A long HBH Options question

Ron Bonica <rbonica@juniper.net> Tue, 21 August 2018 19:17 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7477A130EE5 for <ipv6@ietfa.amsl.com>; Tue, 21 Aug 2018 12:17:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.711
X-Spam-Level:
X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VD1Eq5FCxqsX for <ipv6@ietfa.amsl.com>; Tue, 21 Aug 2018 12:17:02 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 343A1130F3B for <6man@ietf.org>; Tue, 21 Aug 2018 12:17:02 -0700 (PDT)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w7LJ4Zbq016636; Tue, 21 Aug 2018 12:16:59 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=3lQgdrlMUMMPy4ljGHZwsfMFg3HPEvXl74JSkORcDPw=; b=lSRqxS9vU39DWWuRGaRuYg+/V0WDAtEQ1vTDVPTBagpBa3YA2ENawj7TRjZQbc+EXeM3 z4gqRcnJB9X8UtcdUzKdcMpoEfACdSHUlf9ukqfgC5XFZ5Z5TdMlcZiEKog//2IBKYbJ oobTwIizEqJNZDPoqxV2nlnP6x+/86dGMZSdYmI6yeharyg8XUlARVvsg8nucKHa4pdA VSm/Pg+hStMeOgJYFYXBR+i1iRZxFLihiIlXVaHz0FcRoOQueOByoJ86tWXot8xInV8g 8jsNm2COJ/gqXnNWEGcPfNWZ8AlziKr2ojVj3D8TMI16ZYNxQ5f+CqSWlqfgrnB8f+Xd 2A==
Received: from nam01-bn3-obe.outbound.protection.outlook.com (mail-bn3nam01lp0178.outbound.protection.outlook.com [216.32.180.178]) by mx0b-00273201.pphosted.com with ESMTP id 2m0ny1ge4j-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 21 Aug 2018 12:16:59 -0700
Received: from CO1PR05MB443.namprd05.prod.outlook.com (10.141.73.152) by CO1PR05MB473.namprd05.prod.outlook.com (10.141.72.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1080.11; Tue, 21 Aug 2018 19:16:55 +0000
Received: from CO1PR05MB443.namprd05.prod.outlook.com ([fe80::7de8:5a5d:b33e:cc4]) by CO1PR05MB443.namprd05.prod.outlook.com ([fe80::7de8:5a5d:b33e:cc4%13]) with mapi id 15.20.1080.010; Tue, 21 Aug 2018 19:16:55 +0000
From: Ron Bonica <rbonica@juniper.net>
To: "6man@ietf.org" <6man@ietf.org>
Subject: A long HBH Options question
Thread-Topic: A long HBH Options question
Thread-Index: AdQ5gqDEpS/wBTrGQcKnvI0Eigm2Hw==
Date: Tue, 21 Aug 2018 19:16:55 +0000
Message-ID: <CO1PR05MB443761AE84025D23B163738AE310@CO1PR05MB443.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.0.400.15
dlp-reaction: no-action
x-originating-ip: [66.129.241.10]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CO1PR05MB473; 6:NJrn97hqYasa1FsjQcVwPRgIcAa7I/IzgU/Nc1frEiquD9vSZD1DRhF2UkIyd3Q0+AkmDo4XRDwZeCzMOPjwGSz8PHxOltydP+z3Inh/8k1H1jpPgPJOlHOWrrLF6A4wJoakesx0TjUfs8x3AeSmjfBkpLKZL0WHqFmX9bORtGjw7CI8Hgy8riBiXeaFDUKhvR7zeORvUEzl9fsIG5e7cY02lk5hYMVXWdEZ+LDtlhC8fktKCmtsMFOJtCd4IhHml0YHMo5+L+03yipUWFFr+b8I5qj/c6haw6D+iDzj4BqP7yyf0HKOfv0aO3Jv+8ymVtT2VTm4uciJ96oGPs+lZPZ2Gwd7EWuhfvUWnO3MwzexduAQtNy9Gz20m4yoozkvKF5TGwqxiyJ6g7pMuvhaGucAEtYAQIJ0/f/sasHytFGE6/DP05yUEqOV4wxBoZcvFffc5476OWAnDA2SB+EKmw==; 5:MqNJ6B46XHsosD7LkFzCbl+xF43JlrSdgL8xh7HRiVg3ZNYSR3zd3MiTD0bnnbzBRBuQ7RSOiP930dM7rEUykuErAUwll6JwPBlL0KIVwrRuuz/8eaocfdkZsh/hXhzace40On5uYesms7q2eG4CyNmmsEEXUkfVrpNFdXW8b80=; 7:V96jaJdoK0jRLskSBomVHNjMnxTlUDABEFgQrWjR7iDK6eGYvnJeXJyVzdOzigURMVMyHLQL+XBXjQK07jY8sOP7AilRnnW+T0vHkyRlTnkFBFwAzNMje4r4jYnwPOIzOlWyskjqEyT/IMUP4zF+GPvdDDVRMz0OS3whR+cwhIw7bFKBnt0/qyRHdshUXGgbhyLwTN682LnjD9Mln+TVXdvUxIwCvPKRaRUYKAzm+YdjCxp4EOaME3bbm8SxEIAM
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: bb213a5b-9990-4f07-6ef9-08d6079aa8e1
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:CO1PR05MB473;
x-ms-traffictypediagnostic: CO1PR05MB473:
x-microsoft-antispam-prvs: <CO1PR05MB473F2187A2394C591E412CFAE310@CO1PR05MB473.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(10201501046)(3231311)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123558120)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699016); SRVR:CO1PR05MB473; BCL:0; PCL:0; RULEID:; SRVR:CO1PR05MB473;
x-forefront-prvs: 0771670921
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(39860400002)(396003)(136003)(376002)(51444003)(199004)(189003)(66066001)(55016002)(5640700003)(6916009)(6506007)(7696005)(486006)(476003)(316002)(9686003)(186003)(102836004)(6346003)(33656002)(26005)(6116002)(8936002)(7736002)(74316002)(2906002)(305945005)(81166006)(8676002)(3846002)(81156014)(2501003)(2900100001)(5660300001)(99286004)(256004)(86362001)(105586002)(106356001)(2351001)(478600001)(5250100002)(97736004)(68736007)(25786009)(14444005)(53936002)(14454004)(4326008)(6436002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1PR05MB473; H:CO1PR05MB443.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: 3pZTq+1EzZbpB74ik8H+q/qwCMhZz2lcT+51ABcJ6hYjd7Ae+w1Uu27EV8euQ3VbcwZ6vM0/DNov7s5H7VP97cYcot3kKgUlc+oO+qqnxGSrq+ScGPRbh2fu4o3QMFSHQXE5ZOpUGB48Gf7uAxVzTt6RTAzge2C5aOu2pHz+XH8fcFaqSQFjwZCiaz+FUPCKX5QXWMFteD37trMHqBByPzfFtFIM223yCkH/dzsJ5FAxjN3PLKyDiRvT22qnFpBXUePIiy9GOF0GrtnxzZ436rWc+X/G1yK3+HxFN7TdYhtu7L+V6mDxHMgYmyoFpa2yBYcFFHGIW96xbh+CH3wOkf5/higM6Kj2WyTk5crIUNo=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: bb213a5b-9990-4f07-6ef9-08d6079aa8e1
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Aug 2018 19:16:55.8270 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR05MB473
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-08-21_09:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=882 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808210195
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/Wf5ilCaF-7hsXpwyp5F-IX3x-fs>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Aug 2018 19:17:16 -0000

