RE: A long HBH Options question

Ron Bonica <rbonica@juniper.net> Wed, 22 August 2018 16:43 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DA73130ECB for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 09:43:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.711
X-Spam-Level:
X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tJzu70uIn-o1 for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 09:43:23 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CA47130EAA for <ipv6@ietf.org>; Wed, 22 Aug 2018 09:43:23 -0700 (PDT)
Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w7MGcwYl029421; Wed, 22 Aug 2018 09:43:22 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=ptwlDmjNxIu/cHnPuIFTY3G1TDTPNO4TmTBEm+rh39o=; b=RmtgansJlg83vF8DX1LgyrwB3CtNGVI8MgIgVP7xc32dREI45Rs4gfDURDwaesseEa4t vc7ZGRL7UCwno1ijs6Z/+I0jRTQtZ/QdYcJwYecMZduqCqMXocI9snlmRMeHglN+iDFt C5oLYlyiCO+sHYAK+B9qherAnRfTgg9X6ptUi03xr7QkJCi2Rr9xdEfVD8S6ORLZ6dXp XBa6AF5nqyfoPeaTrMnXO2aFuev8A/12/vbL+/Egh+NKjcx7AUuRW5bnoov67hQR0SD9 O4QnlKHyCaUQTvIDjAfGUhVC/xGGkDSQNNZHSZ07PvG9ZVp6PtIcZl1CSztreRZXNENG eA==
Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp0114.outbound.protection.outlook.com [216.32.181.114]) by mx0a-00273201.pphosted.com with ESMTP id 2m0wp3994g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 22 Aug 2018 09:43:21 -0700
Received: from CO1PR05MB443.namprd05.prod.outlook.com (10.141.73.152) by CO1PR05MB490.namprd05.prod.outlook.com (10.141.71.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1080.10; Wed, 22 Aug 2018 16:43:19 +0000
Received: from CO1PR05MB443.namprd05.prod.outlook.com ([fe80::7de8:5a5d:b33e:cc4]) by CO1PR05MB443.namprd05.prod.outlook.com ([fe80::7de8:5a5d:b33e:cc4%13]) with mapi id 15.20.1080.010; Wed, 22 Aug 2018 16:43:19 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Tom Herbert <tom@herbertland.com>, "C. M. Heard" <heard@pobox.com>
CC: 6man <ipv6@ietf.org>
Subject: RE: A long HBH Options question
Thread-Topic: A long HBH Options question
Thread-Index: AQHUObCrEtKF8KL2QES9yAPkm4SM4KTL1VyAgAAgn4A=
Date: Wed, 22 Aug 2018 16:43:19 +0000
Message-ID: <CO1PR05MB4436DFC162726D11A0DE530AE300@CO1PR05MB443.namprd05.prod.outlook.com>
References: <CACL_3VFn9x2o1OW5wk0nt3n71K0XpQ2Kv1X+2CJnpPA6QdMVgA@mail.gmail.com> <CALx6S36QbcQc-ZspeH66Z=yVfKLrWyuhTLzB8ui7HBtfcg++4g@mail.gmail.com>
In-Reply-To: <CALx6S36QbcQc-ZspeH66Z=yVfKLrWyuhTLzB8ui7HBtfcg++4g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.0.400.15
dlp-reaction: no-action
