Re: RFC3484 destination address selection rule 2 is buggy

Fred Baker <fred@cisco.com> Tue, 18 March 2008 12:35 UTC

Return-Path: <ipv6-bounces@ietf.org>
X-Original-To: ietfarch-ipv6-archive@core3.amsl.com
Delivered-To: ietfarch-ipv6-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2427E28C597; Tue, 18 Mar 2008 05:35:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.181
X-Spam-Level:
X-Spam-Status: No, score=-101.181 tagged_above=-999 required=5 tests=[AWL=-0.744, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SC+-L03t8fT9; Tue, 18 Mar 2008 05:35:43 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2330F28C505; Tue, 18 Mar 2008 05:35:43 -0700 (PDT)
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 47E7728C1C7 for <ipv6@core3.amsl.com>; Tue, 18 Mar 2008 05:35:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 657JiO1sjxjE for <ipv6@core3.amsl.com>; Tue, 18 Mar 2008 05:35:41 -0700 (PDT)
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id F345928C575 for <ipv6@ietf.org>; Tue, 18 Mar 2008 05:35:40 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.25,518,1199660400"; d="scan'208";a="3811117"
Received: from ams-dkim-2.cisco.com ([144.254.224.139]) by ams-iport-1.cisco.com with ESMTP; 18 Mar 2008 13:33:19 +0100
Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id m2ICXJ1b018764; Tue, 18 Mar 2008 13:33:19 +0100
Received: from xbh-ams-331.emea.cisco.com (xbh-ams-331.cisco.com [144.254.231.71]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id m2ICXI7O004855; Tue, 18 Mar 2008 12:33:19 GMT
Received: from xfe-ams-331.emea.cisco.com ([144.254.231.72]) by xbh-ams-331.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 18 Mar 2008 13:33:18 +0100
Received: from [10.32.244.222] ([10.32.244.222]) by xfe-ams-331.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 18 Mar 2008 13:33:18 +0100
In-Reply-To: <477387.44567.qm@web45515.mail.sp1.yahoo.com>
References: <477387.44567.qm@web45515.mail.sp1.yahoo.com>
Mime-Version: 1.0 (Apple Message framework v753)
X-Gpgmail-State: !signed
Message-Id: <429D4E65-2D89-4C04-A606-7C25481FD42D@cisco.com>
From: Fred Baker <fred@cisco.com>
Subject: Re: RFC3484 destination address selection rule 2 is buggy
Date: Tue, 18 Mar 2008 05:33:15 -0700
To: Gabi Nakibly <gnakibly@yahoo.com>
X-Mailer: Apple Mail (2.753)
X-OriginalArrivalTime: 18 Mar 2008 12:33:18.0398 (UTC) FILETIME=[3E9DB5E0:01C888F4]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1559; t=1205843599; x=1206707599; c=relaxed/simple; s=amsdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=fred@cisco.com; z=From:=20Fred=20Baker=20<fred@cisco.com> |Subject:=20Re=3A=20RFC3484=20destination=20address=20selec tion=20rule=202=20is=20buggy |Sender:=20; bh=r9gxRspLNOCdxa6agz9LhxfOTdrRRex6x5jkCuwxFRQ=; b=wh03JkX0octR+oJT9qeAXWgeZYxggt/VdMhPE2BTKDE20w0zgLzWyRhCRC DHHpi7rq9HnhVeaBSLbkyKpJYOEZj2fAZU2foC63LqDWZn0WwpjWv3Li/Gsw 9OavJcKhZ3;
Authentication-Results: ams-dkim-2; header.From=fred@cisco.com; dkim=pass ( sig from cisco.com/amsdkim2001 verified; );
Cc: Iljitsch van Beijnum <iljitsch@muada.com>, ipv6@ietf.org, Pekka Savola <pekkas@netcore.fi>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ipv6-bounces@ietf.org
Errors-To: ipv6-bounces@ietf.org

On Mar 18, 2008, at 5:10 AM, Gabi Nakibly wrote:

> Determining whether the destination address is in the zone of a  
> source address can be tricky. However, it is fairly easy in the  
> common case where the source address is link-local and the  
> destination address is global. If the latter is not on-link, than  
> it is not in the zone of the link-local source address and this  
> source address should not be included in the candidate set. If the  
> above rule will be applied in the scenario of http://tools.ietf.org/ 
> html/draft-ietf-v6ops-v6onbydefault-03, the candidate set of the v6  
> address will be empty and therefore it will be avoided by  
> destination address selection rule 1.

Speaking for myself, there is a simpler rule in that special case  
that imght be instructive in the ULA case.

There is no sense in using a link-local address as a source address  
unless one is sending to someone on the same LAN. Hence, there is no  
sense in suing a link-local address as the source if one cannot also  
use one in the destination.

Similarly, there is no sense using a ULA source address unless the  
destination is in the same ULA. If the destination is a global  
address it might or might not be able to reply, but the sender can't  
tell.

Hence, in sender address choice:
   - use a link-local source address if and only if the destination  
is a link-local address
   - use a ULA source address if and only if the destination is a ULA  
in the same prefix
   - otherwise, use a global address

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------