Re: Comments on <draft-gont-6man-stable-privacy-addresses-01>

[Karl Auer <[e-mail]>]

On Tue, 2012-04-17 at 16:58 -0700, Bob Hinden wrote:
> Could these types of Interface Identifiers also be generated by DHCPv6
> servers.  I would think that it would be useful to generate these hard
> to predict IIDs when a DHCPv6 server is providing addresses.  This
> would be much better than assigning them linearly that are easy to
> predict and scan for.  

Some DHCPv6 servers may assign IPv6 addresses linearly. Industrial
strength DHCPv6 servers don't (eg Nominum DCS). Linear assignment in
DHCPv6 is IMHO basically a bug. If a DHCPv6 server assigns a random
address to a new client, then you have everything stable addresses give
you - it's not based on the hardware address, it's the same whenever you
are in the same network, it's different on different networks.

A DHCPv6 server that allocates addresses linearly would be better fixed
not to do so, than to go to the trouble of implementing stable addresses
a la Gont.

The DHCPv6 model is one where the client defers to the server. While a
client can request specific addresses, and so could request one it had
generated using the stable address algorithm, it would still be entirely
up to the server whether or not to honour that request.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer ([e-mail])
http://www.biplane.com.au/kauer

GPG fingerprint: AE1D 4868 6420 AD9A A698 5251 1699 7B78 4EEE 6017
Old fingerprint: DA41 51B1 1481 16E1 F7E2 B2E9 3007 14ED 5736 F687