Re: [Technical Errata Reported] RFC6724 (6971)

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 11 May 2022 23:47 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D590C14F724 for <ipv6@ietfa.amsl.com>; Wed, 11 May 2022 16:47:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.951
X-Spam-Level:
X-Spam-Status: No, score=-3.951 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.857, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2gFoz67c8GFF for <ipv6@ietfa.amsl.com>; Wed, 11 May 2022 16:47:03 -0700 (PDT)
Received: from mail-pg1-x534.google.com (mail-pg1-x534.google.com [IPv6:2607:f8b0:4864:20::534]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 938F0C157B5D for <ipv6@ietf.org>; Wed, 11 May 2022 16:47:03 -0700 (PDT)
Received: by mail-pg1-x534.google.com with SMTP id q76so3081772pgq.10 for <ipv6@ietf.org>; Wed, 11 May 2022 16:47:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=KFnXVknu1Jk6mDAI2QJqYuKz/6W05UuODJTBZwPqrSY=; b=qRUw/jFKjdvX2MyLd0PanoNhSEVJuO2o+jujXcNs7+VAWY7OUHwgCUqLvC6RwvAAUs rPaHQuwx++pH9FiGKPU1OfCAuKiSwZ8816gLXBO1se/WCIwwA8d0J0CYn20vc3aQNAb7 Yp/N/SV4L14DWRBO+pTX67Cgl1k5V7eE7QW4eI2nzhGUo7JiNthEneHOYgpvvr5BYqoG EU/hlfjbL4T+yWHeEl3ArV3SpQVJqSwX+wDcnoGkdMW93VmeY2HG5UZoHJa0jegOWcDS k7FVgnOV04/sWaojLa05z8GiZAjbKSEJJhPOxdBQtOt1zsS1Qsm892vGTYsvYVFyaDBf kohQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=KFnXVknu1Jk6mDAI2QJqYuKz/6W05UuODJTBZwPqrSY=; b=X434X2WlsiJ52hYNXSAqP3ITs0o9CeLFO0N9HZBkeCyUqcDOgpwDcESfAyWycthm0M IBfpvZM//m4mV/qR/HblfBEjHpmYZ5s0iuuvjRmxxQY4TKjaPhF8FKyMm0ILfeKDyGoX zZmL0V8DX2pb07sq06pcFUft3anLX4XVO26dx2ei5OK/pLplKC8CYJzeIievpaEqkFKg 2y1sHv4gsPAZclmGrDptBr7e0uOh6gvQnC5eqIgKUjPc9Adv8GHSg/H8TFKlD3KWOFho iNRFuTC81wG5KFEzkgdesq+7uX85U9ao/t75icPVP4Nq3P9SkdJ6PCUvs6ky2n/zY0U8 RyWQ==
X-Gm-Message-State: AOAM531aw/BktWX9UiTBcR+RUATVZ7mD88JK8HwvgljOYX4xq6a95skC 2n0wu+pQrHg6EDWc9T9AD6k=
X-Google-Smtp-Source: ABdhPJz2ZlH/sHcrIaoE2rsvXdpruTQTgRYBHWdaFnYtCvBWi9jqzoli1Gm9TFw4ATtqL+le9bAP+Q==
X-Received: by 2002:a63:34cd:0:b0:3ab:a3e8:7b48 with SMTP id b196-20020a6334cd000000b003aba3e87b48mr23214950pga.524.1652312822584; Wed, 11 May 2022 16:47:02 -0700 (PDT)
Received: from ?IPv6:2406:e003:1005:b501:80b2:5c79:2266:e431? ([2406:e003:1005:b501:80b2:5c79:2266:e431]) by smtp.gmail.com with ESMTPSA id b23-20020a17090a551700b001d93118827asm441863pji.57.2022.05.11.16.46.58 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 11 May 2022 16:47:01 -0700 (PDT)
Subject: Re: [Technical Errata Reported] RFC6724 (6971)
To: David Farmer <farmer=40umn.edu@dmarc.ietf.org>, Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org>
Cc: "ipv6@ietf.org" <ipv6@ietf.org>, "bob.hinden@gmail.com" <bob.hinden@gmail.com>, "dthaler@microsoft.com" <dthaler@microsoft.com>, "tjc@ecs.soton.ac.uk" <tjc@ecs.soton.ac.uk>, "richdr@microsoft.com" <richdr@microsoft.com>, "arifumi@nttv6.net" <arifumi@nttv6.net>, RFC Errata System <rfc-editor@rfc-editor.org>
References: <20220510220633.4F768133111@rfcpa.amsl.com> <d65f2f8b52f14b029c4c8a44584670b9@huawei.com> <m1nolHE-0000LLC@stereo.hq.phicoh.net> <232cf12db54348798afb7570e6df30e4@huawei.com> <m1nonI1-0000N1C@stereo.hq.phicoh.net> <7118b7f4b7604f1baf6f1916c3de34f9@huawei.com> <m1norI2-0000LJC@stereo.hq.phicoh.net> <a60e223753044a8eaf9e697c9d2018cf@huawei.com> <CAN-Dau3KLLrO1DpQ=qM4h7Dx_pFdgmVo1kajx9O_jkg02VVY4g@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <f06c78c9-f97a-512a-25dd-e928f1a9b576@gmail.com>
Date: Thu, 12 May 2022 11:46:56 +1200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.10.0
MIME-Version: 1.0
In-Reply-To: <CAN-Dau3KLLrO1DpQ=qM4h7Dx_pFdgmVo1kajx9O_jkg02VVY4g@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/kGxevYNFciQ0shOiz_ORNkc3dFc>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 May 2022 23:47:07 -0000

