Re: A common problem with SLAAC in "renumbering" scenarios

Mark Smith <markzzzsmith@gmail.com> Wed, 06 February 2019 00:46 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDA66128CE4 for <ipv6@ietfa.amsl.com>; Tue, 5 Feb 2019 16:46:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.499
X-Spam-Level:
X-Spam-Status: No, score=-0.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EHKW5xUmhaNC for <ipv6@ietfa.amsl.com>; Tue, 5 Feb 2019 16:46:29 -0800 (PST)
Received: from mail-ot1-x329.google.com (mail-ot1-x329.google.com [IPv6:2607:f8b0:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67974128B01 for <ipv6@ietf.org>; Tue, 5 Feb 2019 16:46:29 -0800 (PST)
Received: by mail-ot1-x329.google.com with SMTP id g16so9131677otg.11 for <ipv6@ietf.org>; Tue, 05 Feb 2019 16:46:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7X+x1KoFQJNWmIalCyt1g7ygM8bO2lhTItOVRecJA3o=; b=gofs67zls6Qx4liojy0hLY6jBBTaHTcPtHctGt/hUf6sKI4TN/hCk/QWmLwDx7Y1Tl TU71M8U8bnnF/P3kzAIK0Nt5mWn+2RvMH0Rx6DOOUy/wr8iydddi2/U4qsV12fUKUL5N VEZkM+z2QLZn+p83Jm3sTrynnzOb9YrjI/g8WM5D3qLQrSsCyjgcOTBKNM9RSi0gNjiY BX8OzDmDXZjvE9Rxj4UJCbzg8YQL3iEGBF7/gwHxSSg1gXxephTIZV4lOvXlyowTJcIB +jq5E7FGUjMyGwIZAtmlOTbxy66Y3x8CVqG54vxFfKZ4tQ0/HS03i1i8/cuEvKAsc2T9 +nww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7X+x1KoFQJNWmIalCyt1g7ygM8bO2lhTItOVRecJA3o=; b=cpkVom4VyS1t9i1c4LwxbnI2mniB39IQ9/q6yE5tlM1tB3n/087VRr5WslO6ElYKpm f0uq3SVE4JILwJvCuJBIKYXmeAJkBuyO+8xAK3exENVgwRxiWPKk0fC5lUEfEn1Hmuxu Q2iAHs7rojJ+Jp/6tdEPsmTlgXqE2HwMJc3rtgTAMfILrb66zniglfNgPs5VgWH0nuL5 8m1wcjoRl68m0CLnAdkHyYfs1gAOdN1GXDaJKevVPHtKgc3SUf/YUDNVTlAMsjMmit52 WpT+o8YupQIGvWQJIi3fF0PFQnDF0K2g1i0Nq6c18ddmJpA+RnFc8pKYHvXY+7Euk4Jh 1VwA==
X-Gm-Message-State: AHQUAuYhynJ7NDaa5Y/hPViMVcajLIzUaG+7vEsvHCFZhLcii06ufVix 9x/n5gbhrMxm1DdbmUEM+lyVYmDu2C9Sm1yk6p1cNg==
X-Google-Smtp-Source: AHgI3Iab07uZp4B61/N88PmHQ959Vv+lWCY01hih3tdbqx4IbQ8wbK4CjDf7vHx+MzvnoAGrO+ieIPuySupfR3i/At8=
X-Received: by 2002:a9d:630f:: with SMTP id q15mr4001190otk.187.1549413988440; Tue, 05 Feb 2019 16:46:28 -0800 (PST)
MIME-Version: 1.0
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <alpine.DEB.2.20.1901311236320.5601@uplift.swm.pp.se> <m1gpCcz-0000FlC@stereo.hq.phicoh.net> <ddd28787-8905-bafd-3546-2ceef436c8b0@si6networks.com> <m1gptWx-0000G3C@stereo.hq.phicoh.net> <69609C58-7205-4519-B17A-4FBC8AE2EA16@employees.org> <d40b41c3-ff1b-cab4-a8de-16692a78e8fd@go6.si> <D1E45CAD-08D0-43D4-90F7-C4DD44CB32C0@employees.org> <alpine.DEB.2.20.1902041330531.23912@uplift.swm.pp.se> <62b74cf1-9cb0-bba3-b078-cb6f48e90145@foobar.org> <m1gqeb9-0000GCC@stereo.hq.phicoh.net> <bc8c0ef9-2c24-1c2a-9822-8580e6e1858c@go6.si> <CAO42Z2w2FdcumHTY6S2GuUi4pfbHrc6dihKvDtL3mHUykkOPZw@mail.gmail.com> <6dc0dbea-44fc-96df-c9dd-313d4385d19a@go6.si> <CAHL_VyBxSFXK-t723nFjHLB1GmuZEZzgS6k9oJ4v1qVJn=D1aQ@mail.gmail.com> <0144bc11-bcfc-5d58-7564-47327a28e14b@go6.si> <CAHL_VyCOp5j-WJ02Q09FAv4sn=z4+_jUiRX5WKRRTPGpRB_uWQ@mail.gmail.com>
In-Reply-To: <CAHL_VyCOp5j-WJ02Q09FAv4sn=z4+_jUiRX5WKRRTPGpRB_uWQ@mail.gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Wed, 06 Feb 2019 11:46:16 +1100
Message-ID: <CAO42Z2xWkZQTvmO3wk_nF9Y6W+wjOkqkeNJLLddXuK4S8nHtbg@mail.gmail.com>
Subject: Re: A common problem with SLAAC in "renumbering" scenarios
To: Richard Patterson <richard@helix.net.nz>
Cc: Jan Zorz - Go6 <jan@go6.si>, 6man WG <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000641db605812f0eb1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/aHlYbh1gTc9Mf__V7kbAworkfxw>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Feb 2019 00:46:31 -0000

