Re: A long HBH Options question

Tom Herbert <tom@herbertland.com> Wed, 22 August 2018 14:28 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8498A130E0C for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 07:28:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iAPIXO1Y0J1b for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 07:28:21 -0700 (PDT)
Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97461124BE5 for <ipv6@ietf.org>; Wed, 22 Aug 2018 07:28:21 -0700 (PDT)
Received: by mail-qk0-x236.google.com with SMTP id z125-v6so1297489qkb.12 for <ipv6@ietf.org>; Wed, 22 Aug 2018 07:28:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=AfUTe1RtjymYgZ0Bugv+fQJNcutrCtiYtcNYvdmMHWk=; b=plkNEVYZjSERESP14ZfoUoYwGu1YixQ9ZRDsXR2CvEefEC4cXcJaOdXrXeYNBboBo9 QLRVC6tgGmthq21Ws5c/1Jgx07Ea2h2S0nrPLvL5ZH0CPg8w7oSsidli2ooSLbyMBarK Kz9rr+uT/ZAiNCy+PvsA3u7tqLAySKXbvvLznFKkrP6OhXn/Gv4JRLfYT38CtLBbs+lf 4xQr3EIHmrqU7SOWe94/10k3zzJvCwb5rIgmFbguU0L5d9EvDtmpqtKxA6cz47aXlVgc IDDRQ2Nh4qXtJy/Yc1huX4nYTc5IYBaLf9gHdUoPPF8OE3ABWQw1pLmjNk42cPYtBr9X +uoQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=AfUTe1RtjymYgZ0Bugv+fQJNcutrCtiYtcNYvdmMHWk=; b=tVhv06T6Uwae7WSJQx10TYnhvvLGRLDjoQG+OmmwWkSzbpovssTLDkzhYmTxOsw2Ou 33/0Jo76H4y3VvO37YvcVnPL7fCVSKpHBco49UD7dva8cYNU2RflDENlFM+FgGLl8cUy Kw0R+HWQf/OmGCt7MJatFG82j2v14A/7bVFkaG60P1+T3HWU0EENCvz1p9LmSme0WLXs vXHDN/rfeHlvZmXGqL4oXrvSjIx9MochQ4K8jDX6h2XfzPKq/GT6yh8hwTkgzFjlCv3R 03IFqiEDbmi0wBBNZn23UhbhjaURzfT8dg/PD4MGjUc4DMGG0lvYpXUewnGq42U2+C/N OYmw==
X-Gm-Message-State: APzg51AhBZPs7T3Yy+WGxK8WC0JNJO050eupdZ5AQaI0tC1HePZ8X7BP Tz/RcZCMpC8lq3DQEnHlHWEY86VI3aYSoSe/Dt8crQ==
X-Google-Smtp-Source: ANB0VdZ4JF07MTnwBbeWSPLM3Zks5FSv05K6RjttozH2BZ/vhwrRj7ekFh3x7fQF2OMJ2XZ5gFPKQ5whXku9NcMGYns=
X-Received: by 2002:a37:168e:: with SMTP id 14-v6mr14866247qkw.168.1534948100356; Wed, 22 Aug 2018 07:28:20 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac8:3312:0:0:0:0:0 with HTTP; Wed, 22 Aug 2018 07:28:19 -0700 (PDT)
In-Reply-To: <CACL_3VFn9x2o1OW5wk0nt3n71K0XpQ2Kv1X+2CJnpPA6QdMVgA@mail.gmail.com>
References: <CACL_3VFn9x2o1OW5wk0nt3n71K0XpQ2Kv1X+2CJnpPA6QdMVgA@mail.gmail.com>
From: Tom Herbert <tom@herbertland.com>
Date: Wed, 22 Aug 2018 07:28:19 -0700
Message-ID: <CALx6S36QbcQc-ZspeH66Z=yVfKLrWyuhTLzB8ui7HBtfcg++4g@mail.gmail.com>
Subject: Re: A long HBH Options question
To: "C. M. Heard" <heard@pobox.com>
Cc: Ronald Bonica <rbonica@juniper.net>, 6man <ipv6@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/MeetIa7qgyyzOS41HzPlc2PeM7Q>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Aug 2018 14:28:24 -0000

