Internet RFC/STD/FYI/BCP Archives
Alternate Formats: rfc1127.txt | rfc1127.txt.pdf
Network Working Group R. Braden
Request for Comments: 1127 ISI
October 1989
A Perspective on the Host Requirements RFCs
Status of This Memo
This RFC is for information only; it does not constitute a standard,
draft standard, or proposed standard, and it does not define a
protocol. Distribution of this memo is unlimited.
Summary
This RFC contains an informal summary of the discussions and
conclusions of the IETF Working Group on Host Requirements while it
was preparing the Host Requirements RFCs. This summary has several
purposes: (1) to inform the community of host protocol issues that
need further work; (2) to preserve some history and context as a
starting point for future revision efforts; and (3) to provide some
insight into the results of the Host Requirements effort.
1. INTRODUCTION
A working group of the Internet Engineering Task Force (IETF) has
recently completed and published a monumental standards document on
software requirements for Internet hosts [RFC-1122, RFC-1123]. This
document has been published as two RFC's: "Requirements for Internet
Hosts -- Communication Layers", referred to here as "HR-CL", and
"Requirements for Internet Hosts -- Application and Support",
referred to here as "HR-AS". Together, we refer to them as the Host
Requirements RFCs, or "HR RFCs".
Creation of the Host Requirements document required the dedicated
efforts of about 20 Internet experts, with significant contributions
from another 20. The Host Requirements working group held 7 formal
meetings over the past 20 months, and exchanged about 3 megabytes of
electronic mail. The HR RFCs went through approximate 20 distinct
drafts.
This group of people struggled with a broad range of issues in host
implementations of the Internet protocols, attempting to reconcile
theoretical and architectural concerns with the sometimes conflicting
imperatives of the real world. The present RFC recaps the results of
this struggle, with the issues that were settled and those that
remain for future work. This exegesis has several goals:
(1) to give the Internet technical community some insight into the
results of the host requirements effort;
(2) to inform the community of areas that need further work; and
(3) to preserve some history and context of the effort as a starting
point for a future revision.
1.1 GOALS OF THE HOST REQUIREMENTS RFCs
The basic purpose of the Host Requirements RFCs is to define the
requirements for Internet host software. However, the document goes
far beyond a simple prescription of requirements, to include:
(a) a bibliography of the documents essential to an implementor;
(b) corrections and updates to the original standards RFC's;
(c) material to fill gaps in the previous specifications;
(d) limitations on implementation choices, where appropriate;
(e) clarification of important issues and the intent of the
protocols; and
(f) documentation of known solutions to recurring problems as well
as implementation hints.
Broadly speaking, the Host Requirements working group started from
the following goals for Internet host software:
(1) Interoperability
(2) Extensibility
(3) Functionality
(4) Efficiency
(5) Architectural Purity
Of these, interoperability was clearly preeminent, while
architectural purity had the lowest priority. It is more difficult
to assign relative importance to extensibility, functionality, and
efficiency, as it varied from one topic to another.
At a more technical level, the working group pursued a set of general
goals that included the following:
* Discourage hosts from unexpectedly acting as gateways.
* Discourage the use of bad IP addresses.
* Eliminate broadcast storms.
* Discourage gratuitous Address Mask Reply messages.
* Facilitate the use IP Type-of-Service for routing and queueing.
* Encourage implementations of IP multicasting.
* Encourage TCP connection robustness.
* Encourage (mandate!) implementation of known TCP performance
enhancements.
* Encourage user interfaces that support the full capabilities of
the protocols.
* Encourage more complete implementations of FTP.
* Encourage robust mail delivery
* Discourage the source-routing of mail in the Internet.
* Encourage error logging.
In addition to these general technical goals, the working group
decided to discourage the use of certain protocol features: e.g., the
IP Stream Id option, ICMP Information Request and Reply messages, the
RFC-795 TOS mappings, WKS records in the Domain Name System, and FTP
Page structure.
The HR RFC tries to deal only with the software implementation, not
with the way in which that software is configured and applied. There
are a number of requirements on Internet hosts that were omitted from
the HR RFC as administrative or configuration issues.
The HR RFCs contain many, many detailed requirements and
clarifications that are straightforward and (almost) non-
controversial.
