Re: RFC4941bis: consequences of many addresses for the network

Gyan Mishra <hayabusagsm@gmail.com> Fri, 24 January 2020 14:54 UTC

Return-Path: <hayabusagsm@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DF2112006E for <ipv6@ietfa.amsl.com>; Fri, 24 Jan 2020 06:54:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s-DBlSySr5ld for <ipv6@ietfa.amsl.com>; Fri, 24 Jan 2020 06:54:25 -0800 (PST)
Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C96FD12004A for <ipv6@ietf.org>; Fri, 24 Jan 2020 06:54:24 -0800 (PST)
Received: by mail-lj1-x22e.google.com with SMTP id x7so2760796ljc.1 for <ipv6@ietf.org>; Fri, 24 Jan 2020 06:54:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=kf6yk+FLrXw6Ov6UYUyKgRjC9vTkiaDBSI4DI4a4Q3U=; b=Me7/QwmsKEKC3aqJE3l/6pD2AxB/ddgEoippXKT8fB4ftcGY+HU4iyHZvLCo8MGXGC bzpqEKCVm5TC1TdoXt+I/lIrOV2azZ4FoY5LxMGDlDSWHUvaQvCJkVJdgV5De5RFE3sW GhN6pJsTIGB32/aLLULRr+PvmK0SlPtPw/y/7lLeRJey2VOU311TiZQPg9906inRWz/p D44ziZ3+ZITcvOoR1ofYs4cG6iEHR5cJIk7Oabl4xlFB6uJ96YcieF4+fR8l45DkpstC ompA3tvARhDjgDGH/jzFhNEmQRljBLjZce6Kewnl4MKgfzzqwV2OpJFcf+EmHOkBJzQJ oVGg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=kf6yk+FLrXw6Ov6UYUyKgRjC9vTkiaDBSI4DI4a4Q3U=; b=PXuuckW37n0CLy9wOdslHYU0Dp7i5sYhwGi8VQ+LvOD0cKf4CcQrGaTvgJLFyX/gQf pIo87NxE6g/AMXqYVmddsnZNOxVxK9s8zU1HcTu5+iJo0B8bcjEzi2vUsKCPFbOYziYd JWt6nNtwqcq6QCG3maVdvVV8idvIfDgrEzolilSZheO5TISof8zQ9JedjQ2bwS0i/w6s 1YaMTvnUSvKnFCF+rw3FDs2EG09ojDolyRrqoNIYnivj9xUTpYLJPVfBUzZwWA4HZntL McYZ7T88ztOaueuQfNChxCHjEbgtbJlXSvP22xcnvhpqWd9TTm7NW49Wt0gU58+Q9wn1 8/Mw==
X-Gm-Message-State: APjAAAXPO/olXYsqZKjUTVKDpdoHXskUZUGdBQf5Nv0bDI2GHbIIVC1M +qeLMZYgBeiUSXYOAvTm+VEJ5dX5oJKC2BaWzX3Imm9G
X-Google-Smtp-Source: APXvYqzq60vixAjmBqmKgj7XAPwa+l96kQpFzzj36Z2ITu2dYAGvKx09+HjkX/oAxbdxZcHlt9a19Rcw5pYgTM298+Y=
X-Received: by 2002:a2e:916:: with SMTP id 22mr2634761ljj.60.1579877662551; Fri, 24 Jan 2020 06:54:22 -0800 (PST)
MIME-Version: 1.0
References: <03C832CE-7282-4320-BF1B-4CB7167FE6BE@employees.org> <e936078e-01f9-0254-a8d0-4095455154ac@si6networks.com> <D85412DF-4B03-4790-9E39-968D50ECF86B@employees.org> <m1iuwJV-0000MAC@stereo.hq.phicoh.net> <B341FF1B-C559-4D54-B117-A58EB6A3C955@employees.org> <dfe3a236-4e61-d2be-929c-869a81994879@si6networks.com> <m1iuxwI-0000M3C@stereo.hq.phicoh.net>
In-Reply-To: <m1iuxwI-0000M3C@stereo.hq.phicoh.net>
From: Gyan Mishra <hayabusagsm@gmail.com>
Date: Fri, 24 Jan 2020 09:54:11 -0500
Message-ID: <CABNhwV1XcATmrosW_kRTJgrXyTSNqPe=uR4VDt=_eXtt5=H3CQ@mail.gmail.com>
Subject: Re: RFC4941bis: consequences of many addresses for the network
To: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Cc: Fernando Gont <fgont@si6networks.com>, ipv6@ietf.org
Content-Type: multipart/alternative; boundary="000000000000dd7c37059ce3eea0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/FEsqQf_Q8Ao1ntRNPKNiea0_eYQ>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Jan 2020 14:54:29 -0000

Operators already have the option of not using the default valid and
preferred lifetimes.  Most operators don’t change the default values so
maybe  a suggestion could be to change the default values of of the
temporary address regeneration would help with stability.

Also disable temporary address regeneration churn is an issue to make the
address stable by disabling the privacy extension.  If security and
tracking of IPv6 addresses in use is a concern, disable the random station
ID defaulting to the modified EUI64 format.

Can we mention in the draft that a stable IID with privacy extension and
not having a separate temporary address is the directional approach for
6MAN to RFC 7217 and 8064.  Does everyone agree???

Also mention caveats with having multiple addresses from an operations
perspective is not desirable per the default source address selection
algorithm RFC 6724.  With RFC 6724 and predecessor 3484you are not gaining
anything with multiple addresses as the same address is always used.  So
the recommendation is to not send multiple slaac prefixes.

On Fri, Jan 24, 2020 at 7:20 AM Philip Homburg <
pch-ipv6-ietf-6@u-1.phicoh.com> wrote:

> >However, when it comes to rfc4941bis, I don't think there's much more to
> >do than simply including a small paragraph noting that an implementation
> >should be aware about regenerating addresses too quickly,
>
> If people feel strongly about the risk of generating temporary addresses
> too quickly, why not have a TEMP_MIN_PREFERRED_LIFETIME and have some
> text that a node SHOULD NOT generate temporary addresses more often
> than one address (per prefix) per TEMP_MIN_PREFERRED_LIFETIME.
>
> This still allows any future RFC to describe a more advance privacy model
> that does generate addresses more often.
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>
-- 

Gyan  Mishra

Network Engineering & Technology

Verizon

Silver Spring, MD 20904

Phone: 301 502-1347

Email: gyan.s.mishra@verizon.com