Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets

Alexandre Petrescu <alexandre.petrescu@gmail.com> Fri, 24 February 2017 18:08 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6D0D129453 for <ietf@ietfa.amsl.com>; Fri, 24 Feb 2017 10:08:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.353
X-Spam-Level:
X-Spam-Status: No, score=-5.353 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dyr_ucTzp3Q5 for <ietf@ietfa.amsl.com>; Fri, 24 Feb 2017 10:08:51 -0800 (PST)
Received: from oxalide-out.extra.cea.fr (oxalide-out.extra.cea.fr [132.168.224.8]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1F47129440 for <ietf@ietf.org>; Fri, 24 Feb 2017 10:08:50 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by oxalide.extra.cea.fr (8.15.2/8.15.2/CEAnet-Internet-out-2.4) with ESMTP id v1OI8mpV018508; Fri, 24 Feb 2017 19:08:48 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 0C4B920BA47; Fri, 24 Feb 2017 19:08:48 +0100 (CET)
Received: from muguet2.intra.cea.fr (muguet2.intra.cea.fr [132.166.192.7]) by pisaure.intra.cea.fr (Postfix) with ESMTP id F025E20BA6C; Fri, 24 Feb 2017 19:08:47 +0100 (CET)
Received: from [10.8.34.184] (is227335.intra.cea.fr [10.8.34.184]) by muguet2.intra.cea.fr (8.15.2/8.15.2/CEAnet-Intranet-out-1.4) with ESMTP id v1OI8lTS013905; Fri, 24 Feb 2017 19:08:47 +0100
Subject: Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets
To: Christopher Morrow <morrowc.lists@gmail.com>
References: <58AF313D.3020905@foobar.org> <CAO42Z2ymnLm9dUNL3doU9+vR0eMzGbr71HQybbibXq9rCObP3A@mail.gmail.com> <21A9AEAE-330D-47F3-88CA-FC845C71AED0@darou.fr> <CAKD1Yr2Q-AUEWQSXFPzjn73Q7dJhMpB2_iHb3wJTCGx4-==Bpg@mail.gmail.com> <DADB35F5-3CB6-4396-A99F-ECE13C3EFE44@darou.fr> <e89b23b0-b037-995e-fd66-335505ecee61@gmail.com> <CAL9jLaY6RzX6pGFFMcReADudt+ewVtNw_XUYp07_BAVKAp8+hQ@mail.gmail.com> <bd05771e-1b03-1ee7-2a4c-0a1fe69b8a14@gmail.com> <CAL9jLaZJR9YzkF-R9Gx6MWBoJG4cSvp0rovYQ_9BALLzbQGiPQ@mail.gmail.com> <c3e04aa1-40e1-551f-3821-b62732106e3d@gmail.com> <CAL9jLaZhAp3VWHBJh08XnFoFAHZ_69tQJyUVAXE_YP9ELaDhbA@mail.gmail.com>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <e9edd389-9b84-21b0-644b-10cfc7ea7d4e@gmail.com>
Date: Fri, 24 Feb 2017 19:08:38 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.7.1
MIME-Version: 1.0
In-Reply-To: <CAL9jLaZhAp3VWHBJh08XnFoFAHZ_69tQJyUVAXE_YP9ELaDhbA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/a9BKOz20zfCTKOW3cDCsXx9KY74>
Cc: ietf <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Feb 2017 18:08:53 -0000


