Re: draft-van-beijnum-multi-mtu-05.txt

otroan@employees.org Thu, 14 April 2016 12:30 UTC

Return-Path: <otroan@employees.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6225312E422 for <ipv6@ietfa.amsl.com>; Thu, 14 Apr 2016 05:30:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.336
X-Spam-Level:
X-Spam-Status: No, score=-1.336 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=employees.org; domainkeys=pass (1024-bit key) header.from=otroan@employees.org header.d=employees.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9C1kVPUbQKlw for <ipv6@ietfa.amsl.com>; Thu, 14 Apr 2016 05:30:52 -0700 (PDT)
Received: from incoming.kjsl.com (inbound02.kjsl.com [IPv6:2001:1868:2002::144]) by ietfa.amsl.com (Postfix) with ESMTP id 16B5A12E43B for <ipv6@ietf.org>; Thu, 14 Apr 2016 05:30:51 -0700 (PDT)
Received: from cowbell.employees.org ([IPv6:2001:1868:a000:17::142]) by ironport02.kjsl.com with ESMTP; 14 Apr 2016 12:30:50 +0000
Received: from cowbell.employees.org (localhost [127.0.0.1]) by cowbell.employees.org (Postfix) with ESMTP id 4E9B6D7884; Thu, 14 Apr 2016 05:30:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=employees.org; h=subject :mime-version:content-type:from:in-reply-to:date:cc:message-id :references:to; s=selector1; bh=VdfHZcHzNfU5SztZ8fv2rCihtkc=; b= RWgjCOqAD1zGeaW4KIFdEyG3SZgcwdCGWpMfZrK+3EOsylqmAsCTq5v//giU+l/S F4GDiARpQJny3sH6zROX9VcR2e8mTuGuy7aGqtIXLRA/IVRe9TxW+m3S7yd8YY7f wUgPWuOeQSs2HF5Q8MX2VUScIkCrqYPMPo8Pq6NKcOI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=employees.org; h=subject :mime-version:content-type:from:in-reply-to:date:cc:message-id :references:to; q=dns; s=selector1; b=AWwrZ2QSYh/VzMkvqDqQF/LRlx Uoi9Dw0xzgRHEBsFF8SLTlCqA4riIKpxyZ9dUIY72Xa6hjwJFd4JIAvBS2qDGbt7 WdnY43H3TWOyECMrYZ45OBwTFRwPtrpdXnr631FXvBDqU7NwEQGhN0VoEQqANFph yJh2NgBjMal1O5h8U=
Received: from h.hanazo.no (unknown [173.38.220.43]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: otroan) by cowbell.employees.org (Postfix) with ESMTPSA id CAF15D7883; Thu, 14 Apr 2016 05:30:48 -0700 (PDT)
Received: from [127.0.0.1] (localhost [127.0.0.1]) by h.hanazo.no (Postfix) with ESMTP id 020881461A46; Thu, 14 Apr 2016 14:30:49 +0200 (CEST)
Subject: Re: draft-van-beijnum-multi-mtu-05.txt
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Content-Type: multipart/signed; boundary="Apple-Mail=_A82067D6-E121-43E2-A266-08C008A0F291"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail 2.6b2
From: otroan@employees.org
In-Reply-To: <20160414122245.GN518778@eidolon>
Date: Thu, 14 Apr 2016 14:30:49 +0200
Message-Id: <07555AE0-8B99-464D-8F22-1663BF6579A7@employees.org>
References: <20160406151831.GZ518778@eidolon> <570569C2.4030601@acm.org> <20160406212048.GB518778@eidolon> <20160406220411.GC518778@eidolon> <E27329D1-400E-4470-8277-64A664508854@employees.org> <20160414122245.GN518778@eidolon>
To: David Lamparter <equinox@diac24.net>
X-Mailer: Apple Mail (2.3124)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipv6/dxTuOtiht-pajMJTexrf-9qZc8w>
Cc: Erik Nordmark <nordmark@acm.org>, Iljitsch van Beijnum <iljitsch@muada.com>, 6man WG <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Apr 2016 12:30:54 -0000

David,

>> In general I'd prefer that we reuse existing mechanisms for path mtu
>> discovery, and not invent new ones purely for the case of two directly
>> connected neighbors.
> 
> That's actually the crux of it: this isn't Path MTU discovery.  The MTU
> discovered by this mechanism is the first-hop MTU for a lot of paths in
> case of a router and it's going to be distinct from the final PMTU
> towards a particular destination.  Plus, state on this only ever exists
> for direct neighbors, not for any random internet host.

why couldn't it be done as end-to-end MTU?

the directly connected mechanism would be just to give a hint that there might be nodes here capable of a higher MTU. then do normal MTU probing / detection.

what would be gain be to have a specific protocol to probe directly connected neighbors?

