[dhcwg] Re: Issue 37: Technical NITs

[Bernard Aboba <[e-mail]>]

These changes also generally look ok to me, with some modifications as 
proposed below. 

--------------------------------------------------------------------------
Issue 37: Technical NITs
Submitter name: Stuart Cheshire
Submitter email address: [e-mail]
Date first submitted: October 12, 2005
Reference: 
http://www1.ietf.org/mail-archive/web/dhcwg/current/msg05498.html
Document: DNA-16
Comment type: T
Priority: S
Section: Various
Rationale/Explanation of issue: 

I propose the following technical edits relative to
<http://www.drizzle.com/~aboba/DNA/draft-ietf-dhc-dna-ipv4-17.txt>

2 lines changed at 189
(INIT-REBOOT does not actually require the host to do Duplicate Address 
Detection)
-- OLD TEXT --
   network, without needing to re-acquire it, allowing the host to
   bypass Duplicate Address Detection (DAD).
-- NEW TEXT --
   network, without needing to re-acquire it.
--------------

[BA] Suggest "bypass Duplicate Address Detection (DAD) in situations where 
a DHCP NAK would be received."

5 lines changed at 201
(DNAv4 does in fact slightly increase the likelihood of an address 
conflict)
-- OLD TEXT --
   DNAv4 does not increase the likelihood of an address conflict.  The
   reachability test is only carried out for a network when the host has
   previously completed duplicate address detection and obtained an
   operable IPv4 configuration on that network.  Restrictions on sending
   ARP Requests and Responses are described in Section 2.1.1.
-- NEW TEXT --
   DNAv4 does not significantly increase the likelihood of an address
   conflict.  The reachability test is only carried out for a network
   when the host has previously completed address conflict detection
   [ACD] and obtained an operable IPv4 configuration on that network.
   Restrictions on sending ARP Requests and Responses are described in
   Section 2.1.1.

[BA] I'd prefer to use the term "DAD" so as not to create a dependency on 
the ACD document. 

   One case where DNAv4 does increase the likelihood of an address
   conflict is when:

   o a DHCP server hands out an address lease

   o the host with that lease leaves the network

   o the DHCP server is power-cycled, or crashes and is rebooted

   o the DHCP server, having failed to save its lease table to
     persistent storage, assigns that same address to some other host

   o the first host returns, and having a still-valid lease with time
     remaining, proceeds to use its assigned address, conflicting with
     the new host that is now using that same address

   DHCP servers are supposed to save their lease tables in persistent
   storage, but almost no consumer-grade NAT gateway does so. Use of
   short DHCP lease lifetimes can mitigate this risk, though use of
   short DHCP lease lifetimes also limits the situations where DNAv4
   has operable candidate configurations available to try.
--------------

[BA] This looks ok. 

10 lines changed at 268
(remove special-case distinction for "private addresses")
-- OLD TEXT --
   Duplicate Address Detection on the former network does not provide
   assurance against an address conflict on the new network.  Until a
   host with a private address has confirmed the operability of its IPv4
   configuration, it SHOULD NOT respond to ARP Requests, and SHOULD NOT
   broadcast ARP Requests containing its address within the sender
   protocol address field (ar$spa).  However, where the host has an
   operable routable non-private address on a network, it MAY send ARP
   Requests using its address within the sender protocol address field
   (ar$spa) prior to confirming its IPv4 configuration, and MAY respond
   to ARP Requests.
-- NEW TEXT --
   address conflict detection [ACD] on the former network does not provide
   assurance against an address conflict on the new network. Until a
   host has confirmed the operability of its IPv4 configuration by
   receipt of the expected ARP response from the gateway, it SHOULD NOT
   respond to ARP Requests, and SHOULD NOT broadcast ARP Requests
   containing its address within the sender protocol address field
   (ar$spa).

[BA] Prefer to keep the term "DAD" here, but otherwise this is ok. 

_______________________________________________
dhcwg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/dhcwg