RE: [v6ops] RFC4861 question - short prefixes in PIOs

Dave Thaler <dthaler@microsoft.com> Wed, 26 June 2019 21:01 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 910621200F1 for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 14:01:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uehj5J3Iv2Gx for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 14:01:27 -0700 (PDT)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800113.outbound.protection.outlook.com [40.107.80.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFB5A12018A for <6man@ietf.org>; Wed, 26 Jun 2019 14:01:26 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FHEf/fjIW1nZc+87A+5Dp9jcS5RTp98qrJd1Ircum79JNOKvRD/yVYlIljdMq1pKp24l9HIFF3VSC9Q9GCjHlfZ0qfxUXNb/FLxzMWwkiZ4isvo8kVxDdaDqKnlj7eSkXzG932YEYyeBkYwwLy+KFtfzmP9g9OU4D/s18dZfPNDnxphgsplB0GFZOqFcML9j1TDNeaRS0owjlNyOTUjvOF54C9WcrCHLjDKURoxQ1yaewoAWZQwqKSe1kbkqqsvOzYXYTeHiQ76Jil4H/bU9jTq6Ooq8LVoINbgTeAKklrQWJNCDuCRNKeyKBX1+qbZD9tC3Lg+qzEkp4W4nltfCJw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1IQRVeGcGoksuuzZavIAkfYc3mScJ0QV9s2UqGLhRYU=; b=eE6iHaqbfwGGR2L//O/R89wJOGCW11F93IEb/RIHyB7eH0K0rCnZbJPQf+e+CKvc5jBM3ZU75qmelDCQ4D2XyU7yQE7Y53s88cuW1SWnm5TNhTQkJ+6BVpBdIWc95rJ6Myp7e5kZYoxcPdUMPkBux5Wmim8C0eNQNfmg9Njr7NinAkVtWhZUd+BMsl/w5+IaRe0Lqul5PSmob916V6MY+9V127IBBUf3FkWFMWEP/TA3h9vA1dBryveDQeivag+LpuG8cwrUVBmCMd/B99BAyJpLDTZ/F9fE3ejNDNTN7ReRByzV5DVbQyZE33t593CvZpwu7hbgk18ziA86Gtsklw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=microsoft.com;dmarc=pass action=none header.from=microsoft.com;dkim=pass header.d=microsoft.com;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1IQRVeGcGoksuuzZavIAkfYc3mScJ0QV9s2UqGLhRYU=; b=a9m+xw2pMeM7DSHauuw1mBBIF+BaWXtTqjP0zBp7px2ip5b+SwnJ/ZZfIbgYKPep+BYTy6Cj+RGbt8VE9IWm2P0P9iyMP5tNHSzR8tccxc0FQbrk88qKOrB12F+udBf6Mda/cJN2u4lByP60Z9eo7Rg0PcK93uObTy+LSj/t1Is=
Received: from DM5PR21MB0508.namprd21.prod.outlook.com (10.172.91.142) by DM5PR21MB0172.namprd21.prod.outlook.com (10.173.173.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.3; Wed, 26 Jun 2019 21:01:25 +0000
Received: from DM5PR21MB0508.namprd21.prod.outlook.com ([fe80::51e4:c118:6678:5415]) by DM5PR21MB0508.namprd21.prod.outlook.com ([fe80::51e4:c118:6678:5415%9]) with mapi id 15.20.2052.005; Wed, 26 Jun 2019 21:01:25 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>, 神明達哉 <jinmei@wide.ad.jp>
CC: 6man <6man@ietf.org>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs
Thread-Topic: [v6ops] RFC4861 question - short prefixes in PIOs
Thread-Index: AdUsMmrDTybnqCimSw+vUa2pQYzWEwACP6cAAAEE7IAAAYAPQAAFr1eAAAFtfGA=
Date: Wed, 26 Jun 2019 21:01:24 +0000
Message-ID: <DM5PR21MB0508A10B647C43269C4354D5A3E20@DM5PR21MB0508.namprd21.prod.outlook.com>
