[6man] New Version Notification for draft-nordmark-6man-impatient-nud-00.txt

Ray Hunter <v6ops@globis.net> Mon, 23 May 2011 20:03 UTC

Return-Path: <v6ops@globis.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 581D0E06D1 for <ipv6@ietfa.amsl.com>; Mon, 23 May 2011 13:03:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.479
X-Spam-Level:
X-Spam-Status: No, score=-2.479 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SeUkUsth6HAr for <ipv6@ietfa.amsl.com>; Mon, 23 May 2011 13:03:56 -0700 (PDT)
Received: from globis01.globis.net (RayH-1-pt.tunnel.tserv11.ams1.ipv6.he.net [IPv6:2001:470:1f14:62e::2]) by ietfa.amsl.com (Postfix) with ESMTP id 6E345E06B6 for <ipv6@ietf.org>; Mon, 23 May 2011 13:03:56 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by globis01.globis.net (Postfix) with ESMTP id 343918700E3 for <ipv6@ietf.org>; Mon, 23 May 2011 22:03:55 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at globis01.globis.net
Received: from globis01.globis.net ([127.0.0.1]) by localhost (mail.globis.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bEKEZzDzjAYV for <ipv6@ietf.org>; Mon, 23 May 2011 22:03:50 +0200 (CEST)
Received: from Rays-iMac.local (unknown [192.168.0.3]) (Authenticated sender: Ray.Hunter@globis.net) by globis01.globis.net (Postfix) with ESMTPA id 7B5E8870030 for <ipv6@ietf.org>; Mon, 23 May 2011 22:03:50 +0200 (CEST)
Message-ID: <4DDABDA6.2070705@globis.net>
Date: Mon, 23 May 2011 22:03:50 +0200
From: Ray Hunter <v6ops@globis.net>
User-Agent: Postbox Express 1.0.1 (Macintosh/20100705)
MIME-Version: 1.0
To: ipv6@ietf.org
Subject: [6man] New Version Notification for draft-nordmark-6man-impatient-nud-00.txt
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 May 2011 20:03:57 -0000

re: http://tools.ietf.org/html/draft-nordmark-6man-impatient-nud-00

I'm afraid have more questions than answers.

Are there any implications for different nodes having different NUD 
timeout behavior on a link, and this no longer being symmetrical?

If I can think of two examples......

e.g. 1. Say Node A (router) declares node C (end node) unreachable but 
Node B (alternate back up router) has not yet timed out node C?

I'm guessing this case is just like a split-brain segment, so is not 
significant compared to existing failures.

Now the case of router failover....

e.g. 2. Say Node A (end host) declares node B (router) unreachable 
locally, but node B (router) is still up and running but has not yet 
timed out Node A.

Is that significant? I suspect so. After all if the raison d'etre of 
changing NUD timers is to quicken / slow down router failover, surely 
Node B (the router) also has to time out at the same speed as the end 
host (Node A) otherwise the router will continue to advertise valid 
routes to node A, and packets will black hole/queue anyway until NUD on 
node B also notices the failure.

Vice versa is also true, if the router notices the failure first, but 
the end node does not react to the failure and hangs around retrying 
NUD, packets may queue/black hole in the other direction.

In the good old days we had things like gratuitous ARP for such events 
to attempt to wake up end nodes to refresh their cache, but if they got 
lost in some layer 2 STP thrashing it didn't help much anyway.

Is there thus a need for any over-ridden NUD parameters to be 
synchronized across all nodes on a link e.g. via RA messages?

Is there a minimum and maximum timeout needed? To prevent danger of an 
update storm [as specified in RFC2461 that all Neighbor Solicitations 
are rate-limited on a per-neighbor basis] or "stuck in stale".

regards,
RayH