us your feed-back on adopting 
> draft-leroux-discovery-reqs-01.txt as a WG document?

I support.

Jerry

Igor Bryskin | 6 Jul 2005 17:39

Re: PCE Disco Reqs v01

JL.
 
I have a couple of questions/comments.
 
1. On more than one occasions you use the term "TE-LSP path computation request". This sounds like an assumption that paths are computed separately for each TE-LSP. In reality, though, a single path computation request for a protected service is expected to determine paths for multiple LSPs (working and protecting). Furthermore, a single path computation may be performed for multiple services to make them possible sharing protection resources. I would suggest dropping the "TE-LSP" from the "TE-LSP path computation" combination;
 
2. In section 5.1.3 you mentioned among GMPLS capabilities a capability to compute multi-layer paths. This sounds inaccurate: paths are always computed in one network layer, however, a capable PCE may determine/suggest necessary reconfigurations in lower layer(s) in order to satisfy a particular path computation request;
 
3. I believe it should be stated more clearly that 2 stages of PCE discovery are needed: basic stage and detailed stage. During the basic stage PCE publishes some basic information about itself (presence, computation scope, etc.) on the network independently from PCCs. Interested PCCs should be able to participate in the detailed discovery stage, that is, to establish communication sessions (via PCC-PCE or a separate protocol) with the PCE to request/subscribe on the PCE detailed information (capability, CPU power, capacity, status, etc.). This would be good IMO both from the scalability and security points of view.
 
4. Responding to your questions:
        -Is there a need for the discovery of PCE capacity in terms of 
         computation power? This static parameter could be used to 
         ensure weighted load balancing of requests in case PCEs do not 
         have the same capacity.
Yes. It could be achieved by a direct request from a PCC during the detailed discovery stage (see above).

        -Would it be useful that a PCE report its status as "congested" 
         in case it is too busy? PCCs may then use this dynamic 
         information to prefer a different PCE. 
Yes. It could be achieved by a subscription of a PCC on the PCE's status change (also during the detailed discovery stage ).
 
Cheers,
Igor
 
----- Original Message -----
Sent: Wednesday, June 29, 2005 8:00 AM
Subject: [Pce] PCE Disco Reqs v01

Hi all,

Version 01 of the PCE discovery reqs ID has just been published
http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt

This version takes into account comments received during Minneapolis session and on the list.

Here are the major changes since 00:
-Added multi-area network case in the problem statement
-Added application scenario (section 4)
-Section 5.1 on capability discovery modified as per discussions on the list:
        -Discovery of PCE location, PCE scopes and domain(s) under control is mandatory
        -Capability discovery is no longer a MUST
       The list of capabilities is now out of the scope and should be addressed in a
       separate document.
      
-Added section 5.6 on extensibility
-Added Security section

Section 5.5 (Discovery of PCE capacity and congestion) requires WG feedback:
-Is there a need for the discovery of PCE capacity in terms of computation power? This static parameter could be used to ensure weighted load balancing of requests in case PCEs do not have the same capacity.

-Would it be useful that a PCE report its status as "congested" in case it is too busy? PCCs may then use this dynamic information to prefer a different PCE.

