From nobody Wed Aug 12 06:16:57 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFABB1B2D7A for ; Wed, 12 Aug 2015 06:16:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WeTpV87lT7m1 for ; Wed, 12 Aug 2015 06:16:55 -0700 (PDT) Received: from atl4mhob13.myregisteredsite.com (atl4mhob13.myregisteredsite.com [209.17.115.51]) by ietfa.amsl.com (Postfix) with ESMTP id 3C98B1B2D79 for ; Wed, 12 Aug 2015 06:16:54 -0700 (PDT) Received: from mailpod.hostingplatform.com ([10.30.71.208]) by atl4mhob13.myregisteredsite.com (8.14.4/8.14.4) with ESMTP id t7CDGrqN029268 for ; Wed, 12 Aug 2015 09:16:53 -0400 Received: (qmail 18823 invoked by uid 0); 12 Aug 2015 13:16:53 -0000 X-TCPREMOTEIP: 24.166.126.82 X-Authenticated-UID: wes@mti-systems.com Received: from unknown (HELO ?192.168.0.135?) (wes@mti-systems.com@24.166.126.82) by 0 with ESMTPA; 12 Aug 2015 13:16:53 -0000 To: sdn@irtf.org From: Wesley Eddy X-Enigmail-Draft-Status: N1110 Organization: MTI Systems Message-ID: <55CB473A.3010505@mti-systems.com> Date: Wed, 12 Aug 2015 09:16:42 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.1.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "gclark mti-systems.com" , Justin Dailey Subject: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Aug 2015 13:16:57 -0000 Hello, we wanted to make people aware of a new I-D that uses SDN (or more specifically OpenFlow) as a tool to improve DDoS mitigation: https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/ The interesting part of this for SDNRG is probably the sub-controller concept, which is how we allow OpenFlow to be used inter-domain (for customers to control aspects of their ISP's network), and the three- stage organization of flow tables. The content is fairly specific to DDoS, but could be extended and generalized for other uses. Much of the other interdomain SDN work has the ISPs setting up virtual networks for each customer, or slice-based constructions, which are not required by this sub-controller approach. It may be of interest as an alternative construction with its own set of advantages and disadvantages in comparison to other interdomain SDN approaches. We're eager to hear your comments, criticisms, and questions. -- Wes Eddy MTI Systems From nobody Thu Aug 20 07:03:24 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AA441ACE9A for ; Thu, 20 Aug 2015 07:03:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.44 X-Spam-Level: X-Spam-Status: No, score=0.44 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rjbOZcZxtggT for ; Thu, 20 Aug 2015 07:03:21 -0700 (PDT) Received: from mx2.eict.de (mx2.eict.de [212.91.241.168]) by ietfa.amsl.com (Postfix) with ESMTP id 2ACA71ACE91 for ; Thu, 20 Aug 2015 07:03:19 -0700 (PDT) Received: by mx2.eict.de (Postfix, from userid 481) id B21361FF5B; Thu, 20 Aug 2015 16:03:18 +0200 (CEST) Received: from mail.eict.de (mx1 [172.16.6.1]) by mx2.eict.de (Postfix) with ESMTP id 4BF741FF55 for ; Thu, 20 Aug 2015 16:03:18 +0200 (CEST) Received: from sbs2008.eict.local (sbs2008.intern.eict.de [192.168.2.11]) by mail.eict.de (Postfix) with ESMTP id 12C4E378238 for ; Thu, 20 Aug 2015 16:03:18 +0200 (CEST) Received: from SBS2008.eict.local ([fe80::2051:ef24:c7c9:f298]) by SBS2008.eict.local ([fe80::2051:ef24:c7c9:f298%13]) with mapi; Thu, 20 Aug 2015 16:02:10 +0200 From: Kostas Pentikousis To: SDN IRTF list Date: Thu, 20 Aug 2015 16:02:08 +0200 Thread-Topic: Call for Participation: EWSDN 2015 Thread-Index: AdDbUM22qEYmRzMPQUmBMT5mdnvF5g== Message-ID: <0C7EDCF89AB9E2478B5D010026CFF4AEB5ABA2E541@SBS2008.eict.local> Accept-Language: en-US, de-DE Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, de-DE Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Sdn] Call for Participation: EWSDN 2015 X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Aug 2015 14:03:23 -0000 Dear All, The preliminary program of EWSDN 2015 is now available at http://www.ewsdn.= eu/. The program includes full-paper presentations, demonstrations, tutoria= ls, and is complemented by the first EWSDN HandsOn/Hackathon. Early bird registration ends on 31 August 2015.=20 Looking forward to seeing you in Bilbao! Best regards, Kostas From nobody Sun Aug 23 22:03:59 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 300FD1A8BC5 for ; Sun, 23 Aug 2015 22:03:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.21 X-Spam-Level: X-Spam-Status: No, score=-5.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_LETTER=-2, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lu_nnZj8yWXG for ; Sun, 23 Aug 2015 22:03:55 -0700 (PDT) Received: from dfwrgout.huawei.com (dfwrgout.huawei.com [206.16.17.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B6041A8BB3 for ; Sun, 23 Aug 2015 22:03:50 -0700 (PDT) Received: from 172.18.9.243 (EHLO dfweml701-chm.china.huawei.com) ([172.18.9.243]) by dfwrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CQI11243; Mon, 24 Aug 2015 00:03:48 -0500 (CDT) Received: from DFWEML706-CHM.china.huawei.com ([10.193.5.225]) by dfweml701-chm ([10.193.5.50]) with mapi id 14.03.0235.001; Sun, 23 Aug 2015 22:03:42 -0700 From: Leeyoung To: TEAS WG , "ccamp@ietf.org" , "pce@ietf.org" , "sdn@irtf.org" Thread-Topic: IEEE NetSoft 2016 Conference on Network Softwarization, Seoul, Korea Thread-Index: AQHQ3io+lpNpx0+QFUyD0VhznvTfGQ== Date: Mon, 24 Aug 2015 05:03:41 +0000 Message-ID: <7AEB3D6833318045B4AE71C2C87E8E1729D0EE27@dfweml706-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.47.141.161] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Sdn] IEEE NetSoft 2016 Conference on Network Softwarization, Seoul, Korea X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Aug 2015 05:03:58 -0000 SGkgQWxsLA0KDQpUaGlzIGNvbmZlcmVuY2UgbWF5IGJlIHJlbGV2YW50IHRvIHlvdXIgV0cgYWN0 aXZpdGllcy4gQ2hlY2sgaXQgb3V0IQ0KDQpCZXN0IHJlZ2FyZHMsDQpZb3VuZw0KDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KMm5kIElFRUUgQ09ORkVSRU5DRSBPTiBORVRXT1JLIFNPRlRXQVJJWkFUSU9OIC0gTmV0U29m dCAyMDE2DQpTb2Z0d2FyaXphdGlvbiBvZiBOZXR3b3JrcywgQ2xvdWRzIGFuZCBJbnRlcm5ldCBv ZiBUaGluZ3MNClNFT1VMLCBLT1JFQQ0KSnVuZSA2LTEwLCAyMDE2DQpodHRwOi8vd3d3Lm5ldHNv ZnQyMDE2Lm9yZw0KDQpDQUxMIEZPUiBQQVBFUlMNClRoZSBJRUVFIEludGVybmF0aW9uYWwgQ29u ZmVyZW5jZSBvbiBOZXR3b3JrIFNvZnR3YXJpemF0aW9uIChOZXRTb2Z0IA0KMjAxNikgd2lsbCBi