[IPv6]Re: Working Group Last Call for <draft-ietf-6man-pio-pflag>

Ole Troan <otroan@employees.org> Tue, 11 June 2024 12:00 UTC

Return-Path: <otroan@employees.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D745C180B75 for <ipv6@ietfa.amsl.com>; Tue, 11 Jun 2024 05:00:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=employees.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iNGjIcMX2-re for <ipv6@ietfa.amsl.com>; Tue, 11 Jun 2024 05:00:45 -0700 (PDT)
Received: from proxmox01.kjsl.com (proxmox01.kjsl.com [204.87.183.6]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0774C1519AE for <ipv6@ietf.org>; Tue, 11 Jun 2024 05:00:45 -0700 (PDT)
Received: from proxmox01.kjsl.com (localhost.localdomain [127.0.0.1]) by proxmox01.kjsl.com (Proxmox) with ESMTP id 56E25E310D; Tue, 11 Jun 2024 12:00:45 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=employees.org; h=cc:cc:content-transfer-encoding:content-type:content-type :date:from:from:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=prox2023; bh=2sZri0lCpnCvWBrC sseb3w4BN18j1ztCLDx3nvqmTFE=; b=qZKj+eN7+Sf6N/bZHdYU7KDWZ6qDwrAa EeFPlJpiG0XarVFXZl2mTDQ7y0O/Wuwg/qT8vMoW5ahltRTQuIB9UgTcwr+I4DdT +I6704zfkQe3alrkNMKknTieN4bqJqkJv2AG+NdxU7oESRLzTrGLVBnKtiCh/s3w YGYqmhOSR4H6reWlofF48Ovb/aEwcSr/X3suTD3LC2du5oLA0Co0kiF6RJBM1kaO S+rzdqLjmMWcXqOIkRdoNZMldrRJWlXpX6hIrfmEsoocbXaTFP/pEd4GdAthXYqx ZkykGrRNFISxnfjKfN6gL/CLehyl8wEh8se5HaAgw5MUlUKm72fd9A==
Received: from clarinet.employees.org (clarinet.employees.org [IPv6:2607:7c80:54:3::74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by proxmox01.kjsl.com (Proxmox) with ESMTPS id 36391E30E2; Tue, 11 Jun 2024 12:00:45 +0000 (UTC)
Received: from smtpclient.apple (ti0389q160-2783.bb.online.no [46.9.227.254]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by clarinet.employees.org (Postfix) with ESMTPSA id A9EA34E12D1D; Tue, 11 Jun 2024 12:00:44 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.600.62\))
From: Ole Troan <otroan@employees.org>
In-Reply-To: <CAFU7BAS5iRLhGBkbWnnpjz_3oJX+_mbjNUZhm8X=QRMJUUPPxg@mail.gmail.com>
Date: Tue, 11 Jun 2024 14:00:33 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <C9B5D7FD-8E88-4CA6-86EF-A2753848F138@employees.org>
References: <18236.1717011844@obiwan.sandelman.ca> <2AD87DE1-075E-45E7-A682-8042F04EF59A@employees.org> <89dbde8c-82c9-4a2e-9cff-8d4fd2d8fbe6@gmail.com> <9E7BEA1C-4597-4142-A3AB-57211C436197@employees.org> <CAKD1Yr0iR+RZHvuquCGYfntiD+K7-PdkvGJzHLx1PLrFqJ=Z4Q@mail.gmail.com> <47BF97B8-2BEE-47CC-A965-C6BB112990AB@employees.org> <4bcfcd71-d295-433d-813f-1183c7da3cf3@gmail.com> <CAKD1Yr1CL_Jw4O-iETF6T1v8EL_Lj-fMi6EV=3MgPhN+M2tc8w@mail.gmail.com> <84f6e699-5587-4407-a566-b031c31e2cd5@gmail.com> <CAMGpriWqD99OzdOaJU7_nQTwvD=o1wsVxOQrbMqy5sH7sX7gwA@mail.gmail.com> <95dfd2e9-25da-4449-b740-724804a34735@gmail.com> <CAKr6gn12Vq9xJWGH+Na6xhDXXsW2XSDCnLegjXMRLN8KJ2CEZQ@mail.gmail.com> <CAKD1Yr24RyW_oxhY3iz5nEdXd0EZENy9cZBo7tfxLqLLMHOX_g@mail.gmail.com> <e2e406e1-1231-4c28-8163-c0e220da7453@lear.ch> <b8f85b39-0167-4040-a5d4-3a97f8819b99@gmail.com> <E50531BE-5867-472A-91FE-739341545D62@employees.org> <CAFU7BAS5iRLhGBkbWnnpjz_3oJX+_mbjNUZhm8X=QRMJUUPPxg@mail.gmail.com>
To: Jen Linkova <furry13@gmail.com>
X-Mailer: Apple Mail (2.3774.600.62)
Message-ID-Hash: 55HQ743G52V2OAWGFDQP2ZGVKIUHVCU5
X-Message-ID-Hash: 55HQ743G52V2OAWGFDQP2ZGVKIUHVCU5
X-MailFrom: otroan@employees.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ipv6.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: 6man WG <ipv6@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [IPv6]Re: Working Group Last Call for <draft-ietf-6man-pio-pflag>
List-Id: "IPv6 Maintenance Working Group (6man)" <ipv6.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/JXKceXJUrgxp3ozPh-icVjKXJIc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Owner: <mailto:ipv6-owner@ietf.org>
List-Post: <mailto:ipv6@ietf.org>
List-Subscribe: <mailto:ipv6-join@ietf.org>
List-Unsubscribe: <mailto:ipv6-leave@ietf.org>

