Re: [dhcwg] Robert Wilton's Discuss on draft-ietf-dhc-mac-assign-07: (with DISCUSS and COMMENT)

"Rob Wilton (rwilton)" <rwilton@cisco.com> Mon, 08 June 2020 15:00 UTC

Return-Path: <rwilton@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1533F3A0B8D; Mon, 8 Jun 2020 08:00:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.598
X-Spam-Level:
X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=L9C0a9aq; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=nFEcI+z7
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l3jms0TfZV8t; Mon, 8 Jun 2020 08:00:49 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB3703A0879; Mon, 8 Jun 2020 08:00:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6410; q=dns/txt; s=iport; t=1591628449; x=1592838049; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=mUPra47Jh2ZBb/uI5KT31hExE1G2yUny605/R/K8vMI=; b=L9C0a9aqFA+WraozN3NdbgbD8bPR/L8n3k/ftez2Sw4LjwjGuxCRWMrl 8ObIWsaPp9umnWbyR3CMM0twnoXsFdU1rqBKuTL8pb0nhf7a2XmN4hxNL E3iu/GNUcEpqTvf9TanxXTPSGzx5fzTxWBTaV2mNdberInF19cCcRtOP4 c=;
X-IPAS-Result: =?us-ascii?q?A0DWBQBWUt5e/5NdJa1mHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?UqBUlIHb1gvLAqEGoNGA41AiX+OU4FCgRADVQsBAQEMAQEjCgIEAQGERAIXg?= =?us-ascii?q?h0CJDgTAgMBAQEDAgMBAQEBBQEBAQIBBgRthVsBC4VyAQEBAQMSEREMAQE3A?= =?us-ascii?q?QsEAgEIEQQBAQMCJgICAh8RFQgIAgQOBQgagwWCSwMuAQMLpHQCgTmIYXaBM?= =?us-ascii?q?oMBAQEFgUZBgyYNC4IOAwaBDiqCZIltGoFBP4EQAUOCTT6CHkkCAQIBgSwBE?= =?us-ascii?q?gEJGiSCbjOCLY5dHwEDglABPKExTAqCWYg3i2qFBYJoiRKFFY07kQOKAIJQk?= =?us-ascii?q?UACBAIEBQIOAQEFgWoiKT1YEQdwFTuCaVAXAg2QQAcFFxWDOoUUhUJ0AjUCB?= =?us-ascii?q?ggBAQMJfI4FAYEPAQE?=
IronPort-PHdr: =?us-ascii?q?9a23=3AehqKnh+8gj5Ssv9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+7ZRaN5PhxghnOR4qIo/5Hiu+DtafmVCRA5Juaq3kNfdRKUA?= =?us-ascii?q?NNksQZmQEsQavnQU32JfLndWo2ScJFUlI2/nynPw5SAsmtL1HXq2e5uDgVHB?= =?us-ascii?q?i3PAFpJ+PzT4jVicn/1+2795DJJQtSgz/oarJpJxLwpgLU5cQ=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.73,487,1583193600"; d="scan'208";a="481454315"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Jun 2020 15:00:27 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id 058F0MeH008539 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 8 Jun 2020 15:00:27 GMT
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 8 Jun 2020 10:00:24 -0500
Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 8 Jun 2020 11:00:23 -0400
Received: from NAM04-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 8 Jun 2020 10:00:23 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FpMCzUC/2vsvI9STDmQDIPf6I/zVIjuFmwrRgdqo2sR0oIfCo3BvAXYbquUwx0sxeCEORdwbfu9PyoTF+81gA2A92ZM9yiAJC+DhhBuSZZXcwd+YUPy3lo6cUwev3DMPoihwlVO2/FKNFONaa9v1IvNy/bXTqHW4CMB0xjmNhoJXw6+EUBYmqmX676T+b/9FfqAfUMLQ8+NrdPTz3oxN8kZDXX/tU6liDgpQEW0gc3v3mw3i+YaGRg03YrHVvkaq+dOkMmKxKP3fy2FvamMstZxFkHOadR9JyYvxSSY390ZHrfv887KAFfIq7H/MNMrJTkhcSkwpXrYtK26P9u8evQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mUPra47Jh2ZBb/uI5KT31hExE1G2yUny605/R/K8vMI=; b=aOPUmsc0NMlSJ1fDh/fQ8T6uyndJ2XVx07SskQ7+cEhQmMtxZA3CK3U3V24wZwUxRzwlSFtHAhDR9pChXTSPVUgO4+DiGWZpZZLI1g4lWycTgkaKWnrg4seah69KyyQTT5+8L01/guxdYM0xKqX2tiG439XzmJM7ZKTruS+UkDf1US4VwhVrx9iQ/yZOypyfzOH4dOLcJbzukroSW38fARAF7eeCBN+55gX8kj9ggDjC1/luNC/JcR9JvwkQt6DXpeKewWzLvEPnI7BmIeuB6oQR2LJ7UcJiWkCFKZXqbL27nESbInsOcd7hSQbDcE/9zdtcolUOrpK7Hm5r4TmihA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mUPra47Jh2ZBb/uI5KT31hExE1G2yUny605/R/K8vMI=; b=nFEcI+z7ahL846Cy5r/7BwThLZ4bMrCgwPTSdOAe23xJi0Mg+Cg6tLdjvcP2jluiruoN2Kdu5IMm5GYYyoJrRB4iXsJwWChzqE7CA4+ns2MACOUnQlDsSEHRd7fCfBD2xTIJciLcKMaYZwNpMTXt2MDvUV+o6ykx1DfRFCzZ0ys=