Indeed, many of these are simply restatements or reinforcement of
requirements that are already explicit or implicit in the original
standards RFC's. Some more cynical members of the working group
refer to these as "Read The Manual" provisions. However, they were
included in the HR RFCs because at least one implementation has
failed to abide by these requirements. In addition, many provisions
of the HR RFCs are simply applications of Jon Postel's Robustness
Principle [1.2.2 in either RFC].
However, not all issues were so easy; the working group struggled
with a number of deep and controversial technical issues. Where the
result was a reasonable consensus, then definite, firm
recommendations and requirements resulted. We list these settled
issues in Section 2. Section 2 also lists a number of areas where
the HR RFCs fill gaping holes in the current specifications by giving
extended discussions of particular issues.
However, in some other cases the working group was unable to reach a
crisp decision or even a reasonable consensus; we list these open
issues in Section 3. Future discussion is needed to ascertain which
of these issues really do have "right answers", and which can
reasonably be left as implementation choices. Section 4 contains
some other areas that the working group did not tackle but which need
further work outside the context of the HR RFCs (although the outcome
may be reflected in a future revision). Finally, Appendix I lists
specific issues for consideration by a future HR RFC revision effort,
while Appendix II lists the issues that are relevant to a revision of
the Gateway Requirements RFC.
It should be noted that this categorization of issues is imperfect; a
few issues appear (legitimately) in more than one category.
For brevity, we do not attempt to define all the terminology or
explain all the concepts mentioned here. For those cases where
further clarification is needed, we include (in square brackets)
references to the corresponding sections of the HR RFCs.
2. SETTLED ISSUES
Here are the areas in which the Host Requirements working group was
able to reach a consensus and take a definite stand.
- ARP Cache Management [CL 2.3.2.1]
Require a mechanism to flush out-of-date ARP cache entries.
- Queueing packets in ARP [CL 2.3.2.2]
Recommend that ARP queue unresolved packet(s) in the link layer.
- Ethernet/802.3 Interoperability [CL 2.3.3]
Impose interoperability requirements for Ethernet and IEEE 802.3
encapsulation.
- Broadcast Storms [CL 2.4, 3.2.2]
Require many provisions to prevent broadcast storms.
In particular, require that the link-layer driver pass a flag to
the IP layer to indicate if a packet was received via a link-
layer broadcast, and require that this flag be used by the IP
layer.
- Bad IP addresses
Include numerous provisions to discourage the use of bad IP
addresses.
- Address Mask Replies [CL 3.2.2.9]
Discourage gratuitous ICMP Address Mask Reply messages.
- Type-of-Service
Include various requirements on IP, transport, and application
layers to make Type-of-Service (TOS) useful.
- Time-to-Live [CL 3.2.1.7]
Require that Time-to-Live (TTL) be configurable.
- Source Routing [CL 3.2.1.8(e)]
Require that host be able to act as originator or final
destination of a source route.
- IP Multicasting [CL 3.3.7]
Encourage implementation of local IP multicasting.
- Reassembly Timeout [CL 3.3.2]
Require a fixed reassembly timeout.
- Choosing a Source Address [CL 3.3.4.3, 3.4, 4.1.3.5, 4.2.3.7]
Require that an application on a multihomed host be able to
either specify which local IP address to use for a new TCP
connection or UDP request, or else leave the local address
"wild" and let the IP layer pick one.
- TCP Performance [CL 4.2.12.15, 4.2.3.1-4]
Require TCP performance improvements.
- TCP Connection Robustness [CL 4.2.3.5, 4.2.3.9]
Encourage robustness of TCP connections.
- TCP Window Shrinking [CL 4.2.2.16]
Discourage the shrinking of TCP windows from the right.
- Dotted-Decimal Host Numbers [AS 2.1]
Recommend that applications be able to accept dotted-decimal
host numbers in place of host names.
- Telnet End-of-Line [AS 3.3.1]
Include compatibility requirements for Telnet end-of-line.
- Minimal FTP [AS 4.1.2.13]
Enlarge the minimum FTP implementation.
- Robust Mail Delivery [AS 5.3.2, 5.3.4, 6.1.3.4]
Recommend the use of long timeouts and of alternative addresses
for multihomed hosts, to obtain robust mail delivery.
