Re: [dhcwg] WGLC for draft-ietf-dhc-rfc8415bis / clarification of significant prefix change

Esko Dijk <esko.dijk@iotconsultancy.nl> Sat, 11 November 2023 12:58 UTC

Return-Path: <esko.dijk@iotconsultancy.nl>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42F48C15C2B3; Sat, 11 Nov 2023 04:58:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iotconsultancy.nl
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FDSc4NaLSdjd; Sat, 11 Nov 2023 04:58:14 -0800 (PST)
Received: from EUR02-AM0-obe.outbound.protection.outlook.com (mail-am0eur02on2113.outbound.protection.outlook.com [40.107.247.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF360C15C2A3; Sat, 11 Nov 2023 04:58:13 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TavmA0LIY12wR6cvZDgPLDx5fukNUgc+jNl4blHxQdQlEPB2IW+qr9LazBLol0LeFxX1IZdXupjznzwvdC9oVFVXhVBxgG5eSqd9cUk345EuIixpqUhTYm27RzZ30JlDlhNtVYPibFgDo30pke++uT64sRbiofRHk7X7bLYJJ2Ybgnq3FjbVMxpHRa2T5fcxqrWb8/1M/kyHSqT9we/agARiKZruW1pZbgLHrkWIpqVF/YCPdsOBlIPPwBfEzMlaJne0Lw4weEQMg84dDHrxq1NdeeinAp2uxivy336OHLUuCPhIFOvi3NijuQyluu0JtXhniWFecbp357gDLsxq9Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5FmoNcG/utvQ/Hiy6qNzerC2xiavtnwENlU2o5npZB8=; b=jdYCQF1HIsofNNAyDZiJ0538ehqiQpt6oZWcmUsEAAs7Vq35o54XvCS2rY1uHmVRYqUeEmBeH5DNNhkvcxYFuR3mFtH6QHu2hYjiKs8UJOx6DyGU+cKGxbi8WYFiojLutJlZC5uf+4Og4EiV+/YXg77UE3i0FwK8cWEc2Yi1NIW+nCdkl/JD8uwxNcSQRvmJGARrAzcOHkAsghalZ9nbwffktdKLSWg8Sj6wYmA86uYXvHRBapuugLiz1ZZfMvwknoDMCSNTRtireHPpJKzsPCzZKmj8P3QiANn/DUJFnTPetNSmTTgxUW3afDPKBDx/dQNj6xs1+4IvI06JqnBiJw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=iotconsultancy.nl; dmarc=pass action=none header.from=iotconsultancy.nl; dkim=pass header.d=iotconsultancy.nl; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iotconsultancy.nl; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5FmoNcG/utvQ/Hiy6qNzerC2xiavtnwENlU2o5npZB8=; b=EwulpxN+BmI6HO5OvoxOqDfo8iQAyTceo9h/isOossiaVOB5GnVlb8CvyXnPie3S7+7l0UaGkhaNdEtTSqryk3BmnH9N/FghMkJ7eXeHACGVGtgFWqaXIPNMrBu5q/+H6IHjPZNyI4nfkFpTZ/f6J4svWRqQnaPq1Y5gGa3uPPk=
Received: from DU0P190MB1978.EURP190.PROD.OUTLOOK.COM (2603:10a6:10:3b9::20) by PA4P190MB1037.EURP190.PROD.OUTLOOK.COM (2603:10a6:102:bd::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6977.19; Sat, 11 Nov 2023 12:58:10 +0000
Received: from DU0P190MB1978.EURP190.PROD.OUTLOOK.COM ([fe80::f3e2:8d88:9528:f2bb]) by DU0P190MB1978.EURP190.PROD.OUTLOOK.COM ([fe80::f3e2:8d88:9528:f2bb%7]) with mapi id 15.20.6977.018; Sat, 11 Nov 2023 12:58:09 +0000
From: Esko Dijk <esko.dijk@iotconsultancy.nl>
To: Ted Lemon <mellon@fugue.com>
CC: "dhcwg@ietf.org" <dhcwg@ietf.org>, "snac@ietf.org" <snac@ietf.org>
Thread-Topic: [dhcwg] WGLC for draft-ietf-dhc-rfc8415bis / clarification of significant prefix change
Thread-Index: AQHaFIOpOPq4wS0iNEGDWYFujlrworB1EO+g
Date: Sat, 11 Nov 2023 12:58:09 +0000
Message-ID: <DU0P190MB1978B43FFABF0FD0068802F6FDADA@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM>
References: <DU0P190MB1978DC76946D2CD331DE7232FDADA@DU0P190MB1978.EURP190.PROD.OUTLOOK.COM> <CAPt1N1mbk2ygNnH6u+NfPAUgxVTCX6=Dyqx32=o1qVk3T5fvnQ@mail.gmail.com>
In-Reply-To: <CAPt1N1mbk2ygNnH6u+NfPAUgxVTCX6=Dyqx32=o1qVk3T5fvnQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=iotconsultancy.nl;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DU0P190MB1978:EE_|PA4P190MB1037:EE_
x-ms-office365-filtering-correlation-id: dcd1bab8-6fe2-4b7b-b3a3-08dbe2b5db46
