Re: appropriate length of fe80:: prefix and new IP-over-foo drafts

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 31 January 2019 22:36 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24456131057 for <ipv6@ietfa.amsl.com>; Thu, 31 Jan 2019 14:36:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WEXDbXJIem_p for <ipv6@ietfa.amsl.com>; Thu, 31 Jan 2019 14:36:02 -0800 (PST)
Received: from mail-pf1-x434.google.com (mail-pf1-x434.google.com [IPv6:2607:f8b0:4864:20::434]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 422AB131053 for <ipv6@ietf.org>; Thu, 31 Jan 2019 14:36:02 -0800 (PST)
Received: by mail-pf1-x434.google.com with SMTP id q1so2149031pfi.5 for <ipv6@ietf.org>; Thu, 31 Jan 2019 14:36:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=XlCWDXS65avUg3WDJ7HF4UAlomC15r4/+mt0/GS4QA8=; b=SLi9fQLwLC4dLXOXnbAW0Aqn3YOpTSl4ECfJRe/STDAIAd8fvYaZCJg4jwrTrhFfld gek+HhV6BbeQyiGNP8MpuPq+EFVv1w3H8Z45kUtpq9HOd02HDxtv3iRvDeZtN0lp6Lkb PJe1sBQWPnJlgW0o105GZ0XQgMZuMhdrrT/sLpkMSviAVk4o4i4aQP/kQgRr0/Z+AJtv eo/J4lPDqP+7GoaDF0hr4Ht1Dir44jcdn+6+tWxaQ7HXMGr9bIxQhs0xl9BK52C75g2l iVNhkJVnj52pJUSzi02CC/oUzt9n1zbkEK/wQn6KV49Seah0YSRYZIgVvq3A8xOBjn5j UtMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=XlCWDXS65avUg3WDJ7HF4UAlomC15r4/+mt0/GS4QA8=; b=b0zArlqdgznqjceav2sziuPT0TQxMJwh7W1WvD4n/HdEc01KGrIl2xssnIfSbUpzkB iYyMCFy9lZXyl51LZL2oahXpJYqdrLctuTLP23D/+2uFf82ejTgN1P2EutFXdVwZ9vE5 zREuyH3RaReq6oOo9femwiN2o2OrhVOMmwDIgKxupdPICOOHVBvIAZdCjCJEmkentLnY NOCS3PkqFlgHLtXr1zA9nZz5HUudzMhmEzxIJT4GzJbm+sAJvrXhQkSlL/4aJXsVCul+ MXIzovs3F9tTcUYEp3ge9aI/OmG30MeugYGrpl4Tluvjx6Qu7cx2jsls2kAU1cclpwdq KRJQ==
X-Gm-Message-State: AJcUukdhP7v8kaasdO8xK3BFZKkCYShwYhQ2Ut9k7dBWj8RpD5Nm67Ca VwRNV3jMyiaya1RvsVMdJHnaVddw
X-Google-Smtp-Source: ALg8bN5W01gepXaSYV1HsUPZj/irR6945nqyCDJaq2/8otqTW+v4RrcTeA2EP9yAKyMPUjblPqOdSg==
X-Received: by 2002:a63:e445:: with SMTP id i5mr33194139pgk.307.1548974161604; Thu, 31 Jan 2019 14:36:01 -0800 (PST)
Received: from [192.168.178.30] ([118.148.79.176]) by smtp.gmail.com with ESMTPSA id g28sm7649074pfd.100.2019.01.31.14.35.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 31 Jan 2019 14:36:00 -0800 (PST)
Subject: Re: appropriate length of fe80:: prefix and new IP-over-foo drafts
To: Fernando Gont <fgont@si6networks.com>, Mark Smith <markzzzsmith@gmail.com>, Alexandre Petrescu <alexandre.petrescu@gmail.com>
Cc: IPv6 IPv6 List <ipv6@ietf.org>, 神明達哉 <jinmei@wide.ad.jp>
References: <6d9657d0-803c-fcb2-ddb9-13f707bdfd47@gmail.com> <669451bbcccf406eb812c518c3ab9f72@ustx2ex-dag1mb5.msg.corp.akamai.com> <CAKQ4NaXGmuuqE=W=fepZDEn8NVJGwtQtdRxxC7j6PePNzy5WGA@mail.gmail.com> <5f27ed42c17a463898c43e94422499a2@ustx2ex-dag1mb5.msg.corp.akamai.com> <CAKQ4NaXS0JjbainT+7AiEb3FudqNiVKc_YXQ1y0JrLSSnzFAPw@mail.gmail.com> <27f3c3266f2e4a7f9ed773e986d41275@ustx2ex-dag1mb5.msg.corp.akamai.com> <38ef7dced8e34455b1059ce3ca8afeb1@ustx2ex-dag1mb5.msg.corp.akamai.com> <0af59661-ed8b-cd25-1125-468604edee53@gmail.com> <1df7d774-fe97-2feb-444a-94992cb89581@gmail.com> <CAJE_bqfVkFkvxVto67VGhjDK61ob6wxZXCRObtmwpr3GSyenfw@mail.gmail.com> <2def076d-b6bf-d84f-152b-d1d9277e9e73@gmail.com> <CAKQ4NaUW5-VY=TMjh0Ap01KTg4=An8=EXH_ej40nW=GM1kUL4w@mail.gmail.com> <c54b9702-1c6f-e5ae-971d-7d3ef443d994@gmail.com> <CAO42Z2wPAF6YCwsb+f0BXMEOKdFSiiFRNop=ChvKFPW32UepBA@mail.gmail.com> <e2a1a5c4-832f-744e-db69-2100c32fb59e@gmail.com> <9bfa3899-bab8-f606-06f2-4e42a629b9fa@si6networks.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <efe24981-5a3b-5cfd-49eb-12546f0e9c5f@gmail.com>
Date: Fri, 01 Feb 2019 11:35:52 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0
MIME-Version: 1.0
In-Reply-To: <9bfa3899-bab8-f606-06f2-4e42a629b9fa@si6networks.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/d2j5hzVC_Sn2iCMev7dP4sU_fM8>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Jan 2019 22:36:05 -0000

