Re: [dhcwg] Next step(s) for draft-ietf-dhc-stable-privacy-addresses -> abandon work? / IA_NA applicability

Fernando Gont <fgont@si6networks.com> Fri, 10 April 2015 19:02 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDFF91B2D7C for <dhcwg@ietfa.amsl.com>; Fri, 10 Apr 2015 12:02:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0PleCn996MTN for <dhcwg@ietfa.amsl.com>; Fri, 10 Apr 2015 12:02:31 -0700 (PDT)
Received: from web01.jbserver.net (web01.jbserver.net [IPv6:2a00:8240:6:a::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FEB01B2D8B for <dhcwg@ietf.org>; Fri, 10 Apr 2015 12:02:11 -0700 (PDT)
Received: from [181.29.103.112] (helo=[192.168.1.120]) by web01.jbserver.net with esmtpsa (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.85) (envelope-from <fgont@si6networks.com>) id 1YgeBs-0004nL-FQ; Fri, 10 Apr 2015 21:02:09 +0200
Message-ID: <5527FA77.5070301@si6networks.com>
Date: Fri, 10 Apr 2015 13:29:43 -0300
From: Fernando Gont <fgont@si6networks.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: Lorenzo Colitti <lorenzo@google.com>
References: <489D13FBFA9B3E41812EA89F188F018E1CA32071@xmb-rcd-x04.cisco.com> <489D13FBFA9B3E41812EA89F188F018E1CA3229F@xmb-rcd-x04.cisco.com> <55214802.1070305@si6networks.com> <CAKD1Yr3UYT0yPEqftEXpN8zmk=-dka_NMcu3rbb_GG+YSnk2ZQ@mail.gmail.com> <5524D09B.3090706@si6networks.com> <CAKD1Yr2Ztzoys+xKBzsEHU5hqJmfGpn-GeWPEqNCHRuWOTgsJQ@mail.gmail.com> <55250911.30100@si6networks.com> <CAKD1Yr0ojVmk-ctUO313zvAx01P=B-A2zVuwDm73+dLgVwDLOw@mail.gmail.com> <55250DF2.8050001@si6networks.com> <CAKD1Yr33wFmjjqjYu8YEpqYvnn=kh9oJhe1YAC7UEzacQFBaWg@mail.gmail.com> <55251EFA.4000204@si6networks.com> <CAKD1Yr0XK-DQkcJKwTYmiWzCzZs4pubCme9rAgoZ_ig-P5MgsQ@mail.gmail.com> <55253F14.6000706@si6networks.com> <CAKD1Yr0Q2634Rfw0_9NiU+-S_yfD2RwPs7uPWAbTuOADyx8bHg@mail.gmail.com> <5526B5F9.9090707@si6networks.com> <489D13FBFA9B3E41812EA89F188F018E1CA499A7@xmb-rcd-x04.cisco.com> <5526D45A.9020701@si6networks.com> <CAKD1Yr2g9sc8Y3URBMt=yNkD61-iG37rpNc5ZXJHjLfghD3KJA@mail.gmail.com>
In-Reply-To: <CAKD1Yr2g9sc8Y3URBMt=yNkD61-iG37rpNc5ZXJHjLfghD3KJA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/dhcwg/a9c4_w9QzS7fIT2Ek2kjpyIH6DU>
Cc: "dhcwg@ietf.org" <dhcwg@ietf.org>, "Bernie Volz (volz)" <volz@cisco.com>
Subject: Re: [dhcwg] Next step(s) for draft-ietf-dhc-stable-privacy-addresses -> abandon work? / IA_NA applicability
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Apr 2015 19:02:34 -0000

On 04/09/2015 08:20 PM, Lorenzo Colitti wrote:
> On Fri, Apr 10, 2015 at 4:34 AM, Fernando Gont <fgont@si6networks.com
> <mailto:fgont@si6networks.com>> wrote:
> 
>     > This concept is flawed if the servers aren't cooperating. If there
>     > are multiple servers that don't share lease data, how does server 1
>     > know whether the lease was leased to another client or renewed, if
>     > server 2 ends up communicating with the client?
> 
>     Usually, you need servers to communicate because there's no way to tell
>     which address each server may have assigned to which client. But that's
>     not the case with this method.
> 
> 
> It is still the case even with this method, because the servers need to
> agree on the value of the counter variable. 

The Counter value is there for completeness sake. Me, I don't expecThe
assumption is that thanks to the huge address space, you want hit
collisions.

In order for this scheme to not result in address stability, two things
must happen:

1) There address collisions -- considered extremely unlikely, and,

2) Clines employ different DHCPv6 servers (failover scenario), and,

2) The two nodes that bootstrap do so in a different order (otherwise,
they will still be leased the same addresses).

I'd say that a DHCPv6 servers is free to store the Counter value for
each lease, if they please. But it's not worth it to synchronize it. --
the assumption in this scheme is that the address space for the local
subnet is so large that you will not find collisions.

If you, we could rename the I-D as "probabilistically stable" -- but I
hope that's not needed.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492