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU0P190MB1978.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(39830400003)(366004)(346002)(376002)(136003)(396003)(230922051799003)(64100799003)(1800799009)(186009)(451199024)(86362001)(8676002)(33656002)(52536014)(8936002)(4326008)(122000001)(66476007)(54906003)(66946007)(66556008)(66446008)(64756008)(55016003)(66574015)(5660300002)(44832011)(6916009)(316002)(478600001)(71200400001)(2906002)(166002)(966005)(38100700002)(9686003)(7696005)(6506007)(66899024)(26005)(53546011)(38070700009)(76116006)(41300700001)(83380400001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: qPwfrnweFHjp5Cqif1GLzPtLL8xqWt5/kmP3Em88txeNJmNUHdAPaMBjbosKUd1edO/cC0kXHL9uUhItJCFlW5+GkkgFmvtQHSVN7mEYpMlFPQ6ZUWJeHF4ETPKMS5TRBgIKNLmQhZ9gunty6lMlZSvOHrxKpW3SgwwhYBh28KReFl+Mv+klXaU2sqGD8Atnec50L3G02iBWTHMP0eeoE+qwFfPeQ85442IB0q+atyNL9n+7xsAG6eekBXDMLNZcVJGtOR850nGp1uT0TQTxih6vPNnDyxxIC6bKrYBw4dvLTOPYYWey4NklsPuvZvttAKveHHSg74Tfin4Hw9/a98Iy6wshjwGVLu5OMYwIoSpd27MKyJP2O8qk/ykllqCiYzpcs6R2yOYvVYKic7wwErQWTM0P3AAYU0In70QNi0zdfoiuOXQPstXQtHjNmolcL1wMGlmBqb7vvMVt8dY11CxROLokk3QXLbwIsOgjG6cH5DYGoUpF6JrjDGld/dwt0Mm9m4SfGjwrQlBYO9xiUYwHHIm/woCLpJEWMyI8lEq3j1Fi2W4J3iXLUzn4nOBHaOFaBW/Wp35qhNMCLVXXfUSIjPp4yDTst8Jw33HgQYZIor+qNYiYJnWJcUyRpSkEzpJxZiawOajzVQTycb8hXBB1nFY6mpn9sYdhX/WBUtKDVrN8NHeyIPxlq+1U0bRHdwTjPJ2mpfl7g+rtFfTMAGhM36PmxhyxN85uyftSo3b0vDKTrTrTlZ9bzjZK8wkyCBN8ueGrimhJuLEfvhDhVJK63iFn5OSkYdhEp/6S3iETihHWqWeJVbKRKmrH8JdZk5vsU9zHvEwl0jY3UYimKzFM8hlvBbOUvkAHmMulsdZGgWkYWhe/4mNgLr7BV0dyjX7sfv86t6F6GYilNsqf5wV7gIblt7PWRG0sL2xBiCpECjK/IPTgQ2exSKFZswQSA2lk02PlPtGaXD349dedLXyu2lZsPhS+0nyS7CMVEMBe/WzsuyXlqVp8TsOoCaC+cdsqK5ZS0vJ3x+PakqXpv5MLp53KBF4HXhll9aov6Br7nQhbbTSubuExqD6SzMg3e+Mu3MWeATZ5UfxJh3M5JFGq/T0CwNdPJVK0XfODepZaMqTIIVzJo6fxJq0L3XST0MSmKTRb9oNfXbGcc+VKEnvqY85UVZGBZWPfaLEaE+IgBiWndUcMN2QiRuaBLtQ9/uH9QWSyHpOhNeYcKawPv9/WfZUavetNFF+aMJ2On7tLZeC4kxbXQynERXFHLZaTGltosVOhp8QM/t4UQEnlOuRid0zTNsmXcj51nd1QpqdAKwUKtPqWT6dmM91jZlYFd8qFCNc2rk8s0/P7c6RHQFYAjH6jYqOmgDUFLCKrQmhKp5wno0QV5GQndj2IOlUSbme2DZZp11iYlpQ2skoDlzeFohBYRojJcXqNuddDggOUkZUufv7jNq/VRMcrBmfBYwB43GMsG9q1VJ6GhcvkYRE/vMGjCW2BLCaDvy/vXNwnoT02cKuTogfxzrmD1LN5z4gMa+BamWQnG0NSkVxbHivigvBLaSH47/P2yha9bWaYIo62x/lwZQGHL0J816GDMmeaNVzGdGYtuuiIpKCP8g==
Content-Type: multipart/alternative; boundary="_000_DU0P190MB1978B43FFABF0FD0068802F6FDADADU0P190MB1978EURP_"
MIME-Version: 1.0
X-OriginatorOrg: iotconsultancy.nl
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU0P190MB1978.EURP190.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: dcd1bab8-6fe2-4b7b-b3a3-08dbe2b5db46
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2023 12:58:09.8727 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 58bbf628-15d2-46bc-820b-863b6774d44b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: NPwtoTRZg+ueWSLt3J2oe+6V2mhzDQ73FDWNLPcXncEkgism8EA1Aphm66qOERsZZHEYIaz9NMiLX2WIhRWv00P1yvCTfWq+lRJMZ9aIFQU=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4P190MB1037
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/aR-Pzyes9PebfyAXGUmUYMTCqpE>
Subject: Re: [dhcwg] WGLC for draft-ietf-dhc-rfc8415bis / clarification of significant prefix change
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Dynamic Host Configuration <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Nov 2023 12:58:19 -0000

