Re: draft-gont-6man-slaac-renum: Algorithm (Section 4.5) in the presence of Router Lifetime=0

Jen Linkova <furry13@gmail.com> Wed, 01 April 2020 02:15 UTC

Return-Path: <furry13@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A83723A1016 for <ipv6@ietfa.amsl.com>; Tue, 31 Mar 2020 19:15:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.052
X-Spam-Level:
X-Spam-Status: No, score=0.052 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pX-9aysh6wCC for <ipv6@ietfa.amsl.com>; Tue, 31 Mar 2020 19:15:02 -0700 (PDT)
Received: from mail-qk1-x734.google.com (mail-qk1-x734.google.com [IPv6:2607:f8b0:4864:20::734]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52E4B3A1014 for <6man@ietf.org>; Tue, 31 Mar 2020 19:15:02 -0700 (PDT)
Received: by mail-qk1-x734.google.com with SMTP id j4so25490620qkc.11 for <6man@ietf.org>; Tue, 31 Mar 2020 19:15:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=8uWnwbKMbNzJcOT8PCRL1J1HhBgfErlPJb9QAtLLwO4=; b=t4GXTWfS54a8IouzkttBgutTyTX4CU0jSFpsWfyBr2hj5E0JP3nQvW9Ul35hROwCEg daad0Fn5197Uzl6wPrR8J8TAu3DGXXnw/CFv+XjCtPt2CZRU2950yTldl9LQ/Nn7l6bO 2/UUAt1GQ2EVQWhOO375CBAOfwmHCfzmKM3A8lRjjbfdtEWJCGdCU+EMlM1Hzp3DjxIw 7ENhKRExS7VbiuiKPQYpJSdXMS4B4Cta8oGPAmQ/st8lAY0P+WjJfYnwjX/Oi1A0lG0Z f5zJNf6jCCql2ikroof9w853uMfOXCm5OY0ow7Oy3jornKV5xJGdse3NkfXtB4LsWLYQ YObw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=8uWnwbKMbNzJcOT8PCRL1J1HhBgfErlPJb9QAtLLwO4=; b=XooCYAaQEMJXkETynlYkRr5r5ulI45Ow7BWimJRyoxihdtdaKCbYEuynGfcxMYukTa XpYlImnXrOQRVMCD8bDCDSUVcN18eC1JAcYsbk8iE+OGv+hr/xxyEEb20K8Z0ilmAWFo C75xM2rjdQ+y6e97fiKMdaE5TZHAzPpxhdD+l0FWCVjKiGkUZT7/Ki07b9wDcpa4WwmN ixmeOFeKra7undzX65sSYDOnnN46Xh66L7EG9otLC/2PFj2RXoFCI6XwVpX6PKaylqGK KgomhRWkHFQOSxYtegmWiOnqgEwCjICTpYO5LroEZHQqdgwnmEIuZFehaID1UNn3tT7Q u+3Q==
X-Gm-Message-State: ANhLgQ0rQsZNK68ZNmzP9Uiex48sHtOPHoirWmj3YhIV4lqI5HuSOYzq P4fV+GaNq2oSbkdD6CTfbmftAwCEGpbzsf138g9XnXBWLvk=
X-Google-Smtp-Source: ADFU+vvm11Xa8Y3mq4bAjqJIVD6RplOq+1qywXe/vS3bbPdktYbek2x6Aaw9S6py8uTjWS4zB26VmJ47XEPUmNEdAxo=
X-Received: by 2002:a37:9ad0:: with SMTP id c199mr7795095qke.277.1585707301187; Tue, 31 Mar 2020 19:15:01 -0700 (PDT)
MIME-Version: 1.0
References: <6625284c-a841-8de4-2281-b837346527f5@si6networks.com> <CAFU7BARZG6sQpa8ToeADQdANC6g7nM=MG-vqgEj=PXucwnUNiQ@mail.gmail.com> <b17c29c9-9980-8e77-66f9-ad5c7649fc24@si6networks.com> <CAFU7BARRx8KgMUZTAvAGrexSTiopTeRQfLsPiK2shtyhGvAQFQ@mail.gmail.com> <65725cc5-36c2-ca54-d32f-f395467cede5@si6networks.com>
In-Reply-To: <65725cc5-36c2-ca54-d32f-f395467cede5@si6networks.com>
From: Jen Linkova <furry13@gmail.com>
Date: Wed, 01 Apr 2020 13:14:49 +1100
Message-ID: <CAFU7BAREhyBfJcZEsczPU23+kcxbS2EX+HgyF7d2QHn_6AMQew@mail.gmail.com>
Subject: Re: draft-gont-6man-slaac-renum: Algorithm (Section 4.5) in the presence of Router Lifetime=0
To: Fernando Gont <fgont@si6networks.com>
Cc: "6man@ietf.org" <6man@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/NQXMuPW1V3CAGyzK-Z08O48cNi8>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Apr 2020 02:15:06 -0000

