Re: Question on anycast IID range(s)

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 02 January 2019 21:52 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB97A12D4E9 for <ipv6@ietfa.amsl.com>; Wed, 2 Jan 2019 13:52:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I9yksolgSca3 for <ipv6@ietfa.amsl.com>; Wed, 2 Jan 2019 13:52:22 -0800 (PST)
Received: from mail-pg1-x52e.google.com (mail-pg1-x52e.google.com [IPv6:2607:f8b0:4864:20::52e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00F4F1274D0 for <ipv6@ietf.org>; Wed, 2 Jan 2019 13:52:21 -0800 (PST)
Received: by mail-pg1-x52e.google.com with SMTP id g189so15109969pgc.5 for <ipv6@ietf.org>; Wed, 02 Jan 2019 13:52:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=02qN7ezL1PQ+VmJ1ElM5p9teuyrquuTJ4PTlAO0yBJ4=; b=ZEi4aCw4Wzp8pBdx1ez/S2lEOs+zeSyBauvSNvfADf77TzQ+8awHyWOfhWEvawA2ss K9HpExUUtvsz3F+gI5v7CFXx7FN32VBWvgjcXj1vFH8YdWHKtni/iDXFOKukxMAFbP1i wyemOCYSdUpwEequ146u43QFhFKJz5by6QImQr0hIFsPd0mh+b6fhmuMQTV8GGUI5SRq SSHuYBzARSyOJu4KW/f+roKT7i+kvefRdLRiuWNp4QIEY608nGTFi2G31e86fqdQdzET 7kWyqcHR0WlrtY/A2RqP1t+Kp6kuVtR7/TEvzbjGNWc6PLnDYfUaLo95asNuB3cEZsUo XAyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=02qN7ezL1PQ+VmJ1ElM5p9teuyrquuTJ4PTlAO0yBJ4=; b=NjVxh1JzleWy0rv/Fooqxl1wUQniFp1pPWBHwnZ2AcHkVlko28/J/+tqoux9INGdIK Gpr57SXTIQampEpRnY8x4Q5QbblEYNwvGYUiNN+CaQlM5ebzdjWX99LDvVcsBYeK8M56 gWz9AbUVx74WBB1XCVslq+AixBbW7+KtM7XaYalA3kYrHHjKCMwo8GPCxaPudx4hVv3u iXIeJPMNxvTSkEAJTv6qcimczRhj79Yv4AIvQY4o5/2AXW88xvcFaiHr+gClzytwcWja T/3Qb6AoiiE1gtivkHEpDYyb4+YAGC3q8rgVCTiGq/oGo0OMTAzzC/b7EgziShY1qGI+ rOEA==
X-Gm-Message-State: AJcUukeXCoY8RLglkGcv86SXOTWygCkvl/lSg6LUfywSpjjNaX2CApfz hy/ZjfYNZaCRI6EA3ZO7SnHGR4Pkz4c=
X-Google-Smtp-Source: ALg8bN6ECTZbqJHWMdd18EsYZhWfjsqcqze4+FvTYRtLwFXIO9TVuUiORQVNnOLXNd2Udz0rXvDkbg==
X-Received: by 2002:a63:c503:: with SMTP id f3mr14502484pgd.431.1546465940917; Wed, 02 Jan 2019 13:52:20 -0800 (PST)
Received: from [130.216.38.134] (sc-cs-567-laptop.uoa.auckland.ac.nz. [130.216.38.134]) by smtp.gmail.com with ESMTPSA id g185sm72790860pfc.174.2019.01.02.13.52.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 02 Jan 2019 13:52:20 -0800 (PST)
Subject: Re: Question on anycast IID range(s)
To: Kerry Lynn <kerlyn@ieee.org>
Cc: ek@loon.co, 6man 6man <ipv6@ietf.org>
References: <CABOxzu1O6qd_23xLgpAsx6BiZ09SCNUAgFurOL2UX4HQTvYFCA@mail.gmail.com> <CAAedzxq=AHCD6MSksz4P4ZGVxamStF3x2+xTasJH+oOxFY5H9Q@mail.gmail.com> <CABOxzu3iV7ymCTGESQ20yDtqTBdggo_5yVZquY6vcG+XfEsDQA@mail.gmail.com> <827c7f24-0161-960b-18f6-c451ac471f79@gmail.com> <CABOxzu3fUGjoy29-7=zU2Lky+1oKHQFDSnDcu346xkE8joQ_DQ@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <92a6d888-ead1-9b40-1b1c-d9584957214c@gmail.com>
Date: Thu, 03 Jan 2019 10:52:13 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.3
MIME-Version: 1.0
In-Reply-To: <CABOxzu3fUGjoy29-7=zU2Lky+1oKHQFDSnDcu346xkE8joQ_DQ@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/CpJylB4RezMtirhJCwjzi4ORnYw>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Jan 2019 21:52:25 -0000

