Re: graceful renumbering of CPE networks

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 20 February 2019 21:50 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFA4C130E84 for <ipv6@ietfa.amsl.com>; Wed, 20 Feb 2019 13:50:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ocliDRgNcYWO for <ipv6@ietfa.amsl.com>; Wed, 20 Feb 2019 13:50:50 -0800 (PST)
Received: from mail-pg1-x531.google.com (mail-pg1-x531.google.com [IPv6:2607:f8b0:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA953130E72 for <ipv6@ietf.org>; Wed, 20 Feb 2019 13:50:49 -0800 (PST)
Received: by mail-pg1-x531.google.com with SMTP id r124so12590124pgr.3 for <ipv6@ietf.org>; Wed, 20 Feb 2019 13:50:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=+YedJw9DF2ODk1QoJL9drLen8mxfJ3tJiQJS/aZq5UQ=; b=eh7RPjPyiYWW7CfFxF6RblXcKX+sHHKWS6zHOTxgIsPTjnDdEpxkB9TFyfBp/rPe/O QptZ2yPwpyiJ4L9j48ZBlY/61e5Jt05P4P/oewv4ueAZvMGUwYJMsH3yfq1iPkDevebp 9d+p6mMgKFiliPj75M+TiZhHRxZekI3UL0DPuKJKKBPN00GCzpaTjf1Z3fjcEtI0pvyE 0UMed7s1t/lXUntpVVTsT13akIYr+EcRhHj1tGy491ptvVQusKPFO18483/tD1MMQ2lB hGsnrZM5kdUZNeABRD3ZCG71vvc7wNTHbsMXe6dtqPr+YAHIaYQBCV8zJSdHOpr/68N1 HJsQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=+YedJw9DF2ODk1QoJL9drLen8mxfJ3tJiQJS/aZq5UQ=; b=rlGuBgc1sloerTtHTWptAH7jDhU/JKj5jUylv3ZTXdKsFm14VZhB8jcVooTdQrQ6El 4SZiqrPmL4VYpfhXDJQg2BTGOnohBjmE7WakxWpzeG+lUnTBWQNitVvLhyYEpjklj0h+ orp7p1mG0wDXkZhiT6DpHAocEe0yeGffjpaOXRxUSANqPwIxKFT8Gqnm1ggBo3r8mREp oh0BdQ5Jm4XfpbuFBEuPQ2PMuqrQCKrFE4AlNJdJ52A+Z2ilCOv47nSZFIG39N4QpEXG uQhAzD6tc6DOFR7/lWgNwf9XIVj6wW6TwoxPB76fTcgkwhO0afEbJ7ryP73ChG+bO4y+ QAKA==
X-Gm-Message-State: AHQUAuYoZdBsOiMwM6N9hRH0lAcVI8Epf7vX347M6PWSE7bDiqMhEP+J c39Et47V/njDJcQEs7iDl/2e+L9E
X-Google-Smtp-Source: AHgI3IY9ykZ6QEGI38r2DDR48kEILO/jDPn2LxM2XFz08PagN0uJGGL9ezH2UvVZlJM6X7iRt6TRPA==
X-Received: by 2002:a63:e84c:: with SMTP id a12mr34877133pgk.241.1550699448855; Wed, 20 Feb 2019 13:50:48 -0800 (PST)
Received: from [192.168.178.30] ([118.148.79.176]) by smtp.gmail.com with ESMTPSA id z1sm30813410pfi.155.2019.02.20.13.50.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Feb 2019 13:50:48 -0800 (PST)
Subject: Re: graceful renumbering of CPE networks
To: Michael Richardson <mcr+ietf@sandelman.ca>, 6man WG <ipv6@ietf.org>
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <e3e0bf2273e04f15b792665d0f66dfe5@boeing.com> <4c5fab33-2bff-e5b5-fc1d-8f60a01a146d@go6.si> <b4525832-9151-20bf-7136-31d87ba6c88d@huitema.net> <463f15cf-2754-e2e8-609d-dc0f33448c6c@go6.si> <ff649810-7242-7bc2-d36f-3f998f7bdd71@asgard.org> <9CDF41CA-83B4-4FC4-B995-EF79727C5458@steffann.nl> <CAO42Z2wA+vLmU7+sU6xLK7TO6pWfNQA5shs9zp=PqANCihLmBQ@mail.gmail.com> <BAB3061A-1808-4C0E-AA1B-2D7DD5BA63FC@employees.org> <bbd8b761-403a-5b3f-3f04-dc3bfdea116e@foobar.org> <6F3036C6-50A1-43C6-B554-31293B69E59D@employees.org> <433607c1-dbc6-a42e-cb17-dc209e33bdaa@si6networks.com> <12EA4FAE-BE3D-4CFE-9837-DF052F79A998@employees.org> <F48A816A-983E-4375-834C-75F103DCEA6A@employees.org> <8c8a79cf-0a87-15bc-bd91-bd2da82fdfa1@si6networks.com> <9BE77D1D-C247-4B8E-B9A F-22BE1DC9F79D@employees.org> <CAKD1Yr1fv3pUevB_zeZpQ-UQcNUo2zHUH4xj9NXYohyMbUSgRQ@mail.gmail.com> <25657.1550676340@localhost>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <716de09a-2436-f0c7-c607-bdfef35880b1@gmail.com>
Date: Thu, 21 Feb 2019 10:50:42 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.1
MIME-Version: 1.0
In-Reply-To: <25657.1550676340@localhost>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/kYPCn2WaKgb4WbLkJGyhtE47DGk>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Feb 2019 21:50:52 -0000