x-originating-ip: [66.129.241.14]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CO1PR05MB490; 6:+zPNsqTBR3Rxh+33GMPpbRe7Jz1p4IDdfLgPT9saZ4K8A0q9LLY+pqG7nD5UG/0S+p1jMyEb45ilVpYxxBCHGnaUtC8uyLjsvgjzVqs9VHi+o9FZurxXLHXjjV+4Gz8jhZgyvvZHMXdniXDWOh9xp/C32JVue74F5K4HfAaP8sO5y7jVBanZ2z6jJkPQaFf3geBufnjuRPZr0alf3hOsyMXE4ojL3orXceFKk9WfNssV2sXVydOm2t1vQ5t+opb1RXRVmyTtwN7spqau13OymxS66LZgukKRHKLYMGWsBLcm+95xCURYgbAlPIJd0l8MLkMbdZ7RG5MXB4Nb7xCXI/zRLISiUoY/hX2ljDsdY+IlazQ/dSVwiMiASFyVVLQQtPtldeuZjwUehsYVmn04/dH7kwx42LJOqmtxX7So7hkwiFgW0oZ9XBE0lSnplrNIj5lkyznxfhLipM6APPiAnw==; 5:QV0h4D8mgmDsmVqMWJ1wiZd5I5Lv5S0p4k6Q+dSCKvtqBrwUC5z7MbWkh/urud2Y86eLGom6TbtQf+khPoEmXE8CGGx+lVY5nqjPP+zzNYveVZYoP4Zb2H5Crod2a2PIXHxcz4R+9sG/1Jl5Hk7ee8VAsdRuTZ9qJZG8Nn2aAC0=; 7:Kg7sCaPaxEANilUQd9GDQDXS3Aw1VBwufwHPjXs6PDfAMLZdEJ6N4hGN3i9DkhhnrFfoifitpsKNeauejuJM2cR4Z3C6zihgek5v1xlOdiF+IyCmPiFF6XS7HoMQIP9ATXP4TdXHQdgEWzu8RiKJhzx523QhTBEAPxv5mhj2CEfQ3B00pxrNT1oZTjrlejsCbgl9XFzqN8BXecgb1E5k0rjHsGfRDzRth1k3k1trTldrC0EFtPUHppLaBzyFpRoX
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 6cedcbe2-fd3c-4257-75a7-08d6084e5dc1
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:CO1PR05MB490;
x-ms-traffictypediagnostic: CO1PR05MB490:
x-microsoft-antispam-prvs: <CO1PR05MB490E738FD28B1D2359BBE19AE300@CO1PR05MB490.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(10436049006162)(138986009662008)(100324003535756);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231311)(944501410)(52105095)(10201501046)(3002001)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123558120)(20161123560045)(201708071742011)(7699016); SRVR:CO1PR05MB490; BCL:0; PCL:0; RULEID:; SRVR:CO1PR05MB490;
x-forefront-prvs: 0772E5DAD5
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(346002)(39860400002)(396003)(366004)(51444003)(199004)(189003)(13464003)(478600001)(14454004)(45954006)(966005)(9686003)(6306002)(105586002)(11346002)(256004)(446003)(2906002)(14444005)(25786009)(5250100002)(4326008)(2900100001)(53936002)(55016002)(3846002)(6116002)(186003)(26005)(106356001)(8676002)(74316002)(305945005)(7736002)(6436002)(33656002)(7696005)(102836004)(53546011)(66066001)(76176011)(6506007)(99286004)(97736004)(476003)(8936002)(81166006)(81156014)(229853002)(6246003)(5660300001)(68736007)(86362001)(486006)(19627235002)(110136005)(316002)(575784001)(350894002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB490; H:CO1PR05MB443.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: /xZaWb6x0Z8ppNaW3bAvax6Co2WFDxWe3qzqYbo9yXqyxFprgeOt/FizTRGyjja5aBjq21Dcz2vmSCDPrL5O828eRYFsmF91zwXI8QWEm1IaicqusGjm+t7DKEJ2l9j4nmq8tWQtAJRoLio01PAyOe6QprDsARnUo7XSPNFpyP77Hp9wWlM9GZZfERb3Cm0d1YTd8v23iTD0FnA9sH+vi9A+P2o1B5HK1NGNxBzgHypJlzyq2LZwTwPF+S58sai4iH0fAgUuMGFiKApYKcV4mCrVuIZnUneAEAlVz9B0pG311qH98CT0xfHYiu60MLWgJozAroLtdQY4ZfnW58SewkGymncvqD+2Bs73biUeOnQ=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 6cedcbe2-fd3c-4257-75a7-08d6084e5dc1
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Aug 2018 16:43:19.1684 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB490
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-22_08:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808220167
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/wSpAftE7iwOVwyvI7VaceLyNbr0>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Aug 2018 16:43:39 -0000