Your comments/feedback would be highly welcome, especially on the above point

Best Regards,

JL

_______________________________________________
Pce mailing list
Pce <at> lists.ietf.org
https://www1.ietf.org/mailman/listinfo/pce
<div>
<div>JL.</div>
<div>&nbsp;</div>
<div>I have a couple of questions/comments.</div>
<div>&nbsp;</div>
<div>1. On more than one occasions you use the term 
"TE-LSP path computation request". This sounds like an assumption that paths are 
computed separately for each TE-LSP. In reality, though, a single path 
computation request for a protected service is expected to determine paths for 
multiple LSPs (working and protecting). Furthermore, a single path computation 
may be performed for multiple services to make them possible&nbsp;sharing 
protection resources. I would suggest dropping the "TE-LSP" from the "TE-LSP 
path computation" combination;</div>
<div>&nbsp;</div>
<div>2. In section 5.1.3 you mentioned among GMPLS 
capabilities a capability to compute multi-layer paths. This sounds inaccurate: 
paths are always computed in one network layer, however, a capable PCE may 
determine/suggest necessary reconfigurations in lower layer(s) in order to 
satisfy a particular path computation request;</div>
<div>&nbsp;</div>
<div>3. I believe it should be stated more clearly that 
2 stages of PCE discovery&nbsp;are needed: basic stage and detailed stage. 
During the basic stage PCE publishes some basic information about itself 
(presence, computation scope, etc.) on the network independently from PCCs. 
Interested PCCs should be able to participate in the detailed discovery stage, 
that is, to establish communication sessions (via PCC-PCE or a separate 
protocol) with the PCE to request/subscribe on the PCE detailed information 
(capability, CPU power, capacity, status, etc.). This would be good IMO both 
from the scalability and security points of view.</div>
<div>&nbsp;</div>
<div>4. Responding to your questions:</div>
<div>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Is there a need for the 
discovery of PCE capacity in terms of&nbsp; 
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; computation power? This 
static parameter could be used to&nbsp; 
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ensure weighted load 
balancing of requests in case PCEs do not&nbsp; 
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; have the same capacity. 
</div>
<div>Yes. It could be achieved by a direct request from a PCC during the 
detailed discovery stage (see above).</div>
<div>
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Would it be useful 
that a PCE report its status as "congested"&nbsp; 
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; in case it is too busy? 
PCCs may then use this dynamic&nbsp; 
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; information to prefer a 
different PCE.&nbsp; <br><div>Yes. It could be achieved by a subscription of a&nbsp;PCC on the PCE's 
status change (also during the detailed discovery stage ).</div>
<div>&nbsp;</div>
<div>Cheers,</div>
<div>Igor</div>
</div>
<div>&nbsp;</div>
<blockquote>
  <div>----- Original Message ----- </div>
  <div>From: 
  <a title="jeanlouis.leroux <at> francetelecom.com" href="mailto:jeanlouis.leroux <at> francetelecom.com">LE ROUX Jean-Louis 
  RD-CORE-LAN</a> </div>
  <div>To: <a title="pce <at> ietf.org" href="mailto:pce <at> ietf.org">pce <at> ietf.org</a> </div>
  <div>Sent: Wednesday, June 29, 2005 8:00 
  AM</div>
  <div>Subject: [Pce] PCE Disco Reqs v01</div>
  <div><br></div>
  <p>Hi all, </p>
  <p>Version 01 of the PCE discovery reqs ID has 
  just been published <br><a href="http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt">http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt</a> 
  </p>
  <p>This version takes into account comments 
  received during Minneapolis session and on the list. </p>
  <p>Here are the major changes since 00: 
  <br>-Added multi-area network case in the 
  problem statement <br>-Added 
  application scenario (section 4) <br>-Section 5.1 on capability discovery modified as per discussions on the 
  list: <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Discovery of PCE location, PCE scopes and domain(s) 
  under control is mandatory 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Capability discovery is no longer a MUST <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The list of 
  capabilities is now out of the scope and should be addressed in a 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; separate document. 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  <br>-Added section 5.6 on extensibility 
  <br>-Added Security section </p>
  <p>Section 5.5 (Discovery of PCE capacity and 
  congestion) requires WG feedback: <br>-Is there a need for 
  the discovery of PCE capacity in terms of computation power? This static 
  parameter could be used to ensure weighted load balancing of requests in case 
  PCEs do not have the same capacity. </p>
  <p>-Would it be useful that a PCE report its 
  status as "congested" in case it is too busy? PCCs may then use this dynamic 
  information to prefer a different PCE. </p>
  <p>Your comments/feedback would be highly 
  welcome, especially on the above point </p>
  <p>Best Regards, </p>
  <p>JL </p>
  <p>
  </p>
<p></p>_______________________________________________<br>Pce mailing 
  list<br>Pce <at> lists.ietf.org<br>https://www1.ietf.org/mailman/listinfo/pce<br>
</blockquote>
</div>
Igor Bryskin | 6 Jul 2005 18:30

Re: Adoption of draft-leroux-pce-discovery-reqs-01.txt as WGdocument ?

