NSISNTLP Interoperability Testing

1
NSIS/NTLP InteroperabilityTesting

• 2005-07-28 to 2005-07-30 in Paris, France
• Martin Stiemerling NEC Network Labs Europe
• stiemerling_at_netlab.nec.de
• NSIS Working Group, 63th IETF meeting

2
NTLP Interop Event

• Sponsored and organized by EU IST MOME and
  Eurolabs projects
• Co-located testing of IPFIX, NETCONF, and NSIS
• 5 independent NSIS implementations
• Roke Manor/Siemens
• University of Coimbra
• University of Göttingen
• Folley Consulting
• NEC
• Based on NTLP draft -06

3
Test cases (1)

• All tests done with path-coupled MRM
• NI and NR face to face, no message interception
• Direct D-Mode
• C-Mode setup with forwards-TCP
• C-Mode setup with forwards-TCP/TLS
• Unknown GIMPS version or message types
• MRI torture testing (2)
• Generating faulty MRI and see the result on the
  other side
• Testing multiple flows in parallel (D mode) (3a)
• Testing multiple flows in parallel (C-mode), with
  connection re-use (3b)

4
Test cases (2)

• State refresh for a single flow with connection
  re-use (3c)
• As above, where the different flows 'overlap
  (3d)
• e.g. same MRI but different SID or NSLP, or vice
  versa
• Multi-profile negotiation (even if only TCP is
  supported) (5a)
• Testing with unknown stack-configuration data
  fields (5b)
• including non-2-byte configuration data fields
• TLS usage (5c)
• Robustness testing (lost handshake messages) (7)
• Test with multiple nodes in a chain and message
  interception

5
Found Issues

• Good news ahead Found only few issues!
• All issues are in the NTLP issue tracker
• http//nsis.srmr.co.uk/cgi-bin/roundup.cgi/nsis-nt
  lp-issues/
• Issue61 NLI selection (v6 MRI in v4
  encapsulation)
• Issue59 Interpretation of D flag in MRI
• Issue58 S flag from end systems
• Issue57 Setting and Interpreting the R-Flag
• Object order
• TCP connections only accepted from peers offered
  to (clarification)

6
Next Steps...

• Plan for a next interoperability event Fall 2005
• University of Coimbra offered hosting
• At next IETF meeting in Vancouver
• No fixed plan yet
• Interested parties can
• Mail to the NSIS implementers list
  nsis-imp_at_ietf.org
• Express their interest for further tests in early
  September

7
Thank you! Question?