Re: slaac-renum: New rev of draft-gont-6man-slaac-renum (Fwd: New Version Notification for draft-gont-6man-slaac-renum-08.txt)

Fernando Gont <fgont@si6networks.com> Fri, 22 May 2020 19:06 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEBE23A0A97 for <ipv6@ietfa.amsl.com>; Fri, 22 May 2020 12:06:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UGI4L3R7c6DD for <ipv6@ietfa.amsl.com>; Fri, 22 May 2020 12:06:44 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1974F3A00D8 for <ipv6@ietf.org>; Fri, 22 May 2020 12:06:44 -0700 (PDT)
Received: from [IPv6:2800:810:464:11f:f597:cad2:df35:f6c5] (unknown [IPv6:2800:810:464:11f:f597:cad2:df35:f6c5]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 860B628371F; Fri, 22 May 2020 19:06:35 +0000 (UTC)
Subject: Re: slaac-renum: New rev of draft-gont-6man-slaac-renum (Fwd: New Version Notification for draft-gont-6man-slaac-renum-08.txt)
To: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>, ipv6@ietf.org
References: <158986953939.9945.6882780269741835824@ietfa.amsl.com> <8354111a-7d3f-ecfa-bcf1-baaae27209ee@si6networks.com> <m1jb46e-0000K4C@stereo.hq.phicoh.net> <04027980-51a1-a831-df0c-750c4194333e@si6networks.com> <m1jbRDw-0000IQC@stereo.hq.phicoh.net> <a2710dfc-ec66-9e9f-8a2b-0fa0ad7e2b32@si6networks.com> <m1jc9hu-0000K8C@stereo.hq.phicoh.net>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <772d4a92-9a4d-ef71-dac5-cb944acba925@si6networks.com>
Date: Fri, 22 May 2020 15:06:48 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <m1jc9hu-0000K8C@stereo.hq.phicoh.net>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/XVOxG-pxauF9XLfjrnNzwy9oK9o>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 May 2020 19:06:48 -0000

Hello, Philip,

On 22/5/20 12:35, Philip Homburg wrote:
>> That's a bold statement.
>>
>> No, the algorithm will now fail.
>>
>> If the algorithm were to not consider ULAs separately, then:
>> 1) If the local network uses, say, ULA and non-ULA, *and*
>> 2) The router advertises prefixes in separate packets, *and*
>> 3) There's a lot of packet loss
> 
> You are fixing one broken edge case with another.

FWIW, one case is common, the other one isn't. But anyway... point taken 
--  That's not how the current algorithm is specified, anyway, so let's 
focus on what's actually in the I-D.



>>> We want something that quickly after the router reboots causes the
>>> old prefix to be dropped. Yet, the algorithm should not drop any prefixes
>>> due to modest packet loss. Currently, 2 out of 3 RAs can be lost without
>>> ill effects.
>>
>> LTA_INVALID is your friend. As noted, one might even set it to "Router
>> Lifetime".
> 
> Like I said, if an address is no longer preferred it can already break
> new connections.

That wouldn't be the case. We're talking about:

1) Current algorithm as specified in the I-D, which separates processing 
of ULA and non-ULA.
2) LTA_INVALID set to, say, "Router Lifetime"

Would that address your concern?



>> I believe this seems to me like an over statement.
>>
>> As with my description above, for this to happen:
>> 1) The same router should be advertising multiple non-ula prefixes, *and*
>> 2) the router must be advertising different prefixes in different RAs, *and*
>> 3) Multiple RAs need to be lost, for a considerable period of time, *and*
>> 4) A new type of address (?) would need to be specified
> 
> No need to specify a new type address. Today anybody can run with
> 2 different ULA prefixes that have different semantics. For example,
> one can be used to communicate purely internally, another to communicate
> with closely related organisations.
> 
>> Me, I consider this very unlikely.
> 
> I think it is very likely that people come up with complex addressing
> schemes. It is also very likely there will be packet loss. Certainly on
> radio link. And give the rate at which new stuff gets added to RA, it is
> very likely that RAs will be split.

FWIW, Section "4.4.  Conveying Information in Router Advertisement (RA) 
Messages" of the draft recommends all PIOs in the same RA.




>> That said, I don't mind setting LTA_INVALID to the "Router Lifetime",
>> and/or recommending that a host sends an unicasted RA at LTA_DEPRECATE,
>> and another one at, say, time LTA_DEPRECATE + (LTA_INVALID -
>> LTA_DEPRECATE) / 2.
> 
> In my opinion having the host send a unicast RS (I assume that's what you
> meant) and retransmitting that, just before a prefix is no longer preferred
> is a lot more complex than my algorithm.

What I was meaning was:

1) Set LTA_INVALID to "Router Lifetime", and/or,
2) Send at least one unicast message at time T= LTA_DEPRECATE + 
(LTA_INVALID - LTA_DEPRECATE) /2 . This RA, besides being an additional 
one, is sent as unicast, which tends to have a lower loss probability.

I blieve either of them should address your concern -- at the time you 
wait till "Router Lifetime", enough RAs should be getting through since 
other wise ND itself would fail (default router would be reoved, etc).

Thoughts?

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492