Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay

"Templin (US), Fred L" <Fred.L.Templin@boeing.com> Fri, 28 June 2019 13:37 UTC

Return-Path: <Fred.L.Templin@boeing.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 798B212014A; Fri, 28 Jun 2019 06:37:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DiKYJbp6WBQI; Fri, 28 Jun 2019 06:37:03 -0700 (PDT)
Received: from clt-mbsout-01.mbs.boeing.net (clt-mbsout-01.mbs.boeing.net [130.76.144.162]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC02F120146; Fri, 28 Jun 2019 06:37:02 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by clt-mbsout-01.mbs.boeing.net (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with SMTP id x5SDax6C026384; Fri, 28 Jun 2019 09:36:59 -0400
Received: from XCH16-07-08.nos.boeing.com (xch16-07-08.nos.boeing.com [144.115.66.110]) by clt-mbsout-01.mbs.boeing.net (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id x5SDapvA025358 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=FAIL); Fri, 28 Jun 2019 09:36:51 -0400
Received: from XCH16-07-10.nos.boeing.com (144.115.66.112) by XCH16-07-08.nos.boeing.com (144.115.66.110) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1713.5; Fri, 28 Jun 2019 06:36:50 -0700
Received: from XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5]) by XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5%2]) with mapi id 15.01.1713.004; Fri, 28 Jun 2019 06:36:50 -0700
From: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>
To: Fred Baker <fredbaker.ietf@gmail.com>
CC: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, "dhcwg@ietf.org" <dhcwg@ietf.org>, v6ops list <v6ops@ietf.org>
Thread-Topic: [v6ops] [dhcwg] Operational Headache: DHCP V6 Relay
Thread-Index: AQHVLbaKIkva3ZqBik6ZCflKosB0cw==
Date: Fri, 28 Jun 2019 13:36:50 +0000
Message-ID: <98da70c65eb64f12a4e46be2948f452f@boeing.com>
References: <9101D413-7CEB-4B50-931A-CF30E6501299@gmail.com> <5222213.mTn1hNnrTJ@rumburak.ite.tul.cz> <8F987994-DF3A-4FF4-B8C7-CFAC62FACFF2@gmx.com> <CANFmOtnHKDQe7snzA0QjnMvy4_hcsjbLgK9P_fxrAHpd2UnSKg@mail.gmail.com> <3ad799f39ebb41e4a4435a7fdfcc41d0@boeing.com> <1353329E-9AD5-49D0-B82B-423719DA148E@gmx.com> <e0e7576d188141c088e7baf89d5cdc2d@boeing.com> <59CA5FD7-6161-4D6D-A810-5D17BCC11893@gmx.com> <9b9924f3ef0a4b2c8d48c86a652d957e@boeing.com> <218CA62E-75FC-462A-A04E-7B3377631F5E@gmail.com>
In-Reply-To: <218CA62E-75FC-462A-A04E-7B3377631F5E@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [137.137.12.6]
x-tm-snts-smtp: 3D57FD75EBB5D390EAB6C5BEBEE35191D1351CFA41F634AF1193F987352DB10D2000:8
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-GCONF: 00
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/ejvsbTQgx7x5O9uwVu48crc7sVA>
Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Jun 2019 13:37:07 -0000

Sorry if you don't like it Fred, but that is the purpose of RFC6221. If you want more
details of what we are doing and why it makes sense to us let me know.

> -----Original Message-----
> From: Fred Baker [mailto:fredbaker.ietf@gmail.com]
> Sent: Wednesday, June 26, 2019 11:35 PM
> To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
> Cc: ianfarrer@gmx.com; dhcwg@ietf.org; v6ops list <v6ops@ietf.org>
> Subject: Re: [v6ops] [dhcwg] Operational Headache: DHCP V6 Relay
> 
> I don't see a prohibition of this sort of design, but it seems unnecessarily complex. The relay protocol is designed to communicate
> from a relay to another relay or to a server. Adding a relay process just to communicate with the server process via localhost seems an
> unnecessary step.
> 
> > On Jun 26, 2019, at 4:53 PM, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> >
> > The server and relay run in the same operating system instance, but in two separate process
> > contexts – call them ‘relayd’ and ‘serverd’.
> >
> > ‘relayd’ receives a client prefix delegation request then prepares a ‘Relay-forward’ message
> > and ships it to ‘serverd’ over a local loopback. When ‘serverd’ sends back the ‘Relay-reply’
> > (again over the loopback), ‘relayd’ injects a route into the routing system and sends a
> > suitable reply to the client.
> >
> > The only reason we do it this way is because the client cannot speak directly to ‘serverd’
> > and it would be difficult to merge ‘relayd’ and ‘serverd’ into a single process context. But,
> > everything else is coordinated within the same operating system instance.
> >
> > Fred
> >
> > From: ianfarrer@gmx.com [mailto:ianfarrer@gmx.com]
> > Sent: Wednesday, June 26, 2019 8:39 AM
> > To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
> > Cc: Naveen Kottapalli <naveen.sarma@gmail.com>; v6ops list <v6ops@ietf.org>; dhcwg@ietf.org; Martin Hunek
> <martin.hunek@tul.cz>
> > Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> >
> > Hi Fred,
> >
> > Will do.
> >
> > I haven’t tried that particular deployment scenario. I suppose that if the relay and server processes didn’t share any state
> information then you could see these problems. Is there a case for running both server and relay functions on the same box, rather
> than just the server (as a delegating router)?
> >
> > Thanks,
> > Ian
> >
> >
> > On 26. Jun 2019, at 17:27, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> >
> > Hi Ian – yes, a clarification of “co-located” would be great. Sounds like there is
> > not a concern when the relay and server are in the same box or VM, right?
> >
> > Thanks - Fred
> >
> > From: ianfarrer@gmx.com [mailto:ianfarrer@gmx.com]
> > Sent: Wednesday, June 26, 2019 8:22 AM
> > To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
> > Cc: Naveen Kottapalli <naveen.sarma@gmail.com>; v6ops list <v6ops@ietf.org>; dhcwg@ietf.org; Martin Hunek
> <martin.hunek@tul.cz>
> > Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> >
> > Hi Fred,
> >
> > In this instance, we are talking about being in a separate physical box, or VM. The problems I’ve observed are with  L3 edge routers
> with
> > the relay function in the access network with a centralised DHCPv6 server. We can clarify this better in the next update.
> >
> > Thanks,
> > Ian
> >
> >
> >
> > On 26. Jun 2019, at 17:14, Templin (US), Fred L <Fred.L.Templin@boeing.com> wrote:
> >
> > Hi Naveen,
> >
> > Thanks for the draft – a quick question - what is meant by “DHCPv6 relay function is not co-located
> > with the DHCPv6 server function”. Does it mean “co-located” as in within the same process, within
> > the same virtual machine, within the same physical box, within the same LAN, etc.?
> >
> > RFC6221 allows for the relay function to be in a separate process from the server function but
> > within the same operating system instance. So, the two processes share the same clock, IP
> > forwarding table, system memory, etc. In such an arrangement, can it be said that the DHCPv6
> > relay and server functions are in fact “co-located” even if they do not reside within the same
> > process context?
> >
> > Thanks - Fred
> >
> > From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Naveen Kottapalli
> > Sent: Tuesday, June 25, 2019 9:14 AM
> > To: v6ops list <v6ops@ietf.org>; dhcwg@ietf.org
> > Cc: Martin Hunek <martin.hunek@tul.cz>
> > Subject: Re: [dhcwg] [v6ops] Operational Headache: DHCP V6 Relay
> >
> > Hello All,
> >
> > A new draft on this subject is submitted today.  Please go through the same in below link and let us know your feedback.
> >
> > ----
> >
> > A new version of I-D, draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00.txt
> > has been successfully submitted by Naveen Kottapalli and posted to the
> > IETF repository.
> >
> > Name:           draft-fkhp-dhc-dhcpv6-pd-relay-requirements
> > Revision:       00
> > Title:          DHCPv6 Prefix Delegating relay
> > Document date:  2019-06-25
> > Group:          Individual Submission
> > Pages:          10
> > URL:            https://www.ietf.org/internet-drafts/draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00.txt
> > Status:         https://datatracker.ietf.org/doc/draft-fkhp-dhc-dhcpv6-pd-relay-requirements/
> > Htmlized:       https://tools.ietf.org/html/draft-fkhp-dhc-dhcpv6-pd-relay-requirements-00
> > Htmlized:       https://datatracker.ietf.org/doc/html/draft-fkhp-dhc-dhcpv6-pd-relay-requirements
> >
> >
> > Abstract:
> >    Operational experience with DHCPv6 prefix delegation has shown that
> >    when the DHCPv6 relay function is not co-located with the DHCPv6
> >    server function, issues such as timer synchronization between the
> >    DHCP functional elements, rejection of client's messages by the
> >    relay, and other problems have been observed.  These problems can
> >    result in prefix delegation failing or traffic to/from clients
> >    addressed from the delegated prefix being unrouteable.  Although
> >    [RFC8415] mentions this deployment scenario, it does not provide
> >    necessary detail on how the relay element should behave when used
> >    with PD.
> >
> >    This document describes functional requirements for a DHCPv6 PD relay
> >    when used for relaying prefixes delegated by a separate DHCPv6
> >    server.
> >
> > Yours,
> > Naveen.
> >
> >
> > On Mon, 1 Apr 2019 at 18:34, <ianfarrer@gmx.com> wrote:
> > Hi Martin,
> >
> > I would also be interested in working on this as it’s a problem for us. I’ve got something I wrote a while back. I’ll share it as a starting
> point.
> >
> > Cheers,
> > Ian
> >
> > > On 1. Apr 2019, at 11:31, Martin Hunek <martin.hunek@tul.cz> wrote:
> > >
> > > Hi Fred,
> > >
> > > I would be interested to address this issue, as it is the one I'm also having. But I would need some assistance, as I don't really know
> my ways around IETF processes yet.
> > >
> > > Martin
> > >
> > > Dne pátek 29. března 2019 6:37:25 CEST, Fred Baker napsal(a):
> > >> https://datatracker.ietf.org/doc/slides-104-v6ops-deutsche-telekom-terastream/, slide 3-4
> > >>
> > >> What do we want to say about DHCPv6 issues in vendor product and/or services? This headache doesn't have an obvious draft. I
> think that probably calls for a person or design team to create such a draft for discussion on the list and in Montreal.
> > >>
> > >> Any takers?
> > >> --------------------------------------------------------------------------------
> > >> The fact that there is a highway to hell and a stairway to heaven is an interesting comment on projected traffic volume...
> > >>
> > >
> > > _______________________________________________
> > > v6ops mailing list
> > > v6ops@ietf.org
> > > https://www.ietf.org/mailman/listinfo/v6ops
> >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
> > _______________________________________________
> > dhcwg mailing list
> > dhcwg@ietf.org
> > https://www.ietf.org/mailman/listinfo/dhcwg
> >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
> 
> --------------------------------------------------------------------------------
> The fact that there is a highway to hell and a stairway to heaven is an interesting comment on projected traffic volume...