Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets

Alexandre Petrescu <alexandre.petrescu@gmail.com> Fri, 24 February 2017 17:09 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27BAB128B44 for <ietf@ietfa.amsl.com>; Fri, 24 Feb 2017 09:09:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.333
X-Spam-Level:
X-Spam-Status: No, score=-5.333 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_HI=-5, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EGd_Ks248OOw for <ietf@ietfa.amsl.com>; Fri, 24 Feb 2017 09:09:42 -0800 (PST)
Received: from sainfoin-out.extra.cea.fr (sainfoin-out.extra.cea.fr [132.167.192.145]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DF971293FB for <ietf@ietf.org>; Fri, 24 Feb 2017 09:09:42 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin.extra.cea.fr (8.15.2/8.15.2/CEAnet-Internet-out-2.4) with ESMTP id v1OH9dwi012101; Fri, 24 Feb 2017 18:09:39 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id AF0FA20B9B2; Fri, 24 Feb 2017 18:09:39 +0100 (CET)
Received: from muguet2.intra.cea.fr (muguet2.intra.cea.fr [132.166.192.7]) by pisaure.intra.cea.fr (Postfix) with ESMTP id A157D20B905; Fri, 24 Feb 2017 18:09:39 +0100 (CET)
Received: from [10.8.34.184] (is227335.intra.cea.fr [10.8.34.184]) by muguet2.intra.cea.fr (8.15.2/8.15.2/CEAnet-Intranet-out-1.4) with ESMTP id v1OH9d9F014116; Fri, 24 Feb 2017 18:09:39 +0100
Subject: Re: [v6ops] draft-ietf-6man-rfc4291bis prohibiting non-/64 subnets
To: Christopher Morrow <morrowc.lists@gmail.com>
References: <58AF313D.3020905@foobar.org> <CAO42Z2ymnLm9dUNL3doU9+vR0eMzGbr71HQybbibXq9rCObP3A@mail.gmail.com> <21A9AEAE-330D-47F3-88CA-FC845C71AED0@darou.fr> <CAKD1Yr2Q-AUEWQSXFPzjn73Q7dJhMpB2_iHb3wJTCGx4-==Bpg@mail.gmail.com> <DADB35F5-3CB6-4396-A99F-ECE13C3EFE44@darou.fr> <e89b23b0-b037-995e-fd66-335505ecee61@gmail.com> <CAL9jLaY6RzX6pGFFMcReADudt+ewVtNw_XUYp07_BAVKAp8+hQ@mail.gmail.com> <bd05771e-1b03-1ee7-2a4c-0a1fe69b8a14@gmail.com> <CAL9jLaZJR9YzkF-R9Gx6MWBoJG4cSvp0rovYQ_9BALLzbQGiPQ@mail.gmail.com>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <c3e04aa1-40e1-551f-3821-b62732106e3d@gmail.com>
Date: Fri, 24 Feb 2017 18:09:29 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.7.1
MIME-Version: 1.0
In-Reply-To: <CAL9jLaZJR9YzkF-R9Gx6MWBoJG4cSvp0rovYQ_9BALLzbQGiPQ@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/r7dJHcNAGevEVDiYrO3gASEZD6o>
Cc: ietf <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Feb 2017 17:09:44 -0000


Le 24/02/2017 à 17:27, Christopher Morrow a écrit :
>
>
> On Fri, Feb 24, 2017 at 10:48 AM, Alexandre Petrescu
> <alexandre.petrescu@gmail.com <mailto:alexandre.petrescu@gmail.com>>
> wrote:
>
>
>
> Le 24/02/2017 à 15:59, Christopher Morrow a écrit :
>
>
>
> On Fri, Feb 24, 2017 at 9:09 AM, Alexandre Petrescu
> <alexandre.petrescu@gmail.com <mailto:alexandre.petrescu@gmail.com>
> <mailto:alexandre.petrescu@gmail.com
> <mailto:alexandre.petrescu@gmail.com>>> wrote:
>
>
> A question to Windows is the following: what prefixlen does it set
> when the end user manually assigns an address on an interface
> without specifiying a prefixlen?
>
>
> I don't think this matters... 'end users' will in almost all cases
> just attach and get connectivity.
>
>
> Let me go next in cycle: what does linux do when one ifconfig add an
> IPv6 address without telling the plen?  Is it adding an entry in the
> rt table?  Which plen?  Is that plen normal?
>
>
> still don't think this matters. If a user messes up what they type,
> they messed up. if the instructions aren't complete, they aren't
> complete and there will be mistakes. An interface configuration
> requires all proper parameters be set, or problems will arise.
> Assumptions about current and future behavior are proven wrong time
> and again.
>
> non-deterministic behavior over time is the hallmark of this
> space... please do not rely on defaults for hand-managed/bespoke
> configurations if you expect things to work reliably and repeatably.

That means the following: Windows please make the plen parameter
mandatory.  Dont leave it optional only to subversively set it to 64.
That's a software bug because nobody asks you to set the plen to 64 when
the end user does not specify one.

I guess the same bug is is in BSD, linux and what have you.

>
> If they are in a place where someone says: "Hey, you should go
> if/ipconfig ...." then .. they are 'consenting adults' and can do
> whatever they please.
>
>
> I assume you assume that ip/ifconfig by consenting adults means the
> adults type a plen in the CLI, right?
>
>
> sure, or a script/program/etc does this, it's not important how the
> 'ifconfig' happens, it's important that when it happens the right
> parameters are passed to the 'ifconfig' command.

I agree.  If 'ifconfig' silently assumes 64 then that assumption is
wrong.  The ifconfig programmer should take that as a software bug.
It's not an RFC that requires them to put 64 there.

> That makes it mandatory that the CLI _requires_ a plen, right?  That
> CLI should not allow silence for a plen parameter.
>
>
> sure, or you are at the mercy of the implementor of that command:
> Today I like /64! It's tomorrow and now I like /62!!
>
> don't rely on defaults.

I agree.

> Because silent plen means 64.  And I dont think it's right to assume
> a by-default 64 plen.  Because many people think 64 is right and
> others think it's wrong, there does not seem to be a commonly agreed
> 'by default' value for plen.
>
>
> correct, so.. be specific in your configuration effort please...
> which again, means that the 'what is the default?" conversation is
> moot.

I am not asking what is the default.

I am saying that apparently numerous implementations out there consider
the default to be 64.  This consideration is wrong.

A 'default' value is something that everybody agrees with.  For example,
one can leave out '::' from a command line adding a default route and
just say 'default'.  There is an agreed standard that says that
'default' is '::'.

But there is by far no single standard that says the default prefix
length is 64.

That's why it's a bug.

It's like boxes with pre-defined passwords admin/admin.  The local
programmer imagined it a good 'default' but never asked around the
validity of such assumption.  And that creates problems.

Alex

>
>
> Alex
>
>
>
> again the proposed text (now 175+ messages back) really covers this
> already..
>
>