Re: [Iotops] Automatically connecting to stub networks...

Toerless Eckert <tte@cs.fau.de> Thu, 03 December 2020 17:49 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE4563A0A2B; Thu, 3 Dec 2020 09:49:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.87
X-Spam-Level:
X-Spam-Status: No, score=-0.87 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.779, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wW91CyatE7lg; Thu, 3 Dec 2020 09:49:10 -0800 (PST)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 319303A0A26; Thu, 3 Dec 2020 09:49:09 -0800 (PST)
Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [131.188.34.52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 7DD8C548049; Thu, 3 Dec 2020 18:49:01 +0100 (CET)
Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id 76169440059; Thu, 3 Dec 2020 18:49:01 +0100 (CET)
Date: Thu, 03 Dec 2020 18:49:01 +0100
From: Toerless Eckert <tte@cs.fau.de>
To: Ted Lemon <mellon@fugue.com>
Cc: iotops@ietf.org, 6MAN <6man@ietf.org>
Subject: Re: [Iotops] Automatically connecting to stub networks...
Message-ID: <20201203174901.GW44833@faui48f.informatik.uni-erlangen.de>
References: <695953.1606952552@dooku> <B989299A-ED3C-4205-A4E2-DA080F574B33@fugue.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <B989299A-ED3C-4205-A4E2-DA080F574B33@fugue.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/LYD-TYfTwZY3UpICisTN1rIYgNU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Dec 2020 17:49:13 -0000

On Wed, Dec 02, 2020 at 06:47:38PM -0500, Ted Lemon wrote:
> ???This??? is what we did in the Apple thread border router. I???m nervous about anything in the IETF with IoT in the title because it will be subject to the Carsten Bormann DoS attack. 

Whow, i guess its christmas time, so you're trying to spread some love ?

What's a CBDA ? Is that a badge of honor to wear ? I have a Van-o-Gram from the
1990'th. Maybe i can upgrade by breast plating with a CBDA ? What do i need to do to get one ?

Back to business.  Some high level suggestions for your doc:

- Move your rants about HNCP to an appendix

- Maybe also the rant about service discovery being an integral part of the problem to an appendix.
  although i agree that a good part of the IETF community may not have gotten the message how it is,
  but its still disturbing the flow of reading when preaching to the choir like me.

- Put IPv6 into the title if all you care about is really only IPv6.
  Before this gets adopted by a WG, native support for also IPv4 should be a key scope discussion.
  Not everybody may have the same IP6 centric only business goal.
  (I Have No Opinion. Just saying).

- It would be nice to start section 2 with a description of a generic model
  without being specific to the protocol so one can check if/what protocol options
  do meet the model - as opposed to only the two ones you think are in your interest.

- For example: Why not simply start with DHCP-PD ? IMHO, every home router getting
  a prefix via DHCP-PD from a service provider is a provider of such a stub network.
  Of course, service discovery as you expect does usually not work in that environment,
  so that would need to be added.
  
- Would be lovely to detail exaple use-cases such as that Apple device (e.g.: in an appendix)
  to provide better motivation and also justification for the proposed protocol choices...


Cheers
    Toerless

> I don???t know if we have visibility into the right part of Google to get the chrome problem fixed. Their IoT team is fairly far removed from their browser team. What???s the use case?
> 
> > On Dec 2, 2020, at 18:42, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> > 
> > ???
> > Ted Lemon <mellon@fugue.com> wrote:
> >>> On Dec 2, 2020, at 16:16, Michael Richardson <mcr+ietf@sandelman.ca>
> >>> wrote:
> >>> (trying to clean out my inbox)
> >>> 
> >>> Ted Lemon <mellon@fugue.com> wrote:
> >>>> I mentioned prior to IETF 107 that I wanted to start a conversation
> >>>> about this problem, but didn???t have time to write a draft.  I???ve
> >>>> written one, which I think describes my view of the problem pretty
> >>>> well; I???d like to know if what I???ve written here makes sense to
> >>>> others.
> >>> 
> >>> Ted, I think that your work addresses a problem space that is in some
> >>> ways similar to the "share64" concept.  Not the same, but similar.
> > 
> >> Yes. But I think share64 on a WiFi network would require proxy ND,
> >> which doesn???t scale well, particularly if you have multiple unmanaged
> >> routers providing readability and transit.
> > 
> > I wasn't saying that the same solution applies, but rather the problem space
> > is the same.   Device-X has some IPv6 on a network "behind" it, and wants to
> > share addresses on a wifi/LAN in front of it in order to enable connectivity.
> > 
> > I'm unclear from reading your document if the RA's would have L=0 or L=1.
> > 
> >>> I think that the use of ULA which is advertise to the "LAN" for
> >>> reachability does not have to be mutually exclusive with NAT64 for
> >>> "cloud" reachability.
> > 
> >> Absolutely. That???s what we???re thinking for the ipv4 and dual stack
> >> cases. Doesn???t work for v6-only.
> > 
> > So, if the LAN is v6-only and does not have DHCPv6-PD or HNCP+Babel, then I
> > think it's a fail for cloud connectivity.   In particular, in this case, it's
> > hard to report the failure to anyone offsite!
> > 
> > It might be worth describing how this failure case could be reported intelligently.
> > This is an operational kind of thing which is in charter for IOTOPS.
> > 
> >>> Since your document does not actually require any new protocol, but
> >>> just explains how to do something new using existing mechanism, I
> >>> think that it would fit into the current IOTOPS charter.
> > 
> >> I don???t think this is IoT-specific. I would prefer to do the work in
> >> intarea.
> > 
> > I don't think something needs to be IoT-only to belong in IOTOPS.
> > 
> >>> In answer to your question: State of the Art
> >>> 
> >>> Currently there is one known way to accomplish what we are describing
> >>> here [[Michael, does ANIMA have a second way?]].
> >>> 
> >>> The ANIMA ACP sets up an overlay network with /128 routing via
> >>> RPL(RFC6550) storing mode.
> > 
> >> I don???t get a mental picture from this of how it helps.
> > 
> > I'm sorry, I didn't finish the thought.  "It does not help at all"
> > 
> >> FWIW, Apple is now shipping a product (HomePod Mini) that does stub
> >> network routing for thread networks, and there???s also an open source
> >> implementation. Right now it only does the ULA solution. I???ll be
> >> writing a draft that describes this soon.
> > 
> > I'm unclear what "this" is.
> > 
> > -- 
> > ]               Never tell me the odds!                 | ipv6 mesh networks [ 
> > ]   Michael Richardson, Sandelman Software Works        | network architect  [ 
> > ]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [ 
> >    
> 
> -- 
> Iotops mailing list
> Iotops@ietf.org
> https://www.ietf.org/mailman/listinfo/iotops

-- 
---
tte@cs.fau.de