- Source-Routing of Mail [AS 5.2.6, 5.2.16, 5.2.19]
Discourage the use of source routes for delivering mail. (This
was one of the few cases where the working group opted for the
architecturally pure resolution of an issue.)
- Fully-Qualified Domain Names [AS 5.2.18]
Require the use of fully-qualified domain names in RFC-822
addresses.
- Domain Name System Required [AS 6.1.1]
Require that hosts implement the Domain Name System (DNS).
- WKS Records Detracted [AS 2.2, 5.2.12, 6.1.3.6]
Recommend against using WKS records from DNS.
- UDP Preferred for DNS Queries [AS 6.1.2.4, 6.1.3.2]
Require that UDP be preferred over TCP for DNS queries.
- DNS Negative Caching [AS 6.1.3.3]
Recommend that DNS name servers and resolvers cache negative
responses and temporary failures.
Finally, here is a list of areas in which the HR RFCs provide
extended discussion of issues that have been inadequately documented
in the past.
- ARP cache handling [CL 2.3.2.1]
- Trailer encapsulation [CL 2.3.1]
- Dead gateway detection algorithms [CL 3.3.1.4]
- IP multihoming models [CL 3.3.4]
(Note that this topic is also one of the significant contentious
issues; see the next section.)
- Maximum transmission unit (MTU and transport-layer maximum-
segment size (MSS) issues [CL 3.3.2, 3.3.3, 3.4, 4.1.4,
4.2.2.6]
- TCP silly-window syndrome (SWS) avoidance algorithms
[CL 4.2.3.3, 4.2.3.4]
- Telnet end-of-line issues [AS 3.3.1]
- Telnet interrupt/SYNCH usage [AS 3.2.4]
- FTP restart facility [AS 4.1.3.4]
- DNS efficiency issues [AS 6.1.3.3]
- DNS user interface: aliases and search lists [AS 6.1.4.3]
There are some other areas where the working group tried to produce a
more extended discussion but was not totally successful; one example
is error logging (see Appendix I below).
3. OPEN ISSUES
For some issues, the disagreement was so serious that the working
group was unable to reach a consensus. In each case, some spoke for
MUST or SHOULD, while others spoke with equal fervor for MUST NOT or
SHOULD NOT. As a result, the HR RFCs try to summarize the differing
viewpoints but take no stand; the corresponding requirements are
given as MAY or OPTIONAL. The most notorious of these contentious
issues are as follows.
- Hosts forwarding source-routed datagrams, even though the hosts
are not otherwise acting as gateways [CL 3.3.5]
- The multihoming model [CL 3.3.4]
- ICMP Echo Requests to a broadcast or multicast address
[CL 3.2.2.6]
- Host-only route caching [CL 3.3.1.3]
- Host wiretapping routing protocols [CL 3.3.1.4]
- TCP sending an ACK when it receives a segment that appears to be
out-of-order [CL 4.2.2.21]
There was another set of controversial issues for which the HR RFCs
did take a compromise stand, to allow the disputed functions but
circumscribe their use. In many of these cases, there were one or
more significant voices for banning the feature altogether.
- Host acting as gateways [CL 3.1]
- Trailer encapsulation [CL 2.3.1]
- Delayed TCP acknowledgments [CL 4.2.3.2]
- TCP Keep-alives [CL 4.2.3.6]
- Ignoring UDP checksums [CL 4.1.3.4]
- Telnet Go-Aheads [AS 3.2.2]
- Allowing 8-bit data in Telnet NVT mode [AS 3.2.5]
4. OTHER FUTURE WORK
General Issues:
(1) Host Initialization Procedures
When a host system boots or otherwise initializes, it needs
certain network configuration information in order to communicate;
e.g., its own IP address(es) and address mask(s). In the case of
a diskless workstation, obtaining this information is an essential
part of the booting process.
The ICMP Address Mask messages and the RARP (Reverse ARP) protocol
each provide individual pieces of configuration information. The
working group felt that such piecemeal solutions are a mistake,
and that a comprehensive approach to initialization would result
in a uniform mechanism to provide all the required configuration
information at once. The HR working group recommends that a new
working group be established to develop a unified approach to
system initialization.
