RE: [v6ops] RFC4861 question - short prefixes in PIOs

Dave Thaler <dthaler@microsoft.com> Wed, 26 June 2019 17:40 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77D341203AC for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 10:40:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WRD7b7xcnYSZ for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 10:40:16 -0700 (PDT)
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-eopbgr770107.outbound.protection.outlook.com [40.107.77.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DEE6A1203A1 for <6man@ietf.org>; Wed, 26 Jun 2019 10:40:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MTN+hxGCQDMFu1FC2ne4hftyR9oJH5yhzyF0ZZx2hEHcxSig1M7SoaZLJOwnuH85OBKqZq+Xs0ytOGee/LNtFAWyOmW5AX0eMRP778WalogDYTtAX6NXxnTTBqYOQWXfpl3NVDXDu8jAp6NqB+9apDk9ghzYuBLXqK9JbzTN21xr0RWEaX135wEKPSl7rav4+82a89oEPu+HBnagImNeNmwxNuEGmFZt7KcebpxHNWOj6Nc4pRjkChrRXxaLtrQTvHRKe9HeAUw/OppOv3aSuCOoNVmj8mF6/UeYhFXYCP55Gm1VmsgbwNq71yBXHsmZyRdMj+AnUlylVgticURCAg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hD4LgRRInfn0VBxmO1jpNTE6KOqaVRx80FSd0jnakEA=; b=ddwl8vmv3fnGc/qFkhyFyRZlrsNwfbkh85h8VlzZ+1FXkw3k2fq9SxolkXMJHFqGWqOajjUb3Izm0tNyK4Db9/5ShcGbdcZ2aYECyNECU/ApsCz3e8Z4Bgn41ngsO/kYoX5Lau4WEgeH/VRiWCKpUgx985bCNsaeXSifINWBeEYF6oKZxfCI6o0TJRj7X6PhjByfrG/KAcsOlerDgbsO83VT7JVZp7tkEG4SwtTUqzZgr8Nq3rBfcNI6cJf6muOf4ki4gE82FFysPWs0mftBXarIQDb4wUgP4+V+Hq8iuJxm/vnBVOxCFLg6ZVkbxyav8q/IAc3BghVSOXZ582Xlpw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=microsoft.com;dmarc=pass action=none header.from=microsoft.com;dkim=pass header.d=microsoft.com;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hD4LgRRInfn0VBxmO1jpNTE6KOqaVRx80FSd0jnakEA=; b=UxjIpAtjPCY0wpL6Sz4folurnTeXI4j+J8s53jmyvEWYQykrHk+4fO8zfhReCIL26IUnXSiDEAIskZdMI+YHTa1f30xRIb5YHgxpEWl+2xladcFPXt59h+pSiElnxaoIDqBmjv3xeclq8+g0H5TVH+rfEaUlxozRzDTmSHp2uI4=
Received: from BN6PR21MB0497.namprd21.prod.outlook.com (10.172.112.7) by BN6PR21MB0129.namprd21.prod.outlook.com (10.173.199.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.3; Wed, 26 Jun 2019 17:40:11 +0000
Received: from BN6PR21MB0497.namprd21.prod.outlook.com ([fe80::8dec:7b59:4889:a0ae]) by BN6PR21MB0497.namprd21.prod.outlook.com ([fe80::8dec:7b59:4889:a0ae%4]) with mapi id 15.20.2032.008; Wed, 26 Jun 2019 17:40:11 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>, 神明達哉 <jinmei@wide.ad.jp>
CC: 6man <6man@ietf.org>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs
Thread-Topic: [v6ops] RFC4861 question - short prefixes in PIOs
Thread-Index: AdUsMmrDTybnqCimSw+vUa2pQYzWEwACP6cAAAEE7IAAAYAPQA==
Date: Wed, 26 Jun 2019 17:40:11 +0000
Message-ID: <BN6PR21MB04977E999EE62A9929ABE7B7A3E20@BN6PR21MB0497.namprd21.prod.outlook.com>
References: <729f46ec4a8b419797e15bbdcac3e549@boeing.com> <CAJE_bqeXkyWec9-EG1QxS-1FeTyKS6-ONNOYhQK8gsQGwenaVQ@mail.gmail.com> <2b54c5e1eb54498faa7ec5d07e0f9b3a@boeing.com>
In-Reply-To: <2b54c5e1eb54498faa7ec5d07e0f9b3a@boeing.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-06-26T17:40:10.7104424Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=9a933a81-bc4f-4416-85bb-ebaf9b10dfd5; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com;
x-originating-ip: [73.59.106.235]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 811b52f9-5fd0-4e24-0bc5-08d6fa5d56bd
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BN6PR21MB0129;
x-ms-traffictypediagnostic: BN6PR21MB0129:
x-ms-exchange-purlcount: 3
x-microsoft-antispam-prvs: <BN6PR21MB012976E981F1E1568C606A22A3E20@BN6PR21MB0129.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 00808B16F3
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(366004)(396003)(136003)(39860400002)(376002)(199004)(189003)(26005)(68736007)(6506007)(22452003)(2906002)(7696005)(53546011)(76176011)(102836004)(53936002)(554214002)(6246003)(8936002)(81156014)(186003)(8676002)(66066001)(110136005)(4326008)(81166006)(8990500004)(6116002)(3846002)(790700001)(316002)(10090500001)(74316002)(99286004)(7736002)(52536014)(6306002)(9686003)(25786009)(606006)(966005)(33656002)(478600001)(10290500003)(14454004)(66574012)(446003)(476003)(11346002)(14444005)(256004)(229853002)(54896002)(55016002)(66946007)(73956011)(66446008)(66476007)(66556008)(64756008)(76116006)(6436002)(486006)(86362001)(71190400001)(71200400001)(5660300002)(236005); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR21MB0129; H:BN6PR21MB0497.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: D+qssoZxAmorYui1CYBd+OD9OGmq0ztGVCeBMkVOHMkNjyDoHOF+BnStSlgdd49WMN0Mbw9UZY2n9WMNFIOtpW7x/aYSe6jcoMys+87h/ddCQEmiQ6dc4M4KCpZf6zwQpke/wSbDbNySX9iq3xauYogVyzFET8cIDj3q+G418nNv+16L8HwbAmB0keHOhwglKZdD3V9CaPu+bIshyAJ4+zvnCbtlljvypeosCTUpRgxY1iUW7DN0g/gicUDjYLTCNLjIRzZ6q6NH5fOH+zGVtJBlZ053RKh/H1ESM8ukzUN9dRuLt8KjW5gurKi3Uj8wtU8xpqLT3Ufgh7WPack57vM0r2C8lWXoNuXVP+EW53k/294e2THus7YGaMd2/FK4XoFgvEaLjDgm2XPWvrAUM1wzFq47M9vcPq6RbJyFL3o=
Content-Type: multipart/alternative; boundary="_000_BN6PR21MB04977E999EE62A9929ABE7B7A3E20BN6PR21MB0497namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 811b52f9-5fd0-4e24-0bc5-08d6fa5d56bd
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jun 2019 17:40:11.1957 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: dthaler@ntdev.microsoft.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR21MB0129
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/67YJPuZXV4OqUxMYCwcyAJx3RII>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Jun 2019 17:40:20 -0000

