Re: [v6ops] RFC4861 question - short prefixes in PIOs

Mark Smith <markzzzsmith@gmail.com> Thu, 27 June 2019 01:04 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 232C41203D1 for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 18:04:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.497
X-Spam-Level:
X-Spam-Status: No, score=-0.497 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CIugmSUaKfQQ for <ipv6@ietfa.amsl.com>; Wed, 26 Jun 2019 18:04:40 -0700 (PDT)
Received: from mail-ot1-x32e.google.com (mail-ot1-x32e.google.com [IPv6:2607:f8b0:4864:20::32e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62187120472 for <6man@ietf.org>; Wed, 26 Jun 2019 18:04:39 -0700 (PDT)
Received: by mail-ot1-x32e.google.com with SMTP id n5so526107otk.1 for <6man@ietf.org>; Wed, 26 Jun 2019 18:04:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=aQk/9pBZhogMgPOQjNQa10yKgDalpC+raOqIV/v5dxs=; b=FW7NzN2tzkO9dY47Dtg6IbueePk9U8XGBViSrVM824SqcYt3yBD1rJQAIsrD2VXiE9 7NizLEajY48tn2+uBT2Jd7hM6jCbpzW9gHrfpdF505gX+LJizI/0hc+i45YzSWaH61hL yHn7OEVq3EVBqY1CueCgUCtpFJ69lTMpiGSuPechFQubh6o+n5txFVnY0Q2LAt3wd1JJ tuys94YLmhwAcki3L3b+rMDhDlGeEM8jZiEF/Ji2+J/F44Ixud3o8nzPSlObvQBjKL8O DtDbXDCpGFL4IjU3OMwvjXblFrtEAhCj4CxcdfL5iLn9GcjhHmkZ25c7nl1/0ZQ/aUYv M6rQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=aQk/9pBZhogMgPOQjNQa10yKgDalpC+raOqIV/v5dxs=; b=qdAGCjBKODYPCpGBUUGeSNFSjEYNT0A4pr/TD/sdX2xF9v2hkXXnKAn/YXWJExqkoo WP6t6sWFmy8w1f1DPH783b9snQrCwhEs7/DMB/KtxXu0Tqbex5EpNd31h3y3ZSP0Elmh X1Qai9aAQfNmw2aXMtUxLZ2pybVsU/BkFBUL+QwfTf2wf302C2mCHAADjDf+epVLxBRw lrh7uwtCou9PawIFJfNxS65HMyf2pCVgsvNglf3QOh57M5Rsfv1WwLmsyU9b1QAZ2T+s SkZN+TRpvnktEAGtCFfYSKprNnU98k4LjvcWylbHAh1imm29HKFWUQ8bqARtYM/Ubpia IZEA==
X-Gm-Message-State: APjAAAW7N+MatX2BY/TsxEHCgCV0iJ+JJW5r7gMr4c7WTq0EtF3PwDHN 9iRi6WyXBGbR68SH7hirVxIcpD5w6/jSLSDhMAc=
X-Google-Smtp-Source: APXvYqw+4MjHUudshhgH0dOkBZezC/8AFM7OUvls613LF4JP6yv3mn7GDRHjYQ90cpUVVq9fI6EItLQrgZA1Pr1s6Yc=
X-Received: by 2002:a05:6830:1192:: with SMTP id u18mr1118816otq.74.1561597478620; Wed, 26 Jun 2019 18:04:38 -0700 (PDT)
MIME-Version: 1.0
References: <729f46ec4a8b419797e15bbdcac3e549@boeing.com> <CAJE_bqeXkyWec9-EG1QxS-1FeTyKS6-ONNOYhQK8gsQGwenaVQ@mail.gmail.com> <CAN-Dau35=8i0DAn1xd8nHJh9aAVZY12v3az9QUyXYXAtOQ9xeA@mail.gmail.com>
In-Reply-To: <CAN-Dau35=8i0DAn1xd8nHJh9aAVZY12v3az9QUyXYXAtOQ9xeA@mail.gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Thu, 27 Jun 2019 11:04:26 +1000
Message-ID: <CAO42Z2yKbesKkv05qrg=CTTKvikHLkoy52Wg=8QRZaTbCzwA5g@mail.gmail.com>
Subject: Re: [v6ops] RFC4861 question - short prefixes in PIOs
To: David Farmer <farmer@umn.edu>
Cc: 神明達哉 <jinmei@wide.ad.jp>, 6MAN <6man@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fed0cb058c43beb6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/jLzgffuO-WgFuDqEXkPhvw1i5-E>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Jun 2019 01:04:43 -0000

On Thu., 27 Jun. 2019, 05:02 David Farmer, <farmer@umn.edu> wrote:

> Some additional comments regarding questions #3 and #4 are below;
>
> On Wed, Jun 26, 2019 at 11:23 AM 神明達哉 <jinmei@wide.ad.jp> wrote:
>
>> (I'm only copying 6man, as I believe it's purely a protocol spec
>> question)
>>
>> At Wed, 26 Jun 2019 15:56:36 +0000,
>> "Templin (US), Fred L" <Fred.L.Templin@boeing.com
>> <Fred.L.Templin@boeing..com>> wrote:
>> >
>> > I have an RFC4861 question (several actually) on short prefixes in RA
>> PIOs:
>> >
>> > 1) If a PIO includes a prefix with length less than 64 (e.g.,
>> 2001:db8::/32) and with L=1, does it
>> >
>> > mean that 2001:db8::/32 should be added to the interface prefix list?
>>
>> In my interpretation (ditto for subsequent questions), yes.
>>
>
> +1
>

+1

RFC 5942 clarifies these sorts of questions well, and is an update to RFC
4861.

 Subnet Model: The Relationship between Links and Subnet Prefixes



>
>> > 2) If yes to 1), does it mean that packets forwarded to the interface
>> for any destination covered
>> >
>> > by 2001:db8::/32 will trigger Address Resolution instead of forwarding
>> to a default router?
>>
>> Yes.
>>
>
> +1
>

That's really what the L bit is saying to the host - for the address space
specified in the PIO, perform Neighbour Discovery because those addresses
are being explicitly asserted to be directly reachable over the link.

A bit clumsy, however a better name for the L bit might have been "Perform
ND".

As RFC 5942 says, the on link information for a prefix could be manually
configured in a host, which is why the L bit in a PIO not being set is not
an absolute statement that addresses from within the PIO prefix are not on
the link.





>
>> > 3) If the PIO instead has L=0, does it mean that 2001:db8::/32 is
>> “associated” with the link but
>> > not necessarily “on-link”?
>>
>> I'm not sure how to interpret it (in particular I'm not sure what
>> "associated with the link" means), but my interpretation of L=0 is
>> that the RA doesn't say anything about the on-link-ness of that
>> prefix.  See also the description of the L flag in RFC4861:
>>
>>       L              1-bit on-link flag.  [...]  When
>>                      not set the advertisement makes no statement about
>>                      on-link or off-link properties of the prefix.  In
>>                      other words, if the L flag is not set a host MUST
>>                      NOT conclude that an address derived from the
>>                      prefix is off-link.  That is, it MUST NOT update a
>>                      previous indication that the address is on-link.
>>
>
> RFC 8028 updates RFC4861 and talks about A=L=0, it talks about this in
> Section 2.1;
>
>    In some circumstances, both L and A might be zero.  If SLAAC is not
>    wanted (A=0) and there is no reason to announce an on-link prefix
>    (L=0), a PIO SHOULD be sent to inform hosts that they should use the
>    router in question as the first hop for packets with source addresses
>    in the PIO prefix.  An example case is the MIF router in Figure 1,
>    which could send PIOs with A=L=0 for the common prefix.  Although
>     this does not violate the existing standard [RFC4861], such a PIO has
>    not previously been common, and it is possible that existing host
>    implementations simply ignore such a PIO or that existing router
>    implementations are not capable of sending such a PIO.  Newer
>    implementations that support this mechanism should be updated
>    accordingly:
>
>    o  A host SHOULD NOT ignore a PIO simply because both L and A flags
>       are cleared (extending Section 6.3.4 of [RFC4861]).
>
>    o  A router SHOULD be able to send such a PIO (extending
>       Section 6.2.3 of [RFC4861]).
>
>
>> > 4) If yes to 3), does it mean that 2001:db8::/32 should be added to the
>> IPv6 forwarding table
>> >
>> > as a “route-to-interface” with the receiving interface as the next hop?
>>
>> No.  See the second MUST NOT of the RFC4861 text cited above.
>>
>
> I wouldn't call it a “route-to-interface” it should be a route pointing to
> the route as the next-hop.
>
>
>> > 5) Does A=1 have any meaning for prefixes with length less than 64? Or,
>> must prefixes with
>> >
>> > length less than 64 set A=0?
>>
>> As far as RFC4861 is concerned, the A flag has no meaning, regardless
>> of the prefix length.  It only matters in RFC4862.  In terms of
>> RFC4862, whether "A=1 has any meaning for prefixes with length less
>> than 64" depends on the length of the IID of the link; if the prefix
>> length != 128-IIDLength, the validation rule 5.5.3 d) of RFC4862 makes
>> the prefix ignored.  If non-64 prefix length is invalid in terms of
>> RFC4862 in that sense, it'd be *safe* to avoid setting the A flag, but
>> the protocol specification doesn't say it *must* be so.
>>
>
> +1
>
>
>> You may also want to check
>> https://tools.ietf.org/html/draft-jinmei-6man-prefix-clarify-00
>> I believe it clarifies many of the above questions.
>>
>> --
>> JINMEI, Tatuya
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>
>
> --
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>