ZSBoZWxkIGluIGJlYXV0aWZ1bCBTZW91bCwgS29yZWEuIE5ldFNvZnQgMjAxNiBidWlsZHMgDQpm dXJ0aGVyIG9uIHRoZSBzdWNjZXNzZnVsIGZpcnN0IGVkaXRpb24sIGhlbGQgaW4gTG9uZG9uLCBV SyBpbiBBcHJpbCANCjIwMTUgYW5kIGlzIHRoZSBmbGFnc2hpcCBldmVudCBlc3RhYmxpc2hlZCBh cyBwYXJ0IG9mIHRoZSBJRUVFIA0KU29mdHdhcmUtRGVmaW5lZCBOZXR3b3JrcyAoU0ROKSBJbml0 aWF0aXZlIG9mIHRoZSBJRUVFIEZ1dHVyZSBEaXJlY3Rpb25zIA0KQ29tbWl0dGVlLiBUaGlzIGNy b3NzLXNvY2lldGllc+KAmSBJbml0aWF0aXZlIGFpbXMgYXQgY3JlYXRpbmcgdGhlIA0KY29uZGl0 aW9ucyBmb3IgYSBwcmUtaW5kdXN0cmlhbCBleHBsb2l0YXRpb24gYW5kIGFkb3B0aW9uIG9mIFNE Ti9ORlYgDQpwYXJhZGlnbXMgaW4gVGVsZWNvbW11bmljYXRpb25zIGFuZCBJQ1QgZWNvc3lzdGVt cywgdGhyb3VnaCBhIHdvcmxkd2lkZSANCmNvb3BlcmF0aW9uIG9mIGxlYWRpbmcgdGVjaG5pY2Fs IGV4cGVydHMuIEluIHBhcnRpY3VsYXIsIHRoZSB2aXNpb24gb2YgDQp0aGUgSUVFRSBTRE4gSW5p dGlhdGl2ZSBpcyB0aGF0IFNETiBhbmQgTkZWIGFyZSBwYXJ0IG9mIGEgd2lkZXIgc3lzdGVtaWMg DQp0cmVuZCwgY2FsbGVkIE5ldHdvcmsgU29mdHdhcml6YXRpb24sIGltcGFjdGluZyBib3RoIG5l dHdvcmsgYW5kIHNlcnZpY2UgDQpwbGF0Zm9ybXMuIEluIGZhY3QsIHRoZSBleHBsb2l0YXRpb24g b2YgaGlnaCBsZXZlbHMgb2YgYXV0b21hdGlvbiwgDQppbmNyZWFzZWQgZmxleGliaWxpdHkgYW5k IHByb2dyYW1tYWJpbGl0eSBhbGxvd3MgcmVpbnZlbnRpbmcgZnV0dXJlIA0KbmV0d29yayBhbmQg Y2xvdWQgYXJjaGl0ZWN0dXJlcywgYWNjZWxlcmF0aW5nIHNlcnZpY2UgZGVwbG95bWVudCBhbmQg DQpmYWNpbGl0YXRpbmcgaW5mcmFzdHJ1Y3R1cmUgbWFuYWdlbWVudC4gTmV0U29mdCBpcyB0aGUg cHJpbWFyeSBJRUVFIA0KZm9ydW0gZm9yIHB1YmxpY2F0aW9uIGFuZCB0ZWNobmljYWwgZXhjaGFu Z2Ugb2YgdGhlIGxhdGVzdCByZXNlYXJjaCBhbmQgDQppbm5vdmF0aW9uIHJlc3VsdHMgaW4gdGhp cyBjaGFsbGVuZ2luZyBhcmVhLg0KDQpUT1BJQ1MgT0YgSU5URVJFU1QNCkF1dGhvcnMgYXJlIGlu dml0ZWQgdG8gc3VibWl0IHBhcGVycyB0aGF0IGZhbGwgaW50byB0aGUgYXJlYSBvZiANCnNvZnR3 YXJlLWRlZmluZWQgYW5kIHZpcnR1YWxpemVkIGluZnJhc3RydWN0dXJlcy4NClRvcGljcyBvZiBp bnRlcmVzdCBpbmNsdWRlLCBidXQgYXJlIG5vdCBsaW1pdGVkIHRvLCB0aGUgZm9sbG93aW5nOg0K 4oCiIEFQSXMsIHByb3RvY29scyBhbmQgbGFuZ3VhZ2VzIGZvciBwcm9ncmFtbWFibGUgbmV0d29y a3MgYW5kIFNESSANCihTb2Z0d2FyZS1EZWZpbmVkIEluZnJhc3RydWN0dXJlcykNCuKAoiBBYnN0 cmFjdGlvbnMgYW5kIFZpcnR1YWxpemF0aW9uIG9mIHJlc291cmNlcywgc2VydmljZXMgYW5kIGZ1 bmN0aW9ucyANCmluIFNETiBhbmQgTkZWDQrigKIgUmVzb3VyY2UgbWFuYWdlbWVudCBhbmQgT3Jj aGVzdHJhdGlvbiBmb3IgU0ROL05GVi1iYXNlZCBzeXN0ZW1zDQrigKIgTW9kZWxpbmcsIHJlcHJl c2VudGF0aW9uLCBjb21wb3NpdGlvbiBhbGdvcml0aG1zLCBhbmQgZGVwbG95bWVudCBmb3IgDQpT ZXJ2aWNlIEZ1bmN0aW9uIENoYWlucw0K4oCiIEVmZmljaWVudCBuZXR3b3JrIGFuZCBzZXJ2aWNl IG1vbml0b3JpbmcgZm9yIFNETi9ORlYNCuKAoiBUcmFuc2l0aW9uIHN0cmF0ZWdpZXMgU2VudCBm cm9tIG15IGlQaG9uZQ0K4oCiIE1hbmFnZW1lbnQgb2YgZmVkZXJhdGVkIFNETi9ORlYgaW5mcmFz dHJ1Y3R1cmVzDQrigKIgRW5lcmd5IGVmZmljaWVudCBhbmQgZ3JlZW4gU0RJDQrigKIgVHJhZmZp YyBFbmdpbmVlcmluZyBhbmQgUW9TL1FvRSBpbiBTRE4vTkZWDQrigKIgSW50ZXJvcGVyYWJpbGl0 eSBvZiBTREkgd2l0aCBMZWdhY3kgSW5mcmFzdHJ1Y3R1cmVzDQrigKIgQ2VudHJhbGl6ZWQgdnMg RGlzdHJpYnV0ZWQgY29udHJvbCBvZiBTRE4vTkZWLWJhc2VkIHN5c3RlbXMNCuKAoiBQb2xpY3kt YmFzZWQgbWFuYWdlbWVudCBpbiBTRE4vTkZWDQrigKIgTmV0d29yayBTb2Z0d2FyaXphdGlvbiBm b3IgNUcNCuKAoiBTb2Z0d2FyaXplZCBlZGdlIGNsb3VkIGluZnJhc3RydWN0dXJlcw0K4oCiIFNv ZnR3YXJpemVkIHBsYXRmb3JtcyBmb3IgSW50ZXJuZXQtb2YtVGhpbmdzIChJb1QpDQrigKIgU0RO IHN3aXRjaC9yb3V0ZXIgYXJjaGl0ZWN0dXJlcy9kZXNpZ25zDQrigKIgU29mdHdhcml6ZWQgbmV0 d29ya3MgZm9yIEJpZyBEYXRhIGFwcGxpY2F0aW9ucw0K4oCiIFNvZnR3YXJlLWRlZmluZWQgb3B0 aWNhbCB0cmFuc3BvcnQgbmV0d29ya3MNCuKAoiBEZWJ1Z2dpbmcgYW5kIGludHJvc3BlY3Rpb24g b2Ygc29mdHdhcmUtZGVmaW5lZCAgdmlydHVhbGl6ZWQgc3lzdGVtcw0K4oCiIEF2YWlsYWJpbGl0 eSBhbmQgcmVzaWxpZW5jZSBvZiB2aXJ0dWFsaXplZCBzb2Z0d2FyZS1kZWZpbmVkIHN5c3RlbXMN CuKAoiBWZXJpZmljYXRpb24vQXVkaXRpbmcgdG9vbHMgZm9yIHNvZnR3YXJpemVkIHN5c3RlbXMN CuKAoiBFeHBlcmllbmNlIHJlcG9ydHMgZnJvbSBleHBlcmltZW50YWwgdGVzdGJlZHMgYW5kIGRl cGxveW1lbnRzDQrigKIgTW9iaWxpdHkvU2VjdXJpdHkvU2FmZXR5IHN1cHBvcnQNCuKAoiBOZXcg c2VydmljZSBtb2RlbHMgYW5kIHBhcmFkaWdtcyBlbmFibGVkIGJ5IFNvZnR3YXJpemF0aW9uDQri gKIgU29jaW8tZWNvbm9taWMgaW1wYWN0IGFuZCByZWd1bGF0b3J5IGltcGxpY2F0aW9ucyBmb3Ig U29mdHdhcml6YXRpb24NCg0KUEFQRVIgU1VCTUlTU0lPTg0KQXV0aG9ycyBhcmUgaW52aXRlZCB0 byBzdWJtaXQgb25seSBvcmlnaW5hbCBwYXBlcnMgKHdyaXR0ZW4gaW4gRW5nbGlzaCkgDQpub3Qg cHVibGlzaGVkIG9yIHN1Ym1pdHRlZCBmb3IgcHVibGljYXRpb24gZWxzZXdoZXJlLiBQYXBlcnMg c2hvdWxkIGJlIA0KaW4gSUVFRSAyLWNvbHVtbiBVUy1MZXR0ZXIgc3R5bGUgdXNpbmcgSUVFRSBD b25mZXJlbmNlIHRlbXBsYXRlcywgZm91bmQgDQphdDogDQpodHRwOi8vd3d3LmllZWUub3JnL2Nv bmZlcmVuY2VzX2V2ZW50cy9jb25mZXJlbmNlcy9wdWJsaXNoaW5nL3RlbXBsYXRlcy5odG1sIA0K YW5kIHN1Ym1pdHRlZCBpbiBQREYgZm9ybWF0IHZpYSBKRU1TIGF0OiBodHRwczovL2plbXMuc2Jj Lm9yZy5ici9uZXRzb2Z0MjAxNg0KUGFwZXJzIGNhbiBiZSBvZiB0d28gdHlwZXM6IGZ1bGwgKHVw IHRvIDggcGFnZXMpIG9yIHNob3J0ICh1cCB0byA0IA0KcGFnZXMpLiBQYXBlcnMgZXhjZWVkaW5n IHRoZXNlIGxpbWl0cywgbXVsdGlwbGUgc3VibWlzc2lvbnMsIGFuZCANCnNlbGYtcGxhZ2lhcml6 ZWQgcGFwZXJzIHdpbGwgYmUgcmVqZWN0ZWQgd2l0aG91dCBmdXJ0aGVyIHJldmlldy4gQWxsIA0K c3VibWl0dGVkIHBhcGVycyB3aWxsIGJlIHN1YmplY3QgdG8gYSBwZWVyLXJldmlldyBwcm9jZXNz LiBUaGUgYWNjZXB0ZWQgDQpwYXBlcnMgd2lsbCBiZSBwdWJsaXNoZWQgaW4gSUVFRSBYcGxvcmUs IHByb3ZpZGVkIHRoYXQgdGhlIGF1dGhvcnMgZG8gDQpwcmVzZW50IHRoZWlyIHBhcGVyIGF0IHRo ZSBjb25mZXJlbmNlLiBOb3RlOiBhdXRob3JzIG9mIHRoZSBiZXN0IGZpdmUgDQpwYXBlcnMgd2ls bCBiZSBpbnZpdGVkIHRvIHN1Ym1pdCBleHRlbmRlZCB2ZXJzaW9ucyBvZiB0aGVpciBwYXBlcnMg dG8gYSANCmZhc3QtdHJhY2sgcmV2aWV3ZWQgV2lsZXnigJlzIEludGVybmF0aW9uYWwgSm91cm5h bCBvZiBOZXR3b3JrIE1hbmFnZW1lbnQgDQooSUpOTSkuDQoNCklNUE9SVEFOVCBEQVRFUw0K4oCi IFBhcGVyIHN1Ym1pc3Npb246IE5vdmVtYmVyIDE1LCAyMDE1DQrigKIgTm90aWZpY2F0aW9uIG9m IGFjY2VwdGFuY2U6IEphbnVhcnkgMzEsIDIwMTYNCuKAoiBGaW5hbCBjYW1lcmEgcmVhZHkgcGFw ZXJzOiBNYXJjaCAxNSwgMjAxNg0K4oCiIE5ldFNvZnQgMjAxNiBjb25mZXJlbmNlOiBKdW5lIDYt MTAsIDIwMTYNCg0KR0VORVJBTCBDSEFJUg0KSmFtZXMgV29uLUtpIEhvbmcsIFBPU1RFQ0gsIEtv cmVhDQoNClRQQyBDTy1DSEFJUlMNCkZpbGlwIERlIFR1cmNrLCBHaGVudCBVbml2ZXJzaXR5LWlN aW5kcywgQmVsZ2l1bQ0KSm9vbi1NeXVuZyBLYW5nLCBIUCBMYWJzLCBVU0ENCkh5dW5zZXVuZyBD aG9vLCBTdW5na3l1bmt3YW4gVW5pdmVyc2l0eSwgS29yZWENCg0KVEVDSE5JQ0FMIFNQT05TT1JT DQpUaGUgdGVjaG5pY2FsIHNwb25zb3JzIGFyZSBJRUVFIENvbW11bmljYXRpb25zIFNvY2lldHks IElFRUUgQ29tcHV0ZXIgDQpTb2NpZXR5LCBJRUVFIFNpZ25hbCBQcm9jZXNzaW5nIFNvY2lldHkg YW5kIElFRUUgQ29uc3VtZXIgRWxlY3Ryb25pY3MgDQpTb2NpZXR5Lg0KDQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpNeWNvbGxlYWd1ZXMgbWFpbGlu ZyBsaXN0DQpNeWNvbGxlYWd1ZXNAbWFpbG1hbi51ZnNjLmJyDQpodHRwOi8vbWFpbG1hbi51ZnNj LmJyL21haWxtYW4vbGlzdGluZm8vbXljb2xsZWFndWVzDQoNCi0gVGhyb3VnaCB0aGlzIGxpbmsg YWJvdmUgeW91IGNhbiAic3Vic2NyaWJlIiwgInVuc3Vic2NyaWJlIiwgb3IgY2hhbmdlIHlvdXIg c2V0dGluZ3MgaW4gdGhlIGxpc3QsIHVzaW5nICJ1c2VybmFtZT11ZnNjIiBhbmQgInBhc3N3b3Jk