Folks,

According to RFC 8200:

  "The Option Type identifiers are internally encoded such that their
   highest-order 2 bits specify the action that must be taken if the
   processing IPv6 node does not recognize the Option Type:

      00 - skip over this option and continue processing the header.

      01 - discard the packet.

      10 - discard the packet and, regardless of whether or not the
           packet's Destination Address was a multicast address, send an
           ICMP Parameter Problem, Code 2, message to the packet's
           Source Address, pointing to the unrecognized Option Type.

      11 - discard the packet and, only if the packet's Destination
           Address was not a multicast address, send an ICMP Parameter
           Problem, Code 2, message to the packet's Source Address,
           pointing to the unrecognized Option Type."

Also according to RFC 8200:

"While [RFC2460] required that all nodes must examine and
   process the Hop-by-Hop Options header, it is now expected that nodes
   along a packet's delivery path only examine and process the
   Hop-by-Hop Options header if explicitly configured to do so."

So, let's assume that:

- A packet contains an HBH option and the high-order bits of the HBH Option type are "10".
- The packet traverses Router A and Router B on route to its destination
- Router A is not configured to process HBH options
- Router B is configured to process HBH options
- Neither Router A nor Router B recognize the HBH option contained by the above-mentioned packet.

I think that RFC 8200 requires the following behavior:

- Router A forwards the packet to Router B, without examining the HBH Options header
- Router B discards the packet, because it doesn't recognize the option.

Is this the required behavior? If so, does this behavior cause cognitive dissonance for anybody else?

I am thinking that the "act" bits are meaningless in the HBH extension header. This discussion may also be applicable to draft-herbert-ipv6-update-dest-ops.

                                                                   Ron