I support the adopting draft-leroux-discovery-reqs-01.txt as a WG document.
 
Igor 
----- Original Message -----
From: JP Vasseur
Sent: Thursday, June 30, 2005 9:53 AM
Subject: [Pce] Adoption of draft-leroux-pce-discovery-reqs-01.txt as WGdocument ?

Dear WG,

draft-leroux-discovery-reqs has just been re-published, addressing several of comments received during the last meeting and on the list (very few remaining open items).

Could you provide us your feed-back on adopting draft-leroux-discovery-reqs-01.txt as a WG document ?

JP and Adrian.

_______________________________________________
Pce mailing list
Pce <at> lists.ietf.org
https://www1.ietf.org/mailman/listinfo/pce
<div>
<div>I support the adopting draft-leroux-discovery-reqs-01.txt as a WG 
document.</div>
<div>&nbsp;</div>
<div>Igor&nbsp;</div>
<blockquote>
  <div>----- Original Message ----- </div>
  <div>From: 
  <a title="jvasseur <at> cisco.com" href="mailto:jvasseur <at> cisco.com">JP Vasseur</a> 
  </div>
  <div>To: <a title="pce <at> ietf.org" href="mailto:pce <at> ietf.org">pce <at> ietf.org</a> </div>
  <div>Sent: Thursday, June 30, 2005 9:53 
  AM</div>
  <div>Subject: [Pce] Adoption of 
  draft-leroux-pce-discovery-reqs-01.txt as WGdocument ?</div>
  <div><br></div>
  <p><span class="Apple-style-span"><span class="Apple-style-span">Dear 
  WG,</span></span></p>
  <p>draft-leroux-discovery-reqs has just been 
  re-published, addressing several of comments received during the last meeting 
  and on the list (very few remaining open items).</p>
  <p>Could you provide us your feed-back on 
  adopting draft-leroux-discovery-reqs-01.txt as a WG document ?</p>
  <p>JP and Adrian.</p>
  <p>
  </p>
<p></p>_______________________________________________<br>Pce mailing 
  list<br>Pce <at> lists.ietf.org<br>https://www1.ietf.org/mailman/listinfo/pce<br>
</blockquote>
</div>
Igor Bryskin | 6 Jul 2005 19:33

Re: PCE Disco Reqs v01

Dimitri, see in-line.
----- Original Message -----
Sent: Wednesday, July 06, 2005 12:08 PM
Subject: Re: [Pce] PCE Disco Reqs v01

igor, JL - a couple of comments:

1. On more than one occasions you use the term "TE-LSP path computation request". This sounds like an assumption that paths are computed separately for each TE-LSP. In reality, though, a single path computation request for a protected service is expected to determine paths for multiple LSPs (working and protecting). Furthermore, a single path computation may be performed for multiple services to make them possible sharing protection resources. I would suggest dropping the "TE-LSP" from the "TE-LSP path computation" combination;

2. In section 5.1.3 you mentioned among GMPLS capabilities a capability to compute multi-layer paths. This sounds inaccurate: paths are always computed in one network layer, however, a capable PCE may determine/suggest necessary reconfigurations in lower layer(s) in order to satisfy a particular path computation request;

[dp] i would like to know how you have come to the second sentence statement - now more specifically, and in the context of the PCE discovery document, per [LSP-HIER] an incoming ERO may include the path to the lower SC, procedure is described in section 8.2 of that document so there is nothing wrong in that sentence it just need a clarification, that the sequence of hops resulting from this computation may be covering multiple LSP regions

IB>> Come on, we had this argument many times already. Note, first, that neither me nor the document mentioned the term "region". Furthermore, a PSC LSP does not "go" through a lambda layer, rather, it uses H-LSPs created in the lambda layer as PSC data links. These links are no different from statically provisioned PSC links with an exception that the former could be installed and removed by the control plane. This is what I meant by the "lower layer re-configuration". The ERO subobjects associated with lambda switching capability is just one (and not the smartest IMO) way to control such re-configuration. An alternative way, for instance, would be for a PCE to assume the VNT manager role and request the lambda H-LSP provisioning *before* responding to the path computation request.