On 12-May-22 09:12, David Farmer wrote:
> The effects of DNS round-robin need to be viewed from an overall perspective, not necessarily from the perspective of an individual host. The goal of DNS round-robin is to ensure that when there are multiple answers, that all hosts don't use the same order for the answers. It is ok for a host to reorder the answers, in fact, it is ok for an individual host to always use the same order of answers, as long as the answers don't end up in the same order for all hosts.
> 
> Nevertheless, the CommonPrefixLen() should be no longer than the SA subnet prefix length, which is typically 64 for most IPv6 subnets, and in the case of IPv4-mapped addresses in ::ffff:0:0/96 is typically between 112 
and 125, with 120 possibly being the most common, representing IPv4 subnet masks of 255.255.0.0 (/16), 255.255.255.248 (/29) and 255.255.255.0 (/24) respectively.
> 
> Finally, it is technically possible for the CommonPrefixLen() 
to be 128, but I think this should only occur IFF the SA and the DA are in fact the same address.

Exactly. If we were re-writing RFC6724, we might spell that out, but it is implied by the mention of matching at the length of the known prefix.

    Brian

> 
> Thanks
> 
> 
> On Wed, May 11, 2022 at 2:41 PM Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org <mailto:40huawei.com@dmarc.ietf.org>> wrote:
> 
>     It is not errata.
>     Appendix B bullet 1 states that it was done on purpose. And the purpose has been explained:
>     "
>         1.  Changed the definition of CommonPrefixLen() to only compare bits
>             up to the source address's prefix length.  The previous
>             definition used the entire source address, rather than only its
>             prefix.  As a result, when a source and destination addresses had
>             the same prefix, common bits in the interface ID would previously
>             result in overriding DNS load balancing 
[RFC1794] by forcing the
>             destination address with the most bits in common to be always
>             chosen.  The updated definition allows DNS load balancing to
>             continue to be used as a tie breaker.
>     "
>     The decision to scrape again "DNS load balancing" is RFC 6724bis.
>     Ed/
>     -----Original Message-----
>     From: pch-b28DE43C2@u-1.phicoh.com <mailto:pch-b28DE43C2@u-1.phicoh.com> [mailto:pch-b28DE43C2@u-1.phicoh.com <mailto:pch-b28DE43C2@u-1.phicoh.com>] On Behalf Of Philip Homburg
>     Sent: Wednesday, May 11, 2022 9:42 PM
>     To: ipv6@ietf.org <mailto:ipv6@ietf.org>
>     Cc: Vasilenko Eduard <vasilenko.eduard@huawei.com <mailto:vasilenko.eduard@huawei.com>>; RFC Errata System <rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-editor.org>>; dthaler@microsoft.com <mailto:dthaler@microsoft.com>; richdr@microsoft.com <mailto:richdr@microsoft.com>; arifumi@nttv6.net <mailto:arifumi@nttv6.net>; tjc@ecs.soton.ac.uk <mailto:tjc@ecs.soton.ac.uk>; ek.ietf@gmail.com <mailto:ek.ietf@gmail.com>; evyncke@cisco.com <mailto:evyncke@cisco.com>; bob.hinden@gmail.com <mailto:bob.hinden@gmail.com>; otroan@employees.org <mailto:otroan@employees.org>; furry13@gmail.com <mailto:furry13@gmail.com>
>     Subject: Re: [Technical Errata Reported] RFC6724 (6971)
> 
>      > In my original
>      > comment, I have given the URL to the DNS load balancing explanation
>      > https://en.wikipedia.org/wiki/Round-robin_DNS <https://en.wikipedia.org/wiki/Round-robin_DNS>
> 
>     So your argument seems to be that by accident, RFC 6724 supports round-robin DNS for IPv4. And it needs to keep supporting round-robin DNS.
> 
>     The goal of this RFC is to sort addresses, in other words the goal is to break round-robin DNS in general.
> 
>     The fix in the erratum is to support sorting of addresses for IPv4 as well.
> 
>     But your argument seems to be that the whole RFC is wrong and that there should not have been any destination selection based on longest prefixes matches.
> 
> 
> 
>     --------------------------------------------------------------------
>     IETF IPv6 working group mailing list
>     ipv6@ietf.org <mailto:ipv6@ietf.org>
>     Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 
<https://www.ietf.org/mailman/listinfo/ipv6>
>     --------------------------------------------------------------------
> 
> 
> 
> -- 
> ===============================================
> David Farmer Email:farmer@umn.edu <mailto:Email%3Afarmer@umn.edu>
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>