Re: Objection to draft-ietf-6man-rfc4291bis-07.txt

Alexandre Petrescu <alexandre.petrescu@gmail.com> Thu, 02 March 2017 08:24 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 843DF1294B2 for <ipv6@ietfa.amsl.com>; Thu, 2 Mar 2017 00:24:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.333
X-Spam-Level:
X-Spam-Status: No, score=-5.333 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_HI=-5, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AkmgV1vKkF7M for <ipv6@ietfa.amsl.com>; Thu, 2 Mar 2017 00:24:19 -0800 (PST)
Received: from sainfoin-out.extra.cea.fr (sainfoin-out.extra.cea.fr [132.167.192.145]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C21401294AE for <ipv6@ietf.org>; Thu, 2 Mar 2017 00:24:18 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin.extra.cea.fr (8.15.2/8.15.2/CEAnet-Internet-out-2.4) with ESMTP id v228O898010850; Thu, 2 Mar 2017 09:24:08 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 5E483200ED5; Thu, 2 Mar 2017 09:24:08 +0100 (CET)
Received: from muguet1.intra.cea.fr (muguet1.intra.cea.fr [132.166.192.6]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 4E51E200B5D; Thu, 2 Mar 2017 09:24:08 +0100 (CET)
Received: from [10.8.34.184] (is227335.intra.cea.fr [10.8.34.184]) by muguet1.intra.cea.fr (8.15.2/8.15.2/CEAnet-Intranet-out-1.4) with ESMTP id v228O7WJ032302; Thu, 2 Mar 2017 09:24:08 +0100
Subject: Re: Objection to draft-ietf-6man-rfc4291bis-07.txt
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, Dan Lüdtke <mail@danrl.com>
References: <20170223134026.GI5069@gir.theapt.org> <58B014F6.2040400@foobar.org> <6DA95097-8730-4353-A0C9-3EB4719EA891@google.com> <CAN-Dau0s04c=RV0Y8AGaxBPFui41TWPTB+5o0K2Lj-iah0An1w@mail.gmail.com> <CAL9jLaYirty22iGiEjEaYq3_KA1FZhxBTOBWuFOXQ9C-WPd5xQ@mail.gmail.com> <CAN-Dau0n6oFm538XdJOcuO1yg92BCDD3mBu5YfBVm_+g-gtcKA@mail.gmail.com> <CAL9jLaYO=uYgVfSZ0SoSe0SujJ1xgwEKE8WLzo_keJHywgXTtg@mail.gmail.com> <CAN-Dau1vJV5O_Ythp6THkAu4-YZXV82Upny1V+ybbjCVZQQX=A@mail.gmail.com> <27cce319-18ac-5c0e-3497-af92344f0062@gmail.com> <de4988be-6031-08d9-84ce-21c3fa4f9bc9@gmail.com> <98401ef7-cf41-b4a0-4d11-a7d840181bd0@gmail.com> <1047f5fc-ae40-be52-6bab-27f31fe5e045@gmail.com> <9a94feac-8d59-b153-d41c-04fc371e4db4@gmail.com> <CAO42Z2z7v4gDk91b6Of-1sczV88m3B9kzn0MeJU_VBJ416k6Ww@mail.gmail.com> <ae35b45a-0398-840f-fc0d-1f64dd2fcc58@gmail.com> <92160C59-79EC-4EB0-BFD5-69697A5E1306@danrl.com> <f1ce0d13-efee-4be0-290d-f81e9ca9e6f5@gmail.com> <4ee56eb1-81f1-54bc-99ff-86aaa816aae5@gmail.com>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <dd066b9f-5056-ac37-37f6-e397fcd5c6a7@gmail.com>
Date: Thu, 02 Mar 2017 09:24:14 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.7.1
MIME-Version: 1.0
In-Reply-To: <4ee56eb1-81f1-54bc-99ff-86aaa816aae5@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/lQtTAat53EYYkfKyZBRn2aV7M3Y>
Cc: 6man WG <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Mar 2017 08:24:20 -0000


Le 01/03/2017 à 22:20, Brian E Carpenter a écrit :
> On 02/03/2017 08:47, Alexandre Petrescu wrote:
>>
>>
>> Le 01/03/2017 à 12:23, Dan Lüdtke a écrit :
>>>
>>>> On 28 Feb 2017, at 13:04, Alexandre Petrescu
>>>> <alexandre.petrescu@gmail.com> wrote:
>>>>
>>>> Finally, there is no advice of what bits to put between fe80::
>>>> and a 64bit the Interface ID - zeros or ones?  linux says it's
>>>> a fe80::/64 and IIRC BSD says it's a fe80::/10.  The routing
>>>> entries based on that can make for interop problems.
>>>
>>> I think there is advice. As I understand, /10 is reserved but
>>> only /64 is specified.
>>
>> Sorry, I dont understand that?
>>
>> What is the difference?  Why reserving X if only specifying Y?
>> What other concept is similar: is there some other number which is
>> reserved and only number+1 is specified?
>>
>> Why couldnt we just reserve without specifying?  Or specifying
>> without reserving?
>>
>> If we continue with reserving _and_ specifying we continue wasting
>> these 54bits there.
>>
>> What are these 54bits for?
>
> Nothing. They are reserved and must be zero. That's quite common in
> protocol design.

If so, then it's not a fe80::/10, but an fe80::/64, and we should
refrain from writing fe80::/10 anywhere.

Which brings back the question of why 64?

> Link-local is a special case, because it must be possible to create
> an address with absolutely no prior information.

I agree, an LL should be created w/o prior info coming out of the computer.

But, among other requirements, that address should have less privacy
issues too.  In an LL a longer IID (e.g. a 108bit IID) would have better
privacy characteristics than a 64bit IID - resist longer to brute force
attacks.

By the fe80::/10 definition it is allowed to set a 108bit IID in LL, but
by fe80::/64 definition it is not.

In other settings with less computers on a subnet (less privacy
concerns), or less interfaces on a computer (IoT), an IID of length 1
for a LL address would be sufficient, which would make an fe80::/127
relevant as well.  Why must they support fe80::/64 when they dont need
that much?

These questions are all the more important when knowing that many IP
stacks make these numerous fe80::/64 entries in the rt table, by default.

In IPv4 computers their rt table is a clean slate after boot... no need 
to clean.

Alex

>
> Brian
>
>>
>> Alex
>>
>>>
>>>
>>> RFC 4291 IP Version 6 Addressing Architecture 2.5.6.  Link-Local
>>> IPv6 Unicast Addresses
>>>
>>> Link-Local addresses are for use on a single link.  Link-Local
>>> addresses have the following format:
>>>
>>> |   10     | |  bits    |         54 bits         |          64
>>> bits           |
>>> +----------+-------------------------+----------------------------+
>>>
>>>
|1111111010|           0             |       interface ID         |
>>> +----------+-------------------------+----------------------------+
>>>
>>>
>>>
>>>
Cheers,
>>>
>>> Dan
>>>
>>
>> --------------------------------------------------------------------
>>
>>
IETF IPv6 working group mailing list
>> ipv6@ietf.org Administrative Requests:
>> https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>
>>
>