Re: <draft-ietf-6man-rfc4291bis-09.txt>

Mark Smith <markzzzsmith@gmail.com> Fri, 07 July 2017 00:10 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B496A12F28A for <ipv6@ietfa.amsl.com>; Thu, 6 Jul 2017 17:10:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.198
X-Spam-Level:
X-Spam-Status: No, score=-2.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pCkH5HVYTAPQ for <ipv6@ietfa.amsl.com>; Thu, 6 Jul 2017 17:10:18 -0700 (PDT)
Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com [IPv6:2607:f8b0:400c:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D70F112EC4A for <ipv6@ietf.org>; Thu, 6 Jul 2017 17:10:17 -0700 (PDT)
Received: by mail-vk0-x232.google.com with SMTP id r125so9469706vkf.1 for <ipv6@ietf.org>; Thu, 06 Jul 2017 17:10:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=obv+EZ6//c4YBwoMfyLpFQGieoXmrhtlQhO7O2rQHbI=; b=k68NAd2uKTYQ0ro3hgzRkh88neqLmvvuPaIW0A8K3mFiyqN6/pgIUSN8ttiuxvlUrg sNPIwWYFU6ZJQJuSC0vIxzPIv16huau+838S+WdJBYBT/ecS2UvasswKC86Beg9WHxvB kbHrsGjZ7BknebmU3KDBYRVbL8bKkA/rkhvgEacZgx/tTtqRjNFFGHYs+WlXPp8DoC0n WoN9n7puIX1tets2mclpL+PomaYRvdirn8RvTggWbJ1DHwTgdQ6pzU5hdbwRJKForGvk h93fFoGnqXAEDswmf72Lu0Kv/c/zcnz+Ju3Upg/0oAHmwA+AjuGaHeXGys/Cey6hsrtO QaGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=obv+EZ6//c4YBwoMfyLpFQGieoXmrhtlQhO7O2rQHbI=; b=n6NocLo6pW9F0NAssTdYpGZuc+eupaxNvREoq3csan+qs1rJK/9URAMIZhBYesP9es 1fBcxXXElSmyKxByAD8EpBw9/m350hFBIZDlZ8RXGxtQDDxKoD6EpEPNNy08rOBJyOs5 Ga3iataTXpGi3dgM0xFdEmwwtbQ6ku7KIGZ47U0x75F7KLymfc/XR/fdGCH8nep83vjY gjcbA7IfBqy9RdzZmavdmxCatYx+CeZKnFEqLOpNnK1jad/XAX3l5KqAzW3ulmzwqAMN 8L5RQGKmXinNavJyUmkoNKRzZdm4Pu00712S9vRK9imAn5Wbid52HiuZwvQnvamxS+CL 8mwg==
X-Gm-Message-State: AKS2vOxcZJW9d/Maqk81HwXGg+Kiix9uKeCc7LqC4CtogRbScRIFQnR6 nHkttwDJw/D25U5wkQXUj/GBdbDOfA==
X-Received: by 10.31.180.80 with SMTP id d77mr28520895vkf.110.1499386216906; Thu, 06 Jul 2017 17:10:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.176.81.100 with HTTP; Thu, 6 Jul 2017 17:09:46 -0700 (PDT)
In-Reply-To: <CAN-Dau39LbQ4Lpx-ULxUuSmeL+zgQsRU5861SUvr6vesB5-uUw@mail.gmail.com>
References: <20150804195752.5065.13523.idtracker@ietfa.amsl.com> <5AB14F48-2799-4A86-830D-E8A89CCADAAC@gmail.com> <CAN-Dau0O6hrxmWiWa7yPNDkq7Dz_m1y8wA7bYx_1wYuTpM0ruw@mail.gmail.com> <D691C19D-F3D8-4487-8641-DBA7A8DF8A3E@gmail.com> <CAN-Dau39LbQ4Lpx-ULxUuSmeL+zgQsRU5861SUvr6vesB5-uUw@mail.gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Fri, 07 Jul 2017 10:09:46 +1000
Message-ID: <CAO42Z2xOsa2jb5UqXGoO=tLegfi8Mo0s54S8sfaOKu53gvuamw@mail.gmail.com>
Subject: Re: <draft-ietf-6man-rfc4291bis-09.txt>
To: David Farmer <farmer@umn.edu>
Cc: Bob Hinden <bob.hinden@gmail.com>, IPv6 List <ipv6@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/BjOwrRJTf9hJwNLdZJlK0lcZDEk>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Jul 2017 00:10:20 -0000