> An additional example of “significant change” might be any sort of carrier transition for Ethernet or SSID change for WiFi

My assumption was that these types of change cases are already covered by the requirement on detecting prefix change.  E.g.:
- if the SSID changes (without a reconnection – if that’s possible) , but all prefixes stay the same, then it’s “no change”
- if the WiFi client changes access points so a new SSID results, that’s covered by bullet 4 of 18.2.12 -> “change”
- Ethernet is plugged out and in again on the same link -> that’s covered by bullet 2 -> “change”
- Ethernet is plugged out and in again on a *different* link -> this seems not covered yet, however chances are that the new link will have a new ULA or global prefix on-link. Which is detected as “change”
- if any prefix changes, without these link-layer change events -> “change” per 18.2.12 last paragraph

There seems to be some overlap here with Detecting Network Attachment detection of a new network, but a large part may already be covered by current text.
DNA could be the default method to quickly detect “same-link attachment”, in case the DHCPv6 client sits on an IPv6 host.  (DNA is not applicable to a pure IPv6 router device)

Esko

From: Ted Lemon <mellon@fugue.com>
Sent: Saturday, November 11, 2023 10:44
To: Esko Dijk <esko.dijk@iotconsultancy.nl>
Cc: dhcwg@ietf.org; snac@ietf.org
Subject: Re: [dhcwg] WGLC for draft-ietf-dhc-rfc8415bis / clarification of significant prefix change

