Re: Disabling temporary addresses by default?

[Gyan Mishra <[e-mail]>]

On Sun, Feb 2, 2020 at 3:53 AM Mark Smith <[e-mail]> wrote:

>
>
> On Sun, 2 Feb 2020, 19:05 Jared Mauch, <[e-mail]> wrote:
>
>> They are also useful and needed when debugging hashing or 802.3ad related
>> issues. To debug the flow hash you often need stable addresses which are
>> not easily changed
>
>
> Can you explain how you do this troubleshooting? Do you spoof end users
> addresses?
>

  802.1ad is a QinQ  technology used by providers for backbone bridges
Ethernet relay services instances.  Inner tag is provider label and outer
tag is customer label.  The flow hash entropy is based on
source/destination hash, however if the address is not stable and changing,
that changes the hash entropy for load balancing flows.  That throws off
the lb entropy and now you don’t get close to 50/50 lb entropy with 2 links
in an Ethernet bundle. There are many instances when bundled ethernet
aggregation or MLAG is employed where a Src/dest hash is used to create
entropy for load balancing of flows ; as well as in MPLS L2 vpn  and NG L2
VPN ethernet service instance e-line, e-lan, e-tree where a fat pseudo
wire” is deployed requiring stable IP for lb entropy to work properly.

Another instance where stable IP is necessary is related along those same
lines of thought to BGP IGP ISIS or OSPF ECMP flow based load balancing
hash hash where flows lb entropy is created to get the even load balancing
over multiple parallel L3 links in a enterprise or provider operators
network.  When the address keeps changing that changes the load balancing
entropy for the hash.  So now instead of the flow going over L3 link A it
is now going over link B.



>
> or provided by the average user who just expects the technology to work.
>
>
> Temporary addresses have been the default on Apple OS X since Lion in 2011
> and Windows Vista in 2007. That doesn't seem to have prevented IPv6 working
> for the average user.
>
>
>
>
>> Sent from my iCar
>>
>> > On Feb 1, 2020, at 4:24 PM, Gyan Mishra <[e-mail]> wrote:
>> >
>> > Stable random IPv6 address works best to meet the objective of an
>> enterprise.
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> [e-mail]
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
> --

Gyan  Mishra

Network Engineering & Technology

Verizon

Silver Spring, MD 20904

Phone: [phone]

Email: [e-mail]