On Wed, Apr 1, 2020 at 10:50 AM Fernando Gont <fgont@si6networks.com> wrote:
> In the context of RFC8028, the information in PIOs become more
> associated with the sending router, than with the link itself.
>
> e.g., our draft aside: if you have Router 1 saying PREFIX A is on-link,
> and should be used for auto-configuration, and Router 2 saying that
> PREFIX A is not on-link and should not be used for auto-configuration,
> you'd be safe to consider it on-link, configure addresses for it, and
> send packets sourced from PREFIX A to Router 1.

Keep in mind there 3, not two signals here a router can send:
1) PREFIX A has the property X (e.g. is onlink or suitable for SLAAC)
2) PREFIX A does not have the property X (e.g. the prefix is not onlink)
3) no data about PREFIX A whatsoever.

My understanding of the current standards is that, as RAs are
processed independently, multiple RA containing 1+3 or 2+3 would
result in the consistent and predicable behaviour, while if routers
send both signals 1 and 2 - each new RA would update the information
about the prefix.

> There's no reason for the announcements of Router 2 to discard the
> information provided by Router 1 -- each of them simply provide their
> own view of the network.
>
> That's how I read the spec -- but will ask Brian and Fred, just in case.
> (thanks for noting this!)

I'd say I did not read the RFC8028 that way. My understanding is:
- it is talking about scenarios when multiple PIOs are advertised by
multiple routers.
- it requires the host to track what router announced what prefixes
(and btw I do not see it explicitly excluding PIOs with lifetime = 0
from that tracking...)
- PIO - router binding is supposed to be used to select the source
address for the specific next-hop (or  the next-hop for the specific
address). It does not seem change any other PIO processing.
Even more, it explicitly say 'If no router has advertised the prefix
in an RA, normal routing metrics will apply'.

> >> 2) RFC8028 requires that PIOs be associated with routers (otherwise in a
> >> multiprefix network scenario, your packets could be egress-filtered).
> >> Hence what one router advertises shouldn't affect the behavior wrt other
> >> routers.
> >
> > It is not about 'behaviour wrt other routers'. It's PIO processing
> > rules as specified in
> > https://tools.ietf.org/html/rfc4862#section-5.5.3
> > " If the advertised prefix is equal to the prefix of an address
> >
> >        configured by stateless autoconfiguration in the list, the
> >        preferred lifetime of the address is reset to the Preferred
> >        Lifetime in the received advertisement.  "
> >
> > So if I have two routers advertizing the same prefix in PIO, a single
> > RA with Preferred Lifetime =0 (from any of those two routers) would
> > deprecate the prefix.
> > I could not find anything in  RFC8028 (which does not even update
> > RFC4862) which changes that logic.
> > Am I missing anything?
>
> You raise a valid point, indeed. I'll check this with Fred and Brian,
> and will also check what implementations are doing. But you may be right
> in that we might want to include an exception for the case where Router
> Lifetime == 0.

IMHO the simplest way to do that would be Preferred Lifetime =
max(AdvDefaultLifetime, 3 * MaxRtrAdvInterval).

> > last time I checked the Rule 5.5 was not widely supported, which is
> > very sad indeed.
> > I'd be very happy to be proved wrong.
>
> I will check and report back.

Would be appreciated, thanks!

-- 
SY, Jen Linkova aka Furry