3. I believe it should be stated more clearly that 2 stages of PCE discovery are needed: basic stage and detailed stage. During the basic stage PCE publishes some basic information about itself (presence, computation scope, etc.) on the network independently from PCCs. Interested PCCs should be able to participate in the detailed discovery stage, that is, to establish communication sessions (via PCC-PCE or a separate protocol) with the PCE to request/subscribe on the PCE detailed information (capability, CPU power, capacity, status, etc.). This would be good IMO both from the scalability and security points of view.

[dp] not sure to understand why an "interested" PCC needs detailed information on the CPU and memory utilisation at the end why more classical "admission control" and "back pressure" mechanism can not be used here ?

IB>> In this clause I didn't mean CPU or memory utilisation, rather, things like PCE sets of constraints that it can honor, optimization functions, diversity types, etc. 


4. Responding to your questions:
        -Is there a need for the discovery of PCE capacity in terms of 
         computation power? This static parameter could be used to 
         ensure weighted load balancing of requests in case PCEs do not 
         have the same capacity.
Yes. It could be achieved by a direct request from a PCC during the detailed discovery stage (see above).

[dp] this is not the issue, even if the PCC knows the detailed computation power utilisation the significance of this information for the PCC itself can not tell to this PCC more than a "don't use" if it crosses a given threshold since the PCC does not know how much the request the PCC is going to initiate will consume on the PCE itself - there is an issue of the significance of the information that needs to be discussed first before requiring its initial or later stage discovery


        -Would it be useful that a PCE report its status as "congested" 
         in case it is too busy? PCCs may then use this dynamic 
         information to prefer a different PCE. 
Yes. It could be achieved by a subscription of a PCC on the PCE's status change (also during the detailed discovery stage ).

[dp] as also proposed by JL an event driven mechanism would be advisable

IB>> As the document states this information would help a PCC to choose most suitable PCE.

 

Igor



----- Original Message -----
From: LE ROUX Jean-Louis RD-CORE-LAN
To: pce <at> ietf.org
Sent: Wednesday, June 29, 2005 8:00 AM
Subject: [Pce] PCE Disco Reqs v01

Hi all,

Version 01 of the PCE discovery reqs ID has just been published
http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt

This version takes into account comments received during Minneapolis session and on the list.

Here are the major changes since 00:
-Added multi-area network case in the problem statement
-Added application scenario (section 4)
-Section 5.1 on capability discovery modified as per discussions on the list:
        -Discovery of PCE location, PCE scopes and domain(s) under control is mandatory
        -Capability discovery is no longer a MUST
       The list of capabilities is now out of the scope and should be addressed in a
       separate document.
      
-Added section 5.6 on extensibility
-Added Security section

Section 5.5 (Discovery of PCE capacity and congestion) requires WG feedback:
-Is there a need for the discovery of PCE capacity in terms of computation power? This static parameter could be used to ensure weighted load balancing of requests in case PCEs do not have the same capacity.

-Would it be useful that a PCE report its status as "congested" in case it is too busy? PCCs may then use this dynamic information to prefer a different PCE.

