Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 21 February 2019 02:22 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25D60130F5C; Wed, 20 Feb 2019 18:22:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GQsrLXwG9s4x; Wed, 20 Feb 2019 18:22:15 -0800 (PST)
Received: from mail-pl1-x62d.google.com (mail-pl1-x62d.google.com [IPv6:2607:f8b0:4864:20::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDE511275F3; Wed, 20 Feb 2019 18:22:14 -0800 (PST)
Received: by mail-pl1-x62d.google.com with SMTP id y5so7743483plk.8; Wed, 20 Feb 2019 18:22:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=HR4Xc8XKIc5bWprP6Nxp0cR90BR/Oi5/Qf9+jWhM8fM=; b=gSuaLkE4wja9cnMKNGE6ZQaZVKrASYXsdel0Jx2R1T64kfIOf3xl2UdtHCZN3FJOaM ZoaIrfth5p8dIYMitWwmT9gvsksMqesf7QBqoj0MKDkL+xR4UHm9TRfPmFuZCskq6P/3 oWTeXuhXDlsrV3L+lUMVlPx3OcW4jdfbXpZv7Fuxlo5Cuw35LfZ4aFtP8ZZz8mpX2+XQ DZTQ5UeVOR1SbJa3tPQUQOOMdEv3o92mz7tkF1i4EL4ab/1eY6wkiT9/sOv00QG0eEgy N6iE9QG6Z5OPPOYT+lEx43uXyHE/flBN70muYG4E+QbslLUUcdMl8z89TQ6UAtW1aZyu tfTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=HR4Xc8XKIc5bWprP6Nxp0cR90BR/Oi5/Qf9+jWhM8fM=; b=ot4dQhmGE3YYThVCTB/rf0bhTFeTPhK2vRafjUn89CdaLRKV5s4Xjw44h5v3Memhxy 50f+nm+hnIMa/Gzxy0rXq4aVVPkoYhz2WfTvUVD+qNgF4lzrM5HDyeWqcEtkNkYKse3x lvwHhvg7/D6rhf9KtGG/Hblnot/pwbfgSw7/MgxwxJ/hdxXhJRL8oW//U8T8yP6+hZKy JOIZNNvMcPXy6oIZboY4zTMdY3StpGngHKeTCe1uGHKibOhGHjXdqzcKYUXQ0gtNIfZQ 4ktcOnUQKbtD0XcBHU9MEf5XJyT1yeNI5ZMz/IqJxswvzm3XUpPStDVwDk5V4lAj30tE Gu9Q==
X-Gm-Message-State: AHQUAubyi3h3qS8c4P6dzsQqSoX/5MC+Gc860G75oT8t2XPj5DJ9kVW2 2z5y5+b54A2Ev3WzL4ucwSIvaYCl
X-Google-Smtp-Source: AHgI3IbuaNNiEHdWa5kvRE1h+S5KcsZ1uStVO7bb0V5Mp3bd7/JfYcvwbbeMK7vLhg11PJBG0p27IQ==
X-Received: by 2002:a17:902:584:: with SMTP id f4mr41016879plf.28.1550715733789; Wed, 20 Feb 2019 18:22:13 -0800 (PST)
Received: from [192.168.178.30] ([118.148.79.176]) by smtp.gmail.com with ESMTPSA id y6sm33311964pfd.104.2019.02.20.18.22.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Feb 2019 18:22:12 -0800 (PST)
Subject: Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios
To: ek@loon.co, Fernando Gont <fgont@si6networks.com>
Cc: "6man@ietf.org" <6man@ietf.org>, IPv6 Operations <v6ops@ietf.org>
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <alpine.DEB.2.20.1901311236320.5601@uplift.swm.pp.se> <35adea8e-704a-76f2-857f-a83a9ad689ef@si6networks.com> <CAFU7BAS1_veTu-ZXAF0MF4niJwz149nGipx3ep_6fh1bewOzgg@mail.gmail.com> <d9503983-6524-a13a-2cb0-cdcb95f76ea6@si6networks.com> <CAFU7BAQfg712UfgW9wi9pd3eVeZP9cqJEXd6=FDmchuSdauv+g@mail.gmail.com> <82c00442-bbc4-581b-2054-2d02d50d20ad@si6networks.com> <CAFU7BASDgmSwY=SLiabSqyiTOphxU0COtFLQvT8drm0iTxM+-Q@mail.gmail.com> <76c488e0-5be7-3b81-d4c3-7af826f0dbef@si6networks.com> <CAAedzxq5d0fgOq5KZu7aCL9wxoDij6C-1Ad9+nQbYyhu2aMt-Q@mail.gmail.com> <da1c6391-5e69-f09b-dee5-83d25f1cd8cd@si6networks.com> <CAAedzxouCqcmW0rA6KwDZEO-n5yVZUYHc+GSetJ8O7=Liou4tA@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <26df53ce-e6d5-9dcb-a7d0-9ceb133f003c@gmail.com>
Date: Thu, 21 Feb 2019 15:22:07 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1
MIME-Version: 1.0
In-Reply-To: <CAAedzxouCqcmW0rA6KwDZEO-n5yVZUYHc+GSetJ8O7=Liou4tA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/cPHQRAunJEFHhjLrGbvlbCU462A>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2019 02:22:17 -0000