(2) Configuration Options
Vendors, users, and network administrators all want host software
that is "plug-and-play". Unfortunately, the working group was
often forced to require additional configuration parameters to
satisfy interoperability, functionality, and/or efficiency needs
[1.2.4 in either RFC]. The working group was fully aware of the
drawbacks of configuration parameters, but based upon extensive
experience with existing implementations, it felt that the
flexibility was sometimes more important than installation
simplicity.
Some of the configuration parameters are forced for
interoperability with earlier, incorrect implementations. Very
little can be done to ease this problem, although retirement of
the offending systems will gradually solve it. However, it would
be desirable to re-examine the other required configuration
options, in an attempt to develop ways to eliminate some of them.
Link-Layer Issues:
(2) ARP Cache Maintenance
"Proxy ARP" is a link-layer mechanism for IP routing, and its use
results in difficult problems in managing the ARP cache.
Even without proxy ARP, the management dynamics of the IP route
cache interact in subtle ways with transport-layer dynamics;
introducing routing via proxy ARP brings a third protocol layer
into the problem, complicating the inter-layer dynamics still
further.
The algorithms for maintaining the ARP cache need to be studied
and experimented with, to create more complete and explicit
algorithms and requirements.
(3) FDDI Bit-order in MAC addresses
On IEEE 802.3 or 802.4 LAN, the MAC address in the header uses the
same bit-ordering as transmission of the address as data. On
802.5 and FDDI networks, however, the MAC address in the header is
in a different bit-ordering from the equivalent 6 bytes sent as
data. This will make it hard to do MAC-level bridging between
FDDI and 802.3 LAN's, for example, although gateways (IP routers)
can still be used.
The working group concluded that this is a serious but subtle
problem with no obvious fix, and that resolving it was beyond the
scope of the HR working group.
IP-Layer Issues
(4) Dead Gateway Detection
A fundamental requirement for a host is to be able to detect when
the first-hop gateway has failed. The early TCP/IP
experimentation was based on the ARPANET, which provided explicit
notification of gateway failure; as a result, dead gateway
detection algorithms were not much considered at that time. The
very general guidelines presented by Dave Clark [RFC-816] are
inadequate for implementors. The first attempt at applying these
guidelines was the introduction of universal gateway pinging by
TOPS-20 systems; this quickly proved to be a major generator of
ARPANET traffic, and was squelched. The most widely used
implementation of the Internet protocols, 4.2BSD, solved the
problem in an extra-architectural manner, by letting the host
wiretap the gateway routing protocol (RIP). As a result of this
history, the HR working group was faced with an absence of
documentated techniques that a host conforming to the Internet
architecture could use to detect dead gateways.
After extensive discussion, the working group agreed on the
outline of an appropriate algorithm. A detailed algorithm was in
fact written down, to validate the discussion in the HR RFCs.
This algorithm, or a better one, should be tried experimentally
and documented in a new RFC.
(5) Gateway Discovery
A host needs to discover the IP addresses of gateways on its
connected networks. One approach, begun but not finished by
members of the HR working group, would be to define a new pair of
ICMP query messages for gateway discovery. In the future, gateway
discovery should be considered as part of the complete host
initialization problem.
(6) MTU Discovery
Members of the HR working group designed IP options that a host
could use to discover the minimum MTU of a particular Internet
path [RFC-1063]. To be useful, the Probe MTU options would have
to be implemented in all gateways, which is an obstacle to its
adoption. Code written to use these options has never been
tested. This work should be carried forward; an effective MTU
choice will become increasingly important for efficient Internet
service.
(7) Routing Advice from Gateways
A working group member produced a draft specification for ICMP
messages a host could use to ask gateways for routing advice
[Lekashman]. While this is not of such pressing importance as the
issues listed previously, it deserves further consideration and
perhaps experimentation.
(8) Dynamic TTL Discovery
Serious connectivity problems have resulted from host software
that has too small a TTL value built into the code. HR-CL
specifies that TTL values must be configurable, to allow TTL to be
increased if required for communication in a future Internet;
conformance with this requirement would solve the current
problems. However, configurable parameters are an operational
headache, so it has been suggested that a host could have an
algorithm to determine the TTL ("Internet diameter") dynamically.
Several algorithms have been suggested, but considerably more work
would be required to validate them. This is a lower-priority
problem than issues (4)-(6).
(9) Dynamic Discovery of Reassembly Timeout Time
The maximum time for retaining a partially-reassembled datagram is
another parameter that creates a potential operational headache.
