Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged))
 by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA18278
 for <dhcwg-archive@odin.ietf.org>; Sun, 4 Nov 2001 18:57:51 -0500 (EST)
Received: (from daemon@localhost)
 by optimus.ietf.org (8.9.1a/8.9.1) id SAA11083
 for dhcwg-archive@odin.ietf.org; Sun, 4 Nov 2001 18:57:54 -0500 (EST)
Received: from optimus.ietf.org (localhost [127.0.0.1])
 by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id SAA11035;
 Sun, 4 Nov 2001 18:52:40 -0500 (EST)
Received: from ietf.org (odin [132.151.1.176])
 by optimus.ietf.org (8.9.1a/8.9.1) with ESMTP id SAA11010
 for <dhcwg@optimus.ietf.org>; Sun, 4 Nov 2001 18:52:38 -0500 (EST)
Received: from imr1.ericy.com (imr1.ericy.com [208.237.135.240])
 by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA18066
 for <dhcwg@ietf.org>; Sun, 4 Nov 2001 18:52:35 -0500 (EST)
Received: from mr6.exu.ericsson.se (mr6u3.ericy.com [208.237.135.123])
 by imr1.ericy.com (8.11.3/8.11.3) with ESMTP id fA4NqdT28763
 for <dhcwg@ietf.org>; Sun, 4 Nov 2001 17:52:39 -0600 (CST)
Received: from eamrcnt747.exu.ericsson.se (eamrcnt747.exu.ericsson.se
 [138.85.133.37])
 by mr6.exu.ericsson.se (8.11.3/8.11.3) with SMTP id fA4Nqcv23426
 for <dhcwg@ietf.org>; Sun, 4 Nov 2001 17:52:38 -0600 (CST)
Received: FROM eamrcnt761.exu.ericsson.se BY eamrcnt747.exu.ericsson.se ;
 Sun Nov 04 17:52:38 2001 -0600
Received: by eamrcnt761.exu.ericsson.se with Internet Mail Service
 (5.5.2653.19) id <W1NBNDMV>; Sun, 4 Nov 2001 17:52:38 -0600
Message-ID: <66F66129A77AD411B76200508B65AC697B3855@eambunt705.ena-east.ericsson.se>
From: "Bernie Volz (EUD)" <Bernie.Volz@am1.ericsson.se>
To: "'Ted Lemon'" <mellon@nominum.com>, dhcwg@ietf.org
Subject: RE: [dhcwg] Failover: who expires a lease...
Date: Sun, 4 Nov 2001 17:52:37 -0600 
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: multipart/alternative;
 boundary="----_=_NextPart_001_01C1658B.C81E1A00"
Sender: dhcwg-admin@ietf.org
Errors-To: dhcwg-admin@ietf.org
X-Mailman-Version: 1.0
Precedence: bulk
List-Id: <dhcwg.ietf.org>
X-BeenThere: dhcwg@ietf.org

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C1658B.C81E1A00
Content-Type: text/plain;
	charset="iso-8859-1"

Sounds OK to me ... while in NORMAL state, the primary would expire all leases.

- Bernie

-----Original Message-----
From: Ted Lemon [mailto:mellon@nominum.com]
Sent: Saturday, November 03, 2001 7:58 PM
To: dhcwg@ietf.org
Subject: [dhcwg] Failover: who expires a lease...


The failover protocol draft doesn't seem to specify explicitly who moves a 
lease from the active to the expired state.   This is a problem, because if 
both servers have the same information about the lease, and their clocks 
are properly synchronized, they will both expire the lease at the same time.
    This will result in both servers firing BNDUPD messages at each other at 
roughly the same moment.   I don't think this will cause an actual problem,
  but it will cause each expiry event to result in four messages being sent 
instead of two.   If the servers are reasonably in sync and the clocks are 
out of sync, this also won't be a problem, but I don't think the protocol 
specification should assume that that is the case.

I would propose that the spec say that the primary SHOULD expire the lease.
    I don't think that this will cause any heartburn since the expired state 
is only useful when the servers are communicating.   It might cause trouble 
if the servers are way out of sync, but in that case the hack described in 
the draft could be extended somewhat - if a lease has been allocated to a 
client but no BNDUPD has been *sent* to the peer, the peer that allocated 
the lease MAY move it back into the FREE or BACKUP state when it expires.

