Re: <draft-ietf-6man-default-iids> update to rfc2464bis

Fernando Gont <fgont@si6networks.com> Thu, 12 January 2017 13:10 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7428129615 for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 05:10:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qKeWvWeGc00Z for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 05:10:35 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F414129614 for <ipv6@ietf.org>; Thu, 12 Jan 2017 05:10:35 -0800 (PST)
Received: from [192.168.3.88] (142-135-17-190.fibertel.com.ar [190.17.135.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 52FC782C25; Thu, 12 Jan 2017 14:10:24 +0100 (CET)
Subject: Re: <draft-ietf-6man-default-iids> update to rfc2464bis
To: Lorenzo Colitti <lorenzo@google.com>
References: <1E7F90AC-79BB-49BE-B397-EC829EA95AA4@gmail.com> <CAKD1Yr0O6gnXZc3qEY7bqkBYu-sx1_erwum2DRwpe+Vv+jmdiw@mail.gmail.com> <7456833d-aa3f-d368-6041-cfdc1ac95f6f@si6networks.com> <CAKD1Yr1dQF7Cg0mppZVcSXC15pue_y1Qb-GugKY+G8u-dRyJtg@mail.gmail.com> <89fc8838-f6cd-1647-8468-1c8c11466aff@si6networks.com> <CAKD1Yr2z22ZX85ywAcqobbHZ20Kx4VvFhEmzJnSG_0hQBLLvyw@mail.gmail.com> <b3707115-b9d1-cc14-4cb9-0a3ffdd0cdfc@si6networks.com> <CAKD1Yr0WkMJ4+FwdE2Re=Aifm2HgCha2i67mexpcO5rkz3PYww@mail.gmail.com> <33d91d6c-18dc-1ec0-fc4d-edc83a86ce83@si6networks.com> <CAKD1Yr0sAU-AfvezDy7XiVrNMYZO4XkTR3cgfg2=iMWifD2JBw@mail.gmail.com>
From: Fernando Gont <fgont@si6networks.com>
X-Enigmail-Draft-Status: N1110
Message-ID: <23b2c5c1-955a-8c4f-94ce-4ced83442a57@si6networks.com>
Date: Thu, 12 Jan 2017 09:40:40 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1
MIME-Version: 1.0
In-Reply-To: <CAKD1Yr0sAU-AfvezDy7XiVrNMYZO4XkTR3cgfg2=iMWifD2JBw@mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/P7dYB4h1AI-72y4cbcZBe-YQ4rM>
Cc: Bob Hinden <bob.hinden@gmail.com>, IPv6 List <ipv6@ietf.org>, Suresh Krishnan <suresh.krishnan@ericsson.com>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jan 2017 13:10:39 -0000

On 01/12/2017 09:19 AM, Lorenzo Colitti wrote:
> On Thu, Jan 12, 2017 at 8:29 PM, Fernando Gont <fgont@si6networks.com
> <mailto:fgont@si6networks.com>> wrote:
> 
>     >     All these documents are about generating stable addresses, not temporary
>     >     addresses. So I'm not sure why the text should be removed. The text in
>     >     all this documents ae about stable addresses. IETF-wise, the only doc
>     >     that is about temporary addresses is RFC4941. Hence the text seems
>     >     correct to me.
>     >
>     > If instead of removing that text we can clarify that it only applies to
>     > stable addresses, that works for me. Suggestion: change "These are
>     > described in Appendix A and are no longer recommended." to ""These are
>     > described in Appendix A and are no longer recommended for stable addresses."
> 
>     Fine. Isn't the assumption in all these RFCs that the addresses are
>     stable, and that the MAC addresses are unique?
> 
> Yes, those documents were written when randomized MAC addresses did not
> yet exist, yes. But those assumptions are not valid today; randomized
> MAC addresses are not only in use, there are standards track documents
> that assume their use (e.g., RFC7844). Since we're now republishing
> these documents, we need to make them reflect the state of the world as
> it is today, and the revised documents must not assume that MAC
> addresses are unique and static.

Traditional slaac is based on such assumption. I'm not saying we should
keep that. I'm just saying that the documents we're revising have that
assumption in place. And if we want to change such assumption, there's
probably more to do than just "generate the iid with this other
algorithm, instead". That is, that'd be a change that goes further than
what we're doing here.



>     > The reason the text needs to be changed is because during the discussion
>     > of default-iids there was substantial discussion of the use case of
>     > using EUI-64 with randomized MAC addresses. There was consensus that
>     > this is a use case we want to support, and as a result, the working
>     > group concluded that we should change every occurrence of the phrase
>     > "based on a link-layer address" to "based on a stable link-layer
>     > address" in the default-iids draft.
> 
>     My read of the discussion is that you didn't want default-iids to ban
>     this case (and maybe there was not more than one or two voices in this
>     direction), and we simply decided to have default-iids fous on stable
>     addresses to be able to do progress on something. Claiming that doing
>     temp adderesses by doing MOdified-EUI64 is streching that outcome quite
>     a bit, IMO.
> 
> Funny... my read of the discussion is that everyone wanted to support
> this case and only you didn't (and maybe there was not more than one or
> two voices in this direction". :-P
> 
> But seriously: regardless of which of the two interpretations above is
> correct (likely neither), the fact of the matter is that the text in
> default-iids says "stable" and that did not happen by chance, but
> through explicit working group discussion. We have to respect that here.

As noted, I'm fine with thes docs xplicitly noting that they talk about
stable addresses. That seems to make you have too, so....

(talking about what with temporary MAC addresses would be a different
thing, and seems to be "out of scope" of the *current* effort on these
bis documents. If you want such work to be expanded, such that these
documents also cover temp MACs, I certainly wouldn't oppose... but that
doesn't seem the direction in which these documents are going).

P.S.: I do thing that we need advice on what to do when... stable+temp?
stable only? temp only? there are certainly use cases for each of these
combinations...

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492