Your comments/feedback would be highly welcome, especially on the above point

Best Regards,

JL


_______________________________________________
Pce mailing list
Pce <at> lists.ietf.org
https://www1.ietf.org/mailman/listinfo/pce

_______________________________________________
Pce mailing list
Pce <at> lists.ietf.org
https://www1.ietf.org/mailman/listinfo/pce

<div>
<div>Dimitri, see in-line.</div>
<blockquote dir="ltr">
  <div>----- Original Message ----- </div>
  <div>From: 
  <a title="Dimitri.Papadimitriou <at> alcatel.be" href="mailto:Dimitri.Papadimitriou <at> alcatel.be">Dimitri.Papadimitriou <at> alcatel.be</a> 
  </div>
  <div>To: <a title="ibryskin <at> movaz.com" href="mailto:ibryskin <at> movaz.com">Igor Bryskin</a> </div>
  <div>Cc: <a title="jeanlouis.leroux <at> francetelecom.com" href="mailto:jeanlouis.leroux <at> francetelecom.com">LE ROUX Jean-Louis 
  RD-CORE-LAN</a> ; <a title="pce <at> ietf.org" href="mailto:pce <at> ietf.org">pce <at> ietf.org</a> </div>
  <div>Sent: Wednesday, July 06, 2005 12:08 
  PM</div>
  <div>Subject: Re: [Pce] PCE Disco Reqs 
  v01</div>
  <div><br></div>
  <p>igor, JL - a couple of comments:<br><br>1. On 
  more than one occasions you use the term "TE-LSP path computation request". 
  This sounds like an assumption that paths are computed separately for each 
  TE-LSP. In reality, though, a single path computation request for a protected 
  service is expected to determine paths for multiple LSPs (working and 
  protecting). Furthermore, a single path computation may be performed for 
  multiple services to make them possible&nbsp;sharing protection resources. I 
  would suggest dropping the "TE-LSP" from the "TE-LSP path computation" 
  combination;<br><br>2. In section 5.1.3 you mentioned among GMPLS capabilities 
  a capability to compute multi-layer paths. This sounds inaccurate: paths are 
  always computed in one network layer, however, a capable PCE may 
  determine/suggest necessary reconfigurations in lower layer(s) in order to 
  satisfy a particular path computation request;<br></p>
  <p>[dp] i would like to know how you have come to 
  the second sentence statement - now more specifically, and in the context of 
  the PCE discovery document, per [LSP-HIER] an incoming ERO may include the 
  path to the lower SC, procedure is described in section 8.2 of that document 
  so there is nothing wrong in that sentence it just need a clarification, that 
  the sequence of hops resulting from this computation may be covering multiple 
  LSP regions</p>
  <p>IB&gt;&gt; Come on, we had this argument many 
  times already. Note, first, that neither&nbsp;me nor the document mentioned 
  the term "region".&nbsp;Furthermore,&nbsp;a PSC LSP does not "go" through a 
  lambda layer, rather, it uses H-LSPs created in the lambda layer as PSC data 
  links. These links are no different from statically provisioned PSC links with 
  an exception that the former could be installed and removed by the control 
  plane. This is what I meant by the "lower layer re-configuration". The ERO 
  subobjects associated with lambda switching capability is just one (and not 
  the smartest IMO) way to control such re-configuration. An alternative way, 
  for instance, would be for a PCE to&nbsp;assume the VNT manager role and 
  request the lambda H-LSP provisioning *before* responding to the&nbsp;path 
  computation request.</p>
  <p><br>3. I believe it should be stated more 
  clearly that 2 stages of PCE discovery&nbsp;are needed: basic stage and 
  detailed stage. During the basic stage PCE publishes some basic information 
  about itself (presence, computation scope, etc.) on the network independently 
  from PCCs. Interested PCCs should be able to participate in the detailed 
  discovery stage, that is, to establish communication sessions (via PCC-PCE or 
  a separate protocol) with the PCE to request/subscribe on the PCE detailed 
  information (capability, CPU power, capacity, status, etc.). This would be 
  good IMO both from the scalability and security points of view.<br></p>
  <p>[dp] not sure to understand why an 
  "interested" PCC needs detailed information on the CPU and memory utilisation 
  at the end why more classical "admission control" and "back pressure" 
  mechanism can not be used here ?</p>
  <p>IB&gt;&gt; In this clause I didn't mean CPU or 
  memory utilisation, rather,&nbsp;things like PCE sets of constraints that it 
