Re: Proposal for changing how IPv6 Hop-by-Hop Options are processed

Fernando Gont <fernando@gont.com.ar> Sat, 05 December 2020 06:12 UTC

Return-Path: <fernando@gont.com.ar>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A454F3A0D3D for <ipv6@ietfa.amsl.com>; Fri, 4 Dec 2020 22:12:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.888
X-Spam-Level:
X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jvYn1LYclCVq for <ipv6@ietfa.amsl.com>; Fri, 4 Dec 2020 22:12:20 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D22A3A0CEB for <ipv6@ietf.org>; Fri, 4 Dec 2020 22:12:07 -0800 (PST)
Received: from [IPv6:2800:810:464:8164:896a:de13:c010:ff3a] (unknown [IPv6:2800:810:464:8164:896a:de13:c010:ff3a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id A37A92845E8; Sat, 5 Dec 2020 06:12:03 +0000 (UTC)
Subject: Re: Proposal for changing how IPv6 Hop-by-Hop Options are processed
To: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>, Bob Hinden <bob.hinden@gmail.com>, IPv6 List <ipv6@ietf.org>
Cc: Gorry Fairhurst <gorry@erg.abdn.ac.uk>
References: <b2e38223c5734399832888087c87b120@boeing.com>
From: Fernando Gont <fernando@gont.com.ar>
Message-ID: <87a12cfe-d597-62f3-7de1-ddce6d084651@gont.com.ar>
Date: Sat, 05 Dec 2020 03:11:42 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <b2e38223c5734399832888087c87b120@boeing.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/68MAn7PFIUWCklulVJX0EaF_JMU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Dec 2020 06:12:34 -0000

On 3/12/20 20:38, Templin (US), Fred L wrote:
> Bob and Gorry,
> 
> I would like it if some document that updates RFC8200 (such as yours) could
> relax the restriction that the Hop-by-Hop option has to immediately follow
> the IPv6 header. This comes up in two different places in RFC8200:
> 
> Section 4:
>     "The Hop-by-Hop Options header, when present, must immediately follow
>     the IPv6 header."
> 
> Section 4.1:
>     "IPv6 nodes must accept and attempt to process extension headers in
>     any order and occurring any number of times in the same packet,
>     except for the Hop-by-Hop Options header, which is restricted to
>     appear immediately after an IPv6 header only."
> 
> I would like to see this restriction softened somewhat (perhaps to a "should")
> since I have a use case in mind where another extension header type might
> appear before the Hop-by-Hop option, if only briefly. Any chance your doc
> could accommodate?

"right after the IPv6 header" since the only natural place where this 
option would belong. At the end of the day, the goal is that the option 
is processed by all nodes -- and if the option is elsewhere, then it 
would not, or would mean that a router would need to skip options e.g. 
destined to the destination in order to process options meant to be 
processed by all nodes.

Unless I'm missing something, I'd strongly argue against relaxing this.

In fact, if we want to have any hopes that things will improve, my 
feeling is that the way to do that would be via *tightening* requirements.

Thanks!

Regards,
-- 
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@si6networks.com
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1