Re: Last Call: <draft-ietf-6man-rfc4291bis-07.txt> (IP Version 6 Addressing Architecture) to Internet Standard

Alexandre Petrescu <alexandre.petrescu@gmail.com> Wed, 22 February 2017 09:41 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 859EA1296AE for <ietf@ietfa.amsl.com>; Wed, 22 Feb 2017 01:41:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.333
X-Spam-Level:
X-Spam-Status: No, score=-5.333 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_HI=-5, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G4Dy1lb_NBrx for <ietf@ietfa.amsl.com>; Wed, 22 Feb 2017 01:41:40 -0800 (PST)
Received: from sainfoin-out.extra.cea.fr (sainfoin-out.extra.cea.fr [132.167.192.145]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A586E1296A2 for <ietf@ietf.org>; Wed, 22 Feb 2017 01:41:39 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin.extra.cea.fr (8.15.2/8.15.2/CEAnet-Internet-out-2.4) with ESMTP id v1M9fbo3014238 for <ietf@ietf.org>; Wed, 22 Feb 2017 10:41:37 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id A70CC2045E8 for <ietf@ietf.org>; Wed, 22 Feb 2017 10:41:37 +0100 (CET)
Received: from muguet2.intra.cea.fr (muguet2.intra.cea.fr [132.166.192.7]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 9D94C202B0E for <ietf@ietf.org>; Wed, 22 Feb 2017 10:41:37 +0100 (CET)
Received: from [10.8.34.184] (is227335.intra.cea.fr [10.8.34.184]) by muguet2.intra.cea.fr (8.15.2/8.15.2/CEAnet-Intranet-out-1.4) with ESMTP id v1M9fbDf031845 for <ietf@ietf.org>; Wed, 22 Feb 2017 10:41:37 +0100
Subject: Re: Last Call: <draft-ietf-6man-rfc4291bis-07.txt> (IP Version 6 Addressing Architecture) to Internet Standard
To: ietf@ietf.org
References: <d9dc153a-61a8-5976-7697-ce1ecc9c8f3f@gmail.com> <4AF83EE6-6109-491F-BE66-114724BB197B@employees.org> <75196cfa-5476-0c7b-7612-ea2e446fc6f1@gmail.com> <B4A4FFFD-A90D-4C26-BDBD-75555840CA22@employees.org> <m2wpcqeuot.wl-randy@psg.com> <44F7BEDA-CF11-4E1E-BA6F-88794DEC1AF7@employees.org> <20170221001940.GB84656@Vurt.local> <068ce975-8b1e-a7c5-abba-2bfc1d904d70@gmail.com> <20170221101339.GC84656@Vurt.local> <047994c3-9cce-12ce-55bb-bf3ae3369b57@gmail.com> <20170221225857.GE32367@Vurt.local> <f84828c0-7d37-6c56-b1a6-6260227b4f44@gmail.com>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <efd19030-6a81-3e14-d294-94e4605f15a1@gmail.com>
Date: Wed, 22 Feb 2017 10:41:28 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.7.1
MIME-Version: 1.0
In-Reply-To: <f84828c0-7d37-6c56-b1a6-6260227b4f44@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/1_obu6RGJNDr5wMMTwGUyQVfXsM>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Feb 2017 09:41:41 -0000


