Re: A common problem with SLAAC in "renumbering" scenarios

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 06 February 2019 19:31 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFFC4130F37 for <ipv6@ietfa.amsl.com>; Wed, 6 Feb 2019 11:31:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FDunv2JVkq8D for <ipv6@ietfa.amsl.com>; Wed, 6 Feb 2019 11:31:12 -0800 (PST)
Received: from mail-pf1-x434.google.com (mail-pf1-x434.google.com [IPv6:2607:f8b0:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E77D0130F29 for <ipv6@ietf.org>; Wed, 6 Feb 2019 11:31:11 -0800 (PST)
Received: by mail-pf1-x434.google.com with SMTP id u6so3534193pfh.11 for <ipv6@ietf.org>; Wed, 06 Feb 2019 11:31:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=oIvKmsX1v6MUa8xJYVgf4cUCCtKEEmbOJBb3iHhp9Ig=; b=foK7VOGhia9IDF1+VFv3W9srLC0fRYZF6h6HsSuVmvtgGqls2WgVTJ0bXr2R0z7Mmx QpC7nLd4DY8/tL7IKo28dHv2YfRATPMJ/Zm3kfOqFKsHZaDChuB6oenEtg4kfmYovFJY FUv506Z7qjzuAuw/bV788ObSklhkK/Y2mpSvVnkZlXsqiYnT9M9quCSB3G2X4IwihPtF zWTNXNKOL4FeUDb3YKR6XD6q1iIDB3fP3BFMkTolawdwRdgE2tdzvhZ8ZLnJDeBKwH53 pMUt6Io0esgkfJ2MtGn4yBnOvZ5SKPxkggEA1oLBj2QyEp2XXu80fb0hlevx8jK5VMa+ VZyw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=oIvKmsX1v6MUa8xJYVgf4cUCCtKEEmbOJBb3iHhp9Ig=; b=hUXydoZt2B0HPLVFt1J4DNGks3l2++dRsgMMp33TDHRO5P6CRu7e+fLFRGSaGkmGXT EBGkKKFxM1WuNzXoNd+hO2UJ244uJb2Re+w66kA04chi5wkKsr46X59XLoC+G3OtZngc DgowW6MVlnrXN0jijFVt/2JX09pFt8q2vxHBP+9lXh2aF4jiEJlyyMLDx3jo98s6amQk rqTNGf6dOWZyquC/641you44V14R+VofJFlmzjTL915C6DUBCfIoDqDJXljC+P0s/kae L7mpDvhSsRr0J5CaHR2UKq5J/EHHEZq+2sygTfIP3PgQNpFpia1z5rtJVjqfuw2BF+Rc w0xQ==
X-Gm-Message-State: AHQUAua0iXvwYrrrRidnLeci1NMnh3ON4XX9KXdKq9U2zT8sNbZZNUFN 0XssNACSTC22qI+qzO6mPU6yLw8p
X-Google-Smtp-Source: AHgI3IalzpSWka8UNVlILPejshMXuT90K32s0f2JdJI2YMY9tTvwGktqMtm1wx+B/oWmOsKF5Tq3iQ==
X-Received: by 2002:a62:6303:: with SMTP id x3mr12435928pfb.110.1549481470997; Wed, 06 Feb 2019 11:31:10 -0800 (PST)
Received: from [192.168.178.30] ([118.148.79.176]) by smtp.gmail.com with ESMTPSA id 85sm11179314pfw.17.2019.02.06.11.31.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 06 Feb 2019 11:31:10 -0800 (PST)
Subject: Re: A common problem with SLAAC in "renumbering" scenarios
To: Nick Hilliard <nick@foobar.org>, Christian Huitema <huitema@huitema.net>
Cc: ipv6@ietf.org
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <ddd28787-8905-bafd-3546-2ceef436c8b0@si6networks.com> <m1gptWx-0000G3C@stereo.hq.phicoh.net> <69609C58-7205-4519-B17A-4FBC8AE2EA16@employees.org> <d40b41c3-ff1b-cab4-a8de-16692a78e8fd@go6.si> <D1E45CAD-08D0-43D4-90F7-C4DD44CB32C0@employees.org> <alpine.DEB.2.20.1902041330531.23912@uplift.swm.pp.se> <77ecf321-b46e-4f25-7f68-05b15714a99e@si6networks.com> <CAHL_VyDdHuEAc9UdeiRp9f+c0tdzyoLwPY1rJbZmbWAuq96Uuw@mail.gmail.com> <alpine.DEB.2.20.1902051127510.23912@uplift.swm.pp.se> <m1gqyJC-0000FkC@stereo.hq.phicoh.net> <CAO42Z2wKh-vXmv=dNmr6oEmGnw09ajrr2geYJ=H1DbSYSm=VuQ@mail.gmail.com> <m1gqzYT-0000F5C@stereo.hq.phicoh.net> <e8eabf0f-191a-a293-8051-35268a62a2bd@go6.si> <37ae87fb-93f5-4ec4-6e55-e35ce308f91c@asgard.org> <2aa19534-4856-f01d-8184-6c7ed125ca1b@go6.si> <9cdf8405-e777-6769-4d4f-f123c13a9456@asgard.org> <f4eaaf13-aff3-439f-4426-d32d3722abfe@huitema.net> <d714d577-74f8-6f1a-76a7-94811b615078@foobar.org>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <81ab4307-efb8-c04e-7acb-a6f7f0ec839f@gmail.com>
Date: Thu, 07 Feb 2019 08:31:05 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.0
MIME-Version: 1.0
In-Reply-To: <d714d577-74f8-6f1a-76a7-94811b615078@foobar.org>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/XDCe5WmCoolKgKyPAjUKvAApseM>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Feb 2019 19:31:14 -0000

