Network Working Group A. Morton Internet-Draft AT&T Labs Intended status: Standards Track K. Hedayat Expires: April 22, 2009 Brix Networks October 19, 2008 More Features for TWAMP draft-ietf-ippm-more-twamp-00 Status of this Memo By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on April 22, 2009. Abstract The IETF has completed its work on TWAMP - the Two-Way Active Measurement Protocol. This memo describes a simple extension to TWAMP, the option to use different security modes in the TWAMP- Control and TWAMP-Test protocols. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. Morton & Hedayat Expires April 22, 2009 [Page 1] Internet-Draft TWAMP Extensions October 2008 Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Purpose and Scope . . . . . . . . . . . . . . . . . . . . . . . 3 3. TWAMP Control Extensions . . . . . . . . . . . . . . . . . . . 3 3.1. Extended Connection Setup . . . . . . . . . . . . . . . . . 4 4. Extended TWAMP Test . . . . . . . . . . . . . . . . . . . . . . 5 4.1. Sender Behavior . . . . . . . . . . . . . . . . . . . . . . 5 4.1.1. Packet Timings . . . . . . . . . . . . . . . . . . . . 5 4.1.2. Packet Format and Content . . . . . . . . . . . . . . . 5 4.2. Reflector Behavior . . . . . . . . . . . . . . . . . . . . 6 5. Security Considerations . . . . . . . . . . . . . . . . . . . . 6 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 6 6.1. Registry Specification . . . . . . . . . . . . . . . . . . 6 6.2. Registry Management . . . . . . . . . . . . . . . . . . . . 6 6.3. Experimental Numbers . . . . . . . . . . . . . . . . . . . 7 6.4. Initial Registry Contents . . . . . . . . . . . . . . . . . 7 7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 7 8. References . . . . . . . . . . . . . . . . . . . . . . . . . . 7 8.1. Normative References . . . . . . . . . . . . . . . . . . . 7 8.2. Informative References . . . . . . . . . . . . . . . . . . 8 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 8 Intellectual Property and Copyright Statements . . . . . . . . . . 9 Morton & Hedayat Expires April 22, 2009 [Page 2] Internet-Draft TWAMP Extensions October 2008 1. Introduction The IETF has completed its work on the core specification of TWAMP - the Two-Way Active Measurement Protocol [RFC5357]. TWAMP is an extension of the One-way Active Measurement Protocol, OWAMP [RFC4656]. The TWAMP specification gathered wide review as it approached completion, and the by-products were several recommendations for new features in TWAMP. There are a growing number TWAMP implementations at present, and wide-spread usage is expected. There are even devices that are designed to test implementations for protocol compliance. This memo describes a simple extension for TWAMP, the option to use different security modes in the TWAMP-Control and TWAMP-Test protocols. The relationship between this memo and TWAMP is intended to be an update to [RFC5357] when published. 2. Purpose and Scope The purpose of this memo is to describe and specify an extension for TWAMP [RFC5357]. The features and extensions were vetted before adoption in this memo. The scope of the memo is limited to specifications of the following: o Extension of the modes of operation through assignment of one new value in the Mode field (see section 3.1 of [RFC4656]), while retaining backward compatibility with TWAMP [RFC5357] implementations. This value adds the OPTIONAL ability to use different security modes in the TWAMP-Control and TWAMP-Test protocols. The motivation for this extension is to permit the low packet rate TWAMP-Control protocol to utilize a stronger mode of integrity protection than that used in the TWAMP-Test protocol. 3. TWAMP Control Extensions TWAMP-Control protocol is a derivative of the OWAMP-Control protocol, and coordinates a two-way measurement capability. All TWAMP Control messages are similar in format and follow similar guidelines to those defined in section 3 of [RFC4656] with the exceptions described in TWAMP [RFC5357], and in the following sections. All OWAMP-Control messages apply to TWAMP-Control, except for the Fetch Session command. Morton & Hedayat Expires April 22, 2009 [Page 3] Internet-Draft TWAMP Extensions October 2008 3.1. Extended Connection Setup TWAMP connection establishment follows the same procedure defined in section 3.1 of [RFC4656]. This extended mode assigns one new bit position (and value) to allow the Test protocol security mode to operate in Unauthenticated mode, while the Control protocol operates in Encrypted mode. With this extension, the complete set of TWAMP values are as follows: Value Description Reference/Explanation 0 Reserved 1 Unauthenticated RFC4656, Section 3.1 2 Authenticated RFC4656, Section 3.1 4 Encrypted RFC4656, Section 3.1 8 Unauth. TEST protocol, new bit position (3) Encrypted CONTROL In the original OWAMP Modes field, setting bit positions 0, 1 or 2 indicated the security mode of the Control protocol, and the Test protocol inherited the same mode (see section 4 of [RFC4656]). In this extension to TWAMP, setting Modes Field bit position 3 SHALL discontinue the inheritance of the security mode in the Test protocol, and each protocol's mode SHALL be as specified below. When the desired TWAMP Test protocol mode is identical to the Control Session mode, the corresponding Modes Field bit (position 0, 1 or 2) SHALL be set. The table below gives the various combinations of integrity protection that are permissible in TWAMP (with this extension). The Test protocol SHALL use the mode in each column corresponding to the Modes Field bit position. -------------------------------------------------------- Protocol | Permissible Mode Combinations (Modes bit set) -------------------------------------------------------- Control | Unauth.(0)| Auth. == Encrypted (1,2,3) -------------------------------------------------------- | Unauth.(0)| Unauth. (3) ----------------------------------------------- Test | | Auth.