Re: Extending a /64

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Sun, 08 November 2020 15:43 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEEA03A0C6A for <ipv6@ietfa.amsl.com>; Sun, 8 Nov 2020 07:43:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QzHuoNHMErW1 for <ipv6@ietfa.amsl.com>; Sun, 8 Nov 2020 07:43:11 -0800 (PST)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28D023A0C62 for <ipv6@ietf.org>; Sun, 8 Nov 2020 07:43:09 -0800 (PST)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1kbmqL-0000GqC; Sun, 8 Nov 2020 16:43:01 +0100
Message-Id: <m1kbmqL-0000GqC@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Subject: Re: Extending a /64
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <m1kbkaI-0000ImC@stereo.hq.phicoh.net> <EDD054A8-E40A-4FAC-998B-C5835D5D9CB1@employees.org>
In-reply-to: Your message of "Sun, 8 Nov 2020 14:57:11 +0100 ." <EDD054A8-E40A-4FAC-998B-C5835D5D9CB1@employees.org>
Date: Sun, 08 Nov 2020 16:43:00 +0100
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/Vx6IhTV1gqewRiKt_FRlMdYMk54>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Nov 2020 15:43:13 -0000

> The problem is from the perspective of an end-user.  What should
> an end-user do if the only thing available on that link is a /64.
> 
> That problem isn't just restricted to mobile operators.  For example
> if I connect a host with VMs to my employer's network, I cannot
> extend it. No DHCPv6-PD is supported. Nor HNCP.  This works
> "perfectly" fine for IPv4.
> 
> While I think it's perfectly fine to not accept that this is a
> problem, and require all network operators be it Enterprise or SPs
> to support DHCPv6-PD and HNCP.  It might be worth taking a second
> look at that.
> 
> And note that extending the /64 boundary doesn't really solve this.
> At least not in a very non-hackish way.

I guess the issue is that with NAT we got used to being able to hide
an entire IPv4 network behind a single address. Of course, that also
works with IPv6, but we don't want to do that.

With IPv6 we are doing a new thing, and the net result is that it is a bit
chaotic:
- relavtively short prefixes are typically distributed using DHCPv6 PD.
  Such a prefix can be split into one or more /64s.
- /64s are used to number subnets and can be split using L2 bridging
- a /64 can also be split into smaller prefixes and then DHCP IA_NA can be
  used on those (though it techincally violates the address architecture)

So what you can do today is allocate addresses within VMs using DHCP IA_NA.

On IPv4 every network runs DHCPv4 because that is what is needed. On IPv6
every network has RA because that is what is needed.

We are now at a stage where DHCPv6 PD is needed, but too many network don't
support is.

I guess replacing one protocol that is not deployed with a future protocol
that also needs to be deployed doesn't make a lot of sense.

In the case of a VM, typically a host is connected to a multi-access network.
So the /64 of the subnet cannot be subdivided by the host. It would require
changes on the router to have a unique /64 per host.

In that case why not implement DHCP PD?