Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay

Fred Baker <fredbaker.ietf@gmail.com> Thu, 27 June 2019 06:35 UTC

Return-Path: <fredbaker.ietf@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90B081200DB; Wed, 26 Jun 2019 23:35:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.998
X-Spam-Level:
X-Spam-Status: No, score=-0.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7avrMCXXDdvI; Wed, 26 Jun 2019 23:35:23 -0700 (PDT)
Received: from mail-wm1-x336.google.com (mail-wm1-x336.google.com [IPv6:2a00:1450:4864:20::336]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55B941200B6; Wed, 26 Jun 2019 23:35:23 -0700 (PDT)
Received: by mail-wm1-x336.google.com with SMTP id x15so4474695wmj.3; Wed, 26 Jun 2019 23:35:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=3EycOkvhlS3bCy1rQsi79MXYDKUc8rf9TrHnaiQyzvM=; b=qdCpmMFBSy7hHWQ0M5e2ceu4s4uOflvjbj3BZRX2KfqolgeRTquw111xCnJP93Vg+J 3Qng4dBT6PyOwiBwSOFvEzqZuGdxXhBGXQ9xtIWONCdhuzYhxmNMN2e/8wsvd+5elFI8 1ot22MgMbRr/6wpwnvMws2GZ/1prdVFAA5Ze35Dzwpa8pHNLoBB2fwgOd7h997z0PEnw TrCyHf0yDbfJ8jWeE3ZIrpGG4rz6pCUOeem8R2okK+UteisLAetvCetMNOfw0vHeJOT6 PB45+bhanK5RUQaNS1QN3LH8Ok6ufzdw8iMJZmVnFELgRFprQYHTaYkN0aF827IQcp9U UwsA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=3EycOkvhlS3bCy1rQsi79MXYDKUc8rf9TrHnaiQyzvM=; b=nj0RJ1APPsird27fh0gyCxlyDaXVFYtCInyTCCv46ZM8+C5sUlxjOlz/nBJwuit//j Pj0UfB63eL4ImiYtqAOd2fB13PNsEt/vNjTXRhuyHGK+hd0fZNZBArqhuQoF4F3gwEhi p+El3qEu8lCkvPzHhDYzG0OZeMqcPplj24o/I8d2E9b2FWD+S20aHPurB8/axPsTGnm3 55UMU50bstqV9AwJV1NsApvbVJQRCMVNqUFp5T2xRa67sX0m64JQV/vUN0qp1d7D2yPX pwEsGRycOzxojl6QKorhapN9vxYlT2aRuuphd47U/wO97dvgTF5hAObCx4vILI+j1NGy G/pw==
X-Gm-Message-State: APjAAAU8RaDGHA0NnGgyaqhiZ9At7BRZZdP8NL/Tsg8l50rkYq6SiXuY dWDQ2ZzNPAFvnVen9O3mgs0=
X-Google-Smtp-Source: APXvYqweJyBCmDHFXWStrpHwz0TVh5kKNoGiuaQ2QD18sYgwi2QXRcWFeVWPTq6OAn5I0CMAYPi2/Q==
X-Received: by 2002:a1c:7d4e:: with SMTP id y75mr1859739wmc.169.1561617321704; Wed, 26 Jun 2019 23:35:21 -0700 (PDT)
Received: from [10.196.220.133] (9-197.icannmeeting.org. [199.91.197.9]) by smtp.gmail.com with ESMTPSA id j7sm1092169wru.54.2019.06.26.23.35.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 26 Jun 2019 23:35:20 -0700 (PDT)
From: Fred Baker <fredbaker.ietf@gmail.com>
Message-Id: <218CA62E-75FC-462A-A04E-7B3377631F5E@gmail.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_C2874D58-8ABF-421C-8C04-8569D5CBC00D"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Thu, 27 Jun 2019 07:35:18 +0100
In-Reply-To: <9b9924f3ef0a4b2c8d48c86a652d957e@boeing.com>
Cc: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, "dhcwg@ietf.org" <dhcwg@ietf.org>, v6ops list <v6ops@ietf.org>
To: Fred Templin <Fred.L.Templin@boeing.com>
References: <9101D413-7CEB-4B50-931A-CF30E6501299@gmail.com> <5222213.mTn1hNnrTJ@rumburak.ite.tul.cz> <8F987994-DF3A-4FF4-B8C7-CFAC62FACFF2@gmx.com> <CANFmOtnHKDQe7snzA0QjnMvy4_hcsjbLgK9P_fxrAHpd2UnSKg@mail.gmail.com> <3ad799f39ebb41e4a4435a7fdfcc41d0@boeing.com> <1353329E-9AD5-49D0-B82B-423719DA148E@gmx.com> <e0e7576d188141c088e7baf89d5cdc2d@boeing.com> <59CA5FD7-6161-4D6D-A810-5D17BCC11893@gmx.com> <9b9924f3ef0a4b2c8d48c86a652d957e@boeing.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/BwhVeMzGHyrHWFKivvsbTlheXlU>
Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Jun 2019 06:35:27 -0000

I don't see a prohibition of this sort of design, but it seems unnecessarily complex. The relay protocol is designed to communicate from a relay to another relay or to a server. Adding a relay process just to communicate with the server process via localhost seems an unnecessary step.

