[IPv6]Re: Using different router addresses (draft-link-6man-gulla) to solve the router fail-over scenario in (draft-gont-v6ops-multi-ipv6)

Fernando Gont <fernando@gont.com.ar> Tue, 25 March 2025 03:54 UTC

Return-Path: <fernando@gont.com.ar>
X-Original-To: ipv6@mail2.ietf.org
Delivered-To: ipv6@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D361211DFE04; Mon, 24 Mar 2025 20:54:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.56
X-Spam-Level:
X-Spam-Status: No, score=-0.56 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_24_48=1.34, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mi2OzKdPP6QS; Mon, 24 Mar 2025 20:54:21 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6571111DFE01; Mon, 24 Mar 2025 20:54:20 -0700 (PDT)
Received: from [192.168.2.3] (unknown [181.44.221.30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id DC46E28051B; Tue, 25 Mar 2025 00:54:15 -0300 (-03)
Message-ID: <36cb0242-140f-4325-9cf1-544830760ee6@gont.com.ar>
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: David 'equinox' Lamparter <equinox@diac24.net>
References: <99d3b163-caeb-4029-9c6a-13f13c461491@si6networks.com> <CAFU7BAQin5ZvV_XfdSNcUahfDbUmvA=A2sp5ZzgxiBT_oJZtvA@mail.gmail.com> <bf64830a-d5ec-48c7-88ef-da75b8f89d1b@gont.com.ar> <CAKD1Yr0xtOQhSnKOKSckCVTXQ_GNgGjM54TdQibf_OwfBoJ79w@mail.gmail.com> <664fa5af-0528-4200-9395-1441fc6a3a32@si6networks.com> <CAKD1Yr1p8t09g29ifA-ybiyJVnhUmwhFUscS5dZ-2+WxKsBWnA@mail.gmail.com> <c751a1e2-6758-4dc1-9983-001a30f8df58@si6networks.com> <CAKD1Yr2TgpLd4Y-2shmYeYgRa2d6g4jku1vp+ZocdvdmB4xPag@mail.gmail.com> <7590c5b7-2345-4108-b8f4-3b57fa7ea82c@gont.com.ar> <Z-AAW9hNwhSt6Bqf@eidolon.nox.tf>
Content-Language: en-US
From: Fernando Gont <fernando@gont.com.ar>
Autocrypt: addr=fernando@gont.com.ar; keydata= xsFNBGLoNucBEACwq8FJv09zINDI3DvVMxQpeMyRoTPNG5TUwsa5IFSISARy9PeIWwkDIoMN Kl2XV4VLG6VbkrxV4SID4GtPNpiPIqhoJ+ssLZFS2VeCcF3MquUKHaRXnMXG+dmovpOJMFAs J1zTH+YsVKqfh/96K3F1rQAKEFPTfEiesJKUhpojh1liOLfVcBRoa9fqWlKVj0eRFFVuvJLi GI5517rEENHvHuzD1okLZlAKUvB2rQGcsUdJ6ygSPY/GqetRf0QLNpLzmR7QKCVpGwbFwfbV Fd7Rh+YB2TsMZ/P8HGhtY5nXfDGGfqApJwb40YnjOSSYNPKDQJjWiSZzzxS9IHTDMKvdEZXQ feU/6YWsjbZKQlj6BGzWtgYIyQ1EF1CiQ8lHt1ZzDM8l2yiw8gjg6SczHAAePpf9TF2mBqgu NPWyXsDCYu/gXVs9+R/638r8oaRZhlXq8um3fWA/nlsXv/oWxP9MKwYxMpyFYGqk4niCKUYz gcve6L9vjcFxZMflVqDp4l5QvzJBGT7mehP4OxG2dwluJqCy/IdotoTkp6DMMcSaki3/7QZ3 M939nIvqd1jFeyrcaDb0AS9Pas+Tq75SR2+6St2HCSYUjC0UzFLHr3diyd0ZbUD0ODdWPBMt sPoisF5hTuNmtSyEC03ZyHKReurqe1786pvQyA05Ac0vcHanXQARAQABzSRGZXJuYW5kbyBH b250IDxmZXJuYW5kb0Bnb250LmNvbS5hcj7CwZcEEwEKAEECGwMFCQlnBokFCwkIBwIGFQoJ CAsCBBYCAwECHgECF4AWIQR/f2htiskzGe6twcjR1UuU4wFvAQUCYug3WwIZAQAKCRDR1UuU 4wFvAcnKEACjvTw/5mP157LnQpiqJHScuuWwLFdA/VFULE53wpwx/Gc8tx9laqB/9NAOLWuY ElGm059flcS8hnOstzOGBc1dc4bt4gKj25+35NP+aCb04Ax2uzSdcaR713GY7ebiWQ/WGo+E fz3jIdfcmiFpMJOpvkE2psdHsh478/wPfreP5NGM0PmuVtHfVFZ3YV8ke/EcywST1CibtmDN khnGRuh68xaKDdFhyMJI4R/gdI8j/S+p3pWN/4CUr+8qUIDquO5QtBYuDwrGvOuQ1/2mQzM7 