Re: Linux & draft-gont-6man-slaac-dns-config-issues

Ole Troan <otroan@employees.org> Wed, 25 March 2015 10:52 UTC

Return-Path: <otroan@employees.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A1851A8AD7 for <ipv6@ietfa.amsl.com>; Wed, 25 Mar 2015 03:52:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.011
X-Spam-Level:
X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cAUuXGUFumHs for <ipv6@ietfa.amsl.com>; Wed, 25 Mar 2015 03:52:17 -0700 (PDT)
Received: from banjo.employees.org (banjo.employees.org [198.137.202.19]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5EEC1ACE33 for <6man@ietf.org>; Wed, 25 Mar 2015 03:52:17 -0700 (PDT)
Received: from banjo.employees.org (localhost [127.0.0.1]) by banjo.employees.org (Postfix) with ESMTP id 238A661C5; Wed, 25 Mar 2015 03:52:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=employees.org; h=subject :mime-version:content-type:from:in-reply-to:date:cc:message-id :references:to; s=selector1; bh=ILbdKSlvabuZ5zUwTTaHmnA0qGA=; b= aUffTyKxFUtw4SeyEBGjuYc9fQwVwrZbofXONe8G6Hprl8chIlN3UTbXrQ/MFpp/ kBNNfv3wAKtFUQ0PpovOhGFl9cHXXsmTjx0SbnayOU/+0f8MEJrnotZ44OmKuNLZ 1Ce7zTwj78V/EtW2G0wDJUElvGOmkMrzPIQhWoJ1CnM=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=employees.org; h=subject :mime-version:content-type:from:in-reply-to:date:cc:message-id :references:to; q=dns; s=selector1; b=I3vJ+Ie40Owovs7xamAt3j5Iv8 dsYaF9bNr8ambzZtETNTpzDXxRdrGi4UsCiWcY2VekwGaKbgAZDKCZlh+aDHLEOW Jl9B2t1z6OpfRFJ5jVaHSW8zb8rtjylXLA2VZnMG0K828u1gJy+/V+gGMmK4pfmR AIcVrK27zzhNySgJ4=
Received: from gomlefisk.localdomain (dhcp-891b.meeting.ietf.org [31.133.137.27]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: otroan) by banjo.employees.org (Postfix) with ESMTPSA id CDB3461C1; Wed, 25 Mar 2015 03:52:16 -0700 (PDT)
Received: from [IPv6:::1] (localhost [IPv6:::1]) by gomlefisk.localdomain (Postfix) with ESMTP id 8F49E41800DF; Wed, 25 Mar 2015 05:52:10 -0500 (CDT)
Subject: Re: Linux & draft-gont-6man-slaac-dns-config-issues
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2093\))
Content-Type: multipart/signed; boundary="Apple-Mail=_4419B987-31BC-4536-9347-09EFE7AAD5F9"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail 2.5b6
From: Ole Troan <otroan@employees.org>
In-Reply-To: <5511EF4C.1050908@si6networks.com>
Date: Wed, 25 Mar 2015 05:52:10 -0500
Message-Id: <D118FE45-676C-4BAC-91D3-34A0224F7432@employees.org>
References: <55102C6B.1060608@si6networks.com> <CAKD1Yr2XfeSuQAj94kN1AF_8cet2L+uEkJnO59NyYgtwyfXu7A@mail.gmail.com> <CAKD1Yr3YBdjSkwgoAzTXs_dvoiRnSFReE5-fAO7RggvVLwDthw@mail.gmail.com> <CAFU7BASXNe6TXWt7R2+tBjiob8n23VpBV5THV5hJxSHV-wKo5A@mail.gmail.com> <55118F3B.3000308@si6networks.com> <CAFU7BAQX95WmBu1r=yp38pZ3tEBrxdEX32cvHE7A8AkLjESSEA@mail.gmail.com> <5511EF4C.1050908@si6networks.com>
To: "6man@ietf.org" <6man@ietf.org>
X-Mailer: Apple Mail (2.2093)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipv6/PdMLdmPAKoA4y6zF4sSNlK1896g>
Cc: draft-gont-6man-slaac-dns-config-issues@tools.ietf.org, Fernando Gont <fgont@si6networks.com>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Mar 2015 10:52:19 -0000

> It is not a network misconfiguration. It's a bug in the spec. And until
> the spec is updated and the routers are updated accordingly, the only
> thing for a client to do is to sanitize the Lifetime value to a more
> sane value. -- that's what Linux is doing.

at least one random router vendor has the lifetime configurable, and I would expect others do too.
router(config-if)#ipv6 nd ra dns server 1::1 ?
  <200-4294967295>  Lifetime (seconds)

how much of the problem would be fixed if we issued an errata replacing
"the value of Lifetime SHOULD be bounded as MaxRtrAdvInterval <= Lifetime <= 2*MaxRtrAdvInterval”

with e.g. “the value of the Lifetime SHOULD be bounded by Router Lifetime”.

cheers,
Ole