Tokenized addresses (was: Re: Feedback on draft-gont-6man-stable-privacy-addresses-01)

[Fernando Gont <[e-mail]>]

On 04/14/2012 04:56 PM, Brian E Carpenter wrote:
>> Does this really help renumbering? e.g., if you have ACLs, they are
>> based on the whole IPv6 address, rather than on the IID...
> 
> This is linked to the whole question of why people assign static
> addresses and how that interacts with renumbering. By getting rid
> of the MAC address (so that the server address doesn't depend on
> the network interface hardware) you are part way to static addresses,

At some point I played with the idea of including the interface-index
(rather than the MAC address in F() (in the algorithm in
draft-gont-6man-stable-privacy-addresses), which would still make the
resulting IIDs vary across networks as the host moves, but remain
constant in the presence of hardware changes.


> and one can imagine a prefix-renumbering mechanism that could handle
> this. Of course here we want an IID that is not only stable but is
> also well-known; servers don't get address privacy ;-).

Well, they *could* -- please see above.

Thanks!

Best regards,
-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492