Sa5S5CsbvhzkxHUknIP+MsMmPPgXDnsARduUABBtjNiEFqXE2HaMuWOmySA+ui+2JDA2EfCT OeFW0QajZt73mF+dvQzvSWEWvHRBl4mLpASMyFzhUHPDrXTQgSD7FlQ3VqhkVrWtXNnkyyBw VjSWOfcirN+i03I5lTC3B6xhrn89/jlHWXv9XGJjBnKWtbxIwB9BP3zTEP0vVCSCZr2tnM9H iShFmchh3GWBMe4BbVopKZeURYzsMGqqJ21//cNdgu3cIsVFm/fl/+OTRNyzcrHle12ym7eu n3QamKwm9zG33UmwI+60EqAVgQ+vjXHdEXPG7NffTAIKALes3JvzzPn2WIibUNFvyAtrjus1 ZpCncp1scPBP+dsO0b7gIbxY5Vh+YyP62R852qG4juW32M7BTQRi6DbnARAA1zC02v/xv7Yv AENOF2D8ANVl/mvEsiZv6KBixbWy26tUVfIsjBW6MhycwA1teiXBkHzoXwren68Zl/O6tPFT 8ld91mJp7JfLv8N3mlnNDzre1LkhKBjwCWS8OjnKSud27zPMc6Whx6zlORk8uf73jBPIbyIh TDm4HX0LGOrvypTqGa+ec1BdpUXJwopIT9r1jrIWCKwMSNIyNtfx4yMu2jF61Q+aitZ+K8mi ZM3xw62Mhz8XzCSZH4mIbfGtnOlQrEetiFWFJKB9msmSbscreS+SiKXFevlqzrhIA2wHYZQW ALt5EQsFxq93yqUjST+8qF3XOdhUpenXHqj5HlqXlUx3vcBsi38KRgOQ+GNM194FpDbdv3mB RvZAJv+BVQMGCuWCtrK7TG1X9uX2Izvza3j+kQvElY4o0A+78H6PkpQJvr4aiaSzUZWKkgF/ RmqJvbvauqUhUI5cuY50/sNRdxMz/hXz9PGTDo6SdNC12x5XFOrtThTRXCD1yn//Zr4P+J3o LjNkwGq5n3X6u7bts9RZsbW0EKeslPX071FqekZtz4BquB8PiTsnb6x3vITKsUoNThK40HXZ 92fnwWKwh1kIeB4hJZNNp7OHcElphG5v4QttvoPPtS9FluZDumLQPxj/EYY8PgVRXYoWDTYr d0NeWd6dSAI1yW6oHb58Uu0AEQEAAcLBfAQYAQoAJhYhBH9/aG2KyTMZ7q3ByNHVS5TjAW8B BQJi6DbnAhsMBQkJZwaJAAoJENHVS5TjAW8B22kQAKEj1FxEL432/32My9yYRUNJXcGl0/zS KDcw1xBqZmQGehq9KZtSNwdD8RqBnIQe3ZZjs3rBCQoN5PV4zILlGOdlaiNK6OxCnIwBwU2I XYXezXMal2dZPyRam4CQQtWf48ggjVVjFH5Fee6ZvJaGyu369iAeBz3myGI2ZAKRTFmmv3J+ JtDUbZd9+xIaBAD7JecyoqVfbm+9VPPeVYqNDU06FvbFqxl7e/vBE6YRCZLS0/1CRwXlYe6N luep2O8DGTmIvkbsEpXShFKfx1yO0p/dUTfkJ2W5+yiX3A9gKDdD4M4vi4EcvuJaS5tCIMWG /QvAAKbeWw2jZmOKb+GmwDJnN7G8WGovpEN0NblHBya5mZkD4BmSqcBMBqDWemYdl9SDqucr YgXFo8GN+4D2+vl9eq4+SZk7ZXp9DNxJcBGtDWRHDDjKDPBD9QZ6rRvFmYquRdPgpRKvNXbg c0wUjQIqW7eBDh7pOsFEW2REJpUC0gI/G6D+YfTirjDIjrKowFl4p5ZR0V9KYDNftjUzwUqa B7FT4FyFwBRpZkgkZ7+9qKXZcFkCWkTzoeGmAMEYrG4D9IXUCHYr4flGmClZXs2VSTxLIk8Z 4Zi1CJt4n+6tyqpKBZAC+o/RXJLwTOwhGsYeF/hnYSPkoPNrLnT06anhCCQ1zcyz7f5BLnaq 18sg
In-Reply-To: <Z-AAW9hNwhSt6Bqf@eidolon.nox.tf>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Message-ID-Hash: S4US7WI7ONQXJVY7UQCVET2YYRIDBEC6
X-Message-ID-Hash: S4US7WI7ONQXJVY7UQCVET2YYRIDBEC6
X-MailFrom: fernando@gont.com.ar
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ipv6.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Fernando Gont <fgont@si6networks.com>, V6 Ops List <v6ops@ietf.org>, 6man@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [IPv6]Re: Using different router addresses (draft-link-6man-gulla) to solve the router fail-over scenario in (draft-gont-v6ops-multi-ipv6)
List-Id: "IPv6 Maintenance Working Group (6man)" <ipv6.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/PwGwYFEdMPaCqszsEjoKgfVCiR0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Owner: <mailto:ipv6-owner@ietf.org>
List-Post: <mailto:ipv6@ietf.org>
List-Subscribe: <mailto:ipv6-join@ietf.org>
List-Unsubscribe: <mailto:ipv6-leave@ietf.org>
Date: Tue, 25 Mar 2025 03:54:24 -0000
X-Original-Date: Sun, 23 Mar 2025 11:37:46 -0300

