Re: [Geopriv] Adding GPS location to IPv6 header
"Richard L. Barnes" <[email protected]> Tue, 20 Nov 2012 15:12:54 -0500
| Newsgroups | gmane.ietf.ipv6,gmane.ietf.geopriv |
|---|---|
| Message-ID | <[email protected]> |
References for DHCP location: <http://tools.ietf.org/html/rfc4776> <http://tools.ietf.org/html/rfc6225> If I understand the proposal correctly, this is an orthogonal problem to th= e one DHCP location solves. DHCP geolocation sends location from the DHCP server to the end host. This= IPv6 option would send location from a host to the destination of a packet= (e.g., a server) and intermediate routers. On Nov 20, 2012, at 2:52 PM, "Carl Reed" <[email protected]> wrote: > Hi - > = > I asked this question before and did not get a response (maybe because my= question was off base). > = > There is a location extension for DHCP. This extension is consistent with= other location object definitions used in the IETF as well as what is used= and specified in various ISO, OGC, OASIS and other standards. > = > Why not use the DHCP location extension? Why define yet another location = element for IPv6? > = > Thanks > = > Carl Reed, PhD > CTO > OGC > = > = > -----Original Message----- From: Richard L. Barnes > Sent: Tuesday, November 20, 2012 11:49 AM > To: Ammar Salih > Cc: [email protected] ; [email protected] ; 'Fred Baker (fred)' > Subject: Re: [Geopriv] Adding GPS location to IPv6 header > = > Hi Ammar, > = > I have read your draft. From what I can tell, it is just a summary of th= e arguments in this thread. It would be more helpful if you could add a le= vel of technical detail to help people understand. I would want to see at = least: > 1. The format of the IPv6 option > 2. Where it is to be added to / removed from a packet > 3. Requirements for routers / hosts > 4. Privacy considerations > 5. Security considerations > = > Also, it will be slightly easier to read if you use some of the standard = tools for authoring Internet drafts. See, for example: > <http://tools.ietf.org/> > = > Technically speaking, I'm not yet convinced that this option is very usef= ul, but it does not seem to me that this option would be harmful to the net= work, only possibly the privacy of users. In specifying the privacy mechan= isms in your detailed description, I would suggest that you make this mecha= nism "opt-in" by end hosts. For example, you could have an all-zero geoloc= ation option indicate that a host wishes to disclose its location, but does= n't know its geolocation to put in the option; then you could require that = a router SHOULD NOT populate this option unless an all-zero geolocation opt= ion is already present (indicating consent). > = > It would also be helpful to clarify how this option would relate to other= similar options, such as the line identifier option: > <http://tools.ietf.org/html/rfc6788> > = > Hope this helps, > --Richard > = > = > = > = > On Nov 18, 2012, at 9:51 AM, Ammar Salih <[email protected]> wrote: > = >> Hello Fred, >> = >> = >> You may certainly file an internet draft with your ideas. You will want = to read about what an Internet Draft is and how to file one. http://www.iet= f.org/id-info/ >> = >> Filing an Internet Draft does not imply consensus around the specificati= on, and you will need to build that consensus. You will want to make your c= ase, and I would suggest starting on the geopriv mailing list, although the= case will eventually have to be made to 6man. http://datatracker.ietf.org/= wg/geopriv/charter/. >> = >> Appreciate it, the first draft has been submitted already http://datatra= cker.ietf.org/doc/draft-add-location-to-ipv6-header/?include_text=3D1 >> = >> = >> One consideration you should take in view is that the IPv6 header is not= encrypted, so information found in it is globally readable. If there is ev= er a case in which your GPS location is needed by the application but may n= eed to be guarded for privacy reasons, you will want to put it in the appli= cation layer (above the transport, guarded by IPsec or TLS), not the networ= k layer. >> = >> I have suggested few solutions to cover the privacy concern and also why= I am suggesting the network layer instead of the application layer, you co= uld find them included in the internet draft above. >> = >> = >> I would expect that 6man might tell you that the IPv6 header has one pri= mary purpose, which is to conduct a datagram from the sender's system to th= e intended receiver's system; if the data doesn't help achieve that, it's p= robably in the wrong header. >> = >> I agree, also from OSI perspective, I would think twice before including= location field into network layer, then again, it=92s the only layer that = makes the field useable to