PXVmc2MiLg0KLSBJZiB5b3UgbmVlZCBhbnkgaGVscCwgcGxlYXNlIHNlbmQgYSBtZXNzYWdlIHRv IG15Y29sbGVhZ3Vlcy1vd25lckBtYWlsbWFuLnVmc2MuYnIuDQotIEVOSk9ZIHRoaXMgQ09VUlRF U1kgb2ZmZXJlZCBieSBGRURFUkFMIFVOSVZFUlNJVFkgT0YgU0FOVEEgQ0FUQVJJTkEuDQo= From nobody Wed Aug 26 01:46:48 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA9F81B2AAA for ; Wed, 26 Aug 2015 01:46:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s_OYl2umTvz3 for ; Wed, 26 Aug 2015 01:46:44 -0700 (PDT) Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [119.145.14.66]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71C011B2AA6 for ; Wed, 26 Aug 2015 01:46:43 -0700 (PDT) Received: from 172.24.1.51 (EHLO nkgeml406-hub.china.huawei.com) ([172.24.1.51]) by szxrg03-dlp.huawei.com (MOS 4.4.3-GA FastPath queued) with ESMTP id BLQ54536; Wed, 26 Aug 2015 16:46:20 +0800 (CST) Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.33]) by nkgeml406-hub.china.huawei.com ([10.98.56.37]) with mapi id 14.03.0235.001; Wed, 26 Aug 2015 16:46:17 +0800 From: Sheng Jiang To: "sdn@irtf.org" Thread-Topic: New Proposed Networks Machine Learning (NML) Research Group & Mail List Thread-Index: AdDf26wLf8e1Y1zpTc2q0ZG3prSCCA== Date: Wed, 26 Aug 2015 08:46:16 +0000 Message-ID: <5D36713D8A4E7348A7E10DF7437A4B927BB2698A@nkgeml512-mbx.china.huawei.com> Accept-Language: en-GB, zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.99.197] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020204.55DD7CEF.008C, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.7.33, so=2013-05-26 15:14:31, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: a389630502d08854884593b164353b60 Archived-At: Subject: [Sdn] New Proposed Networks Machine Learning (NML) Research Group & Mail List X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 08:46:46 -0000 SGksIGFsbCwNCg0KV2UgaGF2ZSBwcm9wb3NlZCBhIG5ldyBSZXNlYXJjaCBHcm91cCBpbiBJUlRG IC0gTmV0d29ya3MgTWFjaGluZSBMZWFybmluZyAoTk1MKS4gV2UgYmVsaWV2ZSB0aGUgbWFjaGlu ZSBsZWFybmluZyBtZWNoYW5pc20gd291bGQgaGVscCB0aGUgZGV2ZWxvcG1lbnQgb2YgdGhlIElu dGVybmV0LiBJdCBjb3VsZCBpbnRyb2R1Y2UgbmV3IHdheXMgdG8gbWFrZSBkZWNpc2lvbiBhdXRv bm9taWNhbGx5IGJ5IG5ldHdvcmsgZGV2aWNlcyBvciBwcm92aWRlIGhlbHBmdWwgaW5mb3JtYXRp b24gZm9yIG5ldHdvcmsgYWRtaW5pc3RyYXRvcnMuIEFuZCBpdCBjb3VsZCBwcm92aWRlIGZsZXhp YmlsaXR5IGFuZCBhZGFwdGFiaWxpdHkgdG8gbmV0d29ya3MuIE5vdCBvbmx5IHRoZSBuZXR3b3Jr IG1hbmFnZW1lbnQsIGJ1dCBhbHNvIG5ldHdvcmsgZXN0YWJsaXNobWVudCBvciBjb250cm9sIGFy ZSBwb3RlbnRpYWxseSBiZW5lZml0ZWQgZnJvbSB0aGUgbWFjaGluZSBsZWFybmluZyBtZWNoYW5p c20uIEluIHRoZSBTRE4gc2NlbmFyaW9zLCB0aGUgbWFjaGluZSBsZWFybmluZyBhbGdvcml0aG0g bWF5IGJlIGFwcGxpZWQgd2l0aGluIFNETiBjb250cm9sbGVycyB0byBtYWtlIHRoZW0gbW9yZSBp bnRlbGxpZ2VudCBhbmQgbWFrZSBiZXR0ZXIgZGVjaXNpb25zIGFjY29yZGluZyB0byB0aGUgaGlz dG9yaWMgZGF0YS4gDQoNCkFwcGx5aW5nIHRoZSBtYWNoaW5lIGxlYXJuaW5nIG1lY2hhbmlzbSBp biBuZXR3b3JrIGRvbWFpbnMgYXJlIHN0aWxsIG5vdCBtYXR1cmVkLCB0aGF0IGlzIHdoeSBpdCBp cyBhIHJlc2VhcmNoIGdyb3VwLiBCdXQgaXQgd291bGQgcmFwaWRseSBtb3ZlIGZyb20gYWNhZGVt aWMgcmVzZWFyY2ggaW50byBwcmFjdGljYWwgYXBwbGljYXRpb24uIFdlIGFyZSBwbGFubmluZyB0 byBob2xkIHRoZSBmaXJzdCBtZWV0aW5nIGluIElFVEYgOTQsIFlva29oYW1hLiBQYXJ0aWNpcGFu dHMgZnJvbSBib3RoIHVuaXZlcnNpdHkgZW52aXJvbm1lbnRzIGFuZCBpbmR1c3RyaWFsIHJlc2Vh cmNoIGFuZCBkZXZlbG9wbWVudCBvcmdhbml6YXRpb25zIGFyZSBhbGwgd2VsY29tZS4NCg0KVGhl IGNoYXJ0ZXIgYW5kIG1haWwgbGlzdCBpbmZvcm1hdGlvbiBpcyBiZWxvdzoNCg0KTmV0d29ya3Mg TWFjaGluZSBMZWFybmluZyBSZXNlYXJjaCBHcm91cA0KDQpMaW5rOiBodHRwOi8vdHJhYy50b29s cy5pZXRmLm9yZy9ncm91cC9pcnRmL3RyYWMvd2lraS9ubWwNCg0KTWFpbGluZyBMaXN0DQogICBu bWxyZ0BpcnRmLm9yZw0KICAgaHR0cHM6Ly93d3cuaXJ0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9u bWxyZw0KDQpDaGFydGVyDQoNCk1hY2hpbmUgbGVhcm5pbmcgdGVjaG5vbG9naWVzIGNhbiBsZWFy biBmcm9tIGhpc3RvcmljYWwgZGF0YSwgYW5kIG1ha2UgcHJlZGljdGlvbnMgb3IgZGVjaXNpb25z LCByYXRoZXIgdGhhbiBmb2xsb3dpbmcgc3RyaWN0bHkgc3RhdGljIHByb2dyYW0gaW5zdHJ1Y3Rp b25zLiBUaGV5IGNhbiBkeW5hbWljYWxseSBhZGFwdCB0byBhIGNoYW5naW5nIHNpdHVhdGlvbiBh bmQgZW5oYW5jZSB0aGVpciBvd24gaW50ZWxsaWdlbmNlIHdpdGggYnkgbGVhcm5pbmcgZnJvbSBu ZXcgZGF0YS4gVGhpcyBhcHByb2FjaCBoYXMgYmVlbiBzdWNjZXNzZnVsIGluIGltYWdlIGFuYWx5 c2lzLCBwYXR0ZXJuIHJlY29nbml0aW9uLCBsYW5ndWFnZSByZWNvZ25pdGlvbiwgY29udmVyc2F0 aW9uIHNpbXVsYXRpb24sIGFuZCBtYW55IG90aGVyIGFwcGxpY2F0aW9ucy4gSXQgY2FuIGxlYXJu IGFuZCBjb21wbGV0ZSBjb21wbGljYXRlZCB0YXNrcy4gSXQgYWxzbyBoYXMgcG90ZW50aWFsIGlu IHRoZSBuZXR3b3JrIHRlY2hub2xvZ3kgYXJlYS4gSXQgY2FuIGJlIHVzZWQgdG8gaW50ZWxsaWdl bnRseSBsZWFybiB0aGUgdmFyaW91cyBlbnZpcm9ubWVudHMgb2YgbmV0d29ya3MgYW5kIHJlYWN0 IHRvIGR5bmFtaWMgc2l0dWF0aW9ucyBiZXR0ZXIgdGhhbiBhIGZpeGVkIGFsZ29yaXRobS4gV2hl biBpdCBiZWNvbWVzIG1hdHVyZSwgaXQgd291bGQgYmUgZ3JlYXRseSBhY2NlbGVyYXRlIHRoZSBk ZXZlbG9wbWVudCBvZiBhdXRvbm9taWMgbmV0d29ya2luZy4NCg0KVGhlIE5ldHdvcmsgTWFjaGlu ZSBMZWFybmluZyBSZXNlYXJjaCBHcm91cCAoTk1MUkcpIHByb3ZpZGVzIGEgZm9ydW0gZm9yIHJl c2VhcmNoZXJzIHRvIGV4cGxvcmUgdGhlIHBvdGVudGlhbCBvZiBtYWNoaW5lIGxlYXJuaW5nIHRl Y2hub2xvZ2llcyBmb3IgbmV0d29ya3MuIEluIHBhcnRpY3VsYXIsIHRoZSBOTUxSRyB3aWxsIHdv cmsgb24gcG90ZW50aWFsIGFwcHJvYWNoZXMgdGhhdCBhcHBseSBtYWNoaW5lIGxlYXJuaW5nIHRl Y2hub2xvZ2llcyBpbiBuZXR3b3JrIGNvbnRyb2wsIG5ldHdvcmsgbWFuYWdlbWVudCwgYW5kIHN1 cHBseWluZyBuZXR3b3JrIGRhdGEgZm9yIHVwcGVyLWxheWVyIGFwcGxpY2F0aW9ucy4NCg0KVGhl IGluaXRpYWwgZm9jdXMgb2YgdGhlIE5NTFJHIHdpbGwgYmUgb24gaGlnaGVyLWxheWVyIGNvbmNl cHRzIHdoZXJlIHRoZSBtYWNoaW5lIGxlYXJuaW5nIG1lY2hhbmlzbSBjb3VsZCBiZSBhcHBsaWVk IGluIG9yZGVyIHRvIGVuaGFuY2UgdGhlIG5ldHdvcmsgZXN0YWJsaXNoaW5nLCBjb250cm9sbGlu ZywgbWFuYWdpbmcsIG5ldHdvcmsgYXBwbGljYXRpb25zIGFuZCBjdXN0b21lciBzZXJ2aWNlcy4g VGhpcyBpbmNsdWRlcyBtZWNoYW5pc21zIHRvIGFjcXVpcmUga25vd2xlZGdlIGZyb20gdGhlIGV4 aXN0aW5nIG5ldHdvcmtzIHNvIHRoYXQgbmV3IG5ldHdvcmtzIGNhbiBiZSBlc3RhYmxpc2hlZCB3 aXRoIG1pbmltdW0gZWZmb3J0czsgdGhlIHBvdGVudGlhbCB0byB1c2UgbWFjaGluZSBsZWFybmlu ZyBtZWNoYW5pc21zIGZvciByb3V0aW5nIGNvbnRyb2wgYW5kIG9wdGltaXphdGlvbjsgdXNpbmcg bWFjaGluZSBsZWFybmluZyBtZWNoYW5pc21zIGluIG5ldHdvcmsgbWFuYWdlbWVudCB0byBwcmVk aWN0IGZ1dHVyZSBuZXR3b3JrIHN0YXR1czsgdXNpbmcgbWFjaGluZSBsZWFybmluZyBtZWNoYW5p c21zIHRvIGF1dG9ub21pYyBhbmQgZHluYW1pY2FsbHkgbWFuYWdlIHRoZSBuZXR3b3JrOyB1c2lu ZyBtYWNoaW5lIGxlYXJuaW5nIG1lY2hhbmlzbXMgdG8gYW5hbHl6ZSBuZXR3b3JrIGZhdWx0cyBh bmQgc3VwcG9ydCByZWNvdmVyeTsgbGVhcm5pbmcgbmV0d29yayBhdHRhY2tzIGFuZCB0aGVpciBi ZWhhdmlvciwgc28gdGhhdCBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgY291bGQgYmUgc2VsZi1kZXZl