Re: I-D Action: draft-ietf-6man-ipv6only-flag-03.txt

Joel Jaeggli <joelja@bogus.com> Thu, 01 November 2018 12:19 UTC

Return-Path: <joelja@bogus.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3EDDB1276D0 for <ipv6@ietfa.amsl.com>; Thu, 1 Nov 2018 05:19:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0uQUOcI5bmN for <ipv6@ietfa.amsl.com>; Thu, 1 Nov 2018 05:19:20 -0700 (PDT)
Received: from nagasaki.bogus.com (nagasaki.bogus.com [IPv6:2001:418:1::81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4726D124D68 for <ipv6@ietf.org>; Thu, 1 Nov 2018 05:19:20 -0700 (PDT)
Received: from [192.168.199.230] (d1-194-155-143-118-on-nets.com [118.143.155.194] (may be forged)) (authenticated bits=0) by nagasaki.bogus.com (8.15.2/8.15.2) with ESMTPSA id wA1CJChM024803; Thu, 1 Nov 2018 12:19:18 GMT (envelope-from joelja@bogus.com)
X-Authentication-Warning: nagasaki.bogus.com: Host d1-194-155-143-118-on-nets.com [118.143.155.194] (may be forged) claimed to be [192.168.199.230]
From: Joel Jaeggli <joelja@bogus.com>
Message-Id: <66EDCD17-A1BA-4765-812C-231992FF1D60@bogus.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_21EF772F-109F-423B-A2AC-7336BFBE0B30"
Mime-Version: 1.0 (Mac OS X Mail 12.0 \(3445.100.39\))
Subject: Re: I-D Action: draft-ietf-6man-ipv6only-flag-03.txt
Date: Thu, 01 Nov 2018 05:19:11 -0700
In-Reply-To: <38c6f05a-349a-2124-0052-aed032e450eb@nlogic.no>
Cc: ipv6@ietf.org
To: Ola Thoresen <ola@nlogic.no>
References: <CAFU7BASO_ByzbanhLKnWV280O_fASd-8W+ujpj3sN6d2-whw2w@mail.gmail.com> <CACWOCC-u7aAPwAOcixYvt2On=-o_8X25GhqdXTfA+tWRC1o2XA@mail.gmail.com> <3beca72e-19c5-10af-02e5-c21a90d77100@gmail.com> <20181019.223739.271916573.sthaug@nethelp.no> <CAO42Z2z3zMcQSG2QpEhKByRr73BnEFC7xwayHe7p86TQpUvQYg@mail.gmail.com> <82E7C4FD-AD73-4697-9FC6-F61FBCB50375@employees.org> <38c6f05a-349a-2124-0052-aed032e450eb@nlogic.no>
X-Mailer: Apple Mail (2.3445.100.39)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/2tYCZzkEZrmGVsfeUoTF-7lFlOQ>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Nov 2018 12:19:22 -0000


> On Oct 20, 2018, at 10:34, Ola Thoresen <ola@nlogic.no <mailto:ola@nlogic.no>> wrote:
> 
> On 20/10/2018 00:12, Ole Troan wrote:
> 
>> 
>> 
>> In my view, I don’t see much purpose in the bit unless it’s prescriptive. As in the last category. 
>> 
> 
> On this, we can agree. Having a flag as a "hint" does not make much sense.  You can't trust it, so you would STILL need to verify if the flag is actually telling the truth, or if it is just set - either malicious, or by mistake.  
> 
I can’t really trust (ND, RAs, ARP, DHCP, DHCPv6, MDNS). Lack of trust here extends to most of the signals one might receive in the process of bootstrapping. Of those signals some of them I accept because as part of a faustian bargain I made when attaching to the network, I actually need some of that information. The stuff that I don’t have to accept in order to achieve basic functionality I ignore.

As  case in point all the operating systems I use allow me to specify my own nameserver despite receiving such information  via DHCP/DHCPv6, doing so may come at the expense of some local funcationality but it’s worth it as far as I’m concerned.
> 
> On the other hand, I do not see how this can be a hard requirement.  Or at least I can not see operating systems actually obyeing such a flag.  IF the client administrator has configured IPv4 dhcp client settings, why should the OS trust a flag in an RA-packet more than the OS-admins configuration?
> 
> Just look at the already defined flags "O" and "M" - which are not even breaking the barrier between the IP-protocols.  I know at least a couple of implementations which will send a DHCPv6-request no matter what the RA is signaling in its M and O-flags.  And I know implementations that will not automatically send dhcp-requests no matter what flags are set in the RA-packets.  
> 
> We don't need even more flags that might or might not be ignored by the operating systems.  And which have a somewhat vague definition.
> 
And which is not absolutely necessary for bootstrapping.
> 
> We don't have a flag to tell the OS to not run DECnet, Appletalk or IPX.  We simply disable these on the clients.  And even if we had such a flag in DHCPv4 or RA, I - as an admin - would prefer the clients to not rely on such a flag, but try to get some kind of network access on any enabled network protocol in the client.
> 
> 
> 
> Rgds.
> 
> Ola (T)
> 
> 
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org <mailto:ipv6@ietf.org>
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------