Re: A common problem with SLAAC in "renumbering" scenarios

Jan Zorz - Go6 <jan@go6.si> Tue, 19 February 2019 05:05 UTC

Return-Path: <jan@go6.si>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 892D5130E67 for <ipv6@ietfa.amsl.com>; Mon, 18 Feb 2019 21:05:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=go6.si
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7MPVnKx-lXqZ for <ipv6@ietfa.amsl.com>; Mon, 18 Feb 2019 21:05:42 -0800 (PST)
Received: from mx.go6lab.si (mx.go6lab.si [IPv6:2001:67c:27e4::23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92A98126C01 for <ipv6@ietf.org>; Mon, 18 Feb 2019 21:05:39 -0800 (PST)
Received: from localhost (localhost [IPv6:::1]) by mx.go6lab.si (Postfix) with ESMTP id DFD076608B for <ipv6@ietf.org>; Tue, 19 Feb 2019 06:05:33 +0100 (CET)
X-Virus-Scanned: amavisd-new at go6.si
Received: from mx.go6lab.si ([IPv6:::1]) by localhost (mx.go6lab.si [IPv6:::1]) (amavisd-new, port 10024) with LMTP id cESIlesLXH8A for <ipv6@ietf.org>; Tue, 19 Feb 2019 06:05:32 +0100 (CET)
Received: from mail.go6.si (mail.go6.si [IPv6:2001:67c:27e4::61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.go6.si", Issuer "Let's Encrypt Authority X3" (not verified)) by mx.go6lab.si (Postfix) with ESMTPS id 7CCF9603E7 for <ipv6@ietf.org>; Tue, 19 Feb 2019 06:05:31 +0100 (CET)
Received: from haktar.local (ntfw.lju-airport.si [195.138.201.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "Jan Zorz", Issuer "COMODO RSA Client Authentication and Secure Email CA" (not verified)) (Authenticated sender: jan) by mail.go6.si (Postfix) with ESMTPSA id 19D45804D3 for <ipv6@ietf.org>; Tue, 19 Feb 2019 06:05:31 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=go6.si; s=mail; t=1550552731; bh=FhbWyYZgVp68G1J4obj+Me1QjOKSFB2YikXJdNmjBtw=; h=Subject:To:References:From:Date:In-Reply-To:From; b=oIBnzAoUt44sqxsMTM+Q7zKbxE33o37zGHT9NXsxdqZ4cupoLPuLFhTrbG8vDnBbZ 22rhtwHRJgKtepGZ8wrxkWrouadPuF0Wd9rOkGM2TQ+D6pfm87gkHaPp5yC1g3NxaY Z1Cx1sVKib9ouXgh70W4M//waXPkRIJpalhRcYAQ=
Subject: Re: A common problem with SLAAC in "renumbering" scenarios
To: ipv6@ietf.org
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <e56a6e5b-648d-200e-c35d-97f15a31fb2a@asgard.org> <CAO42Z2zh7fKAgQJq9aLCTiFoSSsTeGM=pK3gXitg+gcxH=9fhQ@mail.gmail.com> <d38857c2-6e92-91d6-bb5d-d3eeeb61276a@gmail.com> <CAO42Z2yb47OyXk__Sz-kO00pfcBJgLAhff5DF=mpAddR0iCnAA@mail.gmail.com> <2612280f-195a-ae7a-b3b1-9022d9282fa7@foobar.org> <56F813F4-C512-40A9-8A68-1090C76A80F6@consulintel.es> <CAHL_VyCN8kU7qnLOphfGR25-xGBe_p6WeGTkKVXwU5uy5aJ8Dg@mail.gmail.com> <65DB4854-97D2-4C31-A691-2CD93812EF93@consulintel.es> <CAHL_VyCMpCcGkEQu+RV1GRf2QLB-HD0+AOOBV0YhfQ5sbydVzQ@mail.gmail.com> <8CE7A0CD-97D9-46A0-814D-CAF8788F9964@consulintel.es> <e3e0bf2273e04f15b792665d0f66dfe5@boeing.com> <4c5fab33-2bff-e5b5-fc1d-8f60a01a146d@go6.si> <b4525832-9151-20bf-7136-31d87ba6c88d@huitema.net> <463f15cf-2754-e2e8-609d-dc0f33448c6c@go6.si> <ff649810-7242-7bc2-d36f-3f998f7bdd71@asgard.org> <9CDF41CA-83B4-4FC4-B995-EF79727C5458@steffann.nl> <4f892532-f5f3-f82c-fd43-18117052b1b4@asgard.org>
From: Jan Zorz - Go6 <jan@go6.si>
Message-ID: <2ac20cfb-0fd8-9e97-c425-f903e061d960@go6.si>
Date: Tue, 19 Feb 2019 06:05:30 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.5.0
MIME-Version: 1.0
In-Reply-To: <4f892532-f5f3-f82c-fd43-18117052b1b4@asgard.org>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/7AqKfLDiNeDjI-qLi1P1OtFWJFE>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Feb 2019 05:05:45 -0000