Best,
Ole

> 
>> Could we make this work by adding the RFC4861 MTU option to NS/NA
>> messages, and require that PLMTUD probing is used to verify the end to
>> end MTU.
> 
> It's not end-to-end MTU...
> 
>> Then the mechanism used is the same for directly connected neighbors
>> and off-link neighbors (apart from the initial discovery).
> 
> Well, it'd be possible to distinguish first-hop failures from failures
> later in the path, but with a router there's rarely a direct TCP
> connection to it to do PLMTUD on.
> 
> Either way this really needs at least different handling from end-to-end
> MTU in order to not keep probing towards a router whenever a host
> decides to talk to another destination in the internet.  Some first-hop
> neighbor concept...
> 
> If probing hosts for each of their addresses can be avoided, that might
> be useful too, but that's far less of an issue (and harder to do) than
> not probing routers for every single internet destination.
> 
>> If we were to invent new probing mechanisms, I would hope we did so
>> under the PLMTUD (4821) umbrella.
> 
> Hm.  Maybe the draft can be rewritten as extension to 4821, but quite a
> few things are different with reason -- not sure this is that good of a
> fit...
> 
> Cheers,
> 
> -David
> 
>> Best regards,
>> Ole
>> 
>>> On 06 Apr 2016, at 19:04, David Lamparter <equinox@diac24.net> wrote:
>>> 
>>> On Wed, Apr 06, 2016 at 11:20:48PM +0200, David Lamparter wrote:
>>>> On Wed, Apr 06, 2016 at 04:55:46PM -0300, Erik Nordmark wrote:
>>>>> On 4/6/16 12:18 PM, David Lamparter wrote:
>>>>>> On Mon, Apr 04, 2016 at 11:37:17PM +0200, Mikael Abrahamsson wrote:
>>>>>> Ok... easy comments/opinions first:
>>>>>> - should definitely be ICMP, not UDP.  Erik Nordmark's suggestion to
>>>>>>  piggyback on NUD sounds great, though admittedly I haven't thought it
>>>>>>  through looking for pitfalls.
>>>>> One issue compared to a dedicate probe is that a NUD (a unicast NS) of
>>>>> size X wouldn't necessarily result in a unicast NA that is also padded;
>>>>> perhaps one can add such behavior so that we can get the bidirectional
>>>>> probe in both directions.
>>>> 
>>>> That might be (half of) a feature: if the MTU probe is a NS option, and
>>>> the target host does not support it, we still get a NA reply.  That's
>>>> better than timing out waiting.  The downside is that a NA without the
>>>> "MTU response" option doesn't mean that the host doesn't implement the
>>>> protocol -- the NA could be in response to something else.
>>> 
>>> Obvious easy way: have the "ND NODEMTU" option described in draft sec. 5
>>> mandatory on all NAs if the host implements the protocol; receipt of any
>>> NA without the option can then flag the sender as mtu-probe-incapable.
>>> 
>>> (Not sure if the last paragraph of sec. 9.1 already implies the option
>>> MUST be put on all NAs and NSs?  Certainly needs better wording.)
>>> 
>>> -David
>>> 
>>>> That said, I'd expect the probability of a host ignoring a new NS option
>>>> is much lower than it filtering out unknown new ICMP (sub)types or UDP
>>>> ports.  If that reduces useless probing (or even waiting), I'm all for
>>>> it.
>>>> 
>>>> (As I understand it, the draft in no case suggests waiting for the
>>>> probes to come back, so it's not much of an argument.  Might still
>>>> reduce useless probe traffic?)
>>> 
>>> --------------------------------------------------------------------
>>> IETF IPv6 working group mailing list
>>> ipv6@ietf.org
>>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>>> --------------------------------------------------------------------
>> 
>