Hi Tom,

Judging by the feedback, those experiencing cognitive dissonance constitute a small minority. Maybe our concerns are better addressed with medication than clarifications ;-)

However, if you want to reduce the number of pills that I take every day, you might add the following clarifications to your document:

- What do the "act" bits mean when they appear in an HBH option?
- What does the "chg" bit mean when it appears in an option where Opt Data Len is equal to 0.
- What does the "chg" bit mean when it appears in a Destination Options header precedes the Routing Options header.
- What does the "chg" bit mean when it appears in a Destination Options header follows the Routing Options header (or the packet does not contain a routing header).

                                                                              Ron


> -----Original Message-----
> From: Tom Herbert <tom@herbertland.com>
> Sent: Wednesday, August 22, 2018 10:28 AM
> To: C. M. Heard <heard@pobox.com>
> Cc: Ron Bonica <rbonica@juniper.net>; 6man <ipv6@ietf.org>
> Subject: Re: A long HBH Options question
> 
> On Tue, Aug 21, 2018 at 5:39 PM, C. M. Heard <heard@pobox.com> wrote:
> > On Tue, 21 Aug 2018 19:16:55 +0000, Ron Bonica wrote:
> >> [ … ] let's assume that:
> >>
> >> - A packet contains an HBH option and the high-order bits of the HBH
> >>   Option type are "10" [could also be "01" or "11']
> >>
> >> - The packet traverses Router A and Router B on route to its
> >>   destination
> >>
> >> - Router A is not configured to process HBH options
> >>
> >> - Router B is configured to process HBH options
> >>
> >> - Neither Router A nor Router B recognize the HBH option contained by
> >>   the above-mentioned packet.
> >>
> >> I think that RFC 8200 requires the following behavior:
> >>
> >> - Router A forwards the packet to Router B, without examining the HBH
> >>   Options header
> >>
> >> - Router B discards the packet, because it doesn't recognize the
> >>   option.
> >>
> >> Is this the required behavior?
> >
> > Yes.
> >
> >> If so, does this behavior cause cognitive dissonance for anybody else?
> >
> > It sure does.
> >
> >> I am thinking that the "act" bits are meaningless in the HBH
> >> extension header. This discussion may also be applicable to
> >> draft-herbert-ipv6-update-dest-ops.
> >
> > The "act" bits are not exactly meaningless, but only the encoding "00"
> > will elicit consistent behavior from nodes that  comply with RFC 8200
> > and don't recognize the option. To me, it would seem quite odd if the
> > designer of any new HbH option were to choose an encoding with "act"
> > bits other than "00". For already allocated options, any encoding
> > other than "00" will not have the results expected by those who
> > designed the options assuming that the rules in RFC 2460 would be
> > followed. Thus, that the maintainers of existing HbH options with the
> > "act" bits other than "00" should probably re-examine the option
> > encoding in light of the change wrought by RFC 8200. Here is the list:
> >
> > 0x63  RPL (RFC 6553, PS)
> > 0x6D  MPL (RFC 7731, PS)
> > 0xC2  Jumbo Payload (RFC 2675, PS)
> > 0xEE  IP_DFF (RFC 6971, Experimental)
> >
> > The ROLL WG has in fact taken this step with the RPL option, though
> > for reasons independent of the change made in RFC 8200. The thinking
> > behind the original design in RFC 6553 was that it was undesirable for
> > the RPL option to escape from the RPL domain in which it was
> > originated, so "act" was set to "01" to force nodes external to the
> > domain to silently discard escaped packets. That thinking has been
> > revised, and there is a document in last call that will deprecate the
> > existing code point and get a new one (probably 0x23) with "act" set to
> "00".
> >
> > A re-examination of already allocated destination options would be
> > called for if the change proposed in
> > draft-herbert-ipv6-update-dest-ops
> > were to be implemented. Here is that list:
> >
> > 0xC9  Home Address (RFC 6275, PS)
> > 0x8A  Endpoint Identification (DEPRECATED) 0x8B  ILNP Nonce (RFC 6744,
> > Experimental) 0x8C  Line-Identification (RFC 6788, PS)
> >
> Mike,
> 
> Thanks for looking into this.
> 
> Neither RFC6744 nor RFC6788 explicitly prohibit putting the option in front of
> a routing header, but I don't think doing that would make much sense in either
> case. In case of ILNP nonce, the option is used to communicate to a peer node
> information about the reverse path so it's really intended for the transport
> destination endpoint.
> Line-Identification is only used in conjunction with a ND packet being tunneled
> in the payload so only the ultimate destination should do anything with the
> option. It would be a good idea if specifications for new Destination Options
> explicitly said whether or not they can appear before a Routing header.
> 
> Tom
> 
> > The Home Address option would actually not be affected by the proposed
> > change in draft-herbert-ipv6-update-dest-ops since it isn't allowed to
> > appear appear before a Routing Header. I have not examined the others,
> > however.
> >
> > Mike Heard
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests:
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mail
> > man_listinfo_ipv6&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-
> ndb3voDTXcWzo
> > CI&r=Fch9FQ82sir-BoLx84hKuKwl-
> AWF2EfpHcAwrDThKP8&m=kq67Q11JdAIfRhVwF5c
> > N-DpFwRB9d3ip8DQlPOmzaII&s=UJLxrCn-N92TYQRkRq9QD_0-
> Du3MfKXlx3a1n1bVe7U
> > &e=
> > --------------------------------------------------------------------