Le 24/02/2017 à 18:53, Christopher Morrow a écrit :
>
>
> On Fri, Feb 24, 2017 at 12:09 PM, Alexandre Petrescu
> <alexandre.petrescu@gmail.com <mailto:alexandre.petrescu@gmail.com>> wrote:
>
>
>
>     Le 24/02/2017 à 17:27, Christopher Morrow a écrit :
>
>
>
>         On Fri, Feb 24, 2017 at 10:48 AM, Alexandre Petrescu
>         <alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>
>         <mailto:alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>>>
>         wrote:
>
>
>
>         Le 24/02/2017 à 15:59, Christopher Morrow a écrit :
>
>
>
>         On Fri, Feb 24, 2017 at 9:09 AM, Alexandre Petrescu
>         <alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>
>         <mailto:alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>>
>         <mailto:alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>
>         <mailto:alexandre.petrescu@gmail.com
>         <mailto:alexandre.petrescu@gmail.com>>>> wrote:
>
>
>         A question to Windows is the following: what prefixlen does it set
>         when the end user manually assigns an address on an interface
>         without specifiying a prefixlen?
>
>
>         I don't think this matters... 'end users' will in almost all cases
>         just attach and get connectivity.
>
>
>         Let me go next in cycle: what does linux do when one ifconfig add an
>         IPv6 address without telling the plen?  Is it adding an entry in the
>         rt table?  Which plen?  Is that plen normal?
>
>
>         still don't think this matters. If a user messes up what they type,
>         they messed up. if the instructions aren't complete, they aren't
>         complete and there will be mistakes. An interface configuration
>         requires all proper parameters be set, or problems will arise.
>         Assumptions about current and future behavior are proven wrong time
>         and again.
>
>         non-deterministic behavior over time is the hallmark of this
>         space... please do not rely on defaults for hand-managed/bespoke
>         configurations if you expect things to work reliably and repeatably.
>
>
>     That means the following: Windows please make the plen parameter
>     mandatory.  Dont leave it optional only to subversively set it to 64.
>     That's a software bug because nobody asks you to set the plen to 64 when
>     the end user does not specify one.
>
>     I guess the same bug is is in BSD, linux and what have you.
>
>
> yes, I think so.. for linux:
> $ sudo ip -6 addr add 2001:700:4::1 dev em1
>
> gets me:
>  inet6 2001:700:4::1/128 scope global

That address is good, but how about the routing table?  Does it get an 
entry like 2001:700:4::/64?

> so that actually seems correct.
>
>
>
>         If they are in a place where someone says: "Hey, you should go
>         if/ipconfig ...." then .. they are 'consenting adults' and can do
>         whatever they please.
>
>
>         I assume you assume that ip/ifconfig by consenting adults means the
>         adults type a plen in the CLI, right?
>
>
>         sure, or a script/program/etc does this, it's not important how the
>         'ifconfig' happens, it's important that when it happens the right
>         parameters are passed to the 'ifconfig' command.
>
>
>     I agree.  If 'ifconfig' silently assumes 64 then that assumption is
>     wrong.  The ifconfig programmer should take that as a software bug.
>     It's not an RFC that requires them to put 64 there.
>
>
> ok
>
>
>         That makes it mandatory that the CLI _requires_ a plen, right?  That
>         CLI should not allow silence for a plen parameter.
>
>
>         sure, or you are at the mercy of the implementor of that command:
>         Today I like /64! It's tomorrow and now I like /62!!
>
>         don't rely on defaults.
>
>
>     I agree.
>
>         Because silent plen means 64.  And I dont think it's right to assume
>         a by-default 64 plen.  Because many people think 64 is right and
>         others think it's wrong, there does not seem to be a commonly agreed
>         'by default' value for plen.
>
>
>         correct, so.. be specific in your configuration effort please...
>         which again, means that the 'what is the default?" conversation is
>         moot.
>
>
>     I am not asking what is the default.
>
>     I am saying that apparently numerous implementations out there consider
>     the default to be 64.  This consideration is wrong.
>
>
> yes, I agree with you here.
>
>
>     A 'default' value is something that everybody agrees with.  For example,
>     one can leave out '::' from a command line adding a default route and
>     just say 'default'.  There is an agreed standard that says that
>     'default' is '::'.
>
>     But there is by far no single standard that says the default prefix
>     length is 64.
>
>     That's why it's a bug.
>
>     It's like boxes with pre-defined passwords admin/admin.  The local
>     programmer imagined it a good 'default' but never asked around the
>     validity of such assumption.  And that creates problems.
>
>
> ok, cool, i think we agree on all of this at least :)

:-)

Alex

>
>
>
>
>     Alex
>
>
>
>
>         Alex
>
>
>
>         again the proposed text (now 175+ messages back) really covers this
>         already..
>
>
>