Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios

Tim Chown <Tim.Chown@jisc.ac.uk> Thu, 21 February 2019 10:42 UTC

Return-Path: <tim.chown@jisc.ac.uk>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1940E130DD8 for <ipv6@ietfa.amsl.com>; Thu, 21 Feb 2019 02:42:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jisc.ac.uk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id svkzeCMC5QXS for <ipv6@ietfa.amsl.com>; Thu, 21 Feb 2019 02:41:56 -0800 (PST)
Received: from eu-smtp-delivery-189.mimecast.com (eu-smtp-delivery-189.mimecast.com [207.82.80.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 253BA130DD6 for <6man@ietf.org>; Thu, 21 Feb 2019 02:41:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jisc.ac.uk; s=mimecast20170213; t=1550745714; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=uDM/SIyahBrmXl5/xxTqOy/Pj8dT6dUwiZ1jG/7gncQ=; b=IfwYKhSE6+56KsamNw3XMjw2zB/IJBfAVEX13KQzPhFbHkonclYR3LEa6enb5xeno1GX8m6AAAEYLEWnMznVE3FFwJTMuuCC9hiFXZM3K0ZEy+WkWFjG1ZcCr/vNYaJrRuD2ZywGAP7DBvjUZvyqxajLLv4PNDfsW/CGeMKT+ac=
Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-am5eur02lp2058.outbound.protection.outlook.com [104.47.4.58]) (Using TLS) by relay.mimecast.com with ESMTP id uk-mta-88-rK9RXcX1Pk6dA3ZC0g78lQ-2; Thu, 21 Feb 2019 10:41:50 +0000
Received: from AM0PR07MB4177.eurprd07.prod.outlook.com (52.133.54.140) by AM0PR07MB4292.eurprd07.prod.outlook.com (52.133.61.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1665.6; Thu, 21 Feb 2019 10:41:47 +0000
Received: from AM0PR07MB4177.eurprd07.prod.outlook.com ([fe80::617a:4c8b:34ae:efcb]) by AM0PR07MB4177.eurprd07.prod.outlook.com ([fe80::617a:4c8b:34ae:efcb%4]) with mapi id 15.20.1665.006; Thu, 21 Feb 2019 10:41:47 +0000
From: Tim Chown <Tim.Chown@jisc.ac.uk>
To: "ek@loon.co" <ek@loon.co>
CC: Fernando Gont <fgont@si6networks.com>, "6man@ietf.org" <6man@ietf.org>, IPv6 Operations <v6ops@ietf.org>
Subject: Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios
Thread-Topic: [v6ops] A common problem with SLAAC in "renumbering" scenarios
Thread-Index: AQHUyNCyRyfkiR0M6E+jXGYmGdTvsaXobdkAgAEAugCAAASxgIAACP4AgAAEwgCAAJFvAA==
Date: Thu, 21 Feb 2019 10:41:47 +0000
Message-ID: <0DDB4538-62F8-442A-A12C-D3C176540884@jisc.ac.uk>
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <alpine.DEB.2.20.1901311236320.5601@uplift.swm.pp.se> <35adea8e-704a-76f2-857f-a83a9ad689ef@si6networks.com> <CAFU7BAS1_veTu-ZXAF0MF4niJwz149nGipx3ep_6fh1bewOzgg@mail.gmail.com> <d9503983-6524-a13a-2cb0-cdcb95f76ea6@si6networks.com> <CAFU7BAQfg712UfgW9wi9pd3eVeZP9cqJEXd6=FDmchuSdauv+g@mail.gmail.com> <82c00442-bbc4-581b-2054-2d02d50d20ad@si6networks.com> <CAFU7BASDgmSwY=SLiabSqyiTOphxU0COtFLQvT8drm0iTxM+-Q@mail.gmail.com> <76c488e0-5be7-3b81-d4c3-7af826f0dbef@si6networks.com> <CAAedzxq5d0fgOq5KZu7aCL9wxoDij6C-1Ad9+nQbYyhu2aMt-Q@mail.gmail.com> <da1c6391-5e69-f09b-dee5-83d25f1cd8cd@si6networks.com> <CAAedzxouCqcmW0rA6KwDZEO-n5yVZUYHc+GSetJ8O7=Liou4tA@mail.gmail.com>
In-Reply-To: <CAAedzxouCqcmW0rA6KwDZEO-n5yVZUYHc+GSetJ8O7=Liou4tA@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3445.102.3)
x-originating-ip: [2001:a88:d510:1101:c0d1:a0e8:70b4:49f1]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 245beef6-4c67-4ea9-4b4f-08d697e92de9
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600110)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:AM0PR07MB4292;
x-ms-traffictypediagnostic: AM0PR07MB4292:
x-microsoft-exchange-diagnostics: 1; AM0PR07MB4292; 20:0XvNaTJ6RlEWVTrBdNujUjARjLsiMICzmrsLPVy4DI/8x53GnOrD+pzXuX695ZBO2P2qfPR0FAMdE9rO1Ej/apnmLMtgK697nXtIHPaMETR1QuHTUiWBv2AbQc4O3mvtNpxZ4pc8OO6lgsuYkA3w6Uf2i7Q6giY8OhCf28Zi3PQ=
x-microsoft-antispam-prvs: <AM0PR07MB4292DC5938D36F61C984EBC5D67E0@AM0PR07MB4292.eurprd07.prod.outlook.com>
x-forefront-prvs: 09555FB1AD
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(39850400004)(136003)(346002)(376002)(199004)(189003)(2351001)(229853002)(5640700003)(186003)(99286004)(6436002)(36756003)(68736007)(5660300002)(54896002)(236005)(4326008)(105586002)(6512007)(46003)(102836004)(33656002)(53546011)(478600001)(6246003)(6506007)(53936002)(25786009)(72206003)(476003)(93886005)(14454004)(106356001)(74482002)(446003)(2616005)(11346002)(54906003)(7736002)(786003)(316002)(1730700003)(486006)(66574012)(50226002)(2906002)(86362001)(82746002)(71190400001)(6486002)(71200400001)(2501003)(83716004)(256004)(76176011)(57306001)(6916009)(6116002)(8936002)(81156014)(97736004)(81166006)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR07MB4292; H:AM0PR07MB4177.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: XnfAyuPxfPUyT+BunETczM4hDRnMGwBUIDTRojGyF/HSXqPNDWRlOYS5Srq7nCFnlsoYBfwcUwIycvIY+Ozt3i7NULWdSSCAe2EKPV6757Ny8oheTUFyq1+AXGHbJX7whfNRXGxcV4cSFoVZ2pWv4EQS07cTeJluliDixjdtEOOLHU0zt3d/XeXEVlz5sKqTy8WgOb+2p7vSgvWe18CusfYIYJBPsnuBznU4a0xqpqTp8CaNO3RRnVDflVohgpQDetHpCnAJyCOUWLTazgYJxY1I3ZQpjZHCzqVddq8vTJQCCcwI7kLyRGsP632E+62jt14vlQeT3fBSBfAs0Q8MzTFpwu8WZh19GL2HGVxm4jKjLFlJE1xcx/PNfvWtOlpFDZ8uSLGsCfHXXdoP0HVQuCp0t2r7h3/KuhH/0jlK2AM=
MIME-Version: 1.0
X-OriginatorOrg: jisc.ac.uk
X-MS-Exchange-CrossTenant-Network-Message-Id: 245beef6-4c67-4ea9-4b4f-08d697e92de9
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Feb 2019 10:41:47.1801 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 48f9394d-8a14-4d27-82a6-f35f12361205
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR07MB4292
X-MC-Unique: rK9RXcX1Pk6dA3ZC0g78lQ-2
X-Mimecast-Spam-Score: 0
Content-Type: multipart/alternative; boundary="_000_0DDB453862F8442AA12CD3C176540884jiscacuk_"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/7HbWr9QhGBjxhWqvBBCvjqjpkHw>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2019 10:42:00 -0000

