RE: SRH insertion vs SRH insertion + encapsulation

Ron Bonica <rbonica@juniper.net> Sat, 07 September 2019 22:53 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD4A112018D; Sat, 7 Sep 2019 15:53:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NnVoiYq5bqoq; Sat, 7 Sep 2019 15:53:02 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02672120145; Sat, 7 Sep 2019 15:53:01 -0700 (PDT)
Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x87MpJkP022885; Sat, 7 Sep 2019 15:52:57 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=WumqjAZEO5YTvZWdLR0J2572U49Q3FInTzPi6Nl4Vyo=; b=Fx8m9e7Uf2ZJpY/ikGJeePMGm7sZlfkfUAWO8PFBaZZ6sHFT+wdz+S3g9J78QzGVabBL yaA0GGR/AkgiltFwr6CDs09bReNuA3zL7ftcKWzGeswqHVNcgg5gv8diPdAvyy7K7lmL KymeENP11A3IyeRwBy1VI6zKb1qRCeiDn8oZnOsRdrByTY3VvOZgLdUnXtwDiuMpa1Bt k6IF2lkgr/TZo/4OdELpOVWIzDPlFAuaW91KouL/V/wLdX3vOcqNel+IYgyrAYwLju8Q pYCrjxqnw+MXGlhcZorORrG8wc9APEwvlWavR/auA2RneV9qGgSP0yvwxifljNYVjYCX Mg==
Received: from nam03-co1-obe.outbound.protection.outlook.com (mail-co1nam03lp2059.outbound.protection.outlook.com [104.47.40.59]) by mx0b-00273201.pphosted.com with ESMTP id 2uvbnwrmy3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 07 Sep 2019 15:52:57 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Z2N1UoDvhF5eUtW/+YJmDEDNh31/SQi6stqGtMNv/+XfFIgWQ3Lvkhhf2HQMarZchn++ama3Aqo1SOvpXItFrbmu/c9sDh6xsBBdAGK+lVSbLi9a8yRqqk/0Kpaijy8xW+AtBEhpeRtKQv+OdB5anoGsd4SN2SJqFvWuhmwbv60HQPQHhC6Y6nfodhQO3vEhxx13f+gxqg6mib5PzRW0xWm3z0RK9+a4gBdInvJvhQLAYmLusoY9EByMlzOtAuSQUpcZaTki8KlksMFPUPli42SKaj36wKYgRA2tjhyE4WE99v0kzx9OC5zbRNJeVhVBOFWKvCeoL4ixBnwQTDB6qQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WumqjAZEO5YTvZWdLR0J2572U49Q3FInTzPi6Nl4Vyo=; b=Ww8InwERYUmbSkBdAAGzMWreAueT/eH8kq4Amclrg4tOVyJH0+0k436lmvXP9Vx5oquVwvI0mh5Tr99WdYS87GIv004tCcb2+ZmiQ+LqLZ8hPwy9PPLPsfj4m7ytRrosIrwmLYtX/FxWcEa2o76c/6by7gnNt2pkf6zGal4FxwAXSot8t/4USsgpC24J74mVF9Gnw0oF9m8xNemltfREgN3/7BOLW42lsu+6Cz8/HS4VLTPGTia9uuPvHOsMR0Z2pOnus3bo6wTFryFdgvREJmEx/SrMKV44gCk83Bz055y3H33yR7+tSoC1ahixTHr242Yi3wF9oPln3JtCWdzBSQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
Received: from BYAPR05MB5463.namprd05.prod.outlook.com (20.177.185.144) by BYAPR05MB6101.namprd05.prod.outlook.com (20.178.54.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2263.10; Sat, 7 Sep 2019 22:52:54 +0000
Received: from BYAPR05MB5463.namprd05.prod.outlook.com ([fe80::f4f2:f284:d49a:890a]) by BYAPR05MB5463.namprd05.prod.outlook.com ([fe80::f4f2:f284:d49a:890a%4]) with mapi id 15.20.2263.005; Sat, 7 Sep 2019 22:52:54 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Robert Raszuk <robert@raszuk.net>, Mark Smith <markzzzsmith@gmail.com>
CC: draft-voyer-6man-extension-header-insertion <draft-voyer-6man-extension-header-insertion@ietf.org>, "6man@ietf.org" <6man@ietf.org>
Subject: RE: SRH insertion vs SRH insertion + encapsulation
Thread-Topic: SRH insertion vs SRH insertion + encapsulation
Thread-Index: AQHVZWy1LXGmyD5/0k6niKwz9Ahon6cgHQCAgAALDQCAAKiwwA==
Content-Class:
Date: Sat, 07 Sep 2019 22:52:54 +0000
Message-ID: <BYAPR05MB5463306B3328F460C2417764AEB50@BYAPR05MB5463.namprd05.prod.outlook.com>
References: <CAOj+MMETQa=OfovZak35VfnY+T6qzU9BxAhmFMXz1b7kSppyQg@mail.gmail.com> <CAO42Z2xMWN92m7iiLiEW2AFCx0iCMGAa_BvsRwzCzb_BnuzWhA@mail.gmail.com> <CAOj+MMGOKUjRFFq8Y977OV47x6qtCvSUixQh-7sgwAQidrtdPw@mail.gmail.com>
In-Reply-To: <CAOj+MMGOKUjRFFq8Y977OV47x6qtCvSUixQh-7sgwAQidrtdPw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-09-07T22:52:53.3072483Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=01cfc5e3-bb6c-4804-b69d-c4d20c1eacc1; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.2.0.14
