Re: [dhcwg] Next step(s) for draft-ietf-dhc-stable-privacy-addresses -> abandon work? / IA_NA applicability

Fernando Gont <fgont@si6networks.com> Sun, 05 April 2015 14:56 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7BFC1A8AF4 for <dhcwg@ietfa.amsl.com>; Sun, 5 Apr 2015 07:56:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N68xBqMAkJts for <dhcwg@ietfa.amsl.com>; Sun, 5 Apr 2015 07:56:33 -0700 (PDT)
Received: from web01.jbserver.net (web01.jbserver.net [IPv6:2a00:8240:6:a::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 515561A8BB2 for <dhcwg@ietf.org>; Sun, 5 Apr 2015 07:56:30 -0700 (PDT)
Received: from cl-1071.udi-01.br.sixxs.net ([2001:1291:200:42e::2]) by web01.jbserver.net with esmtpsa (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.85) (envelope-from <fgont@si6networks.com>) id 1YelyM-0002Wm-Ip; Sun, 05 Apr 2015 16:56:27 +0200
Message-ID: <55214D0E.3030404@si6networks.com>
Date: Sun, 05 Apr 2015 16:56:14 +0200
From: Fernando Gont <fgont@si6networks.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Lorenzo Colitti <lorenzo@google.com>, "Bernie Volz (volz)" <volz@cisco.com>
References: <489D13FBFA9B3E41812EA89F188F018E1CA32071@xmb-rcd-x04.cisco.com> <8C4E055C-ED1D-4951-8473-6166109ACE69@nominum.com> <489D13FBFA9B3E41812EA89F188F018E1CA321EE@xmb-rcd-x04.cisco.com> <6D7A465E-6EBE-4B69-9B65-BAC7BF2A9873@nominum.com> <489D13FBFA9B3E41812EA89F188F018E1CA3229F@xmb-rcd-x04.cisco.com> <CAKD1Yr0_WEbR20ghJNx8n5fPf=Yrqp=wZz_Q_7J2L7c5xDzVcg@mail.gmail.com>
In-Reply-To: <CAKD1Yr0_WEbR20ghJNx8n5fPf=Yrqp=wZz_Q_7J2L7c5xDzVcg@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/dhcwg/kV1lTGPoqGgKYwe65_QBDgLrCYQ>
Cc: "dhcwg@ietf.org" <dhcwg@ietf.org>, Ted Lemon <Ted.Lemon@nominum.com>
Subject: Re: [dhcwg] Next step(s) for draft-ietf-dhc-stable-privacy-addresses -> abandon work? / IA_NA applicability
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 05 Apr 2015 14:56:34 -0000

On 04/02/2015 01:28 AM, Lorenzo Colitti wrote:
> On Thu, Apr 2, 2015 at 4:52 AM, Bernie Volz (volz) <volz@cisco.com
> <mailto:volz@cisco.com>> wrote:
> 
>     So, we're back to the question as to whether
>     draft-ietf-dhc-stable-privacy-addresses document is needed (and if
>     it is, whether it is Informational). If you really like the
>     algorithm and want to suggest to server implementers here is one you
>     can use, that's fine but it should be Informational then. I don't
>     see this as required to implement.
> 
> +1. draft-ietf-dhc-stable-privacy-addresses does not really provide much
> value on top of assigning addresses randomly. Address assignment via
> IA_NA is fundamentally stateful, so I don't see a lot of gain in making
> it "deterministic unpredictable" as opposed to "random unpredictable".

You get stability of the address, even in scenarios in which you have
multiple DHCPv6 servers, without the need of an additional protocol for
synchronizing the address leases database. An approach such as that
specified by this document is mentioned in RFC7031 itself. e.g.:

"  Also, the typical large address space (close to 2^64 addresses on /64
   prefixes expected to be available on most networks) may make managing
   address assignment significantly different from DHCPv4 failover.  In
   DHCPv4, it was not possible to use a hash or calculated technique to
   divide the significantly more limited address space, and therefore,
   much of the protocol that deals with pool balancing and rebalancing
   might not be necessary and can be done mathematically."

If you think the extra value is worth its implementation, you implement
it. If you don't, you don't.

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492