Re: [v6ops] RFC4861 question - short prefixes in PIOs

David Farmer <farmer@umn.edu> Wed, 26 June 2019 21:17 UTC

Return-Path: <farmer@umn.edu>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16684120314 for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 14:17:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.298
X-Spam-Level:
X-Spam-Status: No, score=-4.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umn.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K0JgdscVyofG for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 14:17:55 -0700 (PDT)
Received: from mta-p6.oit.umn.edu (mta-p6.oit.umn.edu [134.84.196.206]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C82612003F for <6man@ietf.org>; Wed, 26 Jun 2019 14:17:55 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1]) by mta-p6.oit.umn.edu (Postfix) with ESMTP id 6BFDCC77 for <6man@ietf.org>; Wed, 26 Jun 2019 21:17:54 +0000 (UTC)
X-Virus-Scanned: amavisd-new at umn.edu
Received: from mta-p6.oit.umn.edu ([127.0.0.1]) by localhost (mta-p6.oit.umn.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7cd589LmxP9S for <6man@ietf.org>; Wed, 26 Jun 2019 16:17:54 -0500 (CDT)
Received: from mail-vk1-f199.google.com (mail-vk1-f199.google.com [209.85.221.199]) (using TLSv1.2 with cipher AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mta-p6.oit.umn.edu (Postfix) with ESMTPS id 12EB7C88 for <6man@ietf.org>; Wed, 26 Jun 2019 16:17:53 -0500 (CDT)
Received: by mail-vk1-f199.google.com with SMTP id 184so72747vku.17 for <6man@ietf.org>; Wed, 26 Jun 2019 14:17:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umn.edu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KKsogVQjX/htbrv4RJrzcMMMAZ+/CUBiUyd7aRpfFJg=; b=QI/zCjY3fVQt0k966L1NOTeXSqayjaf23P8RbuZcUiu1EdytWf9mlyTnxd0JGnPxnJ DQPdzy83+9k+rEensXqrOJC6xmxeaFn8NpExxo0lDSMRoGVnc9fnNvmYa2Bu5A4EjJ/8 qTAfL3o62hIpTpZfQu7/Mf0lxYjYNSapmQU4SINO6AL75Ml6E8xjYp8TAqavDcOj2mpR bkkpA3bcoxiwfyHxVzOAPfW10x4jWKnrM3d6MEz6bji4+mcDQaNbBH7Td8boW+w/1LMD Etb/CUW9AId6ZlpPGVTGwpyhkl/FTjb+qTaOyGS3C9j5VP/PmtTRqgi3NQsjUEHhDRNF N81A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KKsogVQjX/htbrv4RJrzcMMMAZ+/CUBiUyd7aRpfFJg=; b=NUwnLM9nirr0U7fE2yEO7iBIzazI5uc40yL4/ckP9iflSV5Z+UJnFz1MiSL3pe2tQM EjlVoRCdsjn9L9UYhShve+iop0U0fzElz+HX0NpHlNb8OPR6FpMYwU9bHXC0bWUEgrMJ p5dsSWdrrNvRWz9wDoe3joJG7mkxJr7CP+tHwXo0zLdvJHv8bh+OhnMa845iP/dn/4Cp CRPJtLPNrowqU/wU86LGunWHjiq1pGu1UC3KlEK5mYhHfMaVmRPcpfgA6Am2ZQjVaf1x bBDCTNDgp4ORfqlPnRqvyY6JVBMAwR14gudAyN5WoQKpPReEEho3D9SDdePUf/Fu5P8g /J3A==
X-Gm-Message-State: APjAAAXoSm8Urzva0NAhYWliN37FcpW/4n5efONQ/a/vup350bpn1A7I we36SVQy9XgktYz1jiMeFZZb0eCLPZqTEsn7Q1tmEo5pNv/XcmvY4/P/blaeStYRVwyWYbT5St8 PMk6+FfJ1PBixCtvWU2CHK2a8
X-Received: by 2002:ab0:138e:: with SMTP id m14mr144400uae.71.1561583872659; Wed, 26 Jun 2019 14:17:52 -0700 (PDT)
X-Google-Smtp-Source: APXvYqwhoiG79tOqLg2sqcBRx5Xz1IaErfZcd9QVGHe9bNUJsSNPPzNtPEB3+XaYzUHAb3IPzM8iK6msb4EWWNk4Uhk=
X-Received: by 2002:ab0:138e:: with SMTP id m14mr144348uae.71.1561583871676; Wed, 26 Jun 2019 14:17:51 -0700 (PDT)
MIME-Version: 1.0
References: <729f46ec4a8b419797e15bbdcac3e549@boeing.com> <CAJE_bqeXkyWec9-EG1QxS-1FeTyKS6-ONNOYhQK8gsQGwenaVQ@mail.gmail.com> <CAN-Dau35=8i0DAn1xd8nHJh9aAVZY12v3az9QUyXYXAtOQ9xeA@mail.gmail.com> <4b1cb44d708349dc8ff936bde9ebd21d@boeing.com>
In-Reply-To: <4b1cb44d708349dc8ff936bde9ebd21d@boeing.com>
From: David Farmer <farmer@umn.edu>
Date: Wed, 26 Jun 2019 16:17:35 -0500
Message-ID: <CAN-Dau1ZZCe9z_kiDC_cO7+1gh+AnaFZ0YKTr+UJHm+WeRT+qg@mail.gmail.com>
Subject: Re: [v6ops] RFC4861 question - short prefixes in PIOs
To: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>
Cc: 神明達哉 <jinmei@wide.ad.jp>, 6man <6man@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f5691a058c4093e1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/6v7CWFC27Kv62UeYLYF32BbtGhY>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Jun 2019 21:17:58 -0000