RIO should add a route with the next hop of the router, where the prefix is not an on-link prefix.
PIO should be for on-link prefixes, i.e., either the receiver should create a SLAAC address or the receiver should add an on-link route, or both.

Dave

From: ipv6 <ipv6-bounces@ietf.org> On Behalf Of Templin (US), Fred L
Sent: Wednesday, June 26, 2019 9:52 AM
To: 神明達哉 <jinmei@wide.ad.jp>
Cc: 6man <6man@ietf.org>
Subject: RE: [v6ops] RFC4861 question - short prefixes in PIOs

OK, thanks. Then, it seems to me that what I really want is a Route Information Option
(RIO) [RFC4191] because what I am looking for is a way to establish a short prefix in the
IPv6 forwarding table that directs packets to a specific outgoing interface (or, more
precisely, to a specific router on a specific outgoing interface).

But, with RIO, the prefix would not be added to the interface prefix list in the same
way as for PIO - correct?

Thanks - Fred


From: 神明達哉 [mailto:jinmei@wide.ad.jp]
Sent: Wednesday, June 26, 2019 9:23 AM
To: Templin (US), Fred L <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>>
Cc: 6man <6man@ietf.org<mailto:6man@ietf.org>>
Subject: Re: [v6ops] RFC4861 question - short prefixes in PIOs

(I'm only copying 6man, as I believe it's purely a protocol spec
question)

At Wed, 26 Jun 2019 15:56:36 +0000,
"Templin (US), Fred L" <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>> wrote:
>
> I have an RFC4861 question (several actually) on short prefixes in RA PIOs:
>
> 1) If a PIO includes a prefix with length less than 64 (e.g., 2001:db8::/32) and with L=1, does it
>
> mean that 2001:db8::/32 should be added to the interface prefix list?

In my interpretation (ditto for subsequent questions), yes.

> 2) If yes to 1), does it mean that packets forwarded to the interface for any destination covered
>
> by 2001:db8::/32 will trigger Address Resolution instead of forwarding to a default router?

Yes.

> 3) If the PIO instead has L=0, does it mean that 2001:db8::/32 is “associated” with the link but
> not necessarily “on-link”?

I'm not sure how to interpret it (in particular I'm not sure what
"associated with the link" means), but my interpretation of L=0 is
that the RA doesn't say anything about the on-link-ness of that
prefix.  See also the description of the L flag in RFC4861:

      L              1-bit on-link flag.  [...]  When
                     not set the advertisement makes no statement about
                     on-link or off-link properties of the prefix.  In
                     other words, if the L flag is not set a host MUST
                     NOT conclude that an address derived from the
                     prefix is off-link.  That is, it MUST NOT update a
                     previous indication that the address is on-link.

> 4) If yes to 3), does it mean that 2001:db8::/32 should be added to the IPv6 forwarding table
>
> as a “route-to-interface” with the receiving interface as the next hop?

No.  See the second MUST NOT of the RFC4861 text cited above.

> 5) Does A=1 have any meaning for prefixes with length less than 64? Or, must prefixes with
>
> length less than 64 set A=0?

As far as RFC4861 is concerned, the A flag has no meaning, regardless
of the prefix length.  It only matters in RFC4862.  In terms of
RFC4862, whether "A=1 has any meaning for prefixes with length less
than 64" depends on the length of the IID of the link; if the prefix
length != 128-IIDLength, the validation rule 5.5.3 d) of RFC4862 makes
the prefix ignored.  If non-64 prefix length is invalid in terms of
RFC4862 in that sense, it'd be *safe* to avoid setting the A flag, but
the protocol specification doesn't say it *must* be so.

You may also want to check
https://tools.ietf.org/html/draft-jinmei-6man-prefix-clarify-00<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-jinmei-6man-prefix-clarify-00&data=02%7C01%7Cdthaler%40microsoft.com%7C8553bcb309874f844e9408d6fa56b303%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636971647627136134&sdata=AQ8dP3HU4UonvrTkx5TMKYxgS%2FI%2BAxkImKLi%2B9M8aBk%3D&reserved=0>
I believe it clarifies many of the above questions.

--
JINMEI, Tatuya