bG9wZWQ7IHVuaWZ5aW5nIHRoZSBkYXRhIHN0cnVjdHVyZSBhbmQgdGhlIGNvbW11bmljYXRpb24g aW50ZXJmYWNlIGJldHdlZW4gbmV0d29yay9uZXR3b3JrIGRldmljZXMgYW5kIGN1c3RvbWVycywg c28gdGhhdCB0aGUgdXBwZXItbGF5ZXIgYXBwbGljYXRpb25zIGNvdWxkIGVhc2lseSBvYnRhaW4g cmVsZXZhbnQgbmV0d29yayBpbmZvcm1hdGlvbiwgZXRjLg0KDQpUaGUgTk1MUkcgaXMgZXhwZWN0 ZWQgdG8gaWRlbnRpZnkgYW5kIGRvY3VtZW50IHJlcXVpcmVtZW50cywgdG8gc3VydmV5IHBvc3Np YmxlIGFwcHJvYWNoZXMsIHRvIHByb3ZpZGUgc3BlY2lmaWNhdGlvbnMgZm9yIHByb3Bvc2VkIHNv bHV0aW9ucywgYW5kIHRvIHByb3ZlIGNvbmNlcHRzIHdpdGggcHJvdG90eXBlIGltcGxlbWVudGF0 aW9ucyB0aGF0IGNhbiBiZSB0ZXN0ZWQgaW4gcmVhbC13b3JsZCBlbnZpcm9ubWVudHMuDQoNClRo ZSBncm91cCB3aWxsIHJlcG9ydCBpdHMgcHJvZ3Jlc3MgdGhyb3VnaCBhIHB1YmxpY2x5IGFjY2Vz c2libGUgd2ViIHNpdGUgYW5kIHByZXNlbnRhdGlvbnMgYXQgSUVURiBtZWV0aW5ncy4gU3BlY2lm aWNhdGlvbnMgZGV2ZWxvcGVkIGJ5IHRoZSBOTUxSRyB3aWxsIGJlIHN1Ym1pdHRlZCBmb3IgcHVi bGljYXRpb24gYXMgRXhwZXJpbWVudGFsIG9yIEluZm9ybWF0aW9uYWwgUkZDcy4NCg0KVGhpcyB0 b3BpYyBpcyByYXBpZGx5IG1vdmluZyBmcm9tIGFjYWRlbWljIHJlc2VhcmNoIGludG8gcHJhY3Rp Y2FsIGFwcGxpY2F0aW9uLiBUaGVyZWZvcmUgd2UgaG9wZSB0byBhdHRyYWN0IHBhcnRpY2lwYW50 cyBmcm9tIGJvdGggdW5pdmVyc2l0eSBlbnZpcm9ubWVudHMgYW5kIGluZHVzdHJpYWwgcmVzZWFy Y2ggYW5kIGRldmVsb3BtZW50IG9yZ2FuaXphdGlvbnMsIGluIG9yZGVyIHRvIGNyZWF0ZSBzeW5l cmd5IGFuZCBjb252ZXJ0IHRoZW9yeSBpbnRvIHByYWN0aWNlLiBQZW9wbGUgYWN0aXZlbHkgaW1w bGVtZW50aW5nIHJlbGV2YW50IHNvZnR3YXJlIHdpbGwgYmUgZXNwZWNpYWxseSB3ZWxjb21lLg0K DQpNZW1iZXJzaGlwDQoNCk1lbWJlcnNoaXAgaXMgb3BlbiB0byBhbnkgaW50ZXJlc3RlZCBwYXJ0 aWVzL2luZGl2aWR1YWxzLiANCk1lZXRpbmdzDQoNClJlZ3VsYXIgd29ya2luZyBtZWV0aW5ncyBh cmUgaGVsZCBhYm91dCB0d28vdGhyZWUgdGltZXMgcGVyIHllYXIgYXQgbG9jYXRpb25zIGNvbnZl bmllbnQgdG8gdGhlIG1ham9yaXR5IG9mIHRoZSBwYXJ0aWNpcGFudHMuIFdvcmtpbmcgbWVldGlu Z3MgdHlwaWNhbGx5IHRha2UgMS0yIGRheXMgYW5kIGFyZSB0eXBpY2FsbHkgY28tbG9jYXRlZCB3 aXRoIGVpdGhlciBJRVRGIG1lZXRpbmdzIG9yIGNvbmZlcmVuY2VzIHJlbGF0ZWQgdG8gbWFjaGlu ZSBsZWFybmluZyBvciBhdXRvbm9taWMgbmV0d29ya3MuDQoNCkJlc3QgcmVnYXJkcywNCg0KU2hl bmcNCg== From nobody Wed Aug 26 15:35:31 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0E2F1B3500 for ; Wed, 26 Aug 2015 15:35:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tcd5Ox-YdOvy for ; Wed, 26 Aug 2015 15:35:27 -0700 (PDT) Received: from dfwrgout.huawei.com (dfwrgout.huawei.com [206.16.17.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E24701B348D for ; Wed, 26 Aug 2015 15:35:26 -0700 (PDT) Received: from 172.18.9.243 (EHLO dfweml702-chm.china.huawei.com) ([172.18.9.243]) by dfwrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BHN46244; Wed, 26 Aug 2015 17:35:22 -0500 (CDT) Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Wed, 26 Aug 2015 15:35:13 -0700 From: Linda Dunbar To: Wesley Eddy , "sdn@irtf.org" Thread-Topic: [Sdn] new draft on SDN for DDoS mitigation Thread-Index: AQHQ1QFBU6fvAcAI90e9HO/6Zj+3Vp4e7HoQ Date: Wed, 26 Aug 2015 22:35:12 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D19ACA@dfweml701-chm> References: <55CB473A.3010505@mti-systems.com> In-Reply-To: <55CB473A.3010505@mti-systems.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D19ACAdfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Cc: "gclark mti-systems.com" , Justin Dailey Subject: Re: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Aug 2015 22:35:30 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D19ACAdfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Eddy, et al, I think the content provided by this draft will be very useful in preventin= g junk and malicious traffic taking over precious network resources and pro= viding a more effective way to protect applications from DoS/DDoS attacks. A few comments to the draft: - When applications or end points (Customer sites) detect any kind of= attack and need to inform ISPs to block those traffic, the packets conten= t might be using private addresses, local Tenant Identifiers, etc, while th= e filters for the ISP ingress may be using "public addresses". - Figure 1: The Filter Management Apps is from customer side. The "fi= lter rules" or the commands to "ISF Sub-Controller" may need more than what= OpenFlow (e.g. OF1.5) can provide because those rules/commands might need = to specify the environmental conditions that are not in the packets, e.g. T= ime of the Day, a specific event, customer ID, etc. Maybe some other method= s should be explored, such as Open-Config, or OF-config, or others - The requests from applications and end points may be from different= administrative domains than the ISP, therefore it is necessary to have pre= -agreed format to pass "Filter rules". The recent IETF initiative (Interfac= e to Network Security Functions - I2NSF is intended to specify the standard= ized format for specifying rules to security functions. See the latest char= ter: https://sites.google.com/site/interface2nsf/home ). I see your draft p= rovide a really good input to I2NSF. Linda -----Original Message----- From: sdn [mailto:sdn-bounces@mail.ietf.org] On Behalf Of Wesley Eddy Sent: Wednesday, August 12, 2015 8:17 AM To: sdn@irtf.org Cc: gclark mti-systems.com; Justin Dailey Subject: [Sdn] new draft on SDN for DDoS mitigation Hello, we wanted to make people aware of a new I-D that uses SDN (or more s= pecifically OpenFlow) as a tool to improve DDoS mitigation: https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/ The interesting part of this for SDNRG is probably the sub-controller conce= pt, which is how we allow OpenFlow to be used inter-domain (for customers t= o control aspects of their ISP's network), and the three- stage organizatio= n of flow tables. The content is fairly specific to DDoS, but could be extended and generaliz= ed for other uses. Much of the other interdomain SDN work has the ISPs setting up virtual netw= orks for each customer, or slice-based constructions, which are not require= d by this sub-controller approach. It may be of interest as an alternative= construction with its own set of advantages and disadvantages in compariso= n to other interdomain SDN approaches. We're eager to hear your comments, criticisms, and questions. -- Wes Eddy MTI Systems _______________________________________________ sdn mailing list sdn@mail.ietf.org https://mail.ietf.org/mailman/listinfo/sdn --_000_4A95BA014132FF49AE685FAB4B9F17F657D19ACAdfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Eddy, et al,
 
I think the content provided by this draft will be very useful in prev= enting junk and malicious traffic taking over precious network resources an= d providing a more effective way to protect applications from DoS/DDoS atta= cks.
 
A few comments to the draft:
 
  • When applications or end points (Customer sites) detect any kind of att= ack and need to inform ISPs to block those traffic, the packets content mi= ght be using private addresses, local Tenant Identifiers, etc, while the fi= lters for the ISP ingress may be using "public addresses".
 
  • Figure 1: The Filter Management Apps is from customer side. The "f= ilter rules" or the commands to "ISF Sub-Controller" may nee= d more than what OpenFlow (e.g. OF1.5) can provide because those rules/comm= ands might need to specify the environmental conditions that are not in the packets, e.g. Time of the Day, a specific event, custom= er ID, etc. Maybe some other methods should be explored, such as Open-Confi= g, or OF-config, or others
 
 
  • The requests from applications and end points may be from different adm= inistrative domains than the ISP, therefore it is necessary to have pre-agr= eed format to pass "Filter rules". The recent IETF initiative (In= terface to Network Security Functions - I2NSF is intended to specify the standardized format for specifying rules to secu= rity functions. See the latest charter: https://sites.google.com/= site/interface2nsf/home ). I see your draft provide a really good input to I2NSF.
 
 
Linda
 
 
-----Original Message-----
From: sdn [mailto:sdn-bounces@= mail.ietf.org] On Behalf Of Wesley Eddy
Sent: Wednesday, August 12, 2015 8:17 AM
To: sdn@irtf.org
Cc: gclark mti-systems.com; Justin Dailey
Subject: [Sdn] new draft on SDN for DDoS mitigation
 
Hello, we wanted to make people aware of a new I-D that uses SDN (or m= ore specifically OpenFlow) as a tool to improve DDoS mitigation:
 
 
The interesting part of this for SDNRG is probably the sub-controller = concept, which is how we allow OpenFlow to be used inter-domain (for custom= ers to control aspects of their ISP's network), and the three- stage organi= zation of flow tables.
 
The content is fairly specific to DDoS, but could be extended and gene= ralized for other uses.
 
Much of the other interdomain SDN work has the ISPs setting up virtual= networks for each customer, or slice-based constructions, which are not re= quired by this sub-controller approach.  It may be of interest as an a= lternative construction with its own set of advantages and disadvantages in comparison to other interdomain SDN = approaches.
 
We're eager to hear your comments, criticisms, and questions.
 
--
Wes Eddy
MTI Systems
 
_______________________________________________
sdn mailing list
 
 --_000_4A95BA014132FF49AE685FAB4B9F17F657D19ACAdfweml701chm_-- From nobody Thu Aug 27 07:59:26 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF7E81A8AA7 for ; Thu, 27 Aug 2015 07:59:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=0.001, MISSING_HEADERS=1.021, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9pjjjeuFXTlQ for ; Thu, 27 Aug 2015 07:59:19 -0700 (PDT) Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48BEE1A8A64 for ; Thu, 27 Aug 2015 07:59:19 -0700 (PDT) Received: by lbcbn3 with SMTP id bn3so13099551lbc.2 for ; Thu, 27 Aug 2015 07:59:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:reply-to:in-reply-to:references:from:date:message-id :subject:cc:content-type; bh=SXg65XACADr7Xda75ehqzRUwFkBTcxhXxir8VO7Ea00=; b=YfAEmBv0sf8tNGYidtr9VZ4Vk6YNWRkUWFWGR5asIo/fVfqgIWdmQg0CWh5DCxnBv6 6gbzPmeOOtUzh+H6dQtUs1ivCVOVVZ5AlR7vPlMDJEHy+FqcgaXiMNJopeMdCeOBFn9O Ko63gDLnY65Yd7X2S2iGVY7A7IYwoue6ybaV8vgyFhijL8z3/ziygphoFFLT1mg0iEWc ggTd4kVw+SbO28BNcjYxpnZBkatDDIcHxReZJAy/DY1qpcHykmSyQy0Vl10aPmelNixH FpNQzd/m8EQQw07uK4Xur4nZI+LtkDWWkeLTGjtshiaI8q6BBMCNjcBnXPnVFAwk1uRj spvQ== X-Received: by 10.112.13.72 with SMTP id f8mr2493580lbc.77.1440687557605; Thu, 27 Aug 2015 07:59:17 -0700 (PDT) MIME-Version: 1.0 Received: by 10.25.24.207 with HTTP; Thu, 27 Aug 2015 07:58:37 -0700 (PDT) In-Reply-To: <55CB473A.3010505@mti-systems.com> References: <55CB473A.3010505@mti-systems.com> From: Patrick Lismore Date: Thu, 27 Aug 2015 15:58:37 +0100 Message-ID: Content-Type: multipart/alternative; boundary=001a11c3ee6a1a8628051e4c361a Archived-At: Cc: sdn@irtf.org Subject: Re: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: patricklismore@gmail.com List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 14:59:25 -0000 --001a11c3ee6a1a8628051e4c361a Content-Type: text/plain; charset=UTF-8 Hello everyone, I have been reading the emails for this list for a while and wanted to contribute. My research this year as part of my MSc was on Threat Mitigation & Digital Forensics in Software Defined Networks. I have never contributed to IETF before but would like to get more involved with the SDNRG. What is the best way to engage? Should I help some contributors with their research?, submit a paper or throw out some ideas. best regards Patrick Lismore @patricklismore On Wed, Aug 12, 2015 at 2:16 PM, Wesley Eddy wrote: > Hello, we wanted to make people aware of a new I-D that uses SDN (or > more specifically OpenFlow) as a tool to improve DDoS mitigation: > > https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/ > > The interesting part of this for SDNRG is probably the sub-controller > concept, which is how we allow OpenFlow to be used inter-domain (for > customers to control aspects of their ISP's network), and the three- > stage organization of flow tables. > > The content is fairly specific to DDoS, but could be extended and > generalized for other uses. > > Much of the other interdomain SDN work has the ISPs setting up virtual > networks for each customer, or slice-based constructions, which are not > required by this sub-controller approach. It may be of interest as > an alternative construction with its own set of advantages and > disadvantages in comparison to other interdomain SDN approaches. > > We're eager to hear your comments, criticisms, and questions. > > -- > Wes Eddy > MTI Systems > > _______________________________________________ > sdn mailing list > sdn@mail.ietf.org > https://mail.ietf.org/mailman/listinfo/sdn > --001a11c3ee6a1a8628051e4c361a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello everyone,

I have been reading the= emails for this list for a while and wanted to contribute.

<= /div>
My research this year as part of my MSc was on Threat Mitigation = & Digital Forensics in Software Defined Networks. =C2=A0

=
I have never contributed to IETF before but would like to get mo= re involved with the SDNRG.

What is the best way t= o engage?

Should I help some contributors with the= ir research?, submit a paper or throw out some ideas.

<= div>best regards

Patrick Lismore
@patric= klismore=C2=A0



=
On Wed, Aug 12, 2015 at 2:16 PM, Wesley Eddy <wes@mti-systems.com> wrote:
https://datatracker.ietf.org/doc/= draft-eddy-sdnrg-customer-filters/

The interesting part of this for SDNRG is probably the sub-controller
concept, which is how we allow OpenFlow to be used inter-domain (for
customers to control aspects of their ISP's network), and the three- stage organization of flow tables.

The content is fairly specific to DDoS, but could be extended and
generalized for other uses.

Much of the other interdomain SDN work has the ISPs setting up virtual
networks for each customer, or slice-based constructions, which are not
required by this sub-controller approach.=C2=A0 It may be of interest as an alternative construction with its own set of advantages and
disadvantages in comparison to other interdomain SDN approaches.

We're eager to hear your comments, criticisms, and questions.

--
Wes Eddy
MTI Systems

_______________________________________________
sdn mailing list
sdn@mail.ietf.org
https://mail.ietf.org/mailman/listinfo/sdn