An appropriate reassembly timeout value must balance available
reassembly buffer space against reliable reassembly. The best
value thus may depend upon the system and upon subtle delay
properties (delay dispersion) of the Internet. Again, dynamic
discovery could be desirable.
(10) Type-of-Service Routing in Hosts
As pointed out previously, the HR RFCs contain a number of
provisions designed to make Type-of-Service (TOS) useful. This
includes the suggestion that the route cache should have a place
or specifying the TOS of a particular route. However, host
algorithms for using TOS specifications need to be developed and
documented.
(11) Using Subnets
An RFC is needed to provide a thorough explanation of the
implications of subnetting for Internet protocols and for network
administration.
Transport-Layer Issues:
(12) RST Message
It has been proposed that TCP RST (Reset) segments can contain
text to provide an explicit explanation of the reason for the
particular RST. A proposal has been drafted [CLynn].
(13) Performance Algorithms
HR-CL contains a number of requirements on TCP performance
algorithms; Van Jacobson's slow start and congestion avoidance,
Karn's algorithm, Nagle's algorithm, and SWS prevention at the
sender and receiver. Implementors of new TCPs really need more
guidance than could possibly be included in the HR RFCs. The
working group suggested that an RFC on TCP performance is needed,
to describe each of these issues more deeply and especially to
explain how they fit together.
Another issue raised by the HR RFCs is the need for validation (or
rejection) of Van Jacobson's fast retransmit algorithm.
Application-Layer Issues:
(14) Proposed FTP extensions
A number of minor extensions proposed for FTP should be processed
and accepted or rejected. We are aware of the following
proposals:
(a) Atomic Store Command
The FTP specification leaves undefined the disposition of a
partial file created when an FTP session fails during a store
operation. It was suggested that this ambiguity could be
resolved by defining a new store command, Store Atomic (STOA).
The receiver would delete the partial file if the transfer
failed before the final data-complete reply had been sent.
This assumes the use of a transfer mode (e.g., block) in which
end-of-file can be distinguished from TCP connection failure,
of course.
(b) NDIR Command
"NDIR would be a directories-only analogue to the NLST command.
Upon receiving an NDIR command an FTP server would return a
list of the subdirectories to the specified directory or file
group; or of the current directory if no argument was sent.
... The existing NLST command allows user FTPs to implement
user-interface niceties such as a "multiple get" command. It
also allows a selective (as opposed to generative) file-naming
user interface: the user can pick the desired file out of a
list instead of typing its name." [Matthews]
However, the interface needs to distinguish files from
directories. Up to now, such interfaces have relied on a bug
in many FTP servers, which have included directory names in the
list returned by NLST. As hosts come into conformance with
HR-AS, we need an NDIR command to return directory names.
(c) Adaptive Compression
It has been suggested that a sophisticated adaptive data
compression algorithm, like that provided by the Unix
"compress" command, should be added as an alternative FTP
transfer mode.
(15) SMTP: Global Mail Addressing
While writing requirements for electronic mail, the working group
was urged to set rules for SMTP and RFC-822 that would be
universal, applicable not only to the Internet environment but
also to the other mail environments that use one or both of these
protocols. The working group chose to ignore this Siren call, and
instead limit the HR RFC to requirements specific to the Internet.
However, the networking world would certainly benefit from some
global agreements on mail routing. Strong passions are lurking
here.
(16) DNS: Fully Replacing hosts.txt
As noted in HR-AS [AS 6.1.3.8], the DNS does not yet incorporate
all the potentially-useful information included in the DDN NIC's
hosts.txt file. The DNS should be expanded to cover the hosts.txt
information. RFC-1101 [RFC-1101] is a step in the right
direction, but more work is needed.
5. SUMMARY
We have summarized the results of the Host Requirements Working
Group, and listed a set of issues in Internet host protocols that
need future effort.
6. REFERENCES
[RFC-1122] Braden, R., Editor, "Requirements for Internet Hosts --
Communications Layers", RFC 1122, IETF Host Requirements Working
Group, October 1989.
[RFC-1123] Braden, R., Editor, "Requirements for Internet Hosts --
Application and Support", RFC 1123, IETF Host Requirements Working
Group, October 1989.
