Re: Metadata over IPv6

Brian Haley <haleyb.dev@gmail.com> Tue, 17 December 2019 19:55 UTC

Return-Path: <haleyb.dev@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9E651208C8 for <ipv6@ietfa.amsl.com>; Tue, 17 Dec 2019 11:55:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OgboC3ATWeZI for <ipv6@ietfa.amsl.com>; Tue, 17 Dec 2019 11:55:25 -0800 (PST)
Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FF941208E4 for <ipv6@ietf.org>; Tue, 17 Dec 2019 11:55:24 -0800 (PST)
Received: by mail-qk1-x736.google.com with SMTP id x1so9296254qkl.12 for <ipv6@ietf.org>; Tue, 17 Dec 2019 11:55:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=Nofe180ExqcM6WNclWeY1SZURu10uurB0Q+bYNpv9GQ=; b=q9SFnFkeNMUl6dYmUPq0Bhv5ox9aEaH7fo5r6HhydV9hH37Ok9dV8J0yIGjCu603Q0 dPwn/PF4uYx4VnAhDH2+2MDEKUWipIO4xW68zfnM8fPeTlKuJiBICFq/ScUSU3tLlBZa 4vd6tw3CatTaEwldSL+0x//Ik/ZePlaQt2YqwqQ9C+cTQ+Qt4eL2Okvrxwnl9GZD2VeL gkV8C28AZSR4D+pXxxZSguQ79Amh/2Uaya0AHT5KxZb9LohWKIlFMaVzSmZuIXpktsIa w8NiVquzBkLv9WK11ZUvcwvPajCMX6CGcwjlHb6PKnpOuKrUtInz9HrcpPHOg/YltXhF 7qnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=Nofe180ExqcM6WNclWeY1SZURu10uurB0Q+bYNpv9GQ=; b=EEb01JNplwUxr49MRkSlXzYhlv++iUZAguIc0zOKdnpZsNqfl2Rtkfm0X8/F8egDsq daOpam/fz4Pk96ec5DFtQmVxNwt8p2h7MTzjDhRPpMCcydfzPvlCP2qgGcSRvPfE3eW+ +XcsNfnEmxX/1v1VhPFJBFbnQ79q7Xggpe6pN3Xi8msaW4zGynsW5EiRVIznPDih/BuQ jCvoxgl73Mmjm1XRFRhp2a3FZTG9gYF9Fu4pkpTxby28y/voaeSA5Hahgr++0pDxXfCc oMra03ixInC2qKFtwixTHBAasCI/YWGzhhRvEiQMitEpOnrDUDm+Es4mH2YZ0v8A374F uVoA==
X-Gm-Message-State: APjAAAXx2Khr0QAd/U04NefhKAIg8b2ZuP6T3/9wpkTfJVjXBV1as265 IPG1SjEe30d0P5sRKFo3FLdJp2SC
X-Google-Smtp-Source: APXvYqyWPxvrwvqcykjJuT+WrQ8A16JfNqbQC1J0eTvJcwP2WOo5iYzaQer7t0TFP0EFbwPpa0zjtw==
X-Received: by 2002:a37:9c8b:: with SMTP id f133mr6719179qke.375.1576612523373; Tue, 17 Dec 2019 11:55:23 -0800 (PST)
Received: from ?IPv6:2601:18f:700:c12d:f5f0:b1d1:5ddd:d4b8? ([2601:18f:700:c12d:f5f0:b1d1:5ddd:d4b8]) by smtp.gmail.com with ESMTPSA id o26sm8513996qtj.58.2019.12.17.11.55.22 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 17 Dec 2019 11:55:22 -0800 (PST)
Subject: Re: Metadata over IPv6
To: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>
Cc: "ipv6@ietf.org" <ipv6@ietf.org>
References: <eee1ebe3-dd1a-1a5b-21a8-739857995abf@gmail.com> <3dd249916fbe47d1a8979591814e7846@boeing.com> <228808147f9e4e068309176ce9365519@boeing.com> <d712c773-8a91-e0cb-f9bc-18eb6ce637ea@gmail.com> <2471d4ef8442471cb173f6977548d9f9@boeing.com>
From: Brian Haley <haleyb.dev@gmail.com>
Message-ID: <f8105c77-59c4-1dda-c223-5c1b1ffc30d9@gmail.com>
Date: Tue, 17 Dec 2019 14:55:21 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.2.2
MIME-Version: 1.0
In-Reply-To: <2471d4ef8442471cb173f6977548d9f9@boeing.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/QCeGu83GaWYydJPtby_pJKFi5_I>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Dec 2019 19:55:29 -0000

On 12/17/19 2:38 PM, Templin (US), Fred L wrote:
> Hi Brian,
> 
>> -----Original Message-----
>> From: Brian Haley [mailto:haleyb.dev@gmail.com]
>> Sent: Tuesday, December 17, 2019 11:11 AM
>> To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
>> Cc: ipv6@ietf.org
>> Subject: Re: Metadata over IPv6
>>
>> Hi Fred,
>>
>> Thanks for the response, I do have some questions.
>>
>> On 12/17/19 12:32 PM, Templin (US), Fred L wrote:
>>>> For embedded IPv4 addresses/prefixes, however, we would use a modified
>>>> IPv4-compatible encapsulation as follows:
>>>>
>>>>     fe80::ffff:a9fe:a9fe
>>>
>>> I'm sorry; I intended to say "modified IPv4-mapped encapsulation". "IPv4-compatible"
>>> is deprecated by RFC 4291 and would contain all-zero's instead of 0x0000ffff in bits 64-95.
>>> AERO uses IPv4-mapped for embedded IPv4 addresses and all-zero's for administratively
>>> assigned AERO addresses.
>>
>> So in my case I don't think we want to define an IPv4-mapped
>> encapsulation, just a new on-link anycast address that something on the
>> link will answer to, it doesn't have to be the router since there might
>> not actually be one.
> 
> There is already a link-local Subnet Router Anycast address - it is fe80::.

Ack.  In our case there might not be a router, a network can be 
completely isolated with only a DHCP server attached, which can also be 
used as a proxy to metadata - it would return a route to the fe80::$META 
address via itself in that case.

>>> Also, fe80::ffff:a9fe:a9fe can be written as fe80::ffff:169.254.169.254 - the two address
>>> representations are equivalent.
>>
>> I wouldn't mind using the AERO format, but reading the draft you listed
>> it doesn't look like fe80::ffff/96 is being reserved by IANA?
> 
> fe80::ffff/96 is a format that has significance on AERO links. AERO is an IPv6-over-foo
> document that specifies the construction of link-local addresses used on the link. The
> format may be useful for other applications and/or link types besides just AERO,
> though, so it would probably make sense to adopt a consistent format. RFC7421
> cites the AERO format.

Ah, Ok.  So does everything on the link use the same address format?  We 
are dealing with pre-existing deployments where we can't change that.  I 
do like the fact that AERO basically has the format we're looking for, 
fe80::ffff:169.254.169.254, which make it obvious this is the metadata 
service IP.

-Brian


>> Just that
>> "Relay, Server and Proxy AERO addresses are allocated from the range
>> fe80::/96, and MUST be managed for uniqueness."
> 
> You are referring to something different here that does not apply to the use case
> of embedding an IPv4 address in an IPv6 address - so, this part of the AERO spec
> is out of scope for what we are discussing here.
> 
> Thanks - Fred
> 
>> since we do control
>> the MAC we could do this I suppose as we want this link-local on the
>> proxy, but what we're doing isn't really akin to AERO (IMO).
>>
>> Thanks,
>>
>> -Brian