Re: [Int-dir] Intdir telechat review of draft-ietf-rtgwg-vrrp-rfc5798bis-15

Acee Lindem <acee.ietf@gmail.com> Sun, 31 December 2023 01:07 UTC

Return-Path: <acee.ietf@gmail.com>
X-Original-To: int-dir@ietfa.amsl.com
Delivered-To: int-dir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 634CDC14F5E9; Sat, 30 Dec 2023 17:07:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VkZlce-zx5yB; Sat, 30 Dec 2023 17:07:32 -0800 (PST)
Received: from mail-qv1-xf2d.google.com (mail-qv1-xf2d.google.com [IPv6:2607:f8b0:4864:20::f2d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C955DC14F5E0; Sat, 30 Dec 2023 17:07:32 -0800 (PST)
Received: by mail-qv1-xf2d.google.com with SMTP id 6a1803df08f44-6803466a1ccso32380246d6.3; Sat, 30 Dec 2023 17:07:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1703984851; x=1704589651; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=nFVw6KsowpQxZ/eBVLxNMUujvM4hNPWc77xk07eGTHw=; b=QzI36G6xDxmh/0ZvGIaFYEOq2Y/F1cF1z1cnnrPCjHnK7+Yj3+QdZ6YoRDykbmDtE/ +qwu2wRNUfVEVXHPBpdLuDsKDdG66WPlqhGwxASnc0zEyfRUg7MLRew+6uJMDmejQ879 Qp2mf+Cu3BgUZBNbnfXRQ5OVG+YQ024/QrajafkDtUnavDtcDck55+POwTWpw31FvRXE jW2j3d8CLRedr/I1QTC/Y0aGK8FyN8pPUQlAHF84nslsU617JqzL90nrl07jLXcJ5FR9 Ml1NdP77ZyW/9AG8T5b15CLLdH/2SimEIdw+uKFedNaRJME7I6UzOlkJA5u+MxEo4XDa PPSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1703984851; x=1704589651; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=nFVw6KsowpQxZ/eBVLxNMUujvM4hNPWc77xk07eGTHw=; b=ajwul4AqH9UtYGdm90I81Jnad9L3GKKTlExt4t4E0dt/juWIn0ZyqjvSZPHpTwe/H8 FZSZBJK6GVPfB0TGOCpvCVEWd+o227zX+2b0yIBP1vI4xqD41+GowN3e0hOt72Hp3FHW RbpRtGL8AbPMkxlmK6FI9PQPYzYkRUS2CLS09iNLa1QlTC2aZTH34g/A6lUfJ5a5ZWcW qcLlv8iv5DdMmMsjOjxVYJWFnUGtCszYzo5nIew9CnENsSOS2Z6oid7vnG+FTYSxqFoS vc7PRJzermHQFv+2KhiDKuTi6wBvnHt5B2D34plPMiVZ0Kr+C5RAIFZcEYzNk3yEQ4GJ 9RsQ==
X-Gm-Message-State: AOJu0Yz2EPcOZRT8IwBsTgDtbb0kqe1EPYGCyjaVPo/HHRYppJIUckex +tzKKOrNN7Gn6bxSyXdUgig=
X-Google-Smtp-Source: AGHT+IEgX1f1POCgBG8NR257Uh9Z/xmKwUtTaxkD/VCrzK67IKPjwCZuznt0G6KwpjDu0lWv8cnsXw==
X-Received: by 2002:a05:6214:2608:b0:67f:252f:e7d with SMTP id gu8-20020a056214260800b0067f252f0e7dmr22486822qvb.18.1703984851562; Sat, 30 Dec 2023 17:07:31 -0800 (PST)
Received: from smtpclient.apple ([136.54.28.118]) by smtp.gmail.com with ESMTPSA id f9-20020ad442c9000000b0067a33133420sm8292457qvr.110.2023.12.30.17.07.31 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sat, 30 Dec 2023 17:07:31 -0800 (PST)
From: Acee Lindem <acee.ietf@gmail.com>
Message-Id: <8D0418F4-2769-4A85-9CA8-5652163E4968@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_EA5029DC-8E3C-4922-8791-FC1EC070C3D7"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.300.61.1.2\))
Date: Sat, 30 Dec 2023 20:07:20 -0500
In-Reply-To: <00b001da3b69$bc6ebdf0$354c39d0$@gmail.com>
Cc: Dave Thaler <dave.thaler.ietf@gmail.com>, int-dir@ietf.org, draft-ietf-rtgwg-vrrp-rfc5798bis.all@ietf.org, Last Call <last-call@ietf.org>, rtgwg@ietf.org
To: dthaler1968@googlemail.com
References: <170371985819.52401.2042358676642167473@ietfa.amsl.com> <F267AC78-645A-4DF8-B4CF-44A8D2844B84@gmail.com> <00b001da3b69$bc6ebdf0$354c39d0$@gmail.com>
X-Mailer: Apple Mail (2.3774.300.61.1.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-dir/6m4RAModXXIBdyig7pmoiCgriIo>
Subject: Re: [Int-dir] Intdir telechat review of draft-ietf-rtgwg-vrrp-rfc5798bis-15
X-BeenThere: int-dir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This list is for discussion between the members of the Internet Area directorate." <int-dir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-dir>, <mailto:int-dir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-dir/>
List-Post: <mailto:int-dir@ietf.org>
List-Help: <mailto:int-dir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-dir>, <mailto:int-dir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 31 Dec 2023 01:07:37 -0000

See inline. 

> On Dec 30, 2023, at 16:47, dthaler1968@googlemail.com wrote:
> 
>> -----Original Message-----
>> From: Acee Lindem <acee.ietf@gmail.com <mailto:acee.ietf@gmail.com>>
>> Sent: Saturday, December 30, 2023 1:13 PM
>> To: Dave Thaler <dave.thaler.ietf@gmail.com <mailto:dave.thaler.ietf@gmail.com>>
>> Cc: int-dir@ietf.org <mailto:int-dir@ietf.org>; draft-ietf-rtgwg-vrrp-rfc5798bis.all@ietf.org <mailto:draft-ietf-rtgwg-vrrp-rfc5798bis.all@ietf.org>; Last Call
>> <last-call@ietf.org <mailto:last-call@ietf.org>>; rtgwg@ietf.org <mailto:rtgwg@ietf.org>
>> Subject: Re: Intdir telechat review of draft-ietf-rtgwg-vrrp-rfc5798bis-15
>> 
>> Hi Dave,
>> 
>> Thanks for the review.
>> 
>>> On Dec 27, 2023, at 6:30 PM, Dave Thaler via Datatracker <noreply@ietf.org>
>> wrote:
>>> 
>>> Reviewer: Dave Thaler
>>> Review result: Ready with Issues
>>> 
>>> See https://1drv.ms/b/s!Aqj-Bj9PNivcn-MfckCWPYEAplaCJw?e=5TZtui for a
>>> copy with my comments and editorial nits inline.
>>> 
>>> Summary:
>>> 1. I am confused by the discussion of "forwarding" packets addressed
>>> to the Active Router's address.  The Abstract and Introduction seem to
>>> talk about doing it but then section 8.3.1 says not to.
>> 
>> The primary purpose of VRRP is to assume “forwarding” responsibility for the
>> virtual addresses.
>> I don’t see any compelling reason to change this now. I could change “sent to
>> these IPv4 and IPv6 addresses” to “routed to these IPv4 and IPv6 addresses”
>> to avoid any confusion that this forwarding is tied to the packet header
>> destination addresses. However, I don’t even see this as needed.
> 
> I was confused by the wording as noted in my comments, since it appears to
> contradict text later in the document.

Section 8.3.1 addresses the specific case of the packets address to the VRRP virtual address. I’ll make this clear. 


> 
>>> 2. Missing discussion of DHCPv4.
>>> Section 1.3 seems to imply that static configuration of end hosts is
>>> the primary mechanism for learning default routes, which is not the
>>> case for clients or IoT devices as far as I know... DHCP is the
>>> default.  I believe VRRP can still be used in a DHCP scenario and the
>> document should say so.
>> 
>> Yes - but DHCP is really just another form of static route configuration. I’ll
>> change this to “manual configuration” and include DHCPv4 [2131] and
>> DHCPv6 [RFC8415] as well as static configuration. Any other suggested
>> references?
> 
> That sounds sufficient to me at the moment.
> 
>>> 3. Section
>>> 4.2's discussion of IPv6 is confusing to me (and I wrote one of the
>>> relevant RFCs).  If there are two routers sending RA's on the same
>>> LAN, then by default all hosts learn _both_ of them.  The text implies
>>> half learned one and half "are using" the other one.  This text needs
>>> to be clarified and then probably reference RFC 4191 and RFC 4311 for
>>> more discussion.  Even better would be to update the text to
>>> specifically discuss the interaction between VRRP and 4311 (which I
>>> think would be straightforward), and if needed mention different cases
>>> for the different host types in RFC 4191 section 3 (it's also possible
>>> that the interaction with VRRP is the same for all the types and the
>>> types need not be mentioned except to say that the interaction is the same
>> for all the host types there).
>> 
>> For IPv6, I could change “learned” to “configured” since the purpose of
>> section 4.2 Is to demonstrate load-sharing and not specify IPv6 Router-
>> Advertisement behavior.
> 
> Is the intent of the example that half aren't paying attention to IPv6 RA
> advertisements and are using manual configuration, or what?  I'm still
> confused as to what the intent of the text is.

The intent is to provide an example of VRRP load-balancing with different groups of 
hosts using different primary and secondary default gateways. It is not to specify how this
is provisioned using IPv6 RAs.  



> 
>> Alternately, I could change “learned” to “preferred” with a reference to RFC
>> 4311.
>> 
>>> 4. A couple places use "should" in cases where it's unclear whether it
>>> means SHOULD or MUST (or even "MAY" when "may" occurs earlier in the
>> text).
>>> This could adversely affect interoperability if it meant MUST and
>>> someone interprets it as optional.
>> 
>> I’ll look at all of these. As long as the statement is specific to VRRP, I will
>> consider changing these to normative.
>> 
>>> 5. Section 8.3.2 says to log when multiple routers advertise priority
>>> = 255, but doesn't say to log when multiple routers advertise the same
>>> non-255 priority.  It says not to do that, so why wouldn't you want to
>>> suggest logging any time the same priority is advertised by multiple
>>> routers?  I.e., why is the logging recommendation limited to the 255
>>> case?
>> 
>> The VRRP protocol handles this case with a tie-breaker of the VRRP router
>> with the VRRP router with the greater primary IP address taking precedence.
>> The reason for recommending that VRRP routers have different priorities is to
>> minimize the churn do to them having the same advertisement skew time. It
>> is not a protocol error.
> 
> My question is why not recommend logging when someone doesn't follow
> the recommendation?  You mention there is churn, so why not at least log
> as a MAY?

I guess including it in section 8.3.2 as a MAY wouldn’t hurt. 

Thanks,
Acee


> 
>>> . Various grammatical nits.
>> 
>> I’ll incorporate these. Note that the pseudo-code wasn’t meant to be
>> grammatically correct. However, the changes you have suggested may not
>> obscure the logic and I’ll consider them.
>> 
>> Thanks
>> Acee