[RFC-1009] Braden, R., and J. Postel, "Requirements for Internet
Gateways", RFC 1009, USC/Information Sciences Institute, June 1987.
[RFC-1101] Mockapetris, P., "DNS Encoding of Network Names and Other
Types", RFC 1101, USC/Information Sciences Institute, April 1989.
[RFC-1063] Mogul, J., C. Kent, C. Partridge, and K. McCloghrie, "IP
MTU Discovery Options", RFC-1063, DEC, BBN, & TWG, July 1988.
[RFC-816] Clark, D., "Fault Isolation and Recovery", RFC-816, MIT,
July 1982.
[CLynn] Lynn, C., "Use of TCP Reset to Convey Error Diagnostics",
Internal Memo, BBN, December 1988.
[Lekashman] Message to ietf-hosts mailing list from John Lekashman,
14 September 1988.
[Matthews] Message to Postel from Jim Matthews, 3 August 1989.
APPENDIX I -- ISSUES FOR FUTURE REVISION
In order to complete the HR RFCs, it was necessary to defer some
technical issues. These issues should be considered by the parties
responsible for the first update of the HR RFCs.
The issues pending at the time of publication are listed here, in
order by protocol layer.
General Issue:
Error Logging
The working group felt that more complete and explicit guidance on
error logging procedures is needed than is presently contained in
Section 1.2.3 (both HR RFCs).
Link Layer Issues:
- Stolen IP Address
How should a host react when it detects through ARP traffic that
some other host has "stolen" its IP address?
IP Layer Issues:
- "Raw Mode" Interface
HR-CL could define an optional "raw mode" interface from the
application layer to IP.
- Rational Fragmentation
When a host performs intentional fragmentation, it should make the
first fragment as large as possible (this same requirement should
be placed on gateways).
- Interaction of Multiple Options
HR-CL does not give specific rules for the interactions of
multiple options in the same IP header; this issue was generally
deferred to a revision of the Gateway Requirements RFC. However,
this issue might be revisited for hosts.
- ICMP Error for Source-Routed Packet
It was suggested that when a source-routed packet arrives with an
error, any ICMP error message should be sent with the
corresponding return route. This assumes that the ICMP error
message is more likely to be delivered successfully with the
source route than without it.
- "Strong" IP Options and ICMP Types
The HR RFCs takes the general approach that a host should ignore
whatever it does not understand, so that possible future
extensions -- e.g., new IP options or new ICMP message types --
will cause minimum problems for existing hosts. The result of
this approach is that when new facilities are used with old hosts,
a "black hole" can result. Several people have suggested that
this is not always what is wanted; it may sometimes be more useful
to obtain an ICMP error message from the old host. To quote
Jeremey Siegel:
"The basic premise is that if an option is to have any real
meaning at all within an '[upward] compatible' environment, it
must be known whether or not the option actually *carries* its
meaning. An absurd analogy might be programming languages: I
could make a compiler which simply ignored unknown sorts of
statements, thereby allowing for future expansion of the
language.
Right now, there are four "classes" of options; only two are
defined. Take one of the other classes, and define it such
that any options in that class, if unrecognized, cause an ICMP
error message. Thus anyone who wants to propose a "strong"
option (one which requires full participation by all systems
involved to operate correctly) can assign it to that class.
Options in the current classes may still be passed through if
they are unknown; only "weak" options will be assigned to these
classes in the future."
- Network Mask
As explained in HR-CL [CL 3.1.2.3], we believe that a possible
future transition for the interpretation of IP addresses may be
eased if hosts always treat an IP address as an indivisible 32-
bit number. However, there are various circumstances where a host
has to distinguish its own network number. Charlie Lynn has
suggested that indivisibility can be retained if a host is
configured with both an address mask (indicating subnetting) and a
network mask (with network but not subnet bits).
- WhoAmI Query
The following requirement is needed: for a multihomed host, a
UDP-based application should (must?) be able to query the
communication layers to obtain a list of all local IP addresses
for the host.
- New Destination Unreachable codes
For each of the new ICMP Destination Unreachable codes defined in
HR-CL [CL 3.2.2.1], it should be documented whether the error is
"soft" or "hard".
- ICMP Error Schizophrenia
Section 3.3.8 of HR-CL requires a host to send ICMP error
messages, yet in nearly all individual cases the specific
requirements say that errors are to be silently ignored. The
working group recognized this contradiction but was unwilling to
resolve it.