Le 22/02/2017 à 00:23, Brian E Carpenter a écrit :
> On 22/02/2017 11:58, Job Snijders wrote:
>> On Wed, Feb 22, 2017 at 11:44:42AM +1300, Brian E Carpenter wrote:
>>> On 21/02/2017 23:13, Job Snijders wrote:
>>>> On Tue, Feb 21, 2017 at 02:11:15PM +1300, Brian E Carpenter
>>>> wrote:
>>>>> On 21/02/2017 13:19, Job Snijders wrote:
>>>>>> On Thu, Feb 16, 2017 at 09:40:01AM +0100,
>>>>>> otroan@employees.org wrote:
>>>>>>> There are many reasons for the 64 bit boundary. -
>>>>>>> Allowing identifier locator split: 8+8 / GSE that led to
>>>>>>> ILNP and NPT66
>>>>>>
>>>>>> Irrelevant.
>>>>>
>>>>> Not really. They are both running code. You may not want them
>>>>> in *your* network but that isn't the point. Some people want
>>>>> them.
>>>>>
>>>>> And there is a lot of other running code too, not just SLAAC
>>>>> which is mandatory to implement in every IPv6 host. So this
>>>>> actually trumps all the other arguments: it's 64 bits because
>>>>> it's 64 bits.
>>>>
>>>> When someone utters the phrase "it is X because it is X", the
>>>> rhetorical imperative seems to be to dismiss further
>>>> conversation (perhaps any internal dialogue as well, which may
>>>> be the primary purpose). "It is what it is" therefore, there’s
>>>> nothing more to be said about it...
>>>>
>>>> Except when it's not 64 bits?
>>>
>>> That wasn't quite my intention. I just wanted to underline that
>>> (like it or not) it was set at 64 bits many years ago and a lot
>>> has been built on that.
>>>
>>> ...
>>>> I've looked at all configured IPv6 addresses on AS 2914
>>>> equipment. Interestingly enough, the below table is a
>>>> reflection of not only NTT's own addressing, and (since
>>>> AS2914's core function is to connect networks to each other)
>>>> also of its peers and customers. In the end, whatever makes the
>>>> thing work is the thing that will be configured.
>>>>
>>>> /127 - 22% /126 - 52% /125 - 0,9% /124 - 0,5% /120 - 0,04% /112
>>>> - 0,02% /64  - 23%
>>>
>>> Thanks, that's interesting. So 23% of the devices might have
>>> RFC4291-compliant IIDs. The others are configured with 128 bit
>>> IPv6 addresses. Is that correct?
>>
>> The percentage is not the percentage of devices, but the percentage
>> of interconnections. In all instances the addresses are staticly
>> configured.
>
> OK, but from the outside I can't know that for the /64 subnets.
>
>> Back to my example from earlier, to make sure we are on the same
>> page, this is output from a standard Linux machine:
>>
>> job@tardis:~$ sudo ip -6 addr add 2001:728:1808:1::21/126 dev eth1
>> job@tardis:~$ sudo ip -6 addr show dev eth1 3: eth1:
>> <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000 inet6
>> 2001:728:1808:1::21/126 scope global valid_lft forever
>> preferred_lft forever inet6 fe80::20d:b9ff:fe41:d4f5/64 scope link
>> valid_lft forever preferred_lft forever job@tardis:~$
>>
>> Most network engineers would call the above example "configuring a
>> /126 on an interface" - but am I understanding correctly that in
>> your taxonomy you would call this "configuring a 128 bit IPv6
>> address"?
>
> Well that does two things: configures a 128 bit address (as Chris
> points out, *all* addresses are 128 bits, duh) and associates a
> prefix length with it, which afaik is optional.

The prefix length is not optional.  There is no system out there on
which one could configure a 128bit address without explicitely telling
'/128' or '/64' or '/something-else'.

By specifications, I think only DHCPv6 specs say that the address
assigned to a Client has no prefix length.  In practice though, the
address assigned by DHCPv6 w/o  prefix length gets a 'by default' prefix
length often hardcoded as '/64'.

> But the interface has already auto-configured a link-local address,
> with a 64 bit IID. So yes, that's exactly what I mean.

Which brings back: the LL address should have a prefix length or no?  If 
yes should it be /64 (2464bis) or /10 (4291bis)?

Linux sets it at /64 by default... and I disagree with it, 4291bis 
disagrees too.

Alex

>>> That being so, perhaps the words that are missing are "The IID
>>> length requirement does not apply to interfaces that are
>>> explicitly configured with 128 bit addresses." Because the
>>> requirement is meaningless for such interfaces.
>>
>> The terminology might confuse some people, as in common language
>> when one configures "a /128", or 'a 128 bit address', it usually
>> means you are configuring something like a loopback address.
>>
>> Perhaps:
>>
>> "The IID length requirement does not apply to interfaces that are
>> explicitly configured without autoconfiguration."
>>
>> (perhaps even remove the word 'explicitly')
>>
>> "The IID length requirement does not apply to interfaces that are
>> configured without autoconfiguration."
>
> Personally I think that's right. (However, if you manually configure
> an address that matches a pre-existing prefix announced by an RA, it
> will be assumed to belong to that prefix. I've done that by hand on
> Windows, not sure I've done it in Linux.)
>
> Brian
>
>