On 2019-02-21 15:01, Erik Kline wrote:
> 
> 
> On Wed, 20 Feb 2019 at 17:49, Fernando Gont <fgont@si6networks.com <mailto:fgont@si6networks.com>> wrote:
> 
>     Hi, Eric,
> 
>     On 20/2/19 22:12, Erik Kline wrote:
>     >
>     >
>     > On Wed, 20 Feb 2019 at 17:07, Fernando Gont <fgont@si6networks.com <mailto:fgont@si6networks.com>
>     > <mailto:fgont@si6networks.com <mailto:fgont@si6networks.com>>> wrote:
>     >
>     >     On 20/2/19 06:36, Jen Linkova wrote:
>     >     [...]
>     >     >> Example:
>     >     >>
>     >     >> Say you have two network interfaces: If1 and If2.
>     >     >> Say If1, is configured with 2001:db8:1::/64, and If2 with
>     >     2001:db8:2::/64
>     >     >>
>     >     >> Say the first default router is that associated with If1.
>     >     >>
>     >     >> Say prefix 2001:db8:1::/64 stops being announced, or that you stop
>     >     >> receiving RAs on If1, but RAs on If2 keep arriving fine.
>     >     >>
>     >     >> Based on the logic of your algorithm, one would expect that a new
>     >     >> connection uses 2001:db8:2::/64/If2 (since that's the "more recently
>     >     >> advertised information). However, Rule #5 would override that and
>     >     make
>     >     >> you employ 2001:db8:1::/64/If1, since Rule #5 prioritizes
>     >     addresses on
>     >     >> the outgoing interface.
>     >     >
>     >     > I'm even more confused now, sorry ;((
>     >
>     >     I was referring to the fact that some of the previous rules might
>     >     prevent the evaluation of the rule about freshness. e.g.:
>     >
>     >     * You have two network interfaces eth0 and eth1 (say each connected to a
>     >     different ISP)
>     >     * eth0 has stopped receiving RAs
>     >     * eth1 receives RAs as usual (hence all info associated with this
>     >       interface is "fresher" than than corresponding to eth0)
>     >     * The default router employed by eth0 has precedence (whether because it
>     >       had a higher preference value, because it was the first one that was
>     >       learned, or whatever)
>     >     * When you evaluate the rules in RFC6724, rule 5 will say that the
>     >       outgoing interface will be eth0, and thus you should pick an address
>     >       associated with it --- however, as noted above, the addresses on eth1
>     >       are fresher than those from eth1.
>     >
>     >
>     > Not receiving multicast RAs is not a condition you can really take any
>     > action on.
> 
>     Agreed.
> 
>     The main issue I see with incorporating an explicit rule in RFC6724
>     about "freshness" is that in multi-prefix scenarios, it's guaranteed
>     that the default SA will oscillate among the different prefixes, and
>     that if you only implement this workaround, you wouldn't be able to
>     communicate with hosts actively employing your stale prefix.
> 
> 
> that's where rule 5.5 would help (wherever it is actually implemented; alas...)

That's also why we made rule 5.5 a SHOULD in RFC 8028.

   Brian