Received: from MN2PR11MB4366.namprd11.prod.outlook.com (2603:10b6:208:190::17) by MN2PR11MB4254.namprd11.prod.outlook.com (2603:10b6:208:18f::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3066.22; Mon, 8 Jun 2020 15:00:22 +0000
Received: from MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::e9d4:79b5:aef1:be18]) by MN2PR11MB4366.namprd11.prod.outlook.com ([fe80::e9d4:79b5:aef1:be18%5]) with mapi id 15.20.3066.023; Mon, 8 Jun 2020 15:00:22 +0000
From: "Rob Wilton (rwilton)" <rwilton@cisco.com>
To: "draft-ietf-dhc-mac-assign@ietf.org" <draft-ietf-dhc-mac-assign@ietf.org>
CC: "dhc-chairs@ietf.org" <dhc-chairs@ietf.org>, "ianfarrer@gmx.com" <ianfarrer@gmx.com>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, "dhcwg@ietf.org" <dhcwg@ietf.org>, The IESG <iesg@ietf.org>
Thread-Topic: Robert Wilton's Discuss on draft-ietf-dhc-mac-assign-07: (with DISCUSS and COMMENT)
Thread-Index: AQHWPYUov6jHNIZzM0KuNDYSOgYuHajOzzow
Date: Mon, 8 Jun 2020 15:00:21 +0000
Message-ID: <MN2PR11MB43668334DA5428CD51A1E88DB5850@MN2PR11MB4366.namprd11.prod.outlook.com>
References: <159161448862.1968.15678068606189447651@ietfa.amsl.com>
In-Reply-To: <159161448862.1968.15678068606189447651@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com;
x-originating-ip: [82.15.79.32]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4b4c35ef-5aef-471b-4740-08d80bbcab09
x-ms-traffictypediagnostic: MN2PR11MB4254:
x-microsoft-antispam-prvs: <MN2PR11MB425465BEBA45B50786F8BCB4B5850@MN2PR11MB4254.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 042857DBB5
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: oKjxZpktyDQaRtiHWXUFou2OL3cMlUA23vLyWLWHBBmROUsZ7vZolwFbDt3gqmwpRAeGM4busXRzm/dqRTod/goptA/KP5LWChPVgXVvOjpzE4+OikXBZrlD7Vx0iEHGRNxivXDgB/B9fs580mmiBLXec+jbzIzqCxI/Xkn97BZxVy03pzYLFi4VHlNpPbHMDqwXwV2Xi02V4oq7c3MkuWmpvURVnX6RAyo9rfE9oXRcI8dgbfu1NRbb03EWEIFXKzWAfxmxzk7CbGmr5fxB6IzLbs+koEMO7fa98ZqD3M1ArFhbb4ZlJ5OQwN5lQMlX5EPrssF8JsOfSO+G0Yj+wqQsNT5td4I2gO5YYJjIthKgspTGtBVoeJu04vOBeyR70Sznxf+IMOLeNpAxDp9pnhhsGK5LwFG947vMjS2N+dquvmVJI71Y7UD9Zj1OuPM2aH/TIY7FNLbYF83eVjEeyQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB4366.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(346002)(366004)(376002)(39860400002)(316002)(54906003)(478600001)(83380400001)(2906002)(5660300002)(966005)(4326008)(9686003)(55016002)(186003)(66556008)(8936002)(66476007)(76116006)(86362001)(64756008)(66446008)(26005)(66946007)(71200400001)(33656002)(6916009)(53546011)(6506007)(7696005)(8676002)(52536014)(518174003); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: KeaHFUTZDHN0k4TaCTQww8Pw6W6o/EMZa+kyY7CQd+uNHWz3eV0QfEKH23SSv+oCJFHbhgrD/nmi0v13qtjdF1aG+jHZhInDaCN1bxdtdAx/VyX5+kfWfc55vUOq/3lGMUbnkRKjXix8XMif4GzrgToOaQSDd6X724fucdXGpmmcAwl9o1jxH6RS2NmtdSpoQ5rvae+8bLiHakBoGRnW2ufUmM5dnv1KF1TiIhNz12hk6Vuu1RFU0DPhQbXWZ6P5mG8wN6bXDoSwY2PkDgkXZoh2V2BreXHXyRdn3QbWijAFnIYQGUlcBo4YZ+CVp2BvaWlQYNfggBkjPSAAQr5ZfKyVDYJWBywB4jCHLiXV3M/4QimOvKw0TJ5kWpc4wIAPuPNrWqjT0IkvOib/LJlzwvyC6xYaTqRTWCq2NCfZzT1EwjFGcmp7DTGJd6ml9Cp5aWzcc8N/XR3Y22Zk7F25/aF3c0JSwtzjXInn2lL84Zg=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 4b4c35ef-5aef-471b-4740-08d80bbcab09
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jun 2020 15:00:22.0816 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 6HUQTcPnm9ja7rI/y6EBcH+EgHinGEPPXhWp1kpbzM+ly6dYbUeNl+3n6gqWuYkLrK4CjAkIbZd4ktrJEWl2LQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4254
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.15, xch-aln-005.cisco.com
X-Outbound-Node: rcdn-core-11.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/0vK-r3Nz3pOEE9Dzk55plN0DMbQ>
Subject: Re: [dhcwg] Robert Wilton's Discuss on draft-ietf-dhc-mac-assign-07: (with DISCUSS and COMMENT)
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jun 2020 15:00:51 -0000

