Re: Last Call: <draft-ietf-6man-rfc4941bis-10.txt> (Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6) to Proposed Standard

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Thu, 10 September 2020 12:41 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 269313A0870; Thu, 10 Sep 2020 05:41:51 -0700 (PDT)
X-Quarantine-ID: <2PN-6Yuuxtf2>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "Cc"
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2PN-6Yuuxtf2; Thu, 10 Sep 2020 05:41:50 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 169233A084A; Thu, 10 Sep 2020 05:41:48 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1kGLtW-0000KoC; Thu, 10 Sep 2020 14:41:42 +0200
Message-Id: <m1kGLtW-0000KoC@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Cc: Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org>
Cc: last-call@ietf.org, draft-ietf-6man-rfc4941bis@ietf.org, 6man Chairs <6man-chairs@ietf.org>
Subject: Re: Last Call: <draft-ietf-6man-rfc4941bis-10.txt> (Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6) to Proposed Standard
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <159969199185.9541.8823907519726516405@ietfa.amsl.com> <CAKD1Yr1fVnhr3ZM64vLxtXg-9WAKemDuzW2gMupviv-i9V-GiA@mail.gmail.com>
In-reply-to: Your message of "Thu, 10 Sep 2020 20:26:47 +0900 ." <CAKD1Yr1fVnhr3ZM64vLxtXg-9WAKemDuzW2gMupviv-i9V-GiA@mail.gmail.com>
Date: Thu, 10 Sep 2020 14:41:42 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/cEKC8moXGz4AxmJWZiEDcrP2d_A>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Sep 2020 12:41:51 -0000

>4. This text:
>
>   Note that, except for the
>   transient period when a temporary address is being regenerated, in
>   normal operation at most one temporary address per prefix should be
>   in a non-deprecated state at any given time on a given interface.
>
>seems excessive because it immediately makes all current implementations
>non-compliant. It also does not seem like a good thing to limit the number
>of temporary addresses in general. If an implementation wants to create
>more than one for extra privacy (e.g., to use different IPv6 addresses for
>different applications), it should be free to do so. This text is also not
>true if a user changes TEMP_VALID_LIFETIME to a value that is not exactly
>2x TEMP_PREFERRED_LIFETIME. Users are explicitly permitted to change these
>values in section 3.8.

Can you explain what current implementations are doing differently? As far
as I know there is usually only one temporary address that is not deprecated.

I'm not sure how it would work if you have multiple addresses that are not
deprecated. It becomes ambiguous which address will be selected by
source addresss selection.

At the same time, if an application wants to bind to a specific address then
an address only needs to valid, deprecated is fine. Even better because that
means that source address selection will not select that address (unless all
addresses are deprecated).