--001a11c3ee6a1a8628051e4c361a-- From nobody Thu Aug 27 09:08:38 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20E921A89B3 for ; Thu, 27 Aug 2015 09:08:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wwG972SbmtvN for ; Thu, 27 Aug 2015 09:08:35 -0700 (PDT) Received: from atl4mhob11.myregisteredsite.com (atl4mhob11.myregisteredsite.com [209.17.115.49]) by ietfa.amsl.com (Postfix) with ESMTP id 165AD1ABD3D for ; Thu, 27 Aug 2015 09:08:35 -0700 (PDT) Received: from mailpod.hostingplatform.com ([10.30.71.206]) by atl4mhob11.myregisteredsite.com (8.14.4/8.14.4) with ESMTP id t7RG8Vnk023491 for ; Thu, 27 Aug 2015 12:08:31 -0400 Received: (qmail 23871 invoked by uid 0); 27 Aug 2015 16:08:31 -0000 X-TCPREMOTEIP: 24.166.126.82 X-Authenticated-UID: wes@mti-systems.com Received: from unknown (HELO ?192.168.0.148?) (wes@mti-systems.com@24.166.126.82) by 0 with ESMTPA; 27 Aug 2015 16:08:31 -0000 To: Linda Dunbar , "sdn@irtf.org" References: <55CB473A.3010505@mti-systems.com> <4A95BA014132FF49AE685FAB4B9F17F657D19ACA@dfweml701-chm> From: Wesley Eddy X-Enigmail-Draft-Status: N1110 Organization: MTI Systems Message-ID: <55DF35F5.4020202@mti-systems.com> Date: Thu, 27 Aug 2015 12:08:21 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657D19ACA@dfweml701-chm> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Cc: "gclark mti-systems.com" , Justin Dailey Subject: Re: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Aug 2015 16:08:37 -0000 On 8/26/2015 6:35 PM, Linda Dunbar wrote: > Eddy, et al, > > I think the content provided by this draft will be very useful in > preventing junk and malicious traffic taking over precious network > resources and providing a more effective way to protect applications > from DoS/DDoS attacks. Hi Linda, thank you for the insightful comments. My thoughts on each of them are enclosed below: > > * When applications or end points (Customer sites) detect any kind of > attack and need to inform ISPs to block those traffic, the packets > content might be using private addresses, local Tenant Identifiers, > etc, while the filters for the ISP ingress may be using "public > addresses". This is a good point. We had not been deeply considering cases beyond "normal" end sites with their own routable prefixes. However, the situations you note are probably more normal in actuality today. It should be possible for any party with knowledge of an address mapping to perform that mapping on destination address (or prefix) fields in the filter definitions, but we had not thought about where this fits in yet. It sounds like a good topic to address in an update. > * Figure 1: The Filter Management Apps is from customer side. The > "filter rules" or the commands to "ISF Sub-Controller" may need more > than what OpenFlow (e.g. OF1.5) can provide because those > rules/commands might need to specify the environmental conditions > that are not in the packets, e.g. Time of the Day, a specific event, > customer ID, etc. Maybe some other methods should be explored, such > as Open-Config, or OF-config, or others This is possible, though my assumption is that the same effect can be obtained in software logic in the customer network, without additional protocols needed to be used interdomain (or adapted for interdomain use). I would be interested in talking more about this to understand if the cases where it would be necessary. > * The requests from applications and end points may be from different > administrative domains than the ISP, therefore it is necessary to > have pre-agreed format to pass "Filter rules". The recent IETF > initiative (Interface to Network Security Functions - I2NSF is > intended to specify the standardized format for specifying rules to > security functions. See the latest charter: > _https://sites.google.com/site/interface2nsf/home_ ). I see your > draft provide a really good input to I2NSF. I agree, thanks for pointing it out! -- Wes Eddy MTI Systems From nobody Fri Aug 28 02:05:12 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 692231B301D for ; Fri, 28 Aug 2015 02:05:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.42 X-Spam-Level: X-Spam-Status: No, score=-3.42 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_NEUTRAL=0.779] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4fCiMja3JJkV for ; Fri, 28 Aug 2015 02:05:08 -0700 (PDT) Received: from ignavia.lancs.ac.uk (ignavia.lancs.ac.uk [148.88.25.16]) by ietfa.amsl.com (Postfix) with ESMTP id DBFBF1B2FED for ; Fri, 28 Aug 2015 02:05:07 -0700 (PDT) Received: from ex-0-ht0.lancs.ac.uk ([10.42.18.47] helo=EX-0-HT0.lancs.local) by ignavia.lancs.ac.uk with esmtp (Exim 4.72) (envelope-from ) id 1ZVFas-00053P-LG; Fri, 28 Aug 2015 10:05:06 +0100 Received: from EX-0-MB2.lancs.local ([fe80::9d98:936b:54d1:c531]) by EX-0-HT0.lancs.local ([fe80::7d10:114a:53b0:7f2f%12]) with mapi id 14.03.0248.002; Fri, 28 Aug 2015 10:05:06 +0100 From: "King, Daniel" To: "patricklismore@gmail.com" Thread-Topic: [Sdn] new draft on SDN for DDoS mitigation Thread-Index: AQHQ4NjaU6fvAcAI90e9HO/6Zj+3Vp4hGSZA Date: Fri, 28 Aug 2015 09:05:05 +0000 Message-ID: <65174429B5AF4C45BD0798810EC48E0A3246D9A3@EX-0-MB2.lancs.local> References: <55CB473A.3010505@mti-systems.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [213.205.251.136] x-iss-local-domain: 1 Content-Type: multipart/alternative; boundary="_000_65174429B5AF4C45BD0798810EC48E0A3246D9A3EX0MB2lancsloca_" MIME-Version: 1.0 Archived-At: Cc: "sdn@irtf.org" Subject: Re: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Aug 2015 09:05:10 -0000 --_000_65174429B5AF4C45BD0798810EC48E0A3246D9A3EX0MB2lancsloca_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUGF0cmljaywNCg0KQWxsIElSVEYvSUVURiBwYXJ0aWNpcGF0aW9uIGlzIHZlcnkgd2VsY29t ZSENCg0KVGhlcmUgYXJlIG9mdGVuIGRpZmZlcmVuY2VzIGJldHdlZW4gY29udHJpYnV0aW5nIHRv IGFuIElSVEYgUmVzZWFyY2ggR3JvdXAgKFJHKSBhbmQgYW4gSUVURiBXb3JraW5nIEdyb3VwIChX RykuIEluIHRoZSBTRE4gUkcgd2UgdGVuZCB0byBlbmNvdXJhZ2UgaW5pdGlhbCBkaXNjdXNzaW9u IHZpYSB0aGUgU0ROIG1haWxpbmcgbGlzdCBvciBhbiBSRyBwcmVzZW50YXRpb24gdG8gYWlkIGZv cm11bGF0aW9uIG9mIHRoZSByZXNlYXJjaCBjaGFsbGVuZ2UgYW5kIHNldHRpbmcgY29udGV4dCBh bmQvb3Igc2NvcGUsIHJhdGhlciB0aGFuIHRoZSB0eXBpY2FsIElFVEYgYXBwcm9hY2ggb2Ygc3Vi bWl0dGluZyBhIDAwIEludGVybmV0LURyYWZ0IChJLUQpLiBUaGVuIGlmIHRoZSB0b3BpYy93b3Jr IG1lcml0cyBmdXJ0aGVyIGludmVzdGlnYXRpb24gYW4gSW50ZXJuZXQtRHJhZnQgd291bGQgYmUg YSBmaW5lIHdheSBmb3J3YXJkLg0KDQpJZiB5b3UgZm9sbG93ZWQgdGhlIHJlY2VudCBTRE4gUkcg c2Vzc2lvbiBhdCBJRVRGIDkzIHdlIGhhZCBhIGRlZGljYXRlZCBzZXNzaW9uIG9uIFNETiBTZWN1 cml0eToNCg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTMvYWdlbmRhL2FnZW5k YS05My1zZG5yZw0KDQpJZGVudGlmeWluZyBhIGZldyBTRE4gdXNlIGNhc2VzIGFuZCBzdWJzZXF1 ZW50IFNlY3VyaXR5IHJlcXVpcmVtZW50cyB3b3VsZCBiZSBhIGdyZWF0IHdheSB0byBoZWxwIGlu aXRpYXRlIGFuZCBzdGVlciBTRE4gUkcgbGlzdCBkaXNjdXNzaW9uLiBBIHJlYXNvbmFibGUgb3V0 cHV0IGNvdWxkIHRoZW4gYmUgYW4gU0ROIFNlY3VyaXR5IEktRCB0aGF0IHN1bW1hcmlzZXMgdGhl IGNoYWxsZW5nZXMgYW5kIGF2YWlsYWJsZSBtZXRob2RzL3RlY2hub2xvZ2llcyBmb3IgbWl0aWdh dGluZyBTZWN1cml0eSByaXNrcyBhbmQgaXNzdWVzLiBUaGUgSS1EIGNvdWxkIGFsc28gaWRlbnRp ZnkgZ2FwcyBhbmQgcG9zc2libGUgY2FuZGlkYXRlIHNvbHV0aW9ucyB2aWEgZXhpc3RpbmcgSUVU RiBXRyBwcm90b2NvbHMgYW5kIG1lY2hhbmlzbXMsIHJlY2VudCBXRyBwcm9wb3NhbHMsIG9yIGlu ZGVlZCB0aGUgbmVlZCBmb3Igc29tZXRoaW5nIGVudGlyZWx5IG5ldyAoc2VlZGluZyBhIGJhci1C T0YsIGZ1cnRoZXIgZGlzY3Vzc2lvbnMsIGV0Yy4pLg0KDQpCUiwgRGFuLg0KDQpGcm9tOiBzZG4g W21haWx0bzpzZG4tYm91bmNlc0BtYWlsLmlldGYub3JnXSBPbiBCZWhhbGYgT2YgUGF0cmljayBM aXNtb3JlDQpTZW50OiAyNyBBdWd1c3QgMjAxNSAxNTo1OQ0KQ2M6IHNkbkBpcnRmLm9yZw0KU3Vi amVjdDogUmU6IFtTZG5dIG5ldyBkcmFmdCBvbiBTRE4gZm9yIEREb1MgbWl0aWdhdGlvbg0KDQpI ZWxsbyBldmVyeW9uZSwNCg0KSSBoYXZlIGJlZW4gcmVhZGluZyB0aGUgZW1haWxzIGZvciB0aGlz IGxpc3QgZm9yIGEgd2hpbGUgYW5kIHdhbnRlZCB0byBjb250cmlidXRlLg0KDQpNeSByZXNlYXJj aCB0aGlzIHllYXIgYXMgcGFydCBvZiBteSBNU2Mgd2FzIG9uIFRocmVhdCBNaXRpZ2F0aW9uICYg RGlnaXRhbCBGb3JlbnNpY3MgaW4gU29mdHdhcmUgRGVmaW5lZCBOZXR3b3Jrcy4NCg0KSSBoYXZl IG5ldmVyIGNvbnRyaWJ1dGVkIHRvIElFVEYgYmVmb3JlIGJ1dCB3b3VsZCBsaWtlIHRvIGdldCBt b3JlIGludm9sdmVkIHdpdGggdGhlIFNETlJHLg0KDQpXaGF0IGlzIHRoZSBiZXN0IHdheSB0byBl bmdhZ2U/DQoNClNob3VsZCBJIGhlbHAgc29tZSBjb250cmlidXRvcnMgd2l0aCB0aGVpciByZXNl YXJjaD8sIHN1Ym1pdCBhIHBhcGVyIG9yIHRocm93IG91dCBzb21lIGlkZWFzLg0KDQpiZXN0IHJl Z2FyZHMNCg0KUGF0cmljayBMaXNtb3JlDQpAcGF0cmlja2xpc21vcmUNCg0KDQoNCk9uIFdlZCwg QXVnIDEyLCAyMDE1IGF0IDI6MTYgUE0sIFdlc2xleSBFZGR5IDx3ZXNAbXRpLXN5c3RlbXMuY29t PG1haWx0bzp3ZXNAbXRpLXN5c3RlbXMuY29tPj4gd3JvdGU6DQpIZWxsbywgd2Ugd2FudGVkIHRv IG1ha2UgcGVvcGxlIGF3YXJlIG9mIGEgbmV3IEktRCB0aGF0IHVzZXMgU0ROIChvcg0KbW9yZSBz cGVjaWZpY2FsbHkgT3BlbkZsb3cpIGFzIGEgdG9vbCB0byBpbXByb3ZlIEREb1MgbWl0aWdhdGlv bjoNCg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtZWRkeS1zZG5yZy1j dXN0b21lci1maWx0ZXJzLw0KDQpUaGUgaW50ZXJlc3RpbmcgcGFydCBvZiB0aGlzIGZvciBTRE5S RyBpcyBwcm9iYWJseSB0aGUgc3ViLWNvbnRyb2xsZXINCmNvbmNlcHQsIHdoaWNoIGlzIGhvdyB3 ZSBhbGxvdyBPcGVuRmxvdyB0byBiZSB1c2VkIGludGVyLWRvbWFpbiAoZm9yDQpjdXN0b21lcnMg dG8gY29udHJvbCBhc3BlY3RzIG9mIHRoZWlyIElTUCdzIG5ldHdvcmspLCBhbmQgdGhlIHRocmVl LQ0Kc3RhZ2Ugb3JnYW5pemF0aW9uIG9mIGZsb3cgdGFibGVzLg0KDQpUaGUgY29udGVudCBpcyBm YWlybHkgc3BlY2lmaWMgdG8gRERvUywgYnV0IGNvdWxkIGJlIGV4dGVuZGVkIGFuZA0KZ2VuZXJh bGl6ZWQgZm9yIG90aGVyIHVzZXMuDQoNCk11Y2ggb2YgdGhlIG90aGVyIGludGVyZG9tYWluIFNE TiB3b3JrIGhhcyB0aGUgSVNQcyBzZXR0aW5nIHVwIHZpcnR1YWwNCm5ldHdvcmtzIGZvciBlYWNo IGN1c3RvbWVyLCBvciBzbGljZS1iYXNlZCBjb25zdHJ1Y3Rpb25zLCB3aGljaCBhcmUgbm90DQpy ZXF1aXJlZCBieSB0aGlzIHN1Yi1jb250cm9sbGVyIGFwcHJvYWNoLiAgSXQgbWF5IGJlIG9mIGlu dGVyZXN0IGFzDQphbiBhbHRlcm5hdGl2ZSBjb25zdHJ1Y3Rpb24gd2l0aCBpdHMgb3duIHNldCBv ZiBhZHZhbnRhZ2VzIGFuZA0KZGlzYWR2YW50YWdlcyBpbiBjb21wYXJpc29uIHRvIG90aGVyIGlu dGVyZG9tYWluIFNETiBhcHByb2FjaGVzLg0KDQpXZSdyZSBlYWdlciB0byBoZWFyIHlvdXIgY29t bWVudHMsIGNyaXRpY2lzbXMsIGFuZCBxdWVzdGlvbnMuDQoNCi0tDQpXZXMgRWRkeQ0KTVRJIFN5 c3RlbXMNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CnNkbiBtYWlsaW5nIGxpc3QNCnNkbkBtYWlsLmlldGYub3JnPG1haWx0bzpzZG5AbWFpbC5pZXRm Lm9yZz4NCmh0dHBzOi8vbWFpbC5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Nkbg0KDQo= --_000_65174429B5AF4C45BD0798810EC48E0A3246D9A3EX0MB2lancsloca_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLmhvZW56Yg0KCXttc28t c3R5bGUtbmFtZTpob2VuemI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgltc28tZmFyZWFzdC1sYW5n dWFnZTpFTi1VUzt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7 DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94 bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2 OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLUdCIiBs aW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+SGkgUGF0cmljaywNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+QWxsIElSVEYv SUVURiBwYXJ0aWNpcGF0aW9uIGlzIHZlcnkgd2VsY29tZSE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVh c3QtbGFuZ3VhZ2U6RU4tVVMiPlRoZXJlIGFyZSBvZnRlbiBkaWZmZXJlbmNlcyBiZXR3ZWVuIGNv bnRyaWJ1dGluZyB0byBhbiBJUlRGIFJlc2VhcmNoIEdyb3VwIChSRykgYW5kIGFuIElFVEYgV29y a2luZyBHcm91cCAoV0cpLiBJbiB0aGUgU0ROIFJHIHdlIHRlbmQNCiB0byBlbmNvdXJhZ2UgaW5p dGlhbCBkaXNjdXNzaW9uIHZpYSB0aGUgU0ROIG1haWxpbmcgbGlzdCBvciBhbiBSRyBwcmVzZW50 YXRpb24gdG8gYWlkIGZvcm11bGF0aW9uIG9mIHRoZSByZXNlYXJjaCBjaGFsbGVuZ2UgYW5kIHNl dHRpbmcgY29udGV4dCBhbmQvb3Igc2NvcGUsIHJhdGhlciB0aGFuIHRoZSB0eXBpY2FsIElFVEYg YXBwcm9hY2ggb2Ygc3VibWl0dGluZyBhIDAwIEludGVybmV0LURyYWZ0IChJLUQpLiBUaGVuIGlm IHRoZSB0b3BpYy93b3JrDQogbWVyaXRzIGZ1cnRoZXIgaW52ZXN0aWdhdGlvbiBhbiBJbnRlcm5l dC1EcmFmdCB3b3VsZCBiZSBhIGZpbmUgd2F5IGZvcndhcmQuICZuYnNwOyZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SWYgeW91IGZvbGxvd2VkIHRoZSByZWNl bnQgU0ROIFJHIHNlc3Npb24gYXQgSUVURiA5MyB3ZSBoYWQgYSBkZWRpY2F0ZWQgc2Vzc2lvbiBv biBTRE4gU2VjdXJpdHk6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzLzkzL2FnZW5kYS9hZ2VuZGEt OTMtc2RucmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvOTMvYWdlbmRhL2FnZW5kYS05My1zZG5yZzwv c3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEO21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SWRlbnRp ZnlpbmcgYSBmZXcgU0ROIHVzZSBjYXNlcyBhbmQgc3Vic2VxdWVudCBTZWN1cml0eSByZXF1aXJl bWVudHMgd291bGQgYmUgYSBncmVhdCB3YXkgdG8gaGVscCBpbml0aWF0ZSBhbmQgc3RlZXIgU0RO IFJHIGxpc3QgZGlzY3Vzc2lvbi4NCiBBIHJlYXNvbmFibGUgb3V0cHV0IGNvdWxkIHRoZW4gYmUg YW4gU0ROIFNlY3VyaXR5IEktRCB0aGF0IHN1bW1hcmlzZXMgdGhlIGNoYWxsZW5nZXMgYW5kIGF2 YWlsYWJsZSBtZXRob2RzL3RlY2hub2xvZ2llcyBmb3IgbWl0aWdhdGluZyBTZWN1cml0eSByaXNr cyBhbmQgaXNzdWVzLiBUaGUgSS1EIGNvdWxkIGFsc28gaWRlbnRpZnkgZ2FwcyBhbmQgcG9zc2li bGUgY2FuZGlkYXRlIHNvbHV0aW9ucyB2aWEgZXhpc3RpbmcgSUVURiBXRyBwcm90b2NvbHMNCiBh bmQgbWVjaGFuaXNtcywgcmVjZW50IFdHIHByb3Bvc2Fscywgb3IgaW5kZWVkIHRoZSBuZWVkIGZv ciBzb21ldGhpbmcgZW50aXJlbHkgbmV3IChzZWVkaW5nIGEgYmFyLUJPRiwgZnVydGhlciBkaXNj dXNzaW9ucywgZXRjLikuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PkJSLCBEYW4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj4gc2RuIFttYWlsdG86c2RuLWJvdW5jZXNAbWFpbC5pZXRmLm9yZ10NCjxi Pk9uIEJlaGFsZiBPZiA8L2I+UGF0cmljayBMaXNtb3JlPGJyPg0KPGI+U2VudDo8L2I+IDI3IEF1 Z3VzdCAyMDE1IDE1OjU5PGJyPg0KPGI+Q2M6PC9iPiBzZG5AaXJ0Zi5vcmc8YnI+DQo8Yj5TdWJq ZWN0OjwvYj4gUmU6IFtTZG5dIG5ldyBkcmFmdCBvbiBTRE4gZm9yIEREb1MgbWl0aWdhdGlvbjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhlbGxvIGV2ZXJ5b25lLDxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIGJlZW4gcmVh ZGluZyB0aGUgZW1haWxzIGZvciB0aGlzIGxpc3QgZm9yIGEgd2hpbGUgYW5kIHdhbnRlZCB0byBj b250cmlidXRlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5NeSByZXNlYXJjaCB0aGlzIHllYXIgYXMgcGFydCBvZiBteSBNU2Mgd2FzIG9uIFRo cmVhdCBNaXRpZ2F0aW9uICZhbXA7IERpZ2l0YWwgRm9yZW5zaWNzIGluIFNvZnR3YXJlIERlZmlu ZWQgTmV0d29ya3MuICZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIGhhdmUgbmV2ZXIgY29udHJpYnV0ZWQgdG8gSUVURiBiZWZvcmUg YnV0IHdvdWxkIGxpa2UgdG8gZ2V0IG1vcmUgaW52b2x2ZWQgd2l0aCB0aGUgU0ROUkcuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoYXQgaXMg dGhlIGJlc3Qgd2F5IHRvIGVuZ2FnZT88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+U2hvdWxkIEkgaGVscCBzb21lIGNvbnRyaWJ1dG9ycyB3aXRo IHRoZWlyIHJlc2VhcmNoPywgc3VibWl0IGEgcGFwZXIgb3IgdGhyb3cgb3V0IHNvbWUgaWRlYXMu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmJl c3QgcmVnYXJkczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5QYXRyaWNrIExpc21vcmU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkBwYXRyaWNrbGlzbW9yZSZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIEF1ZyAxMiwgMjAxNSBhdCAyOjE2IFBN LCBXZXNsZXkgRWRkeSAmbHQ7PGEgaHJlZj0ibWFpbHRvOndlc0BtdGktc3lzdGVtcy5jb20iIHRh cmdldD0iX2JsYW5rIj53ZXNAbXRpLXN5c3RlbXMuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg I0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi1yaWdodDowY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8sIHdlIHdhbnRl ZCB0byBtYWtlIHBlb3BsZSBhd2FyZSBvZiBhIG5ldyBJLUQgdGhhdCB1c2VzIFNETiAob3I8YnI+ DQptb3JlIHNwZWNpZmljYWxseSBPcGVuRmxvdykgYXMgYSB0b29sIHRvIGltcHJvdmUgRERvUyBt aXRpZ2F0aW9uOjxicj4NCjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LWVkZHktc2RucmctY3VzdG9tZXItZmlsdGVycy8iIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1lZGR5LXNkbnJnLWN1c3Rv bWVyLWZpbHRlcnMvPC9hPjxicj4NCjxicj4NClRoZSBpbnRlcmVzdGluZyBwYXJ0IG9mIHRoaXMg Zm9yIFNETlJHIGlzIHByb2JhYmx5IHRoZSBzdWItY29udHJvbGxlcjxicj4NCmNvbmNlcHQsIHdo aWNoIGlzIGhvdyB3ZSBhbGxvdyBPcGVuRmxvdyB0byBiZSB1c2VkIGludGVyLWRvbWFpbiAoZm9y PGJyPg0KY3VzdG9tZXJzIHRvIGNvbnRyb2wgYXNwZWN0cyBvZiB0aGVpciBJU1AncyBuZXR3b3Jr KSwgYW5kIHRoZSB0aHJlZS08YnI+DQpzdGFnZSBvcmdhbml6YXRpb24gb2YgZmxvdyB0YWJsZXMu PGJyPg0KPGJyPg0KVGhlIGNvbnRlbnQgaXMgZmFpcmx5IHNwZWNpZmljIHRvIEREb1MsIGJ1dCBj b3VsZCBiZSBleHRlbmRlZCBhbmQ8YnI+DQpnZW5lcmFsaXplZCBmb3Igb3RoZXIgdXNlcy48YnI+ DQo8YnI+DQpNdWNoIG9mIHRoZSBvdGhlciBpbnRlcmRvbWFpbiBTRE4gd29yayBoYXMgdGhlIElT UHMgc2V0dGluZyB1cCB2aXJ0dWFsPGJyPg0KbmV0d29ya3MgZm9yIGVhY2ggY3VzdG9tZXIsIG9y IHNsaWNlLWJhc2VkIGNvbnN0cnVjdGlvbnMsIHdoaWNoIGFyZSBub3Q8YnI+DQpyZXF1aXJlZCBi eSB0aGlzIHN1Yi1jb250cm9sbGVyIGFwcHJvYWNoLiZuYnNwOyBJdCBtYXkgYmUgb2YgaW50ZXJl c3QgYXM8YnI+DQphbiBhbHRlcm5hdGl2ZSBjb25zdHJ1Y3Rpb24gd2l0aCBpdHMgb3duIHNldCBv ZiBhZHZhbnRhZ2VzIGFuZDxicj4NCmRpc2FkdmFudGFnZXMgaW4gY29tcGFyaXNvbiB0byBvdGhl ciBpbnRlcmRvbWFpbiBTRE4gYXBwcm9hY2hlcy48YnI+DQo8YnI+DQpXZSdyZSBlYWdlciB0byBo ZWFyIHlvdXIgY29tbWVudHMsIGNyaXRpY2lzbXMsIGFuZCBxdWVzdGlvbnMuPGJyPg0KPHNwYW4g c3R5bGU9ImNvbG9yOiM4ODg4ODgiPjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPi0tPC9zcGFu Pjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPldlcyBFZGR5PC9zcGFuPjxicj4NCjxzcGFuIGNs YXNzPSJob2VuemIiPk1USSBTeXN0ZW1zPC9zcGFuPjxicj4NCjxicj4NCjxzcGFuIGNsYXNzPSJo b2VuemIiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9z cGFuPjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPnNkbiBtYWlsaW5nIGxpc3Q8L3NwYW4+PGJy Pg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+PGEgaHJlZj0ibWFpbHRvOnNkbkBtYWlsLmlldGYub3Jn Ij5zZG5AbWFpbC5pZXRmLm9yZzwvYT48L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+ PGEgaHJlZj0iaHR0cHM6Ly9tYWlsLmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2RuIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly9tYWlsLmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2RuPC9h Pjwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_65174429B5AF4C45BD0798810EC48E0A3246D9A3EX0MB2lancsloca_-- From nobody Fri Aug 28 02:58:35 2015 Return-Path: X-Original-To: sdn@ietfa.amsl.com Delivered-To: sdn@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE62C1A8880 for ; Fri, 28 Aug 2015 02:58:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oTSY-ZXYKyzM for ; Fri, 28 Aug 2015 02:58:30 -0700 (PDT) Received: from mail-vk0-f44.google.com (mail-vk0-f44.google.com [209.85.213.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 931771A700E for ; Fri, 28 Aug 2015 02:58:30 -0700 (PDT) Received: by vkbf67 with SMTP id f67so1645459vkb.0 for ; Fri, 28 Aug 2015 02:58:29 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=MgMz8EFMQeq8+3FnIasuX5mlEpgJKOkdT4KvQldE+BI=; b=bLtET0EGja0IjyTec4s40GFez4dEQ2o0D23T/rtCMWSy3CrplmS3HkkvpOnVDQn9Nr BKEzoXAcLcXC6Fi4otgRRQRl5rzztGs+rgpLH9GYLlW8XUyshyI94COYpdwj+A4e7mvP 9kNwLBiuO2WIxmhLcUU4iWiOIjgFo6w4hph2QiR1Cbyf1wU98GrPR3IOZc0mBnzdYKc1 UgV4WgB2jrK9xod/+48UQOfWtF7daIjer/7TUsAwYZAEgDVepH6S+caBWsFnvPdqVnbG 0Ni2c1mtMAf8OFglAV8iPrOK16yuHuuuxOab0VplRNanACA/xaDSByBmOoqVDVF0/Tkc rg4w== X-Gm-Message-State: ALoCoQn7DbAxvFHLVK0ZMORvrRUSiPkRYG+rtWBaH264H5+gq49n1iSw0oy5l6AHYAApSjat/bg4 X-Received: by 10.52.227.105 with SMTP id rz9mr5979714vdc.54.1440755909748; Fri, 28 Aug 2015 02:58:29 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.66.140 with HTTP; Fri, 28 Aug 2015 02:58:00 -0700 (PDT) In-Reply-To: <55CB473A.3010505@mti-systems.com> References: <55CB473A.3010505@mti-systems.com> From: Ali Haider Date: Fri, 28 Aug 2015 14:58:00 +0500 Message-ID: To: Wesley Eddy Content-Type: multipart/alternative; boundary=089e01177237358484051e5c2018 Archived-At: Cc: "gclark mti-systems.com" , sdn@irtf.org, Justin Dailey Subject: Re: [Sdn] new draft on SDN for DDoS mitigation X-BeenThere: sdn@mail.ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List to Discuss SDN Research Group in the IRTF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Aug 2015 09:58:34 -0000 --089e01177237358484051e5c2018 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable This was an interesting read. =E2=80=8BIt may be out of context for the filtering system (or it may not b= e) however, some kind of a weighted mechanism can be implemented in order to reduce the effect of temporary fluctuations or changes in the traffic. Since these changes do not last long, they must be ignored and filtering rules should not be installed for these.=E2=80=8B Otherwise, rules will be installed only to be removed moments later. Just a thought. On Wed, Aug 12, 2015 at 6:16 PM, Wesley Eddy wrote: > Hello, we wanted to make people aware of a new I-D that uses SDN (or > more specifically OpenFlow) as a tool to improve DDoS mitigation: > > https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/ > > The interesting part of this for SDNRG is probably the sub-controller > concept, which is how we allow OpenFlow to be used inter-domain (for > customers to control aspects of their ISP's network), and the three- > stage organization of flow tables. > > The content is fairly specific to DDoS, but could be extended and > generalized for other uses. > > Much of the other interdomain SDN work has the ISPs setting up virtual > networks for each customer, or slice-based constructions, which are not > required by this sub-controller approach. It may be of interest as > an alternative construction with its own set of advantages and > disadvantages in comparison to other interdomain SDN approaches. > > We're eager to hear your comments, criticisms, and questions. > > -- > Wes Eddy > MTI Systems > > _______________________________________________ > sdn mailing list > sdn@mail.ietf.org > https://mail.ietf.org/mailman/listinfo/sdn > --=20 *=E2=80=8BSyed Ali Haider*, Ph.D =E2=80=8BAssistant Professor School of Electrical Engineering and Computer Science National University of Sciences =E2=80=8Band=E2=80=8B Technology Sector H-12, Islamabad, Pakistan =E2=80=8Bt: +92 51 90852109 =E2=80=8Be: ali.haider@seecs.edu.pk=E2=80=8B - - - - - - - - - - - - - - - - - - - - - --089e01177237358484051e5c2018 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
This was an interesting read.