(1) ----------------------------------------------- | | Encrypted (2) -------------------------------------------------------- Note that the TWAMP-Control protocol security measures are identical in the Authenticated and Encrypted Modes. Therefore, only one new bit position (3) is needed to convey the single mixed security mode. The value of the Modes Field sent by the Server in the Server- Greeting message is the bit-wise OR of the modes (bit positions) that Morton & Hedayat Expires April 22, 2009 [Page 4] Internet-Draft TWAMP Extensions October 2008 it is willing to support during this session. Thus, the last four bits of the Modes 32-bit Field are used. The first 28 bits MUST be zero. A client conforming to this extension of [RFC5357] MAY ignore the values in the first 28 bits of the Modes Field, or it MAY support other features that are communicated in these bit positions. Other ways in which TWAMP extends OWAMP are described in [RFC5357]. 4. Extended TWAMP Test The TWAMP test protocol is similar to the OWAMP [RFC4656] test protocol with the exception that the Session-Reflector transmits test packets to the Session-Sender in response to each test packet it receives. TWAMP [RFC5357] defines two different test packet formats, one for packets transmitted by the Session-Sender and one for packets transmitted by the Session-Reflector. As with OWAMP-Test protocol there are three security modes: unauthenticated, authenticated, and encrypted. This TWAMP extension makes it possible to use TWAMP-Test Unauthenticated mode regardless of the mode used in the TWAMP-Control protocol. 4.1. Sender Behavior This section describes REQUIRED extensions to the behavior of the TWAMP Sender. 4.1.1. Packet Timings The Send Schedule is not utilized in TWAMP, and there are no extensions defined in this memo. 4.1.2. Packet Format and Content The Session Sender packet format and content MUST follow the same procedure and guidelines as defined in section 4.1.2 of [RFC4656] and section 4.1.2 of [RFC5357], with the following exceptions: o the Send Schedule is not used, and o the Sessions-Sender MUST support the mixed security mode (Unauthenticated TEST, Encrypted CONTROL,value 8, bit position 3) defined in section 3.1 of this memo. Morton & Hedayat Expires April 22, 2009 [Page 5] Internet-Draft TWAMP Extensions October 2008 4.2. Reflector Behavior The TWAMP Reflector is REQUIRED to follow the procedures and guidelines in section 4.2 of [RFC5357], with the following extensions: o the Sessions-Reflector MUST support the mixed security mode (Unauthenticated TEST, Encrypted CONTROL,value 8, bit position 3) defined in section 3.1 of this memo. 5. Security Considerations The extended mixed-mode of operation permits stronger security/ integrity protection on the TWAMP-Control protocol while simultaneously emphasizing accuracy or efficiency on the TWAMP-Test protocol, thus making it possible to increase overall security when compared to the previous options. The security considerations that apply to any active measurement of live networks are relevant here as well. See [RFC4656] and [RFC5357]. 6. IANA Considerations This memo adds three security mode combinations to the OWAMP-Control specification[RFC4656], and describes behavior when the new modes are used. This memo requests creation an IANA registry for the TWAMP Mode field. This field is a recognized extension mechanism for TWAMP. 6.1. Registry Specification IANA is requested to create a TWAMP-Modes registry. TWAMP-Modes are specified in TWAMP Server Greeting messages and Set-up Response messages consistent with section 3.1 of [RFC4656], and extended by this memo. Modes are indicated by setting bits in the 32-bit Modes Field. Thus, this registry can contain a total of 32 possible bit positions and corresponding values. 6.2. Registry Management Because the TWAMP-Modes registry can contain only thirty-two values, and because TWAMP is an IETF protocol, this registry must be updated only by "IETF Consensus" as specified in [RFC2434](an RFC documenting registry use that is approved by the IESG). For the Modes registry, we expect that new features will be assigned using monotonically Morton & Hedayat Expires April 22, 2009 [Page 6] Internet-Draft TWAMP Extensions October 2008 increasing bit positions and in the range [0-31] and the corresponding values, unless there is a good reason to do otherwise. 6.3. Experimental Numbers No experimental values are currently assigned for the Modes Registry. 6.4. Initial Registry Contents TWAMP Modes Registry Value Description Semantics Definition 0 Reserved 1 Unauthenticated RFC4656, Section 3.1 2 Authenticated RFC4656, Section 3.1 4 Encrypted RFC4656, Section 3.1 8 Unauth. TEST protocol, this document, Section 3.1 Encrypted CONTROL 7. Acknowledgements The authors would like to thank Len Ciavattone for helpful review and comments. 8. References 8.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2434] Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 2434, October 1998. [RFC4656] Shalunov, S., Teitelbaum, B., Karp, A., Boote, J., and M. Zekauskas, "A One-way Active Measurement Protocol (OWAMP)", RFC 4656, September 2006. [RFC5357] Hedayat, K., Krzanowski, R., Morton, A., Yum, K., and J. Babiarz, "A Two-Way Active Measurement Protocol (TWAMP)", RFC 5357, October 2008. Morton & Hedayat Expires April 22, 2009 [Page 7] Internet-Draft TWAMP Extensions October 2008 8.2. Informative References [x] "". Authors' Addresses Al Morton AT&T Labs 200 Laurel Avenue South Middletown,, NJ 07748 USA Phone: +1 732 420 1571 Fax: +1 732 368 1192 Email: acmorton@att.com URI: http://home.comcast.net/~acmacm/ Kaynam Hedayat Brix Networks 285 Mill Road Chelmsford, MA 01824 USA Phone: +1 Fax: +1 Email: khedayat@brixnet.com URI: http://www.brixnet.com/ Morton & Hedayat Expires April 22, 2009 [Page 8] Internet-Draft TWAMP Extensions October 2008 Full Copyright Statement Copyright (C) The IETF Trust (2008). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Morton & Hedayat Expires April 22, 2009 [Page 9]