Hi Fernando,
On 2019-02-01 00:15, Fernando Gont wrote:
> On 30/1/19 19:14, Brian E Carpenter wrote:
>> Section 5.3 "Creation of Link-Local Addresses" of RFC4862 refers to
>> an interface identifier of N bits and an fe80::0 prefix "of
>> appropriate length", which according to the addressing architecture
>> is 128-N. But N is undefined by RFC4862 and cannot be derived from an
>> RA because all this happens as soon as the interface is enabled.
>> Therefore N must be predefined.
> 
> I guess that since link-local addresses are generated with SLAAC, at
> least according to current specs that implies a prefix length of /64?

All the current specs (including the ones Alexandre mentioned) specify
64 bit IIDs for LL assignment. But as I pointed out, it isn't necessary
that the same IID is used for LL creation and for a routeable address
created later after receiving an RA/PIO. I can't see anything in nature
or RFC4862 that requires the lengths to be the same either.

I have no problem with every ipv6-over-foo specifying 64 for the LL IID,
or with implementations using the same IID for both LL and SLAAC, but
these are choices, not rules.

There's probably a privacy argument for *not* using the same IID for
LL and routeable addresses.

>> As pioneered by RFC2464**, all ipv6-over-foo documents must therefore
>> specify N for their link type. So far, everybody has specified 64, as
>> far as I know. Is there a reason to do otherwise for the two drafts
>> mentioned below?
> 
> I'd regard that as an artifact of history ;-) , which made sense at a
> time when we generated IIDs embedding MAC addresses in the IID.
> Nowadays, I don't think there's a valid technical reason for a link
> layer to specify the IID length. Why would they care? In fact, some
> might even regard that as a layering violation...

You're 100% correct about the historical reason for this. It's quite
amusing to see the magical 0xfffe appearing in draft-hou-6lo-plc
for no obvious reason. But I think that an ipv6-over-foo MUST specify
the IID length for LL addresses, because it's explicitly a free parameter
N in RFC4862. Of course these days the IID bits should be specified
as "see [RFC8064], [RFC7217]".

>> Why does it matter, since the unrouteable fe80::/(128-N) prefix is
>> quite disjoint from the question of the routeable /64 prefix? All we
>> care about is that it matches fe80::/10.
>>
>> (As a matter of curiousity, is there any particular reason to use the
>> same IID to generate the LL address and the stable routeable address?
>> It surely isn't necessary, otherwise temporary addresses wouldn't
>> work.)
> 
> Where I've found this "expectation", it has been associated with some
> sort of "compression" -- some way to avoid storing or transmitting part
> of the IP address because you can derive/imply it form elsewhere.

Which sounds like bad computer science. And again, temporary addresses
seem to show that it is a wrong assumption.

    Brian