Hi, David,

On 23/3/25 09:36, David 'equinox' Lamparter wrote:
> (inline below)
> 
> On Fri, Mar 21, 2025 at 03:20:15PM -0300, Fernando Gont wrote: […]
>> 1. You have ROUTER_A advertising PREFIX_A, and ROUTER_B
>> advertising PREFIX_B.
>> 
>> 2. You have a destination "HOST_X" that you want to connect to.
> 
> X > 3. Under normal circumnstances, X >     NH(SRC_A, HOST_X) =
> ROUTER_A X >     NH(SRC_B, HOST_X) = ROUTER_B
> 
> 3. NH(*, HOST_X) = { ROUTER_A, ROUTER_B }
> 
> "*" is used to express "unspecified/not-chosen-yet source address". 
> Without 8028 or dst-src-routing, only NH(HOST_X) exists and is the
> same.

In this example, we are assuming that RFC8028 is in place.
There's not such a thing such as NH(*, HOST_X), because by the time you
have to make a decision to route a packet... er... you have a packet
already (i.e., it does have all the IPv6 fields completed).

And RFC8028 tells you to only use next-hops that advertised the prefix
you are sourcing from.



> This is the root of miscommunication here.  6724 rule 5.5 requires
> you to choose a nexthop before choosing the source.

At this point, we are doing Destination Address selection. So there's no
Rule 5.5 here.

Besides, how could a protocol spec about address selection possibly rule
routing?

The key part here is that Rule 5.5 does not belong in RFC6724. -- It
is already part of RFC8028. And if RFC6724 required RFC8024 (as it 
should), then we wouldn't need Rule 5.5.




>> 4. Now ROUTER_B becomes unreachable
> 
> Now this changes:  NH(*, HOST_X) = { ROUTER_A]
>
> 
>> 5. You resolve www.example.com, and it resolves to HOST_X
>> 
>> 6. You know run Dest address selection. Since you have a single 
>> destination addresses, there are not really any addresses to
>> "sort"
>> 
>> 7. Dest address selection is done at this point.
> 
> 7.5. You select a nexthop for HOST_X.  Due to the change in 4.:
> 
> NH(*, HOST_X) = { ROUTER_A }
> 
> Due to 4861 6.3.6, ROUTER_B is rejected.

How you possibly select a next hop here if what you are doing is simply
sorting the list of IPv6 addresses that you return via e.g. getaddrinfo()?

Thanks,
-- 
Fernando Gont
e-mail: fernando@gont.com.ar
PGP Fingerprint: 7F7F 686D 8AC9 3319 EEAD C1C8 D1D5 4B94 E301 6F01