Re: [dhcwg] WGLC: draft-ietf-dhc-dhcpv6-stateful-issues-00 -- multiple adminstrative domains

Ole Trøan <otroan@employees.org> Wed, 05 September 2012 07:48 UTC

Return-Path: <ichiroumakino@gmail.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FAB521F8540 for <dhcwg@ietfa.amsl.com>; Wed, 5 Sep 2012 00:48:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.299
X-Spam-Level:
X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2UGYgdc2QuNy for <dhcwg@ietfa.amsl.com>; Wed, 5 Sep 2012 00:48:28 -0700 (PDT)
Received: from mail-ey0-f172.google.com (mail-ey0-f172.google.com [209.85.215.172]) by ietfa.amsl.com (Postfix) with ESMTP id 3FCED21F84AE for <dhcwg@ietf.org>; Wed, 5 Sep 2012 00:48:28 -0700 (PDT)
Received: by eaai11 with SMTP id i11so66774eaa.31 for <dhcwg@ietf.org>; Wed, 05 Sep 2012 00:48:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:subject:mime-version:content-type:from:in-reply-to:date:cc :message-id:references:to:x-mailer; bh=wlmQjpGvZMbEGXYP7W66p01vyrvhMX7BseanIwqE46A=; b=rTSELM7XnFSKPK+RW/qM4FN7O/CvT4vZXcupkWB0L45Xw5Ck7j4y+Ihu6DY70DiiDF i1vAvxNztvwx/kDOFkGFaPcrs84oRuTyQWKL9f4IiBAnxCSOizD9oydnDUV1wS4BH3t7 Jkbm7hhisTp+dWPBiuwIRj81GCr3eNud0+jBH/gNWMeayjxC6sKh9tiaiVEzWrdsDDb6 z4OgKSAKAFx2Qjby2Nk0o+FN7+H7QABnz8n8ZyFz/RYPVGgQQk3qxzgjnlvYSExT74zf 0QtRZTx38xJbgP0xM4BXv8Yn6HvrD7jbm0YkffHWIWJXrHkGCzL0HSUDG31gOoidfiJX ESsQ==
Received: by 10.14.203.73 with SMTP id e49mr29422197eeo.27.1346831307187; Wed, 05 Sep 2012 00:48:27 -0700 (PDT)
Received: from ?IPv6:2001:420:44ff:fd17:ec30:b128:b467:6482? ([2001:420:44ff:fd17:ec30:b128:b467:6482]) by mx.google.com with ESMTPS id 45sm1871009eeb.8.2012.09.05.00.48.22 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 05 Sep 2012 00:48:25 -0700 (PDT)
Sender: Ole Troan <ichiroumakino@gmail.com>
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: multipart/signed; boundary="Apple-Mail=_646D753D-C658-4D1D-8509-90E8907EBF78"; protocol="application/pkcs7-signature"; micalg="sha1"
From: Ole Trøan <otroan@employees.org>
In-Reply-To: <867F4B6A1672E541A94676D556793ACD16E4E37464@MOPESMBX01.eu.thmulti.com>
Date: Wed, 05 Sep 2012 09:48:18 +0200
Message-Id: <74EF5E8B-CE4E-40AD-885E-8EB80729D9D5@employees.org>
References: <489D13FBFA9B3E41812EA89F188F018E0F4EE2F8@xmb-rcd-x04.cisco.com> <867F4B6A1672E541A94676D556793ACD16E4E37464@MOPESMBX01.eu.thmulti.com>
To: Wuyts Carl <Carl.Wuyts@technicolor.com>
X-Mailer: Apple Mail (2.1278)
Cc: dhc WG <dhcwg@ietf.org>, "Bernie Volz (volz)" <volz@cisco.com>, Ted Lemon <Ted.Lemon@nominum.com>
Subject: Re: [dhcwg] WGLC: draft-ietf-dhc-dhcpv6-stateful-issues-00 -- multiple adminstrative domains
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Sep 2012 07:48:29 -0000

Carl,

this document assumes a single administrative domain and that multiple administrative domains are _out of scope_.
isn't that in agreement with what you are saying too?

cheers,
Ole


> I think, as CPE vendor, there’s no other possibility then to vote AGAINST this proposal.
>  
> I read:
> “”
> Clients may select one or several administrative domains; If multiple, each is a separate state machine
> “”
>  
> In some other discussion some time ago, there was already some proposal on having multiple/separate state machine for dhcpv6 client.  In this proposal, I see the same thing popping up, but in another context.
> For CPE devices, this is really a no-go.  Apart from splitting up state machine (and as such, multiplying memory consumption with factor X), it’ll also inject extra complexity.  The CPE, the low-end, nearly free-of-charge, device again seems to be victim of these kind of proposal!!
>  
> I don’t know if some other CPE vendor people are subscribed to this WG, but I’d like to read how they feel about this…
>  
> Regs
> Carl
>  
>  
>  
>  
> From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of Bernie Volz (volz)
> Sent: maandag 20 augustus 2012 15:50
> To: Ole Trøan; Ted Lemon
> Cc: dhc WG
> Subject: Re: [dhcwg] WGLC: draft-ietf-dhc-dhcpv6-stateful-issues-00 -- multiple adminstrative domains
>  
> In the slides I presented at IETF-83 (Paris) and IETF-84 (Vancouver) about this work, the last slide had:
>  
> Multiple Administrative Domains
> ·         Still planning to write new Internet-Draft on multiple administrative domains
> ·         Basic proposal will be for Advertise to include “Administrative Domain” option which contains an “administrative domain string”
> ·         Clients treat Advertises with the same administrative domain string as ‘equal’
> ·         Clients may select one or several administrative domains; If multiple, each is a separate state machine
>  
> The basic idea here is that if a client sends a Solicit with IA_NA and IA_PD, one server (or set of servers) may respond with IA_NA information and administrative domain string A and another server (or set of servers) may respond with IA_PD and administrative domain string B. This would trigger the client to initiate two separate state machines.
>  
> Of course, there is also the possibility that other server(s) may respond with both the IA_NA and IA_PD and administrative domain string C. In which case the client now has to determine whether to use one state machine (and administrative domain C) or two state machines and administrative domain A (IA_NA) & B (IA_PD).
>  
> While fairly simple in concept (and for servers [include administrative domain option] and relays [no impact]), it does greatly complicate clients.
>  
> One idea would be for clients to implement something similar to what they do for WiFi and SSIDs - a user would be required to select which administrative domains are valid. One interesting twist here is that just like with WiFI, we could also secure this -- add an encryption option which would provide a way to secure the DHCP server(s) with which you are willing to communicate.
>  
>  
> I haven't started work on this draft as it wasn't clear how much interest there is and if there are real world requirements for something like this. If there is sufficient interest, I would be happy to start work on it.
>  
> - Bernie
>  
> -----Original Message-----
> From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of Ole Trøan
> Sent: Monday, August 20, 2012 8:45 AM
> To: Ted Lemon
> Cc: dhc WG
> Subject: Re: [dhcwg] WGLC: draft-ietf-dhc-dhcpv6-stateful-issues-00
>  
> Ted,
>  
> >> could we go forward with this draft that clarifies how multiple stateful options work in a single session, and with the general assumption that a client will choose one DHCP server and that server is authoritative?
> >
> > My concern is that if you do so, it will essentially result in clients standardizing on whatever behavior you specify, and so whether we write another standard or not, it will not be available in practice.
>  
> to turn the question around.
> is there anyone who thinks that we should _not_ make multiple stateful options work in a single DHCP session?
>  
> cheers,
> Ole
>  
>