Jen,

I think it comes down to how you view the P-flag and how that should be specified.
That is up to this working group to determine.

If the flag means:
- “If PD capable, use the delegated prefix to assign addresses instead of SLAAC for this PIO”

or if it means:
- “If PD capable, use the delegated prefix to assign addresses to yourself, instead of SLAAC for this PIO,
   but only if the size of the prefix is /64 or bigger.

Cheers,
Ole


> On 11 Jun 2024, at 10:39, Jen Linkova <furry13@gmail.com> wrote:
> 
> Hi Ole,
> 
> Thanks for suggesting the text.
> A few comments:
> 
> On Tue, Jun 4, 2024 at 5:09 PM Ole Troan
> <otroan=40employees.org@dmarc.ietf.org> wrote:
>> There is a simple fix to the document to achieve that I belive.
>> Simply remove the following:
>> 
>> OLD:
>> "If the host does not obtain any suitable prefixes via DHCPv6 PD that
>> are suitable for SLAAC, it MAY choose to disable further processing
>> of the P flag on that interface, allowing the host to fall back to
>> other address assignment mechanisms, such as forming addresses via
>> SLAAC (if the PIO has the A flag set to 1) and/or requesting
>> individual addresses via DHCPv6.
>> “
>> NEW:
>> —
> 
> So you are suggesting to remove 'MAY stop processing P flag'. I'm not
> sure it's a good idea: this text provides optional guidance for hosts
> on how to deal with DHCP-PD failures. Removing it would not prohibit
> such behaviour indeed, but IMHO it's still worth mentioning it
> explicitly.
> 
>> OLD:
>> "If the delegated prefix is too long to be used for SLAAC, the host
>> MUST ignore it. If the prefix is shorter than required for SLAAC,
>> the host SHOULD accept it, allocate one or more longer prefix
>> suitable for SLAAC and use the prefixes as described below.”
>> --
> 
> This specific draft focuses on providing a mechanism to enable
> pd-per-device. It doesn’t signal availability of DHCPv6 PD - the host
> can discover that by sending a PD request and seeing if it gets an
> answer. The flag is indicating that the network can provide a prefix
> suitable for SLAAC w/o running out of space and the device can use
> that prefix for SLAAC/sending downstream in PIOs etc.
> As David has pointed out, we shall make it much more clear in the
> abstract/introduction.
> 
> If a device can use a long prefix (such as /120 or /80) it can just
> ask for it all the time, it doesn’t need the flag - at least *this*
> flag.
> Therefore if we delete this text, it would basically render the flag useless.
> 
>> OLD:
>> "When a host requests a prefix via DHCPv6 PD, it MUST use the prefix
>> length hint Section 18.2.4 of [RFC8415] to request a prefix that is
>> short enough to form addresses via SLAAC.”
>> 
>> NEW:
>> "The host MAY indicate as a hint to the delegating
>> router the size of the prefix it requires. If so, it MUST
>> ask for a prefix large enough to assign one /64 for each of
>> its interfaces, rounded up to the nearest nibble, and SHOULD
>> be configurable to ask for more."
> 
> That makes sense but I'd suggest a few modifications:
> - replace '/64' with 'a prefix suitable for SLAAC' - we shall not be
> hardcoding 64 anywhere.
> - maybe we shall not be saying 'each interface' - my laptop has a
> number of interfaces which might not even have IPv6 enabled or there
> is no need to extend the network connectivity there (e.g. loopback).
> So maybe smtj like 'to assign a prefix suitable for SLAAC to each
> interface the host is extending the network connectivity to'?
> 
> -- 
> Cheers, Jen Linkova
>