Re: [dhcwg] Review of draft-ietf-dhc-dhcpv6-failover-protocol-00

Simon Hobson <linux@thehobsons.co.uk> Mon, 30 November 2015 16:56 UTC

Return-Path: <linux@thehobsons.co.uk>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 982C31AD17F for <dhcwg@ietfa.amsl.com>; Mon, 30 Nov 2015 08:56:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pvpYRuagwVun for <dhcwg@ietfa.amsl.com>; Mon, 30 Nov 2015 08:56:43 -0800 (PST)
Received: from patsy.thehobsons.co.uk (patsy.thehobsons.co.uk [IPv6:2001:470:1f09:baa::21]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D5FC1AD0D6 for <dhcwg@ietf.org>; Mon, 30 Nov 2015 08:56:43 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at patsy.thehobsons.co.uk
Received: from [192.168.1.22] (static-84-9-59-220.vodafonexdsl.co.uk [84.9.59.220]) by patsy.thehobsons.co.uk (Postfix) with ESMTPSA id E444E1A074 for <dhcwg@ietf.org>; Mon, 30 Nov 2015 16:56:30 +0000 (UTC)
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Simon Hobson <linux@thehobsons.co.uk>
In-Reply-To: <5AE56C14-0E13-4F63-94F9-F8409C5E0C94@cisco.com>
Date: Mon, 30 Nov 2015 16:56:29 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <29AE5313-D17E-4F78-BBBC-395BB0AE3589@thehobsons.co.uk>
References: <66cb478301394af2a9981ed20fd9942d@XCH-ALN-003.cisco.com> <B25C3B4C-69B5-4818-A145-CDAC106E940C@cisco.com> <5AE56C14-0E13-4F63-94F9-F8409C5E0C94@cisco.com>
To: "dhcwg@ietf.org" <dhcwg@ietf.org>
X-Mailer: Apple Mail (2.1510)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dhcwg/a0FTyR3TMhwOAFSzMk32G5QeKGw>
Subject: Re: [dhcwg] Review of draft-ietf-dhc-dhcpv6-failover-protocol-00
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Nov 2015 16:56:44 -0000

Kim Kinnear <kkinnear@cisco.com> wrote:

> Folks,
> 
> One of Bernie's comments on the failover draft was:
> 
>> -          7.1 (Time Skew) – Should we require NTP to synchronize the clocks on failover partners?
> 
> The current draft (-00.txt) has a capability to allow the failover
> protocol to operate with two machines which have clock skew of a
> largely arbitrary amount (limited in some way to perhaps 24 hours or
> something).  So two systems that are 3-5 minutes apart (the usual
> skew, if any) will work fine.
> 
> Bernie is suggesting that we require failover partners to have
> essentially synchronized time by requiring NTP sync.  If they are
> synchronized to the level of 1-2 seconds, that would be synchronized
> for the purposes of this protocol.  We aren't talking milliseconds
> here.

I see two points :

1) If the time should be synced, then I would suggest merely requiring that, rather than specifying NTP - ie specify the what rather than the how.

2) Are there any other benefits to having time synced ? Eg, does having a significant time offset make troubleshooting any harder - eg by having logs on two servers with different timestamps for the same event ?
I'm inclined to thinking that there's isn't really any argument against having server times set correctly, particularly for services (such as DHCP) which include a time element. Perhaps if it's not an actual requirement, it should be suggested as recommended practice for stability and ease of troubleshooting - or is that going too far into "stuff any half decent admin shouldn't need telling" territory ?