On 2019-02-21 04:25, Michael Richardson wrote:
> 
> Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org> wrote:
>     > FWIW, I think the reason that the only way to renumber IPv6 networks is
>     > (mostly) there is no way to explicitly communicate the user prefixes from the
>     > CPE to the network. I think most deployments inject routes based on DHCPv6 PD
>     > snooping, and the implementations of that generally only support one injected
>     > route per DHCPv6 client.
> 
> on the specific comment:
>   BMG (PPPoE) devices usually terminate the DHCPv6 at the BMG, and so the BMG
>   sees the radius packets that went into forming the PD, so it's not DHCPv6 PD
>   snooping, exactly.  There is nothing in PD or radius that prevents multiple
>   prefixes from being delegated, it's just a software problem :-)
>   For the cable-modem situation, the scenario is very different.
> 
> I was confused at first by your comment, so I read it a few times.
> I think you are suggesting that if we could have multiple prefixes (the old
> and the new), that the renumbering event would no longer be a flash
> renumbering.  That the mode of operation that 7084 recommends essentially
> results in flash renumbering.  There is no apparent way to introduce a new
> prefix while the old prefix is still alive.

Whereas of course RFC 4192 specifically describes planned renumbering
(for enterprise network networks with actual humans in charge.)
However, it seems to me that RFC 7084 is aimed mainly at manager-free
scenarios. I do agree that a document on manager-free renumbering
might be appropriate, but I think it's more than a simple fix to 7084.

Mumble HNCP mumble. RFC 7788 doesn't really seem to tackle the issues
we've been discussing here.

    Brian

> 
> The lack of old/new prefix definitely seems like a bug and it looks like
> something that 6man ought to fix with an update to 7084, ideally in a
> standards track document.
> 
>     > On Wed, Feb 20, 2019 at 4:46 PM Ole Troan <otroan@employees.org> wrote:
> 
>     > Top posting. Two points here.
> 
>     > 1) Flash renumbering breaks stuff. Especially for people running servers.
>     > Allowing people to host and own their own content in their own networks
>     > would do a lot more to protect people’s privacy rather than changing
>     > addresses. So let’s agree that the problem you want to solve is a
>     > misconfiguration/error case, not recommended operational practice.
> 
>     > 2) We should always strive to make mechanisms more robust. Your suggested
>     > point solution already have alternative broader solutions. E.g. MPMH host
>     > or added rules in SAS. It might be worth looking at the more general
>     > problem.
> 
>     > Ole
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
> 
> 
> 
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>