On 18/02/2019 19:32, Lee Howard wrote:
> 
> On 2/15/19 4:20 PM, Sander Steffann wrote:
>> Hi Lee,
>>
>>> Seems to me several operators have offered their opinions here. If 
>>> you want more opinions, maybe ask a group of operators?
>> Not a very helpful comment... I think the underlying problem here is 
>> that there is no technical solution available that solves stable IPv6 
>> address delegation at residential scale in an acceptable way.
> 
> The question was, "Would operators support this solution?" To that 
> question, asking a group of operators seems to me to be a pretty sound 
> suggestion.

I was thinking about that. ;)

> 
> I disagree that the problem to be solved is "stable IPv6 address 
> delegation," and said so repeatedly and loudly when we worked on 
> RIPE-690, along with the only other large operator involved in editing 
> that document.

You did. But RIPE-690 was all about documenting current reality of 
operational environments and practices that can work today and not about 
the future where we want to go.

Shaping the future where we want to go is taking place with this I-D and 
now it's time to say how we want the deployment of IPv6 protocol at 
various network (end)points to be done.

> 
> The problem to be solved is stale address state. Stable prefix 
> delegation would be one solution. Better dynamic renumbering would be 
> another, which could be handled in ways Fernando describes in his draft 
> (draft-gont-6man-slaac-renum-00 in case anyone's forgotten), or several 
> others

Making end-host more robust doesn't hurt. Giving a good advice on how to 
build a CPE to be nicer towards the host doesn't hurt. Mandating 
operators to honour the lifetime of PD that they set themself and not 
change prefix before expiry (if there is no emergency situation in the 
network) would also help.

> 
> 
>>
>> - For stable address delegation the routing inside the ISP becomes a 
>> mess, especially when it can't be guaranteed that a customer 
>> consistently ends up at the same BNG.
>> - To keep ISP networks scalable, prefixes are aggregated to (roughly) 
>> BNG level, making it impossible to keep prefix delegation stable at 
>> the customer's end
>>
>> With IPv4 this didn't cause massive problems because NAT disconnected 
>> the LAN addresses from the WAN side at the customer's end. With IPv6 
>> this is no longer the case and it does cause problems.
>>
>> Stability at one end causes instability at the other end, and vice versa.
>> And as can be seen from this discussion it's still an unsolved problem...
> 
> That's a good summary. Similar to Nick Hilliard's description of where 
> the network state information lives.

My immediate reaction would be "as far on the edge as possible" :)

> 
> We can try to solve this with locator-ID splits, but that solution space 
> has been sitting around for a while, and I'm not sure it ultimately 
> solves the problem. We can always add a layer of indirection (put a 
> mapping somewhere) but it doesn't help the stub hosts.

I believe that proposed change in ND in this I-D would do the job. But 
I'm obviously biased ;)

Cheers and thnx, Jan

> 
> Lee
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------