routers. >> = >> = >> = >> Thanks, >> = >> Ammar >> = >> = >> = >> From: Fred Baker (fred) [mailto:[email protected]] >> Sent: Friday, November 16, 2012 6:05 AM >> To: Ammar Salih >> Cc: <[email protected]>; <[email protected]> >> Subject: Re: Adding GPS location to IPv6 header >> = >> You may certainly file an internet draft with your ideas. You will want = to read about what an Internet Draft is and how to file one. http://www.iet= f.org/id-info/ >> = >> Filing an Internet Draft does not imply consensus around the specificati= on, and you will need to build that consensus. You will want to make your c= ase, and I would suggest starting on the geopriv mailing list, although the= case will eventually have to be made to 6man. http://datatracker.ietf.org/= wg/geopriv/charter/. >> = >> One consideration you should take in view is that the IPv6 header is not= encrypted, so information found in it is globally readable. If there is ev= er a case in which your GPS location is needed by the application but may n= eed to be guarded for privacy reasons, you will want to put it in the appli= cation layer (above the transport, guarded by IPsec or TLS), not the networ= k layer. In fact, I would expect that 6man might tell you that the IPv6 hea= der has one primary purpose, which is to conduct a datagram from the sender= 's system to the intended receiver's system; if the data doesn't help achie= ve that, it's probably in the wrong header. >> = >> On Nov 10, 2012, at 7:05 AM, Ammar Salih wrote: >> = >> = >> Hello IETF, based on my discussions with both ipv6 and geopriv teams, I= =92ve written the below document to summarize few ideas. >> = >> Is it possible to publish this on IETF website? even if it will not be i= mplemented now, at least for documentation and requesting feedback from the= community. >> = >> = >> = >> Many thanks. >> = >> Ammar >> = >> = >> = >> = >> = >> Ammar J. Salih >> Baghdad, Iraq >> October 30, 2012 >> Title: IP-LOC >> = >> = >> = >> Adding GPS location to IPv6 header >> = >> Abstract: >> =3D=3D=3D=3D=3D=3D=3D=3D=3D >> = >> This document describes IP-LOC, an extension to IPv6 header which sugg= ests adding GPS coordinates, as the current method of determining the locat= ion of IP traffic is through IP address registration database, which is not= very accurate as it depends on how the ISP registers its IP subnets, that = is normally done in a country/city format. >> = >> It also assumes that in the future, GPS capability will be added to the = router itself (just like smart phones) and packet marking and classificatio= n based on geo-location will be required. >> = >> QoS, firewall and routing based on geo-location will be highly required = when mobile routers move from one geo-location to another which has differe= nt policy. >> = >> = >> = >> = >> = >> Benefits of adding GPS location to IPv6 header (IP-LOC) >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D >> = >> = >> Web Services: getting more accurate locations will enhance many services= provided by the web, like targeted commercials (for example, I can get Ads= regarding restaurants available in my neighborhoods instead of all restaur= ants in the city), another good example would be webpage=92s language, my l= anguage will be detected more accurately based on my area rather than my co= untry, as there are many countries with more than one popular language, not= mentioning that many ip registrations does not even reflect the traffic or= iginating country. >> = >> ------------------------------- >> = >> Information accuracy and control: Nowadays, locations are assigned to IP= addresses without user awareness or control, every time a user performs ip= -lookup query the response would be different based on how the ISP has regi= stered this IP subnet, IP-LOC suggests making locations more accurate and c= ontrollable through OS and network devices, exactly like IP addresses (user= can change his/her IP address, but router can also modify the header infor= mation - in case it's required). >> = >> ------------------------------- >> = >> = >> Routing: Policy based routing, based on geo-location, like routing prede= fined traffic through certain server or path, for different purposes (secur= ity, manageability, serviceability like choosing language, or routing traff= ic to specific cashing or proxy server based on country .. etc) >> = >> ------------------------------- >> = >> = >> Copyright law: It happens when certain media/web content is not allowed = in certain countries due to copyright law, the current method of determinin= g locations is not accurate at all, on other hand, If layer-7 application t= o be used then the user might be able to manipulate the location field, in = this