Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-pd-relay-requirements-00.txt

Timothy Winters <tim@qacafe.com> Wed, 08 April 2020 15:02 UTC

Return-Path: <tim@qacafe.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 007DE3A0DDE for <dhcwg@ietfa.amsl.com>; Wed, 8 Apr 2020 08:02:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.087
X-Spam-Level:
X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qacafe.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ACdpcc5rQsWh for <dhcwg@ietfa.amsl.com>; Wed, 8 Apr 2020 08:02:22 -0700 (PDT)
Received: from mail-wm1-x330.google.com (mail-wm1-x330.google.com [IPv6:2a00:1450:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 119093A0D32 for <dhcwg@ietf.org>; Wed, 8 Apr 2020 08:02:22 -0700 (PDT)
Received: by mail-wm1-x330.google.com with SMTP id r26so248928wmh.0 for <dhcwg@ietf.org>; Wed, 08 Apr 2020 08:02:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qacafe.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=eauEnoVizxiSOxfkHCgAu/sLUevGJYihF9rHb1coxDw=; b=n+0koTpjqBRjfqIwZrafEYLUJbZqYf3ai/gDwLFo+B7amdAysCTQlWEhi6yGkLkGY1 /a0ee0RXgwIgT3cQDyegGeuF5JLvswCuo8NU9WpTJ90OdAkmmcU+4gIRGH9gFDlNXO5m OXFiSofUEP6LKfErPj3CczkBlF2HiGlhrEiT8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=eauEnoVizxiSOxfkHCgAu/sLUevGJYihF9rHb1coxDw=; b=XZPch1OYEWvWqvsW3He/mUE0h0JxrkMhTuttTK61SmCwh8dYhvobBwJU5rsNZc3por Gp0C0byKq3QrOmf7cySCTgS3KBe3YiuS/9ycqxzeQ7QRGcJUvwUgpPFQ47t1zpH+tFGu WhPq3OtpHdxmH2g2k3s3RzSMhjr4ioAYiinFzFFHdBIv0aenJuis3qnWR28tyQUp3Qwr zIV615uY+EE/BWQTEXvgVm+dgs/O12t3gOczBusZAqNl97rEffzxM5lMsRS+CIgnbpb9 0mgrk3wnlyYKpioCqwDkxn3f/68BDb8jJgVlTIqRl7ICPHlvfjBS/pq+5lUvKc9Ogv9v 4iMg==
X-Gm-Message-State: AGi0Pub21I6m5Tkc/WO0e//d+9K6m9yD5sUJOmV0L2lqJnMfHZ3O8AZN I3PyMBBpBHK/x6VbPFste6K1PPeFVOSXU2ELaZSbIHWnD+Q=
X-Google-Smtp-Source: APiQypKhZrh7K8cae6Puh1B80haDo9PmxQ9tct9S/ev70rVvwA55oLzmy5BPnBkWnT1tJHI4AzkJvZLMOpnJKcmdjDU=
X-Received: by 2002:a1c:4346:: with SMTP id q67mr4863014wma.162.1586356713232; Wed, 08 Apr 2020 07:38:33 -0700 (PDT)
MIME-Version: 1.0
References: <158346050095.14620.2547383825421375669@ietfa.amsl.com> <CANFmOt=21NNyYom9KtVQ7x5mTE6rR2GAAg8DwAdaptuOWAJLrQ@mail.gmail.com> <BN7PR11MB2547E17639F673343B5210BBCFFC0@BN7PR11MB2547.namprd11.prod.outlook.com> <CANFmOtnWHJzNtw8-aj+Dqgbqh0aeDMVtXcnib0RC4Bpi+OW0eg@mail.gmail.com> <43727BCE-732F-4629-8BCD-EBCDE2507B82@cisco.com> <BN7PR11MB2547273DA5E1D5F39F26629ACFF00@BN7PR11MB2547.namprd11.prod.outlook.com> <BN7PR11MB254754D841622448F49B021ACFCE0@BN7PR11MB2547.namprd11.prod.outlook.com> <98E34F29-CAB3-4FC3-9B53-AB17AF811683@gmx.com> <75369E25-F0D9-47A5-A94C-EF40736656FC@cisco.com> <D847C596-F3D0-4165-BA5B-32E0D4E7BA35@gmx.com> <BN7PR11MB254768A96E2FCD8A56C92138CFC90@BN7PR11MB2547.namprd11.prod.outlook.com> <CAJgLMKs+v-NF4n7Jg+2LxA965e=FtYt-i9OA7XuWMFkum9VC+w@mail.gmail.com> <BN7PR11MB254798D6651138C6A1614072CFC00@BN7PR11MB2547.namprd11.prod.outlook.com> <DD7C9190-F204-42BE-A210-BEFD3B6AE534@employees.org> <CAJgLMKvv2ao2zLzVFyOoD8suhS_4FJ-jN5fZNCSYt69cNq=ijg@mail.gmail.com>
In-Reply-To: <CAJgLMKvv2ao2zLzVFyOoD8suhS_4FJ-jN5fZNCSYt69cNq=ijg@mail.gmail.com>
From: Timothy Winters <tim@qacafe.com>
Date: Wed, 08 Apr 2020 10:38:22 -0400
Message-ID: <CAJgLMKvB7eNLArPhsL-XkFjR3qVLBEQKQRu9fCFaM6siSWn13w@mail.gmail.com>
To: otroan@employees.org
Cc: "Bernie Volz (volz)" <volz=40cisco.com@dmarc.ietf.org>, "draft-ietf-dhc-dhcpv6-pd-relay-requirements@ietf.org" <draft-ietf-dhc-dhcpv6-pd-relay-requirements@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000006137ed05a2c87406"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/nnzKTsImcFTzMvbyd4Ncp3LCBGc>
Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-pd-relay-requirements-00.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Apr 2020 15:02:27 -0000

Hi Ole,

I think the issue in all of these cases is the CPE doesn't know it had the
prefix previously.  So 3633 won't cover this case, as to the CPE it just
seems like IPv6 packets.  It routes them out it's default route, which
happens to be the same interface it got them.

~Tim

On Wed, Apr 8, 2020 at 10:29 AM Timothy Winters <tim@qacafe.com> wrote:

> Hi Ole,
>
> We have a rule for this when it's delegated to the CPE, WPD-5 to blackhole
> PDs not assigned.  In this case the CPE had no idea it had it.   G-3
> disallows LAN to WAN forwarding before getting an address.  I think this
> case is WAN to WAN forwarding.   It's not in 7084 to my knowledge, as for
> 3633 I'm not so sure about.  Let me have a look.
>
> ~Tim
>
> On Wed, Apr 8, 2020 at 10:12 AM <otroan@employees.org> wrote:
>
>> > Sounds like a useful issue to try to address – the DHC connection is
>> because of the DHCP issues.
>> >
>> > And, I assume looping occurs because packets cycle between SP router
>> and CPE until TTL/HOP expires?
>> >
>> > Do you have a suggestion as to what the CPE should do in this case? For
>> example, are you suggesting that the CPE drop received traffic (except for
>> DHCP and perhaps some other limited traffic addressed to it)?
>>
>> A CPE should never provide transit.
>> I.e it should never forward a packet received on it's WAN interface back
>> out the WAN interface.
>>
>> A more specific rule for that is in 7084 and possibly in 3633, requiring
>> a blockhole route on the requesting router for the delegated prefix.
>>
>> Ole
>>
>>