Re: RFC4941 text on requirement for public addresses (was: Re: default-iids and stable addresses)

Lorenzo Colitti <lorenzo@google.com> Thu, 19 May 2016 00:28 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E81612D542 for <ipv6@ietfa.amsl.com>; Wed, 18 May 2016 17:28:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.126
X-Spam-Level:
X-Spam-Status: No, score=-4.126 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.426, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CTWLlPJfFX_7 for <ipv6@ietfa.amsl.com>; Wed, 18 May 2016 17:28:29 -0700 (PDT)
Received: from mail-yw0-x22f.google.com (mail-yw0-x22f.google.com [IPv6:2607:f8b0:4002:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD0C112D17B for <6man@ietf.org>; Wed, 18 May 2016 17:28:28 -0700 (PDT)
Received: by mail-yw0-x22f.google.com with SMTP id g133so62959254ywb.2 for <6man@ietf.org>; Wed, 18 May 2016 17:28:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=thsfvS59CGsMvBIDYoqUW8Vo08CmqsqNzYc/Ks513yU=; b=pSTc4KlDHUtXJuXfbBK21+EWrvfFYlGqMsIXSTVRdW/ao8nIBt47ZnCibwWBQL8dLz GMiPRrigY580YEHnyGnC2Gee98/IMYqZPcC5MX3jYsFgst4ooDvKDgqKOdCsiGv4DwQK x1Nhr3ahZItaf5SQ4fUjQvsy2wMNCiwcJruSTB9y/w1mzKHpSI++Fet33TKNvkCXeHeU Oucw44m7IoUacv70ls8UoOu/WQYPsxnS3LieuXUa9PKwhTb0vKGnj3F46908PpPdxJxV sEuRsMKfPJtko3sTMVE9AVNEqs19/7OO6FzJdXcvdAwaFFeSMApRw9z2cw3I+rE4NgHT Qpgg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=thsfvS59CGsMvBIDYoqUW8Vo08CmqsqNzYc/Ks513yU=; b=kp47046nxQM9dXPatJL8dxJroFoOMvD5Otjshd0ki/sdx84GTdcvmM3K+mJzMNDsPo soi7WUYbBxdhx7fWBbjK8fo4FQfaGtU45WyTyPEx4/La2EViL+XfJqnZoQ5gdBuV+RdC Szv0cYOK1sQnaDT/kBNH3/3uNpng6NlfLNENif8e7TqrwWbe7Mqys06dhUbnEPHqjamf /epTIDGU9S0SnKOCpWAQU4Hl+IzKTDfg7pjv+Pa4a+VCskUV5vAX17plBojWBVIojgBX eQ6e5Ii25yYbMKtkMssrDVFNUzwW1eK1VmeMPbFhFzeLodP78QkPUw8T1i6V5+nVt43O XUBw==
X-Gm-Message-State: AOPr4FWiRQ69ZM54208o/A90IMui5rmh4x3pF06l96n7pWRIJVF3UFhBM3vW/8RwA6B426yQvFl4X8fdzOud8HKu
X-Received: by 10.13.220.69 with SMTP id f66mr6247728ywe.132.1463617707848; Wed, 18 May 2016 17:28:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.198.68 with HTTP; Wed, 18 May 2016 17:28:06 -0700 (PDT)
In-Reply-To: <DM2PR0301MB0717D5EA3FD289A7894E3AC0A3490@DM2PR0301MB0717.namprd03.prod.outlook.com>
References: <573B5FAC.7060300@gont.com.ar> <FBFC5456-E42D-4E52-BBE2-0ADC898516B0@employees.org> <CAKD1Yr2aWnRVvL6KEheWb1fKn3RPGdYewdb3QVf9w3A1V1wTUQ@mail.gmail.com> <DM2PR0301MB0717D5EA3FD289A7894E3AC0A3490@DM2PR0301MB0717.namprd03.prod.outlook.com>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Thu, 19 May 2016 09:28:06 +0900
Message-ID: <CAKD1Yr1uTHO8zm_E9Dy6tk_mjSHqSX4Z9tjZ9Osrv72gL9QVJw@mail.gmail.com>
Subject: Re: RFC4941 text on requirement for public addresses (was: Re: default-iids and stable addresses)
To: Dave Thaler <dthaler@microsoft.com>
Content-Type: multipart/alternative; boundary="94eb2c0815c89107f00533270d31"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipv6/CR3EuvPzmPE5LhHlfSF7p85BJzc>
Cc: "6man@ietf.org" <6man@ietf.org>, Fernando Gont <fernando@gont.com.ar>, "draft-ietf-6man-default-iids@tools.ietf.org" <draft-ietf-6man-default-iids@tools.ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 May 2016 00:28:31 -0000

Dave, so how are implementers to interpret this text in the presence of no
public address?

       If a received
       option will extend the lifetime of a public address, the
       lifetimes of temporary addresses should be extended, subject to
       the overall constraint that no temporary addresses should ever
       remain "valid" or "preferred" for a time longer than
       (TEMP_VALID_LIFETIME) or (TEMP_PREFERRED_LIFETIME -
       DESYNC_FACTOR), respectively.