On 21 Feb 2019, at 02:01, Erik Kline <ek@loon.co<mailto:ek@loon.co>> wrote:

On Wed, 20 Feb 2019 at 17:49, Fernando Gont <fgont@si6networks.com<mailto:fgont@si6networks.com>> wrote:
Hi, Eric,

On 20/2/19 22:12, Erik Kline wrote:
>
>
> On Wed, 20 Feb 2019 at 17:07, Fernando Gont <fgont@si6networks.com<mailto:fgont@si6networks.com>
> <mailto:fgont@si6networks.com<mailto:fgont@si6networks.com>>> wrote:
>
>     On 20/2/19 06:36, Jen Linkova wrote:
>     [...]
>     >> Example:
>     >>
>     >> Say you have two network interfaces: If1 and If2.
>     >> Say If1, is configured with 2001:db8:1::/64, and If2 with
>     2001:db8:2::/64
>     >>
>     >> Say the first default router is that associated with If1.
>     >>
>     >> Say prefix 2001:db8:1::/64 stops being announced, or that you stop
>     >> receiving RAs on If1, but RAs on If2 keep arriving fine.
>     >>
>     >> Based on the logic of your algorithm, one would expect that a new
>     >> connection uses 2001:db8:2::/64/If2 (since that's the "more recently
>     >> advertised information). However, Rule #5 would override that and
>     make
>     >> you employ 2001:db8:1::/64/If1, since Rule #5 prioritizes
>     addresses on
>     >> the outgoing interface.
>     >
>     > I'm even more confused now, sorry ;((
>
>     I was referring to the fact that some of the previous rules might
>     prevent the evaluation of the rule about freshness. e.g.:
>
>     * You have two network interfaces eth0 and eth1 (say each connected to a
>     different ISP)
>     * eth0 has stopped receiving RAs
>     * eth1 receives RAs as usual (hence all info associated with this
>       interface is "fresher" than than corresponding to eth0)
>     * The default router employed by eth0 has precedence (whether because it
>       had a higher preference value, because it was the first one that was
>       learned, or whatever)
>     * When you evaluate the rules in RFC6724, rule 5 will say that the
>       outgoing interface will be eth0, and thus you should pick an address
>       associated with it --- however, as noted above, the addresses on eth1
>       are fresher than those from eth1.
>
>
> Not receiving multicast RAs is not a condition you can really take any
> action on.

Agreed.

The main issue I see with incorporating an explicit rule in RFC6724
about "freshness" is that in multi-prefix scenarios, it's guaranteed
that the default SA will oscillate among the different prefixes, and
that if you only implement this workaround, you wouldn't be able to
communicate with hosts actively employing your stale prefix.

that's where rule 5.5 would help (wherever it is actually implemented; alas...)

Yeah.... we did add an explicit pointer to this in the Nodes Requirements -bis, fwiw (noting RFC 8028).

Tim