  can honor, optimization functions, diversity types, etc.&nbsp;</p>
  <p><br>4. Responding to your 
  questions:<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Is there a need for 
  the discovery of PCE capacity in terms of&nbsp; 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; computation power? This 
  static parameter could be used to&nbsp; 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ensure weighted load 
  balancing of requests in case PCEs do not&nbsp; 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; have the same capacity. 
  <br>Yes. It could be achieved by a direct request from a PCC during the 
  detailed discovery stage (see above).<br></p>
  <p>[dp] this is not the issue, even if the PCC 
  knows the detailed computation power utilisation the significance of this 
  information for the PCC itself can not tell to this PCC more than a "don't 
  use" if it crosses a given threshold since the PCC does not know how much the 
  request the PCC is going to initiate will consume on the PCE itself - there is 
  an issue of the significance of the information that needs to be discussed 
  first before requiring its initial or later stage discovery</p>
  <p><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  -Would it be useful that a PCE report its status as "congested"&nbsp; 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; in case it is too busy? 
  PCCs may then use this dynamic&nbsp; 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; information to prefer a 
  different PCE.&nbsp; <br>Yes. It could be achieved by a subscription of 
  a&nbsp;PCC on the PCE's status change (also during the detailed discovery 
  stage ).<br></p>
  <p>[dp] as also proposed by JL an event driven 
  mechanism would be advisable </p>
  <p>IB&gt;&gt; As the document states this information 
  would help a PCC to choose most suitable PCE.</p>
  <p>&nbsp;</p>
  <p>Igor</p>
  <p><br><br>----- Original Message ----- <br>From: <a href="mailto:jeanlouis.leroux <at> francetelecom.com">LE ROUX Jean-Louis 
  RD-CORE-LAN</a> <br>To: <a href="mailto:pce <at> ietf.org">pce <at> ietf.org</a> <br>Sent: Wednesday, June 29, 2005 8:00 
  AM<br>Subject: [Pce] PCE Disco Reqs 
  v01<br><br>Hi all, <br><br>Version 01 of the PCE 
  discovery reqs ID has just been published <br><a href="http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt">http://www.ietf.org/internet-drafts/draft-leroux-pce-discovery-reqs-01.txt</a> <br><br>This version takes into account comments 
  received during Minneapolis session and on the list. 
  <br><br>Here are the major changes since 00: 
  <br>-Added multi-area network case in the problem statement <br>-Added application scenario (section 4) <br>-Section 5.1 on 
  capability discovery modified as per discussions on the list: 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  -Discovery of PCE location, PCE scopes and domain(s) under control is 
  mandatory <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -Capability discovery 
  is no longer a MUST 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The list of capabilities is 
  now out of the scope and should be addressed in a 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; separate document. 
  <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br>-Added section 5.6 on 
  extensibility <br>-Added Security section <br><br>Section 
  5.5 (Discovery of PCE capacity and congestion) requires WG feedback: <br>-Is there a need for the discovery of 
  PCE capacity in terms of computation power? This static parameter could be 
  used to ensure weighted load balancing of requests in case PCEs do not have 
  the same capacity. <br><br>-Would it be useful that a PCE report its status as 
  "congested" in case it is too busy? PCCs may then use this dynamic information 
  to prefer a different PCE. <br><br>Your comments/feedback would be highly 
  welcome, especially on the above point <br><br>Best 
  Regards, <br><br>JL <br></p>
<br>_______________________________________________<br>Pce mailing list<br>Pce <at> lists.ietf.org<br><a href="https://www1.ietf.org/mailman/listinfo/pce">https://www1.ietf.org/mailman/listinfo/pce</a><br><br>_______________________________________________<br>Pce 
  mailing list<br>Pce <at> lists.ietf.org<br><a href="https://www1.ietf.org/mailman/listinfo/pce">https://www1.ietf.org/mailman/listinfo/pce</a>
  <p></p>
</blockquote>
</div>

Gmane