On 2019-02-06 23:15, Nick Hilliard wrote:
> Christian Huitema wrote on 05/02/2019 22:10:
>> Lots of the discussion centers on denial. "Don't worry about that, the
>> router's prefix should not change." Really?
> 
> We know the router's prefix will change.  The challenge is transferring 
> the state information from one domain to another, so that when it 
> changes, the end devices can recover as quickly as possible.
> 
> Mark is spot on to note that TCP and UDP require addressing stability. 
> Changing from TCP and UDP is boiling the ocean, which means that if we 
> want to deal with this problem, we need to work with what we have.
> 
> The choices seem to be:
> 
> 1) ensuring that if a device is disconnected and then reconnects to the 
> same network, the device will be given the same lease,

In the general case we can't "ensure" that. Firstly it may be against
business policy or privacy policy for some ISPs. Secondly even if it
was the intended policy, there can always be failure scenarios. Thirdly,
a host might be disconnected from one LAN and reconnected to another
one without knowing it. So even if this is the recommended practice,
no host can rely on it.
 
> 2) the intermediate device remembers the old lease, compares it with the 
> new lease and if they're different, invalidates the old prefix by 
> issuing an updated PIO,

Again, we can't rely in this, due to legacy equipment and the possibility
of failures or reconnections.
 
> 3) pushing the smarts down to the host layer and detecting / monitoring 
> whether any particular prefix is still valid

https://tools.ietf.org/html/rfc6059 ?

In any case, because neither of the preceding options is guaranteed,
I think there is no choice: hosts must be able to recover from
dead addresses.

    Brian

> 
> 4) ???
> 
> Fernando's suggestion is workable but requires CPE vendors to get on 
> board with the idea of storage of addressing information.  Getting ISPs 
> to change DHCPv6 assignment policies is also workable, but requires 
> centralised provisioning and dynamic routing.
> 
> None of these is ideal and all of them require compromise and some 
> change in behaviour in a way that has side effects.
> 
> This is because the core problem is about how to deal with transfer of 
> state information.  Managing state is always a monumental headache.
> 
> Nick
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>