Re: SLAAC vs DHCPv6 (Re: RFC4941bis: consequences of many addresses for the network)

Fernando Gont <fgont@si6networks.com> Tue, 28 January 2020 02:02 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF7163A08B5 for <ipv6@ietfa.amsl.com>; Mon, 27 Jan 2020 18:02:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W2xYJI_xGSH2 for <ipv6@ietfa.amsl.com>; Mon, 27 Jan 2020 18:02:44 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0EA53A08B1 for <ipv6@ietf.org>; Mon, 27 Jan 2020 18:02:43 -0800 (PST)
Received: from [192.168.100.103] (unknown [186.183.48.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id ADC6A86BA5; Tue, 28 Jan 2020 02:37:41 +0100 (CET)
Subject: Re: SLAAC vs DHCPv6 (Re: RFC4941bis: consequences of many addresses for the network)
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, Simon Hobson <linux@thehobsons.co.uk>, 6man WG <ipv6@ietf.org>
References: <03C832CE-7282-4320-BF1B-4CB7167FE6BE@employees.org> <MN2PR11MB3565330989D411525D30B90DD80F0@MN2PR11MB3565.namprd11.prod.outlook.com> <80207E17-AE8E-4D19-B516-D2E6AB70721E@employees.org> <8D5610EA-49D3-483E-BB7A-67D67BC89346@jisc.ac.uk> <DE7B0688-230F-4A5C-8E24-9EAED9FD9FEB@puck.nether.net> <d607cc77-0a98-8319-9f0e-3f8d4a86e6c2@si6networks.com> <F7F5B682-918B-4190-BEE6-A86B5CCD8530@puck.nether.net> <CABNhwV1a+o-D-YDck-Ad42DNbHfPPOfXbbCBCift-=2Jb201og@mail.gmail.com> <4ACE9ABB-C5DA-4A76-8DF9-02D6350B4E9C@thehobsons.co.uk> <cad6f8df-c3c8-b7d3-9f32-cebec4539594@gmail.com> <e3aa960f-2452-c82d-9f51-c69eea7921ea@si6networks.com> <b84a4fcd-65da-88fb-f758-7882695666c0@gmail.com>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <5c69cfad-4c91-431f-3578-9bb239352e53@si6networks.com>
Date: Mon, 27 Jan 2020 22:25:46 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <b84a4fcd-65da-88fb-f758-7882695666c0@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/QXSYdmdluCpgeK42a_AqfTpj7oM>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jan 2020 02:02:49 -0000

On 27/1/20 20:36, Brian E Carpenter wrote:
> On 28-Jan-20 10:44, Fernando Gont wrote:
>> On 26/1/20 17:47, Brian E Carpenter wrote:
>>> On 27-Jan-20 09:22, Simon Hobson wrote:
>>>> Gyan Mishra <hayabusagsm@gmail.com> wrote:
>>>>
>>>>> The beauty behind SLAAC is that it works “out of the box” PNP like features makes it very user friendly to initiatally deploy.
>>>>
>>>> Remember that DHCP for IPv4 generally works "out of the box" for most users. Certainly in the SOHO market, the presence of a built in, auto-configured, and enabled DHCP server in the route means that the user just "plugs it in and it works". By the time you get to a level of network complexity where that isn't the case, then there is normally a network admin either on the staff or hired n as needed.
>>>>
>>>> If that isn't working reliably for users in the IPv6 world then that suggests the various components needed haven't reached the same level of completeness & correctness "mostly" available in the IPv4 world. It isn't an argument that DHCPv6 "doesn't work".
>>>
>>> It's actually a historical accident. At the time that SLAAC was designed, DHCP(v4) wasn't mature and the state of the art in autoconfiguration was Appletalk, Novell IPX, and DECnet Phase IV. It really doesn't matter now. We can't roll the clock back.
>>
>> Well, we *could* end the pointless religious battle, mandate both SLAAC
>> and DHCPv6, and let admins and operators run their networks in whatever
>> way they please.
> 
> That still doesn't resolve the issue of the lack of feature equivalence between RAs and DHCPv6,

Indeed. At the very least, one would have a DHCPv6 route option.

So far, IIRC the arguments against this have been that a DHCPv6 server 
couldn't be ain a good position to tell where packets should be routed. 
However, a number of proposals recently discussed in this working group 
have failed that criteria (if it ever existed).

Folks that need/want to "enforce" policy, should be able to do so. 
Besides, they should be able to rely on any automatic configuration 
mechanism rather than having to duplicate the effort in both protocols.

e,g,-, My ISPs CPE does network configuration (addresses `other info) 
with both SLAAC and DHCPv6 -- because they have to make sure it works 
with whatever stuff their users plug.

Part of the outcome is that while my box does rfc7217+rfc4941, I also 
configure dhcpv6 addresses, and the dhcpv6 server generates IIDs in a 
predictable manner.


> and there would some interesting discussions around which options need to be MTI. For example, is 
 > PD mandatory to implement? It would be interesting to see a draft 
(v6ops, perhaps?). However, I imagine that the constrained node people 
would have something to say if we changed this to a MUST:
> 
> "...all hosts SHOULD implement address configuration via DHCPv6." [RFC8504, section 6.5]

My understanding is that the constrained node folks already have to 
deviate a bit from plain IPv6. So I guess that could be worked out.

It would seem to me the problem here is more of Android than anything else.


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492