Re: slaac-renum: Valid Lifetimes

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Fri, 03 April 2020 09:57 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 985D33A1653 for <ipv6@ietfa.amsl.com>; Fri, 3 Apr 2020 02:57:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TC2IAWmcGWx3 for <ipv6@ietfa.amsl.com>; Fri, 3 Apr 2020 02:57:31 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D151A3A1652 for <ipv6@ietf.org>; Fri, 3 Apr 2020 02:57:28 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1jKJ4m-0000HuC; Fri, 3 Apr 2020 11:57:24 +0200
Message-Id: <m1jKJ4m-0000HuC@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Cc: Fernando Gont <fgont@si6networks.com>
Subject: Re: slaac-renum: Valid Lifetimes
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
In-reply-to: Your message of "Thu, 2 Apr 2020 15:03:46 -0300 ." <1c30b545-e56f-59e6-3db2-b12d2a5ad534@si6networks.com>
Date: Fri, 03 Apr 2020 11:57:21 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/V-Gw5E4VGZZwOTWpRE-zGliQBpY>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Apr 2020 09:57:33 -0000

>However, after discussing this with a number of developers from 
>different OSes there seems to be agreement that this value Valid 
>Lifetime is still to large, and that it would be more sensible to use 
>something like: 2 * Router Lifetime  (which is still very conservative).

I think we should be extremely creaful with this. This a a host overriding
parameters provided by the network. So we effectively limit how people
can run their networks.

In particular, I can imagine that some people may want long lifetimes to
make sure that if a router dies, local communication remains possible.

So I think limiting the preferred lifetime is relatively safe. Maybe the
valid lifetime can be reduced to one day, but shorter is probably a bad idea.

That said, if we make valid lifetime a small multiple of router lifetime,
then people who want a long valid lifetime can increase router lifetime.
However, a long router lifetime may come back to bite us at other points.

So I would go for something like:
the limit on valid lifetime = max(1 day, 2 * router lifetime).

I assume that in most cases, the algorithm ill agressively limit the valid
lifetime of prefixes that are no longer announced. I.e., this blanked cap
is only for the cases where the algorithm fails.