Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets

Philip Homburg <pch-ietf-6@u-1.phicoh.com> Fri, 24 February 2017 20:48 UTC

Return-Path: <pch-bF054DD66@u-1.phicoh.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ED42129507; Fri, 24 Feb 2017 12:48:43 -0800 (PST)
X-Quarantine-ID: <DdPXfYSVf2v4>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "Cc"
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DdPXfYSVf2v4; Fri, 24 Feb 2017 12:48:41 -0800 (PST)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) by ietfa.amsl.com (Postfix) with ESMTP id 61080129502; Fri, 24 Feb 2017 12:48:39 -0800 (PST)
Received: from stereo.hq.phicoh.net ([::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (Smail #127) id m1chMn7-0000DhC; Fri, 24 Feb 2017 21:48:37 +0100
Message-Id: <m1chMn7-0000DhC@stereo.hq.phicoh.net>
To: ietf@ietf.org
Subject: Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets
From: Philip Homburg <pch-ietf-6@u-1.phicoh.com>
Sender: pch-bF054DD66@u-1.phicoh.com
References: <58AF313D.3020905@foobar.org> <20170223190730.GL2367@Space.Net> <m2poi8s2cf.wl-randy@psg.com> <CAL9jLaYuDJm4qROZ3bgDxamG9Xo8Ot88Ej5yHhO7Mj7q+77DCg@mail.gmail.com> <CAKD1Yr0hc3DYK7tg0Vi0J5kEdd-CkD4D+cJ7LbaZw5WfNS=ZEg@mail.gmail.com> <CAL9jLaaOWm+iQMOOGg00CXrhHtKZ0PxBswaJTUn6wf-EDq4KgQ@mail.gmail.com> <CAAedzxqPzPweW6RQUfHfUB0ZktofuY8HxKz-LbiBNWg+2ZoBaw@mail.gmail.com> <CAL9jLaZ86B8EKy9hrJY2mO3GZDurbp4QZohwMZDrkZyj8ayA_g@mail.gmail.com>
In-reply-to: Your message of "Fri, 24 Feb 2017 10:04:11 -0500 ." <CAL9jLaZ86B8EKy9hrJY2mO3GZDurbp4QZohwMZDrkZyj8ayA_g@mail.gmail.com>
Date: Fri, 24 Feb 2017 21:48:36 +0100
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/oMi0gyplIQvWY5Mld6pdh9XupU4>
Cc: IPv6 Operations <v6ops@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Feb 2017 20:48:43 -0000

>For enduser deployment picking 'something' (/64 is perfectly fine) is
>totally sane, and already in the proposed text. The sticking point isn't so
>much: "ipv6 is ipv4 with  more bits" (which the network treats it as) but:
>"hey, we know we allocate longer prefixes all the time for 'reasons' on
>things that have bespoke config, let's not make that harder by letting
>vendors/etc take shortcuts... acknowledge the fact that we really do have
>interfaces with >/64 deployed.

I wonder if (in typical IPv4 fashion) we mix address configuration with
onlink prefixes.

There are three generic address configuration mechanisms, SLAAC, DHCP IA_NA,
and manual. Of these only SLAAC cares about the prefix length. And there
are good reasons to keep SLAAC at 64 bits.

(If would strongly suggest to not pick a random 32 bit IID, combine it
with a /96 and then hope that duplicate addresses detection in all cases
will safe the day. So for longer prefixes, use DHCP or manual configuration.)

For DHCP and manual configuration, an address is just that, an address.
So in that case, the prefix length actually refers to the length of the
onlink prefix.

Note that RFC 4861 (Neighbor Discovery) already specifies that an onlink
prefix can have arbitrary length. 

So it safe to assume that hosts can support arbitrary length onlink
prefixes. Otherwise those host implementations are already broken.

DHCP doesn't have a prefix length, so that's not an issue.

So that leaves hosts that mistakenly combine manual address configuration
with implicit onlink prefix configuration and an arbitrary restriction
on the prefix length. It is safe to declare those hosts broken.