My intended workaround for this problem, given the current language, is to 
delay updates from the secondary for a few minutes when the update moves 
the lease from ACTIVE to EXPIRED.   This will generally mean that the 
primary will update the secondary and the secondary will never have to 
update the primary.


_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
http://www1.ietf.org/mailman/listinfo/dhcwg

------_=_NextPart_001_01C1658B.C81E1A00
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2654.45">
<TITLE>RE: [dhcwg] Failover: who expires a lease...</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Sounds OK to me ... while in NORMAL state, the =
primary would expire all leases.</FONT>
</P>

<P><FONT SIZE=3D2>- Bernie</FONT>
</P>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Ted Lemon [<A =
HREF=3D"mailto:mellon@nominum.com">mailto:mellon@nominum.com</A>]</FONT>=

<BR><FONT SIZE=3D2>Sent: Saturday, November 03, 2001 7:58 PM</FONT>
<BR><FONT SIZE=3D2>To: dhcwg@ietf.org</FONT>
<BR><FONT SIZE=3D2>Subject: [dhcwg] Failover: who expires a =
lease...</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>The failover protocol draft doesn't seem to specify =
explicitly who moves a </FONT>
<BR><FONT SIZE=3D2>lease from the active to the expired =
state.&nbsp;&nbsp; This is a problem, because if </FONT>
<BR><FONT SIZE=3D2>both servers have the same information about the =
lease, and their clocks </FONT>
<BR><FONT SIZE=3D2>are properly synchronized, they will both expire the =
lease at the same time.</FONT>
<BR><FONT SIZE=3D2>&nbsp;&nbsp;&nbsp; This will result in both servers =
firing BNDUPD messages at each other at </FONT>
<BR><FONT SIZE=3D2>roughly the same moment.&nbsp;&nbsp; I don't think =
this will cause an actual problem,</FONT>
<BR><FONT SIZE=3D2>&nbsp; but it will cause each expiry event to result =
in four messages being sent </FONT>
<BR><FONT SIZE=3D2>instead of two.&nbsp;&nbsp; If the servers are =
reasonably in sync and the clocks are </FONT>
<BR><FONT SIZE=3D2>out of sync, this also won't be a problem, but I =
don't think the protocol </FONT>
<BR><FONT SIZE=3D2>specification should assume that that is the =
case.</FONT>
</P>

<P><FONT SIZE=3D2>I would propose that the spec say that the primary =
SHOULD expire the lease.</FONT>
<BR><FONT SIZE=3D2>&nbsp;&nbsp;&nbsp; I don't think that this will =
cause any heartburn since the expired state </FONT>
<BR><FONT SIZE=3D2>is only useful when the servers are =
communicating.&nbsp;&nbsp; It might cause trouble </FONT>
<BR><FONT SIZE=3D2>if the servers are way out of sync, but in that case =
the hack described in </FONT>
<BR><FONT SIZE=3D2>the draft could be extended somewhat - if a lease =
has been allocated to a </FONT>
<BR><FONT SIZE=3D2>client but no BNDUPD has been *sent* to the peer, =
the peer that allocated </FONT>
<BR><FONT SIZE=3D2>the lease MAY move it back into the FREE or BACKUP =
state when it expires.</FONT>
</P>

<P><FONT SIZE=3D2>My intended workaround for this problem, given the =
current language, is to </FONT>
<BR><FONT SIZE=3D2>delay updates from the secondary for a few minutes =
when the update moves </FONT>
<BR><FONT SIZE=3D2>the lease from ACTIVE to EXPIRED.&nbsp;&nbsp; This =
will generally mean that the </FONT>
<BR><FONT SIZE=3D2>primary will update the secondary and the secondary =
will never have to </FONT>
<BR><FONT SIZE=3D2>update the primary.</FONT>
</P>
<BR>

<P><FONT =
SIZE=3D2>_______________________________________________</FONT>
<BR><FONT SIZE=3D2>dhcwg mailing list</FONT>
<BR><FONT SIZE=3D2>dhcwg@ietf.org</FONT>
<BR><FONT SIZE=3D2><A =
HREF=3D"http://www1.ietf.org/mailman/listinfo/dhcwg" =
TARGET=3D"_blank">http://www1.ietf.org/mailman/listinfo/dhcwg</A></FONT>=

</P>

</BODY>
</HTML>
------_=_NextPart_001_01C1658B.C81E1A00--

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
http://www1.ietf.org/mailman/listinfo/dhcwg


