RFC4941bis: consequences of many addresses for the network

[[e-mail]]

While reviewing RFC4941bis (https://tools.ietf.org/html/draft-ietf-6man-rfc4941bis) I think I found one gap.

A discussion of the consequences of a host having many (active) addresses on the network.

A 4941bis implementation following the defaults, would at the maximum use 8 active addresses.
(Valid lifetime of one week and one new address per day.)

Shorter regeneration intervals or other approaches like a new address per connection could lead to dramatic numbers.

If we use Ethernet as an example, each new address requires state in the network. In the ND cache in first-hop routers, and in SAVI binding tables in bridges. Given ND's security properties these tables must be policed by the network. A host with a very liberal address regeneration policy might be viewed as performing an attack.

There is no signal available in SLAAC apart from DAD to reject an address. If the network runs out of resources (or prohibits the additional address by policy) the address will not be served. The host has to be deal with that situation.

SLAAC is also missing a mechanism to release an address. Which leads me to think that the address regeneration interval must not be shorter than the ND cache scavenger timeout (which in many networks is high to avoid cache churn and high level of address re-resolutions).

I would like to hear from other network-side implementors and operators.
Is there an issue here?

Best regards,
Ole