Re: Running code (Was: I-D Action: draft-ietf-6man-ipv6only-flag-03.txt)

Toerless Eckert <tte@cs.fau.de> Tue, 30 October 2018 15:18 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 800071293FB for <ipv6@ietfa.amsl.com>; Tue, 30 Oct 2018 08:18:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.952
X-Spam-Level:
X-Spam-Status: No, score=-3.952 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VeTyvi5YUIff for <ipv6@ietfa.amsl.com>; Tue, 30 Oct 2018 08:18:53 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [131.188.34.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67C53128CFD for <ipv6@ietf.org>; Tue, 30 Oct 2018 08:18:53 -0700 (PDT)
Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [131.188.34.52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id D1EDB54800D; Tue, 30 Oct 2018 16:18:48 +0100 (CET)
Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id A4AB9440210; Tue, 30 Oct 2018 16:18:48 +0100 (CET)
Date: Tue, 30 Oct 2018 16:18:48 +0100
From: Toerless Eckert <tte@cs.fau.de>
To: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Cc: ipv6@ietf.org
Subject: Re: Running code (Was: I-D Action: draft-ietf-6man-ipv6only-flag-03.txt)
Message-ID: <20181030151848.3kme3w2ml5p35bxc@faui48f.informatik.uni-erlangen.de>
References: <37ba23b3-df19-9c2a-bdbe-ba7a99d72d05@si6networks.com> <0d6008a4-337b-2ccb-2d9f-837f786eca65@gmail.com> <bfa4397a-aa7a-1184-4147-4cbfbfd13603@si6networks.com> <8C587906-F0EE-4A61-9046-2BFAC52588C0@isc.org> <E8DE18B5-94FC-411C-A310-E49A382E0079@thehobsons.co.uk> <e0fa8fad1b4249c9af79788323b0a922@boeing.com> <3A03A073-72E2-43A8-90A4-5C29DF445361@thehobsons.co.uk> <27fdbd71125842d888c5136684bf6e7b@boeing.com> <9A4368D6-E4B1-474C-9838-B584AF6D70C8@thehobsons.co.uk> <m1gHUMI-0000I6C@stereo.hq.phicoh.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <m1gHUMI-0000I6C@stereo.hq.phicoh.net>
User-Agent: NeoMutt/20170113 (1.7.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/ToJRpweKoe-Tfr4GOqLdF_AYCpM>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Oct 2018 15:18:57 -0000

On Tue, Oct 30, 2018 at 02:47:00PM +0100, Philip Homburg wrote:
> > So, here's the challenge which you seem to be holding back from,
> > write down the actual rules. No hand waving that "that's a good
> > clue", but actual rules that "if you see <some observable state>
> > then <do some specific action>".
> 
> My take on it:
> 
> 1) If a host has a global IPv6 address and is unable to reach a DHCPv4
>    server, then after a short while agressively reduce the rate of DHCP
>    multicast messages

IMHO:

If the host sees the ipv6only flag from all IPv6 routers, it MUST NOT
perform IPv4 DHCP.

Why:

The flag is a clear indication that these IPv6 routers indicate that
there must not be any global IPv4 on this subnet. Even if the DHCP
operations would result in finding a router tht disagrees, then this
is clearly a misconfiguration of the subnet and the host has to make
a choice whose guidance to follow, and this document mandates
that it must be the IPv6 routers flags.

> 2) If a host has a global IPv6 address and it configures an IPv4 link local
>    address then the host should consider only 169.254.0.0/16 to be 
>    onlink.

The "then" portion of this sentence is just restating rfc3927.

The question is whether the ipv6only flag is meant to indicate that
there should be no global IPv4 operations on the subnet or no global
nor link-local ipv6. The current draft seems to intend the latter
to be able to fully shut down the stack. It could be useful to have
another flag indicating whether ipv4 link-local is still
to be used on the subnet.

> Note: this second requirement makes sure that any global IPv4 address that
> the host knows or learns will not result in any traffic, because the host
> does not have a default router.

nothing new vs. rfc3927.

> 3) If a host has a global IPv6 address and a link local IPv4 address then
>    the host should agressively reduce the rate of any service discovery
>    multicasts on IPv4.

I am not aware of any IP protocol version specific optimization options
for mDNS. If there are common ways to make mDNS less chatty without
slowing down discovery, they should be defined independently of the
v6only flag discussion. 

Confounding the situation like you propoose is like "make ipv4 service
discovery less chatty to a point that it may break because it doesn't
matter if ipv6 is running" - and thats not a correct approach given how
the service in question may be ipv4 only.

There may be optimization options to prefer IPv6 over IPv4 discovery
for dual-stack cases, maybe there is something already defined, but 
that could only be IMHO through timing - e.g.: look for service
first via IPv6 and only try IPv4 adfter some short timeout. But that
too would better be defined independently of the ipv6only flag
discussion because its IMHO useful independent of the flag.

Cheers
    Toerless

> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------