An additional example of “significant change” might be any sort of carrier transition for Ethernet or SSID change for WiFi. References to the Detecting Network Attachment drafts might be appropriate if not already present (I’m reacting to what esko said so I don’t have the draft in front of me to check).

https://datatracker.ietf.org/doc/rfc6059/
https://datatracker.ietf.org/doc/rfc4957/

Op za 11 nov 2023 om 10:30 schreef Esko Dijk <esko.dijk@iotconsultancy.nl<mailto:esko.dijk@iotconsultancy.nl>>
Hi DHCWG (cc: SNAC),

Here’s a second WGLC comment for rfc8415bis. It is about the text in 18.2.12, regarding the significant change of prefixes on the link as a trigger for the client to perform actions:

If not associated with one of the above-mentioned conditions, a client SHOULD initiate a Renew/Reply exchange (as if the T1 time expired) as described in Section 18.2.4 or an Information-request/Reply exchange as described in Section 18.2.6 if the client detects a significant change regarding the prefixes available on the link (when new prefixes are added or existing prefixes are deprecated), as this may indicate a configuration change.

The below comments are related to an open issue discussion we had at the IETF SNAC WG meeting. A SNAC stub router per draft-ietf-snac-simple, Section 5.2.3, is required to attempt to  use DHCPv6-PD and so it must follow the rules for a PD client. But the rules weren’t fully clear.

1. the requirement is a SHOULD for the client – why is it not a MUST? If it ought to be a SHOULD, what are the allowed exception reasons to deviate from the requirement? Can we maybe list these in the text to make it clear?   An indication of consequences of not taking the action could also be added, if known.
(In any case we might, for the SNAC case, upgrade the requirement to a MUST if the exception cases aren’t applicable to us.)

2. the requirement could also be clarified by splitting it , in the sense that it now says that the client either does Renew/Reply or Information-request/Reply as if it can freely choose.  However, logically this would be conditional on the status of the client: if it has obtained DHCPv6 address(es) or delegated prefixes, then I assume it MUST select the Renew/Reply exchange . And if it has none of those, it MUST select the Information-request/Reply exchange. Is that correct?

3. the term “detects a significant change” on which the normative requirement is based could be clarified slightly better.  For example like this:

OLD:
<…> if the client detects a significant change regarding the prefixes available on the link (when new prefixes are added or existing prefixes are deprecated), as this may indicate a configuration change.

NEW:
<…> if the client detects a significant change regarding the prefixes available on the link.  A change is considered significant when one or more on-link prefixes are added, and/or one or more existing on-link prefixes are deprecated.
The reason for this is that such a significant change may indicate a configuration change at the server.

(I made some assumptions here that the ‘prefixes available on the link’ only means on-link prefixes, not e.g. prefixes of routes advertised. And assumed that the configuration change is a change at the DHCPv6 server, not just any network configuration change.)

4. about the text of point 3 on “significant change”, what if the value of the M bit in the Router Advertisement(s) on the link goes from M=1 to M=0 ?  This might indicate that DHCPv6 service for addresses and PD is not available anymore, possibly.  This situation may occur when a router is abruptly removed from the link in SNAC home use cases.  Would that be a significant change as well, or do we want to purposely ignore changes of the M bit ?  (Maybe this could become a SNAC-specific requirement; although the WG agreed in general that PD client requirements should be in rfc8415bis if possible.)

5. if the Renew/Reply exchange is done per Section 18.2.4, it seems that no random delay is specified in this case. (In the other case of 18.2.6 it is specified.)  That means potentially many DHCPv6 clients will detect the same “significant change” on the link and try to reach the server all at the same time. Shouldn’t there be a random delay applied in this case? Or, if it is applied, could this be clarified in the text? (I may have just missed it … )

Best regards
Esko Dijk


IoTconsultancy.nl  |  Email/Teams: esko.dijk@iotconsultancy.nl<mailto:esko.dijk@iotconsultancy.nl>


_______________________________________________
dhcwg mailing list
dhcwg@ietf.org<mailto:dhcwg@ietf.org>
https://www.ietf.org/mailman/listinfo/dhcwg