Re: [Ila] [5gangip] Fwd: New Version Notification for draft-herbert-ipv6-prefix-address-privacy-00.txt

[Tom Herbert <[e-mail]>]

On Wed, Feb 21, 2018 at 7:38 PM, Lorenzo Colitti <[e-mail]> wrote:
> On Thu, Feb 22, 2018 at 10:51 AM, Tom Herbert <[e-mail]> wrote:
>>
>> The hidden aggregation method is intended to make scaling possible.
>> Each assigned block results in on entry in mapping system so total
>> amount of state is num_hosts*num_blocks per host. e.g. in a network of
>> 10M nodes with 100 blocks per host that's 1B entries in the mapping
>> system-- should be able to scale that.
>
>
> I have a fundamental problem with the assertion "should be able to scale to
> 1B mapping entries" given that a) current routing hardware capabilities are
> three orders of magnitude away from that, and b) anyone on the Internet can
> mount a state exhaustion attack on the mapping system simply by originating
> a packet to any IPv6 address in the domain.
>
The complete mapping system is not required to be stored in a single
device it is sharded. So if a single device hold 10M entries, then 100
devices are required with some multiplier needed for redundancy and
load. The numbers are not out of line with numbers of routers that are
deployed in large provider networks today. However, scaling into the
future especially with vast numbers of IoT devices, like the 1T
devices projection, will require more work (but even without this work
on scaling is still needed).

> Personally I don't think this work should progress until we have line of
> sight to a system that can actually do that.

I would think that a major part of the work is to implement a mapping
system and identifier/locator protocol and to demonstate the scaling
properties. This is work currently in progress.

Tom