On Wed., 6 Feb. 2019, 06:01 Richard Patterson <richard@helix.net.nz wrote:

> On Tue, 5 Feb 2019, 17:54 Jan Zorz - Go6 <jan@go6.si wrote:
>
>> On 05/02/2019 18:28, Richard Patterson wrote:
>> > On Tue, 5 Feb 2019 at 15:41, Jan Zorz - Go6 <jan@go6.si> wrote:
>> >
>> >> simply assigns a big IPv6 prefix to that BNG/BRAS as a "pool" where
>> >> BNG/BRAS allocates prefixes to customers "at it's will". It's fast,
>> it's
>> >> simple and works in a lab environment.
>> >>
>> >> That's the behaviour that needs to stop.
>> >
>> > Why?
>> >
>>
>> Here I'll have to repeat what Ole said at the beginning of this
>> conversation. If you setup a lifetime of prefix delegation and assign it
>> to CPE, then CPE expects to get the same prefix back at least for that
>> period of time. That doesn't mean that you can assign prefixes at will
>> at any time you want. You are breaking the "contract" to your customer
>> (CPE). That's exactly the point where things break.
>>
>> If you set a lifetime of assigned prefix to 24 hours and then change it
>> - well, that's your decision, but you are not suppose to break the
>> timers that you set yourself.
>>
>
> That's fine, except it doesn't really have anything to do with your
> previous statement.  I can (and do) assign a single large prefix to each
> BNG for the DHCPv6 server to assign dynamic PDs from, and still respect the
> above assertions.
>
> We use 1 hour lease times.  If a CPE hasn't sent a Release, has the same
> MAC address and DUID, it will continue to get the same PD after a
> [hard|soft]-reboot.  In fact it can return anytime up to an arbitrary value
> (7 days in my network), and still receive the same PD, if the BNG/DHCPv6
> server is configured to keep state for longer.
>
> As just mentioned by Lee, we should be making sure that these protocols
> are resilient to change, not dictating rigid network designs.
>


This isn't the WG that can solve the idenitifer/locator problem.

It's today's primary transport layer protocol that is requiring address
stability for the duration of its connections.

If TCP or some other new transport layer protocol stops imposing that
requirement on IPv6, then PD prefix stability across CPE reboots becomes
irrelevant.