At every choice point, the working group opted towards a
requirement that would avoid broadcast storms. For example, (1)
ICMP errors cannot be sent for broadcasts, and also (2) individual
errors are to be silently ignored. This is redundant; either
provision (1) or (2) alone, if followed, should eliminate
broadcast storms. The general area of responses to errors and
broadcast storms could be reassessed and the individual decisions
reviewed.
Transport-Layer Requirements:
- Delayed ACK Definition
A more precise and complete definition of the conditions for
delaying a TCP ACK segment may be desirable; see Section 4.2.3.2
of HR-CL.
Telnet Requirements:
- Flushing Output
The DISCUSSION in Section 3.2.4 of HR-AS concerns three possible
ways for a User Telnet to flush output. It would be helpful for
users and implementers if one of these could be recommended over
the others; however, when the working group discussed the matter,
there seemed to be compelling arguments for each choice. This
issue needs more study.
- Telnet LineMode Option
This important new option is still experimental, but when it
becomes a standard, implementation should become recommended or
required.
FTP Requirements:
- Reply Codes
A number of problems have been raised with FTP reply codes.
(a) Access Control Failures
Note that a 550 message is used to indicate access control
problems for a read-type operation (e.g., RETR, RNFR), while a 553
message is used for the same purpose for a write-type operation
(e.g., STOR, STOU, RNTO).
LIST, NLST, and STAT may fail with a 550 reply due to an access
control violation.
MKD should fail with a 553 reply if a directory already exists
with the same name.
(b) Directory Operations (RFC-959 Appendix II)
An RMD may result in a 450 reply if the directory is busy.
Many of the reply codes shown in the text of Appendix II are
wrong. A positive completion for CWD should be 250. The 521 code
shown for MKD should be 553 (see above), while the 431 shown for
CWD should be a 550.
(c) HELP and SITE Commands
The positive completion reply to a HELP command should be code
214.
HELP or SITE with an invalid argument should return a 504 reply.
- Bidirectional FTP
The FTP specification allows an implementation in which data
transfer takes place in both directions simultaneously, although
few if any implementations support this. Perhaps HR-AS should
take a stand for or against this.
SMTP Requirements:
- Offline SEND
Some on the working group felt that the SMTP SEND command,
intended to display a message immediately on the recipient's
terminal, should produce an error message if delivery must be
deferred.
- Header-like Fields
John Klensin proposed:
"Header-like fields whose keywords do not conform to RFC822 are
strongly discouraged; gateways SHOULD filter them out or place
them into the message body. If, however, they are not removed,
Internet hosts not acting as gateways SHOULD NOT utilize or
inspect them. Hence address-like subfields of those fields SHOULD
NOT be altered by the gateway."
- Syntax of Received: Line
The precise syntax of a revised Received: line (see Section 5.2.8
of HR-AS) could be given. An unresolved question concerned the
use of "localhost" rather than a fully-qualified domain name in
the FROM field of a Received: line. Finally, new syntax was
proposed for the Message Id field.
Appendix II -- Gateway Issues
The working group identified a set of issues that should be
considered when the Gateway Requirements RFC [RFC-1009] ("GR RFC") is
revised.
- All-Subnets Broadcast
This facility is not currently widely implemented, and HR-CL warns
users of this fact. The GR RFC should take a stand on whether or
not gateways ought to implement the necessary routing.
- Rational Fragmentation
When a gateway performs intentional fragmentation, it should make
the first fragment as large as possible.
- Illegal Source Address
It has been suggested that a gateway should not forward a packet
containing an illegal IP source address, e.g., zero.
- Option Processing
Specific rules should be given for the order of processing
multiple options in the same IP header. Two approaches have been
used: to process options in the order presented, or to parse them
all and then process them in some "canonical" order.
The legality should also be defined for using broadcast or
multicast addresses in IP options that include IP addresses.
Security Considerations
A future revision of the Host Requirements RFCs should incorporate a
more complete discussion of security issues at all layers.
Author's Address
Robert Braden
USC/Information Sciences Institute
4676 Admiralty Way
Marina del Rey, CA 90292-6695
Phone: (213) 822 1511
EMail: Braden@ISI.EDU