Actually, I misspoke a little in my response to #4, it's not setting the
next-hop destination for a destination prefix, for that you would use RIOs.
It about setting the next-hop destination for traffic sourced from
addresses covered by PIOs and this would override RFC4191 default router
preferences. The gory details are discussed in section 3 of RFC8028.

In other words, RFC8028 is about the routing of sources in PIOs, including
ones with A=L=0, the routing of destinations is a subject of RIOs.

Brain and Fred, as the authors, can probably explain it better than I can.

But, hope that helps.

On Wed, Jun 26, 2019 at 3:22 PM Templin (US), Fred L <
Fred.L.Templin@boeing.com> wrote:

> Thanks for your response, David:
>
>
>
> >> RFC 8028 updates RFC4861 and talks about A=L=0, it talks about this in
> Section 2.1;
>
>
>
> That does indeed look like the kind of behavior I am after, but how is it
> different than
>
> RFC4191 RIOs? RIOs include a Preference value for each router that
> advertises the
>
> prefix. Do we lose that feature by going with PIOs per RFC8028?
>
>
>
> Thanks - Fred
>
>
>
> *From:* David Farmer [mailto:farmer@umn.edu]
> *Sent:* Wednesday, June 26, 2019 12:01 PM
> *To:* 神明達哉 <jinmei@wide.ad.jp>
> *Cc:* Templin (US), Fred L <Fred.L.Templin@boeing.com>; 6man <
> 6man@ietf.org>
> *Subject:* Re: [v6ops] RFC4861 question - short prefixes in PIOs
>
>
>
> Some additional comments regarding questions #3 and #4 are below;
>
>
>
> On Wed, Jun 26, 2019 at 11:23 AM 神明達哉 <jinmei@wide.ad.jp> wrote:
>
> (I'm only copying 6man, as I believe it's purely a protocol spec
> question)
>
> At Wed, 26 Jun 2019 15:56:36 +0000,
> "Templin (US), Fred L" <Fred.L.Templin@boeing.com
> <Fred.L.Templin@boeing..com>> wrote:
> >
> > I have an RFC4861 question (several actually) on short prefixes in RA
> PIOs:
> >
> > 1) If a PIO includes a prefix with length less than 64 (e.g.,
> 2001:db8::/32) and with L=1, does it
> >
> > mean that 2001:db8::/32 should be added to the interface prefix list?
>
> In my interpretation (ditto for subsequent questions), yes.
>
>
>
> +1
>
>
>
> > 2) If yes to 1), does it mean that packets forwarded to the interface
> for any destination covered
> >
> > by 2001:db8::/32 will trigger Address Resolution instead of forwarding
> to a default router?
>
> Yes.
>
>
>
> +1
>
>
>
> > 3) If the PIO instead has L=0, does it mean that 2001:db8::/32 is
> “associated” with the link but
> > not necessarily “on-link”?
>
> I'm not sure how to interpret it (in particular I'm not sure what
> "associated with the link" means), but my interpretation of L=0 is
> that the RA doesn't say anything about the on-link-ness of that
> prefix.  See also the description of the L flag in RFC4861:
>
>       L              1-bit on-link flag.  [...]  When
>                      not set the advertisement makes no statement about
>                      on-link or off-link properties of the prefix.  In