> On Jun 26, 2019, at 4:53 PM, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> 
> The server and relay run in the same operating system instance, but in two separate process
> contexts – call them ‘relayd’ and ‘serverd’.
> 
> ‘relayd’ receives a client prefix delegation request then prepares a ‘Relay-forward’ message
> and ships it to ‘serverd’ over a local loopback. When ‘serverd’ sends back the ‘Relay-reply’
> (again over the loopback), ‘relayd’ injects a route into the routing system and sends a
> suitable reply to the client.
> 
> The only reason we do it this way is because the client cannot speak directly to ‘serverd’
> and it would be difficult to merge ‘relayd’ and ‘serverd’ into a single process context. But,
> everything else is coordinated within the same operating system instance.
> 
> Fred
> 
> From: ianfarrer@gmx.com [mailto:ianfarrer@gmx.com]
> Sent: Wednesday, June 26, 2019 8:39 AM
> To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
> Cc: Naveen Kottapalli <naveen.sarma@gmail.com>; v6ops list <v6ops@ietf.org>; dhcwg@ietf.org; Martin Hunek <martin.hunek@tul.cz>
> Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> 
> Hi Fred,
> 
> Will do.
> 
> I haven’t tried that particular deployment scenario. I suppose that if the relay and server processes didn’t share any state information then you could see these problems. Is there a case for running both server and relay functions on the same box, rather than just the server (as a delegating router)?
> 
> Thanks,
> Ian
> 
> 
> On 26. Jun 2019, at 17:27, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> 
> Hi Ian – yes, a clarification of “co-located” would be great. Sounds like there is
> not a concern when the relay and server are in the same box or VM, right?
> 
> Thanks - Fred
> 
> From: ianfarrer@gmx.com [mailto:ianfarrer@gmx.com]
> Sent: Wednesday, June 26, 2019 8:22 AM
> To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
> Cc: Naveen Kottapalli <naveen.sarma@gmail.com>; v6ops list <v6ops@ietf.org>; dhcwg@ietf.org; Martin Hunek <martin.hunek@tul.cz>
> Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> 
> Hi Fred,
> 
> In this instance, we are talking about being in a separate physical box, or VM. The problems I’ve observed are with  L3 edge routers with
> the relay function in the access network with a centralised DHCPv6 server. We can clarify this better in the next update.
> 
> Thanks,
> Ian
> 
> 
> 
> On 26. Jun 2019, at 17:14, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> 
> Hi Naveen,
> 
> Thanks for the draft – a quick question - what is meant by “DHCPv6 relay function is not co-located
> with the DHCPv6 server function”. Does it mean “co-located” as in within the same process, within
> the same virtual machine, within the same physical box, within the same LAN, etc.?
> 
> RFC6221 allows for the relay function to be in a separate process from the server function but
> within the same operating system instance. So, the two processes share the same clock, IP
> forwarding table, system memory, etc. In such an arrangement, can it be said that the DHCPv6
> relay and server functions are in fact “co-located” even if they do not reside within the same
> process context?
> 
> Thanks - Fred
> 
> From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Naveen Kottapalli
> Sent: Tuesday, June 25, 2019 9:14 AM
> To: v6ops list <v6ops@ietf.org>; dhcwg@ietf.org
> Cc: Martin Hunek <martin.hunek@tul.cz>
> Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> 
> Hello All,
> 
> A new draft on this subject is submitted today.  Please go through the same in below link and let us know your feedback.
> 
> ----
> 
> A new version of I-D, draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00.txt
> has been successfully submitted by Naveen Kottapalli and posted to the
> IETF repository.
> 
> Name:           draft-fkhp-dhc-dhcpv6-pd-relay-requirements
> Revision:       00
> Title:          DHCPv6 Prefix Delegating relay
> Document date:  2019-06-25
> Group:          Individual Submission
> Pages:          10
> URL:            https://www.ietf.org/internet-drafts/draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-fkhp-dhc-dhcpv6-pd-relay-requirements/
> Htmlized:       https://tools.ietf.org/html/draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-fkhp-dhc-dhcpv6-pd-relay-requirements
> 
> 
> Abstract:
>    Operational experience with DHCPv6 prefix delegation has shown that
>    when the DHCPv6 relay function is not co-located with the DHCPv6
>    server function, issues such as timer synchronization between the
>    DHCP functional elements, rejection of client's messages by the
>    relay, and other problems have been observed.  These problems can
>    result in prefix delegation failing or traffic to/from clients
>    addressed from the delegated prefix being unrouteable.  Although
>    [RFC8415] mentions this deployment scenario, it does not provide
>    necessary detail on how the relay element should behave when used
>    with PD.
> 
>    This document describes functional requirements for a DHCPv6 PD relay
>    when used for relaying prefixes delegated by a separate DHCPv6
>    server.
> 
> Yours,
> Naveen.
> 
> 
> On Mon, 1 Apr 2019 at 18:34, <ianfarrer@gmx.com> wrote:
> Hi Martin,
> 
> I would also be interested in working on this as it’s a problem for us. I’ve got something I wrote a while back. I’ll share it as a starting point.
> 
> Cheers,
> Ian
> 
> > On 1. Apr 2019, at 11:31, Martin Hunek <martin.hunek@tul.cz> wrote:
> >
> > Hi Fred,
> >
> > I would be interested to address this issue, as it is the one I'm also having. But I would need some assistance, as I don't really know my ways around IETF processes yet.
> >
> > Martin
> >
> > Dne pátek 29. března 2019 6:37:25 CEST, Fred Baker napsal(a):
> >> https://datatracker.ietf.org/doc/slides-104-v6ops-deutsche-telekom-terastream/, slide 3-4
> >>
> >> What do we want to say about DHCPv6 issues in vendor product and/or services? This headache doesn't have an obvious draft. I think that probably calls for a person or design team to create such a draft for discussion on the list and in Montreal.
> >>
> >> Any takers?
> >> --------------------------------------------------------------------------------
> >> The fact that there is a highway to hell and a stairway to heaven is an interesting comment on projected traffic volume...
> >>
> >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www.ietf.org/mailman/listinfo/dhcwg
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops

--------------------------------------------------------------------------------
The fact that there is a highway to hell and a stairway to heaven is an interesting comment on projected traffic volume...