References: <729f46ec4a8b419797e15bbdcac3e549@boeing.com> <CAJE_bqeXkyWec9-EG1QxS-1FeTyKS6-ONNOYhQK8gsQGwenaVQ@mail.gmail.com> <2b54c5e1eb54498faa7ec5d07e0f9b3a@boeing.com> <BN6PR21MB04977E999EE62A9929ABE7B7A3E20@BN6PR21MB0497.namprd21.prod.outlook.com> <e5671ed47bd1402e84840c1a266f18dd@boeing.com>
In-Reply-To: <e5671ed47bd1402e84840c1a266f18dd@boeing.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-06-26T21:01:24.6951761Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=9ae0b557-7209-40d9-befe-d9599567cd68; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com;
x-originating-ip: [2001:4898:80e8:1:e910:cf6:aa8:3bc6]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: cdf72464-6604-4b80-c968-08d6fa797350
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:DM5PR21MB0172;
x-ms-traffictypediagnostic: DM5PR21MB0172:
x-ms-exchange-purlcount: 3
x-microsoft-antispam-prvs: <DM5PR21MB0172AEF972212FACF608E5D0A3E20@DM5PR21MB0172.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 00808B16F3
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(376002)(396003)(346002)(366004)(136003)(189003)(199004)(554214002)(33656002)(186003)(102836004)(2906002)(8990500004)(99286004)(6506007)(68736007)(14454004)(7696005)(966005)(4326008)(110136005)(76176011)(53546011)(6116002)(790700001)(606006)(22452003)(478600001)(10090500001)(316002)(25786009)(10290500003)(66574012)(486006)(6306002)(256004)(14444005)(229853002)(52536014)(8936002)(9686003)(81166006)(8676002)(236005)(73956011)(55016002)(54896002)(53936002)(5660300002)(6246003)(476003)(46003)(446003)(11346002)(86362001)(71200400001)(71190400001)(66946007)(74316002)(7736002)(6436002)(64756008)(66446008)(66476007)(66556008)(76116006)(81156014); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR21MB0172; H:DM5PR21MB0508.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: c9JCb9c3L60sGx0Bp/CykKYKe5JCaLK+ErojVGzVQ6Aj/S16ABBw9kYqHkMPJErdPz5lce1UBUbdZKP0JPNTMEr3FTnX71lmGbh+JlfqPwh3zWixKTduBsWkaaaGa9yxEdMRN+nrxobLzaafLb5ne5pLvjZ2OaowKBhhHiYzR8wULDjiv20MP20p1rMlLziIj5I6G1i/DPTamZneBUhE7eItbiLjCD2taVYeIJUhXDLcYgt9vqYGStNGmvTaXC/fHapvJn6j4J9yLBrEqr1bqESYqYN88KG5SrN9ofvTIV48dhXPoQSP0g6vgZwSiBnNh6/Gx+kJIUH7rivyfZGWNfuBAYDnAn7yZEptHEK9l9zshdHoIFaqTIWBvYTcbWk+hTr5pc2ZKB635y/hDuGigXk0z/zaKvJVqhMbbx8bl+I=
Content-Type: multipart/alternative; boundary="_000_DM5PR21MB0508A10B647C43269C4354D5A3E20DM5PR21MB0508namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: cdf72464-6604-4b80-c968-08d6fa797350
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jun 2019 21:01:24.9885 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: dthaler@ntdev.microsoft.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR21MB0172
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/UdexmkuihqqWa3Id2m3nk7bCJ9s>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Jun 2019 21:01:31 -0000