=E2=80=8BIt may be out of context for the filtering system (or it ma= y not be) however, some kind of a weighted mechanism can be implemented in = order to reduce the effect of temporary fluctuations or changes in the traf= fic. Since these changes do not last long, they must be ignored and filteri= ng rules should not be installed for these.=E2=80=8B Otherwise, rules will = be installed only to be removed moments later.

Just= a thought.


On Wed, Aug 12, 2015 at 6:16 PM, Wesley Eddy <wes@mti-syst= ems.com> wrote:
Hello, we w= anted to make people aware of a new I-D that uses SDN (or
more specifically OpenFlow) as a tool to improve DDoS mitigation:

https://datatracker.ietf.org/doc/= draft-eddy-sdnrg-customer-filters/

The interesting part of this for SDNRG is probably the sub-controller
concept, which is how we allow OpenFlow to be used inter-domain (for
customers to control aspects of their ISP's network), and the three- stage organization of flow tables.

The content is fairly specific to DDoS, but could be extended and
generalized for other uses.

Much of the other interdomain SDN work has the ISPs setting up virtual
networks for each customer, or slice-based constructions, which are not
required by this sub-controller approach.=C2=A0 It may be of interest as an alternative construction with its own set of advantages and
disadvantages in comparison to other interdomain SDN approaches.

We're eager to hear your comments, criticisms, and questions.

--
Wes Eddy
MTI Systems

_______________________________________________
sdn mailing list
sdn@mail.ietf.org
https://mail.ietf.org/mailman/listinfo/sdn



--
=
=E2=80=8BSyed Ali Haider, Ph.D
=E2=80=8BAssistant Pr= ofessor
School of Electrical Engineering and Computer Science
Nationa= l University of Sciences =E2=80=8Band=E2=80=8B Technology
Sector H-12, I= slamabad, Pakistan
=E2=80=8Bt: +92 51 90852109
=E2=80=8Be: ali.haider@seecs.edu.pk<= /a>=E2=80=8B
- - - - - - - - - - - - - - - - - - - - -
--089e01177237358484051e5c2018--