On 2019-01-03 09:37, Kerry Lynn wrote:
> On Wed, Jan 2, 2019 at 2:57 PM Brian E Carpenter <
> brian.e.carpenter@gmail.com> wrote:
> 
>> On 2019-01-03 07:15, Kerry Lynn wrote:
>>> Thanks Erik,
>>>
>>> My question was ill-posed *and* contained a typo.  I'm really trying to
>>> figure out
>>> which range(s) of IIDs RFC 2526 is trying to reserve for anycast use.  I
>>> now think
>>> the answer is fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff based on RFC 5453
>> and
>>>
>> https://www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xhtml
>>
>> If I take RFC2526 literally, ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff
>> is also reserved, for IIDs not in modified EUI-64 format.
>>
> That's the problem with RFC2526; at the time it was written there was a
> class of
> IPv6 address that required IIDs to be 64-bits AND in EUI-64 format.  Given
> that the
> latter requirement no longer seems to hold, it would seem the basis for the
> range
> fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff no longer exists.  Yet, this range
> is now enshrined in
> RFC5453 and
> https://www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xhtml
> 
> But RFC7217 doesn't mention RFC2526, which might be a bug.
>>
> RFC7217 (and any other proposal for IID generation) should take RFC5453 and
> its associated registry into consideration.

It does. But the gap is that RFC5453 doesn't call out
ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff


> 
>> BTW, RFC2526 is unmotivated. Why do we *need* a convention for
>> anycast IIDs?
>>
> I think RFC2526 anticipated core protocols that would make use of
> anycast.  In
> the event, there are currently two protocols defined:
> https://www.iana.org/assignments/ipv6-anycast-addresses/ipv6-anycast-addresses.xhtml
> 
> RFC5453 clarifies the motivation somewhat; to de-conflict the addresses
> used for
> core anycast services from normal unicast addresses (thereby avoiding
> potential
> denial of anycast services).  Given that any IID can be used for an anycast
> address,
> I'm not sure this is a strong argument.
> 
> Should any action be taken?  For example, should the range
> ffff:ffff:ffff:ff80-
> ffff:ffff:ffff:ffff be added to RFC5453's registry?

Yes. I've posted an erratum to 5453. At the time, ffff:etc might
have seemed like a corner case, but 2526 did actually cover it.

   Brian

> 
> Kerry
> 
>    Brian
>>
>>
>>> ..
>>>
>>> Regards, Kerry
>>>
>>>
>>> On Wed, Jan 2, 2019 at 12:57 PM Erik Kline <ek@loon.co> wrote:
>>>
>>>> I think practically speaking the only to tell if an address on another
>>>> node is anycast or not is by the observable difference in the NA:
>>>>
>>>>     https://tools.ietf.org/html/rfc4861#section-7.2.7
>>>>
>>>> """
>>>>    From the perspective of Neighbor Discovery, anycast addresses are
>>>>    treated just like unicast addresses in most cases.  Because an
>>>>    anycast address is syntactically the same as a unicast address, nodes
>>>>    performing address resolution or Neighbor Unreachability Detection on
>>>>    an anycast address treat it as if it were a unicast address.  No
>>>>    special processing takes place.
>>>>
>>>>    Nodes that have an anycast address assigned to an interface treat
>>>>    them exactly the same as if they were unicast addresses with two
>>>>    exceptions.  First, Neighbor Advertisements sent in response to a
>>>>    Neighbor Solicitation SHOULD be delayed by a random time between 0
>>>>    and MAX_ANYCAST_DELAY_TIME to reduce the probability of network
>>>>    congestion.  Second, the Override flag in Neighbor Advertisements
>>>>    SHOULD be set to 0, so that when multiple advertisements are
>>>>    received, the first received advertisement is used rather than the
>>>>    most recently received advertisement.
>>>> """
>>>>
>>>>
>>>> On Wed, 2 Jan 2019 at 08:51, Kerry Lynn <kerlyn@ieee.org> wrote:
>>>>
>>>>> For practical purposes, particularly in light of RFC 7136, should one
>>>>> consider an anycast address to be any that ends in dfff:ffff:ffff:ff80-
>>>>> dfff:ffff:ffff:ffff OR ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff?
>>>>>
>>>>> The phrase in RFC 2526 that's causing confusion for me is
>>>>> "Specifically, for IPv6 address types required to have to have
>>>>> [sic] 64-bit interface identifiers in EUI-64 format ..."  To my
>>>>> knowledge, there are address types that require a 64-bit IID,
>>>>> but it seems we've been systematically trying to deprecate
>>>>> *EUI-64 format* IIDs.  In any case, there's nothing to prevent a
>>>>> mix of EUI-64 or *other* format IIDs in the same subnet as far
>>>>> as I'm aware.
>>>>>
>>>>> Thanks, Kerry
>>>>>
>>>>> --------------------------------------------------------------------
>>>>> IETF IPv6 working group mailing list
>>>>> ipv6@ietf.org
>>>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>>>>> --------------------------------------------------------------------
>>>>>
>>>>
>>>
>>>
>>> --------------------------------------------------------------------
>>> IETF IPv6 working group mailing list
>>> ipv6@ietf.org
>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>>> --------------------------------------------------------------------
>>>
>>
>