Ø  Is there some reason to prefer RIOs?

RFC 4191 says:
   There are several reasons for using a new Route Information Option
   instead of using flag bits to overload the existing Prefix
   Information Option:

   1. Prefixes will typically only show up in one option, not both, so a
      new option does not introduce duplication.

   2. The Route Information Option is typically 16 octets while the
      Prefix Information Option is 32 octets.

   3. Using a new option may improve backwards-compatibility with some
      host implementations.

Then see all of section 3 of that RFC for the analysis of compatibility.

Dave

From: Templin (US), Fred L <Fred.L.Templin@boeing.com>
Sent: Wednesday, June 26, 2019 1:18 PM
To: Dave Thaler <dthaler@microsoft.com>; 神明達哉 <jinmei@wide.ad.jp>
Cc: 6man <6man@ietf.org>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs

Hi Dave,

I agree that what I want is more akin to RIO than to “traditional” PIO, but then I saw
David Farmer’s note about RFC8028 and that seems to be more in line with what I am
looking for.

Certainly, multi-homing needs to be accommodated and RFC8028 seems to support
that while using the ubiquitous standard PIO albeit with A=L=0. Is there some reason
to prefer RIOs?

Thanks - Fred

From: Dave Thaler [mailto:dthaler@microsoft.com]
Sent: Wednesday, June 26, 2019 10:40 AM
To: Templin (US), Fred L <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>>; 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: 6man <6man@ietf.org<mailto:6man@ietf.org>>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs

RIO should add a route with the next hop of the router, where the prefix is not an on-link prefix.
PIO should be for on-link prefixes, i.e., either the receiver should create a SLAAC address or the receiver should add an on-link route, or both.

Dave

From: ipv6 <ipv6-bounces@ietf.org<mailto:ipv6-bounces@ietf.org>> On Behalf Of Templin (US), Fred L
Sent: Wednesday, June 26, 2019 9:52 AM
To: 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: 6man <6man@ietf.org<mailto:6man@ietf.org>>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs

OK, thanks. Then, it seems to me that what I really want is a Route Information Option
(RIO) [RFC4191] because what I am looking for is a way to establish a short prefix in the
IPv6 forwarding table that directs packets to a specific outgoing interface (or, more
precisely, to a specific router on a specific outgoing interface).

But, with RIO, the prefix would not be added to the interface prefix list in the same
way as for PIO - correct?

Thanks - Fred


From: 神明達哉 [mailto:jinmei@wide.ad.jp]
Sent: Wednesday, June 26, 2019 9:23 AM
To: Templin (US), Fred L <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>>
Cc: 6man <6man@ietf.org<mailto:6man@ietf.org>>
Subject: Re: [v6ops] RFC4861 question - short prefixes in PIOs

(I'm only copying 6man, as I believe it's purely a protocol spec
question)

At Wed, 26 Jun 2019 15:56:36 +0000,
"Templin (US), Fred L" <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>> wrote:
>
> I have an RFC4861 question (several actually) on short prefixes in RA PIOs:
>
> 1) If a PIO includes a prefix with length less than 64 (e.g., 2001:db8::/32) and with L=1, does it
>
> mean that 2001:db8::/32 should be added to the interface prefix list?

In my interpretation (ditto for subsequent questions), yes.

> 2) If yes to 1), does it mean that packets forwarded to the interface for any destination covered
>
> by 2001:db8::/32 will trigger Address Resolution instead of forwarding to a default router?

Yes.

> 3) If the PIO instead has L=0, does it mean that 2001:db8::/32 is “associated” with the link but
> not necessarily “on-link”?

I'm not sure how to interpret it (in particular I'm not sure what
"associated with the link" means), but my interpretation of L=0 is
that the RA doesn't say anything about the on-link-ness of that
prefix.  See also the description of the L flag in RFC4861:

      L              1-bit on-link flag.  [...]  When
                     not set the advertisement makes no statement about
                     on-link or off-link properties of the prefix.  In
                     other words, if the L flag is not set a host MUST
                     NOT conclude that an address derived from the
                     prefix is off-link.  That is, it MUST NOT update a
                     previous indication that the address is on-link.

> 4) If yes to 3), does it mean that 2001:db8::/32 should be added to the IPv6 forwarding table
>
> as a “route-to-interface” with the receiving interface as the next hop?

No.  See the second MUST NOT of the RFC4861 text cited above.

> 5) Does A=1 have any meaning for prefixes with length less than 64? Or, must prefixes with
>
> length less than 64 set A=0?

As far as RFC4861 is concerned, the A flag has no meaning, regardless
of the prefix length.  It only matters in RFC4862.  In terms of
RFC4862, whether "A=1 has any meaning for prefixes with length less
than 64" depends on the length of the IID of the link; if the prefix
length != 128-IIDLength, the validation rule 5.5.3 d) of RFC4862 makes
the prefix ignored.  If non-64 prefix length is invalid in terms of
RFC4862 in that sense, it'd be *safe* to avoid setting the A flag, but
the protocol specification doesn't say it *must* be so.

You may also want to check
https://tools.ietf.org/html/draft-jinmei-6man-prefix-clarify-00<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-jinmei-6man-prefix-clarify-00&data=02%7C01%7Cdthaler%40microsoft.com%7Ca4ed3a82231c4312e3e508d6fa736514%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636971770868375490&sdata=TqUONb7gp99ceqpcgKZXYrSEnBZq8uUPk3FJJIuot8c%3D&reserved=0>
I believe it clarifies many of the above questions.

--
JINMEI, Tatuya