Should the implementer conclude that the lifetimes of the temporary
addresses should also be extended, even though the text does not require
it? If so, what of the TEMP_VALID_LIFETIME and TEMP_PREFERRED_LIFETIME -
DESYNC_FACTOR constraints? The text does not require those constraints to
be observed if there is no public address.

On Thu, May 19, 2016 at 1:45 AM, Dave Thaler <dthaler@microsoft.com> wrote:

> I agree with Ole that RFC 4941 does not require public addresses.
>
> For example, neither of the two snippets quoted by Lorenzo requires public
> addresses.
>
> They just state what the behavior is IF you have public addresses.
>
>
>
> *From:* Lorenzo Colitti [mailto:lorenzo@google.com]
> *Sent:* Wednesday, May 18, 2016 9:42 AM
> *To:* Ole Troan <otroan@employees.org>
> *Cc:* 6man@ietf.org; Fernando Gont <fernando@gont.com.ar>;
> draft-ietf-6man-default-iids@tools.ietf.org
> *Subject:* Re: RFC4941 text on requirement for public addresses (was: Re:
> default-iids and stable addresses)
>
>
>
> As written, RFC 4941 seems to require public addresses. For example:
>
>
>
>        If a received
>
>        option will extend the lifetime of a public address, the
>
>        lifetimes of temporary addresses should be extended
>
> ...
>
>    3.  When a new public address is created as described in [ADDRCONF],
>
>        the node SHOULD also create a new temporary address.
>
> ...
>
>        *  Its Preferred Lifetime is the lower of the Preferred Lifetime
>
>           of the public address or TEMP_PREFERRED_LIFETIME -
>
>           DESYNC_FACTOR.
>
>
>
> On Wed, May 18, 2016 at 8:13 PM, <otroan@employees.org> wrote:
>
> This email from Fernando provides a good introduction to an outstanding
> question from Buenos Aires.
>
> The current plan is to take RFC4941 to Internet Standard unchanged.
> A question was raised if 4941 requires public addresses or not, and if we
> have to update 4941 text, or if we can live with the current text, and
> still allow for interfaces with only temporary addresses.
>
> Opinions?
>
> Best regards,
> Ole
>
> > On 17 May 2016, at 20:15, Fernando Gont <fernando@gont.com.ar> wrote:
> >
> > Lorenzo (and wg),
> >
> > The two issues raised by Lorenzo regarding default-iids boil down to:
> >
> > 1) The ability to embed MAC addresses in the IID
> >
> > 2) The requirement to have stable addresses
> >
> >
> > This document does ban "1)" as the default algorithm for generating
> > IIDs, for the reasons discussed in RFC7721 and
> > draft-gont-predictable-numeric-ids. We have a very long history of
> > improper numeric IDs, and I guess that, regarding this one, we simply
> > disagree with Lorenzo.
> >
> >
> > Regarding "2)", this document does not specify any new requirements on
> > the topic. Essentially, nodes are implied to configure a stable
> > addresses as a result of SLAAC&traditional link-layer address
> > properties, and more explicitly by this text in RFC4941:
> >
> > * Section 3, bullet #1:
> >   2.  Create additional addresses based on a random interface
> >       identifier for the purpose of initiating outgoing sessions.
> >
> > * Section 3.3, bullet #1:
> >   1.  Process the Prefix Information Option as defined in [ADDRCONF],
> >       either creating a new public address or adjusting the lifetimes
> >       of existing addresses, both public and temporary.
> >
> > * Section 3.3, bullet #3:
> >   3.  When a new public address is created as described in [ADDRCONF],
> >       the node SHOULD also create a new temporary address.
> >
> > * Section 3.6, for instance, says (even recommending that temp addrs
> > default to "off"):
> >   The use of temporary addresses may cause unexpected difficulties with
> >   some applications.  As described below, some servers refuse to accept
> >   communications from clients for which they cannot map the IP address
> >   into a DNS name.  In addition, some applications may not behave
> >   robustly if temporary addresses are used and an address expires
> >   before the application has terminated, or if it opens multiple
> >   sessions, but expects them to all use the same addresses.
> >   Consequently, the use of temporary addresses SHOULD be disabled by
> >   default in order to minimize potential disruptions.
> >
> >
> >
> > Our document simply requires implementations that their
> > stable addresses are RFC7721-friendly. But if anything, the requirement
> > of whether to have a stable address or not is not something introduced
> > by our document.
> >
> > As a co-author of draft-ietf-6man-default-iids, I just wanted to check
> > that we're on the same page, because I have the feeling that the above
> > keeps getting misinterpreted.
> >
> > I believe all of the co-authors of default-iids agree and understand
> > that there can be scenarios where you may want to do
> > temporary-addresses-only. However, that is orthogonal to this particular
> > document (default-iids), and would probably require an update to
> > RFC4941, such that temporary addresses can be employed as a replacement
> > of stable addresses, rather than as something that you do "in addition
> > to" them.
> >
> > This document is about how to do stable addresses in a more
> > RFC7721-friendly way than we currently do.
> >
> > Thanks!
> >
> > Best regards,
> > --
> > Fernando Gont
> > e-mail: fernando@gont.com.ar || fgont@si6networks.com
> > PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
> >
> >
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> > --------------------------------------------------------------------
>
>
>