Re: Question to DHCPv6 Relay Implementors regarding draft-ietf-dhc-dhcpv6-pd-relay-requirements

[Michael Richardson <[e-mail]>]

[e-mail] wrote:
    >> The concerning case is, I think, that the client comes up fine, but declines
    >> to do a DHCPv6-PD for some reason.  Maybe the option was turned off and the
    >> CPE device rebooted.   Or maybe it won't do the PD until some event occurs,
    >> like some VM gets started.

    > [if - We didn’t consider this scenario but it could certainly be a problem here.
    > Do you think that the current problem description text and requirement
    > adequately cover this case?]

I'm told that the acceptable/running-code for a bunch of this stuff is that
the relay snoops the DHCP reply.  We were supposed to have DHCP server->relay
options for doing this, but they just didn't get implemented/used.

I think that we are now getting bitten by this.

What I would expect, in an ideal world, is that when the client does their
DHCP renew, that the server would send the relay the current state.
If the PD disappears from that state, then the relay knows it can blackhole
the prefix.

    >> It seems to me that we need some additional protocol where the relay can be
    >> informed to blackhole the traffic by the DHCP server.

    > [if - I’m not sure how that could work. if the relay isn’t aware that the client’s DHCP
    > state is out of sync with its own, how can the server know this to tell the relay to
    > blackhole?]

I think that the server knows if it's just a regular renew or an allocation
of the IA_NA.   Maybe we need to do something with Reconfigure, if a server
notices the client didn't ask for the PD in order to check if it's still in use.
(Sorry, my DHCP terminology has bit-rotted. I'll go read the document to
remember the right terminology...)

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        |    IoT architect   [
]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [


--
Michael Richardson <[e-mail]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide