Subject: [Dots] OP-008: draft-ietf-dots-requirements

From: <[email-masked]>
Date: Tue, 2 May 2017 07:41:30 +0000

Re-,

   OP-008  Conflict Detection and Notification: Multiple DOTS clients
      controlled by a single administrative entity may send conflicting
      mitigation requests for pool of protected resources , as a result
      of misconfiguration, operator error, or compromised DOTS clients.
      DOTS servers attempting to honor conflicting requests may flap
      network route or DNS information, degrading the networks
      attempting to participate in attack response with the DOTS
      clients.  DOTS servers SHALL detect such conflicting requests, and
      SHALL notify the DOTS clients in conflict.  The notification
      SHOULD indicate the nature and scope of the conflict, for example,
      the overlapping prefix range in a conflicting mitigation request.

I suggest to change the last sentence by following:

NEW:
The notification
      SHOULD indicate the nature and scope of the conflict. Some sample examples of conflicts are listed below:

*         A DOTS client requests to black list a network resource, while another DOTS client requests to whitelist that same resource.

*         A DOTS client requests to drop all packets received from a given host, while another DOTS client request to rate-limit that traffic.

The overlapping prefix range may not be explicit to understand that conflicts may happen.

Thank you.

Cheers,
Med