On Tue, Aug 21, 2018 at 5:39 PM, C. M. Heard <heard@pobox.com> wrote:
> On Tue, 21 Aug 2018 19:16:55 +0000, Ron Bonica wrote:
>> [ … ] let's assume that:
>>
>> - A packet contains an HBH option and the high-order bits of the HBH
>>   Option type are "10" [could also be "01" or "11']
>>
>> - The packet traverses Router A and Router B on route to its
>>   destination
>>
>> - Router A is not configured to process HBH options
>>
>> - Router B is configured to process HBH options
>>
>> - Neither Router A nor Router B recognize the HBH option contained by
>>   the above-mentioned packet.
>>
>> I think that RFC 8200 requires the following behavior:
>>
>> - Router A forwards the packet to Router B, without examining the HBH
>>   Options header
>>
>> - Router B discards the packet, because it doesn't recognize the
>>   option.
>>
>> Is this the required behavior?
>
> Yes.
>
>> If so, does this behavior cause cognitive dissonance for anybody else?
>
> It sure does.
>
>> I am thinking that the "act" bits are meaningless in the HBH extension
>> header. This discussion may also be applicable to
>> draft-herbert-ipv6-update-dest-ops.
>
> The "act" bits are not exactly meaningless, but only the encoding "00"
> will elicit consistent behavior from nodes that  comply with RFC 8200
> and don't recognize the option. To me, it would seem quite odd if the
> designer of any new HbH option were to choose an encoding with
> "act" bits other than "00". For already allocated options, any encoding
> other than "00" will not have the results expected by those who
> designed the options assuming that the rules in RFC 2460 would be
> followed. Thus, that the maintainers of existing HbH options with the
> "act" bits other than "00" should probably re-examine the option
> encoding in light of the change wrought by RFC 8200. Here is the list:
>
> 0x63  RPL (RFC 6553, PS)
> 0x6D  MPL (RFC 7731, PS)
> 0xC2  Jumbo Payload (RFC 2675, PS)
> 0xEE  IP_DFF (RFC 6971, Experimental)
>
> The ROLL WG has in fact taken this step with the RPL option, though for
> reasons independent of the change made in RFC 8200. The thinking
> behind the original design in RFC 6553 was that it was undesirable for
> the RPL option to escape from the RPL domain in which it was originated,
> so "act" was set to "01" to force nodes external to the domain to
> silently discard escaped packets. That thinking has been revised, and
> there is a document in last call that will deprecate the existing
> code point and get a new one (probably 0x23) with "act" set to "00".
>
> A re-examination of already allocated destination options would be
> called for if the change proposed in draft-herbert-ipv6-update-dest-ops
> were to be implemented. Here is that list:
>
> 0xC9  Home Address (RFC 6275, PS)
> 0x8A  Endpoint Identification (DEPRECATED)
> 0x8B  ILNP Nonce (RFC 6744, Experimental)
> 0x8C  Line-Identification (RFC 6788, PS)
>
Mike,

Thanks for looking into this.

Neither RFC6744 nor RFC6788 explicitly prohibit putting the option in
front of a routing header, but I don't think doing that would make
much sense in either case. In case of ILNP nonce, the option is used
to communicate to a peer node information about the reverse path so
it's really intended for the transport destination endpoint.
Line-Identification is only used in conjunction with a ND packet being
tunneled in the payload so only the ultimate destination should do
anything with the option. It would be a good idea if specifications
for new Destination Options explicitly said whether or not they can
appear before a Routing header.

Tom

> The Home Address option would actually not be affected by the
> proposed change in draft-herbert-ipv6-update-dest-ops since it
> isn't allowed to appear appear before a Routing Header. I have
> not examined the others, however.
>
> Mike Heard
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------