dlp-reaction: no-action
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 5b140b28-c1c6-4130-fc9f-08d733e61ebc
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600166)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BYAPR05MB6101;
x-ms-traffictypediagnostic: BYAPR05MB6101:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <BYAPR05MB61015863175B9438AD7A024DAEB50@BYAPR05MB6101.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:6108;
x-forefront-prvs: 0153A8321A
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(346002)(396003)(376002)(136003)(39850400004)(366004)(199004)(189003)(6506007)(8936002)(81166006)(81156014)(66946007)(3846002)(66476007)(2906002)(14454004)(66556008)(6116002)(64756008)(66446008)(790700001)(71200400001)(71190400001)(7736002)(8676002)(4744005)(74316002)(256004)(486006)(76116006)(6246003)(5660300002)(52536014)(76176011)(55016002)(6306002)(7696005)(54896002)(26005)(9686003)(102836004)(11346002)(446003)(478600001)(54906003)(110136005)(6436002)(99286004)(33656002)(4326008)(316002)(186003)(53936002)(25786009)(229853002)(476003)(66066001)(86362001); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB6101; H:BYAPR05MB5463.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 29qZ9/YfJPrysa0WKm+WAUcJ+NcBEwZLF8BIcFgd2rCt8M0x9XjpB9J9AednV0h2GbAApcdMLdY+/Mg6ztZJM2K2ERoWYiyMRv0yQZUOjY7LvgEfmy1dQnVnQEsapXs61Rfs61dYQxAuBCwPvXjKaxnukFnmoIYPWeDo0WYdThlspD+8ZHBrgmUVq6pIm+Ove0e8gYMUSQ6S/uIBMBovG5pq/hDe97cE/6eD5OqddBRCy/QjOTwTlcF2n4p161222BpC6rZm54U9holkCLhpxuuX1Zy2lhRqCLVPlRNmNpsfry0RPjxs9clbKHYf53l967LrQyAKghCmdUf5F5GvRPbNVWrl0njuUAsTclBZjZtQazRH6lhrUkQTMTu8mxBIQMlIN0o8b7rbCOjYul+6lAo+msm9AVt5H5pNIeU5Y44=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BYAPR05MB5463306B3328F460C2417764AEB50BYAPR05MB5463namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 5b140b28-c1c6-4130-fc9f-08d733e61ebc
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2019 22:52:54.6571 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 5O5yrZ5dq+JmDj9PukHtSMielpYvse5WbokagiH3uUl6/+C9K5tt3KCbv9i3P6+RF1wA4xISj3mAnkDVCQS6rQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB6101
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.70,1.0.8 definitions=2019-09-07_11:2019-09-04,2019-09-07 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 lowpriorityscore=0 adultscore=0 impostorscore=0 clxscore=1015 malwarescore=0 suspectscore=0 mlxlogscore=999 phishscore=0 mlxscore=0 bulkscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1906280000 definitions=main-1909070249
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/RVtrKu63wxBC0PCsq95N5KZiW4w>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Sep 2019 22:53:04 -0000

Folks,

IMHO, EH insertion modifies the semantics of the IPv6 source address. Today, the IPv6 source address indicates the source of an IP packet and *ALL* of its contents. If transit routers are allowed to insert extension headers, downstream routers can no longer identify the source of a packet and all of its contents.

Granted, in some cases, transit routers are allowed to modify a packet (e.g., Hop Count, DHCP, mutable options). But there is a big difference between changing a field whose value is know to me mutable and inserting a new option.

                                                                                                                                      Ron



Juniper Business Use Only