Hi,

One more question that I thought of when reviewing the slap-quadrant draft:

Does draft-ietf-dhc-mac-assign only assign unicast MAC addresses?  I would assume so, but this doesn't appear to be stated anywhere, and it would probably be helpful if it was.

Regards,
Rob


-----Original Message-----
From: iesg <iesg-bounces@ietf.org> On Behalf Of Robert Wilton via Datatracker
Sent: 08 June 2020 12:08
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-dhc-mac-assign@ietf.org; dhc-chairs@ietf.org; ianfarrer@gmx.com; Tomek Mrugalski <tomasz.mrugalski@gmail.com>om>; dhcwg@ietf.org
Subject: Robert Wilton's Discuss on draft-ietf-dhc-mac-assign-07: (with DISCUSS and COMMENT)

Robert Wilton has entered the following ballot position for
draft-ietf-dhc-mac-assign-07: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-dhc-mac-assign/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

Hi,

Thank you for this document.  Mostly I found this document to be straight
forward to read, but there are a few areas that were unclear to me, that could
probably help being clarified.

Hopefully none of these are too difficult to address, or they may turn out not
to be issues at all ...

Client SHOULD, server MUST ignore.  In a couple of places in the document
(sections 6, 10.1, 10.2), it states that the client SHOULD set 0.  To allow the
protocol to evolve in future, I believe that it would be better if the SHOULD
is changed to a MUST.

There doesn't appear to be any specification of how an OPTION_IA_LL should be
handled if there are no IA_LL-options, or it contains an IA_LL-option that is
not understood by the server.  The text does also not specify if IA_LL-options
can contain multiple options, and if so how those are encoded (presumably as an
array/list of option values), perhaps this is already covered by the DHCPv6
spec?  Similar comments also apply to the LLaddr-options field.

9. Releasing Addresses

Once a block of addresses have been released, can they immediately be allocated
to a different client?  Or should they avoid being reused straight away if
possible?  Perhaps this consideration is already covered by DHCPv6, but it
probably makes sense to say something about this, either in section 9, and/or
maybe in the security considerations.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

1. Introduction

   Typically the new VM instances are assigned a random link-layer (MAC)
   address, but that does not scale well due to the birthday paradox.

Perhaps either have a reference to birthday paradox, or briefly describe (in a
sentence) what the paradox is.

4.3. Mechanism Overview

Contains both:

   This mechanism can be administratively disabled by the server sending
   "infinity" as the T1 and T2 values (see Section 7.7 of [RFC8415]).

And

   An administrator may make the address assignment permanent by
   specifying use of infinite lifetimes, as defined in Section 7.7 of
   [RFC8415].

Perhaps these sentences could be amalgamated?

7.  Requesting Addresses

    The client MUST be able to handle a Reply message containing a smaller
    number of addresses, or an address or addresses different from those
    requested.

Perhaps clarify whether the "smaller number of addresses" relates to the
initial request from the client, or the value received by the client from the
server in teh advertise message.  E.g. could a server "advertise" a block of
100 addresses, but then only "reply" with a block of 50 addresses?

8. Renewing Addresses

IAID is used before it defined.  Perhaps either add it to the terminology, or
reference where it is defined when it is first used?

10.1
I found the subtle distinction between "IA_LL option" vs "IA_LL-options" to
probably be a bit more confusing than necessary.  Possibly always refering to
the "IA_LL_OPTION option" vs "IA_LL-options field" would add clarify, or
perhaps rename "IA_LL-options" to "IA_LL-suboptions".  The same comment
obviously applies to the LLADDR option definition as well.