On 6 July 2017 at 16:40, David Farmer <farmer@umn.edu> wrote:
>
>
> On Wed, Jul 5, 2017 at 3:34 PM, Bob Hinden <bob.hinden@gmail.com> wrote:
>>
>> Hi David,
>>
>> > On Jul 3, 2017, at 1:22 PM, David Farmer <farmer@umn.edu> wrote:
>>
>> > However, I still think the following paragraph is still too easily
>> > misunderstood to imply subnets must be /64 or 64 bits for both address
>> > generation and on-link determination.
>> >
>> >    Interface Identifiers are 64 bit long except if the first three bits
>> >    of the address are 000, or when the addresses are manually
>> >    configured, or by exceptions defined in standards track documents.
>> >    The rationale for using 64 bit Interface Identifiers can be found in
>> >
>> >    [RFC7421].  An example of a standards track exception is [RFC6164]
>> >    that standardises 127 bit prefixes on inter-router point-to-point
>> >    links.
>> >
>> >
>> > How about a note clarifying the intent of the this paragraph, something
>> > like this;
>> >
>> >       Note: While the previous paragraph does imply 64 bit subnet
>> > prefixes
>> >       are typically assigned to most links. It does not imply anything
>> >       about what portion, if any, of a subnet is considered to be
>> > on-link,
>> >       see Section 2.1 for more discussion. However, Router
>> > Advertisements
>> >       [RFC4861] specifying 64 bit on-link prefixes are typically
>> >       configured on most links.
>>
>> Now that the text you refer to is in Section 2.4.1. "Interface
>> Identifiers”, it is about Interface Identifiers, very little is said about
>> prefixes (except that IIDs are required to be unique on a prefix, but even
>> that is about IIDs).  I don’t think it is implying anything one way or about
>> on-link properties.  I think that is covered pretty well in the new
>> paragraph in Section 2.1 "Addressing Model” that includes the link to
>> RFC5942.
>
>
> As long as the others that who were insisting that the statement "IIDs MUST
> be 64" means that subnets must be 64 bits for both address generation and
> on-link determination are satisfied that this is not the case for on-link
> determination based on what has been added to section 2.1, then I could live
> without this.

I'm confused by this and have been on the occasions it has been
discussed. I also don't understand why it matters and is related to
the on-link property of a subnet prefix.

"2.4. Unicast Addresses" says that IIDs are 128 bits minus the size of
the subnet prefix.

If the subnet prefix is a /64, then the IID is 64 bits; for a /127,
the IID is 1 bit in size. Of course, conversely, a 64 bit IID results
in a 64 bit subnet prefix.

If you're describing some other property of the bits that are not part
of the subnet prefix, and that part isn't 128-subnet prefix size i.e.
the IID, then IID is not the accurate term for it and it needs to be
explained at least here if not in the RFC and given another name.

>
> However, I like the idea of having some kind of recommendation for the
> on-link prefix.  I don't think there is guidance anywhere else as to what
> the on-link prefix should normally be, at least explicitly, and the
> addressing architecture seems like as good of a place as any to recommend
> something in this regard.
>

I'm not sure what an "on-link prefix" is in the sense of the above paragraph.

A subnet-prefix is assigned to a link, which is a statement of where
that the set of addresses (or IIDs) that fall within the subnet-prefix
are present within the network topology. It is a statement to the
forwarding domain as to the network location of a set or range of
addresses.

On-link or not for a subnet-prefix is a statement to the hosts
attached to a link whether they are to try to directly reach other
addresses within the subnet-prefix across the link, or whether they're
to use their default router to reach them. A host doesn't have to have
an address from within the subnet-prefix for it to consider
destinations within the subnet-prefix reachable directly across the
link.

e.g.

Host address: 2001:db8::1234

RA PIOs host receives : 2001:db8::/64 [on-link], 2001:db8:abcd::/64 [on-link]

With those RA PIOs, the host will attempt to directly send across the
link to destinations 2001:db8::5678 and 2001:db8:abcd::fffe, and will
do so for all addresses within the 2001:db8::/64 and
2001:db8:abcd::/64 subnet-prefixes.


If the host instead had just received

RA PIOs host receives : 2001:db8:abcd::/64 [on-link]

Then it would only try to directly send across the link to
destinations that fall within 2001:db8:abcd::/64. It would not try to
directly send to destinations inside 2001:db8::/64, even though its
2001:db8::1234 address is within that same /64, as, per RFC5942, all
destinations are by default off-link except for Link-Local
destinations.


So to me an "on-link prefix" is a subnet-prefix that hosts will
attempt to send directly to across the link they're attached to,
indicated to the host by RA PIOs, ICMP redirects or manual
configuration on the host (per RFC5942). What you and others are
describing as an "on-link prefix" sounds like something different to
that.


> Instead of directly recommending 64 bits, maybe in section 2.1 recommend
> that in most cases on-link prefixes are configured the same as the subnet
> prefixes they are associated with.  Combined this with 64 bit IIDs and
> therefore 64 bit subnet prefixes, you get a recommendation for 64 bit
> on-link prefixes in most cases.
>
> While IIDs were the primary controversy, there were several other points
> raised during the Last Call discussion, is there a plan to revisit any of
> these as well?