Re: Node Requirements: Elevating DHCPv6 from MAY to SHOULD

Markus Hanauska <hanauska@equinux.de> Tue, 31 May 2011 12:07 UTC

Return-Path: <hanauska@equinux.de>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 726E3E0826 for <ipv6@ietfa.amsl.com>; Tue, 31 May 2011 05:07:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LPSdxXsaOOqe for <ipv6@ietfa.amsl.com>; Tue, 31 May 2011 05:07:37 -0700 (PDT)
Received: from mail.equinux.net (mail.equinux.net [194.145.236.10]) by ietfa.amsl.com (Postfix) with ESMTP id 6C501E07A7 for <ipv6@ietf.org>; Tue, 31 May 2011 05:07:37 -0700 (PDT)
Received: from mail.equinux.net (127.0.0.1) by mail.equinux.net (MlfMTA v3.2r9) id hsj25c0171se for <ipv6@ietf.org>; Tue, 31 May 2011 12:35:01 +0200 (envelope-from <hanauska@equinux.de>)
Received: from mail.muc.equinux.net ([192.168.40.207]) by mail.equinux.net (equinux Secure mail Relay) with ESMTP; Tue, 31 May 2011 12:35:01 +0200
Received: from anaheim.muc.equinux.net (anaheim.muc.equinux.net [192.168.40.40]) by mail.muc.equinux.net (Postfix) with ESMTPS id 8A28C21C9BE0; Tue, 31 May 2011 14:07:36 +0200 (CEST)
Subject: Re: Node Requirements: Elevating DHCPv6 from MAY to SHOULD
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="us-ascii"
From: Markus Hanauska <hanauska@equinux.de>
In-Reply-To: <alpine.BSF.2.00.1105311327180.63146@mignon.ki.iif.hu>
Date: Tue, 31 May 2011 14:07:36 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <64155E17-D08D-4B98-AD1A-A21CE6462147@equinux.de>
References: <C9F53B85.11BE93%john_brzozowski@cable.comcast.com> <201105232010.p4NKAV9X012654@cichlid.raleigh.ibm.com> <53E999C4-E50D-49C9-9B02-8AD7B5641905@gmail.com> <BANLkTinByCkcvd6=wLE6=9h1xLX16AhPVQ@mail.gmail.com> <201105232111.p4NLBScJ013180@cichlid.raleigh.ibm.com> <20110524072631.737ee12c@opy.nosense.org> <3044C560-F46C-477A-BD87-DF252F689FAB@equinux.de> <m1QR93e-0001IXC@stereo.hq.phicoh.net> <62797F6E-20DF-4038-A29A-1FDB0A94C678@equinux.de> <m1QRL7I-0001h2C@stereo.hq.phicoh.net> <075E5D04-AF53-4DE9-9F45-432D96EBB03F@equinux.de> <m1QRMHt-0001h3C@stereo.hq.phicoh.net> <568E4F89-520A-4362-B0FA-7B64A5B82139@equinux.de> <alpine.BSF.2.00.1105311327180.63146@mignon.ki.iif.hu>
To: Mohacsi Janos <mohacsi@niif.hu>
X-Mailer: Apple Mail (2.1084)
X-Mlf-Version: 7.2.1.2841
X-Mlf-UniqueId: o201105311035010081940
Cc: "ipv6@ietf.org" <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 May 2011 12:07:38 -0000

On 2011-05-31, at 13:38 , Mohacsi Janos wrote:

> I disagree with introduction of another flags. This requires substantial changes in the codes.... Which will take ages....

I took a look at the IPv6 implementations of Mac OS X (which comes from the BSD world) and Linux a couple of weeks ago. Introducing such a second flag can be done with only a hand full of code lines and those can be written in about 30 minutes. Basically this flag only needs to be set for all SLAAC addresses, that's all there is to be done. We call this flag A, for automatically assigned, and keep the existing U flag, for globally unique. Then we have the following cases:

Manual (Static) Address: U = 0, A = 0
DHCP Address: U = 0, A = 0
SLAAC: U = 1, A = 1
SLAAC + Priv Ext: U = 0, A = 1

Now only DHCP and Static Addresses can collide and this would happen in case of a misconfiguration; it is impossible to prevent misconfigurations, so you shouldn't even try.

Right now SLAAC + Priv Ext can collide with Static/DHCP addresses (e.g. while the host is offline, ND will not detect such a collision and when the host goes online, it cannot get its address any longer, since it is taken by a SLAAC host). If we would define SLAAC + Priv Ext to set the U bit (which would be wrong, since these addresses are not globally unique), then it could collide with SLAAC addresses of hosts currently offline (again, ND will not work here and those host cannot go online later because their interface ID collides with an address already in use).

> We need M/O bits to give some sort of consistency.

May I ask what kind of consistency are you referring to?

> Nothing prevent you the suggest an draft document for multicast or anycast resolving DNS.

I consider it way too late to start such a project as of today. This should have been standardized already when the other well known multicast/anycast addresses were standardized.

> There is environment where SLAAC more acceptable - e.g. less adminisration

My home DSL router supports IPv6 and the difference between SLAAC and DHCPv6 is one checkbox; check it, and it runs a DHCPv6 server. There is nothing else you have to configure - you can configure address pools, static assignments, which DNS servers to hand out and other options, but you don't have to, if you don't feel like it. So I cannot really comprehend what is so hard about DHCP administration. Most routers/firewalls as of today have a build in DHCPv4 server and in the worst case, you'll have to enter a DNS server, create an address pool and enable it - not really a lot of administration work - in the best case, it will configure all of that automatically for you and you only have to customize settings if you feel like doing so (most home routers have DHCPv4 enabled and pre-configured, so for most users it means, plug your computer into the router or connect to the WLAN and it works out of the box, nothing to configure at all, except for internet access).


Regards,
Markus