>                      other words, if the L flag is not set a host MUST
>                      NOT conclude that an address derived from the
>                      prefix is off-link.  That is, it MUST NOT update a
>                      previous indication that the address is on-link.
>
>
>
> RFC 8028 updates RFC4861 and talks about A=L=0, it talks about this in
> Section 2.1;
>
>
>
>    In some circumstances, both L and A might be zero.  If SLAAC is not
>    wanted (A=0) and there is no reason to announce an on-link prefix
>    (L=0), a PIO SHOULD be sent to inform hosts that they should use the
>    router in question as the first hop for packets with source addresses
>    in the PIO prefix.  An example case is the MIF router in Figure 1,
>    which could send PIOs with A=L=0 for the common prefix.  Although
>     this does not violate the existing standard [RFC4861], such a PIO has
>    not previously been common, and it is possible that existing host
>    implementations simply ignore such a PIO or that existing router
>    implementations are not capable of sending such a PIO.  Newer
>    implementations that support this mechanism should be updated
>    accordingly:
>
>    o  A host SHOULD NOT ignore a PIO simply because both L and A flags
>       are cleared (extending Section 6.3.4 of [RFC4861]).
>
>    o  A router SHOULD be able to send such a PIO (extending
>       Section 6.2.3 of [RFC4861]).
>
>
>
> > 4) If yes to 3), does it mean that 2001:db8::/32 should be added to the
> IPv6 forwarding table
> >
> > as a “route-to-interface” with the receiving interface as the next hop?
>
> No.  See the second MUST NOT of the RFC4861 text cited above.
>
>
>
> I wouldn't call it a “route-to-interface” it should be a route pointing to
> the route as the next-hop.
>
>
>
> > 5) Does A=1 have any meaning for prefixes with length less than 64? Or,
> must prefixes with
> >
> > length less than 64 set A=0?
>
> As far as RFC4861 is concerned, the A flag has no meaning, regardless
> of the prefix length.  It only matters in RFC4862.  In terms of
> RFC4862, whether "A=1 has any meaning for prefixes with length less
> than 64" depends on the length of the IID of the link; if the prefix
> length != 128-IIDLength, the validation rule 5.5.3 d) of RFC4862 makes
> the prefix ignored.  If non-64 prefix length is invalid in terms of
> RFC4862 in that sense, it'd be *safe* to avoid setting the A flag, but
> the protocol specification doesn't say it *must* be so.
>
>
>
> +1
>
>
>
> You may also want to check
> https://tools.ietf.org/html/draft-jinmei-6man-prefix-clarify-00
> I believe it clarifies many of the above questions.
>
> --
> JINMEI, Tatuya
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>
>
>
>
> --
>
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
>


-- 
===============================================
David Farmer               Email:farmer@umn.edu
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================