case (if it=92s required in future) the ISP can tag traffic with count= ry/city more accurately as traffic passes through ISP=92s boarder routers. >> = >> ------------------------------- >> = >> Maps, navigation, emergency calls and many other services will be also e= nhanced with accurate locations. >> = >> = >> = >> = >> = >> CURRENT ARGUMENTS AGAINST THIS IDEA: >> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> = >> =93Adding GPS position to every IPv6 header would add a lot of overhead= =94 >> = >> Response: It does not have to be in every IPv6 header, only when there i= s location update, also the host should have the option of not to send loca= tion updates. >> = >> ------------------------------- >> = >> =93What about privacy?=94 >> = >> Response: User should have the option of not sending location updates. U= ser should also have the ability to set location to all zeros, in this case= no router will modify the location field and user loses the location-based= services. >> = >> If it=92s router-to-router link, then no need to be worried about privac= y as such information usually configured on a separate network. >> = >> -------------------------------- >> = >> =93a good alternative would be to create application layer protocols tha= t could request and send GPS positions=94 >> = >> Response: the layer-7 location request will not be detected by layer-3 d= evices (Routers), I am assuming that in the future, GPS capability will be = added to the router itself (just like smart phones), features like packet m= arking and classification based on geo-location will be required to enforce= the new geo-location policies. >> = >> -------------------------------- >> = >> =93For location-based routing protocols: Why would you want this? Geogra= phical location isn't actually that important a metric for routing; what yo= u care about there is *topological* location, how far I am away from you in= terms of hops or latency=94 >> = >> Response: For shortest path maybe yes, hops or latency is important, not= for policy-based routing, in our case you might want to do location-based = routing, like, routing traffic coming from French speaking users (in multi-= language country like Canada) to google.fr >> = >> --------------------------------- >> = >> =93For geolocation-based ACLs: you have the problem that if the geolocat= ion is attached by the endpoint, then it can't be trusted, since the endpoi= nt would lie to get past the ACL. If it's attached by a router, the ACL ne= eds to have proof that the router attached it (and not the endpoint), which= means that you would need a signed geolocation header=94 >> = >> Response: You could have the router modify the location field anyways, j= ust like L3 QoS fields, if you don't trust the host, so no need for encrypt= ion or security, additionally, ACL is not only for security, it could be u= sed for routing, QoS ..etc, so the host will not always has the motivation = to manipulate the location field. >> = >> --------------------------------- >> = >> =93Why can=92t you simply implement rules related to geo-locations stati= cally on the network device (router, firewall .. etc)?=94 >> = >> Response: To enforce new geo-location policies automatically, let=92s as= sume that a mobile router (like a mobile BTS in a GSM network) moved from c= ity-x to city-y, and according to city-x regulations VoIP calls over GSM ne= twork is allowed, but city-y regulations do not allow that. Now the topolog= y may reflect same network metrics in both cities but there is no rule that= triggers configuration change based on geo-location. >> = >> = >> --------------------------------- >> = >> = >> = >> What do you think? >> = >> = >> Author/Contact Information: >> = >> Ammar J. Salih >> Baghdad, Iraq >> = >> Phone: +964 770 533 0306 >> Email: [email protected] >> = >> = >> -------------------------------------------------------------------- >> IETF IPv6 working group mailing list >> [email protected] >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 >> -------------------------------------------------------------------- >> = >> ---------------------------------------------------- >> The ignorance of how to use new knowledge stockpiles exponentially. >> - Marshall McLuhan >> = >> _______________________________________________ >> Geopriv mailing list >> [email protected] >> https://www.ietf.org/mailman/listinfo/geopriv > = > _______________________________________________ > Geopriv mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/geopriv = -------------------------------------------------------------------- IETF IPv6 working group mailing list [email protected] Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------