Re: RFC 8200: The Devil's Paragraph

Fernando Gont <fgont@si6networks.com> Fri, 28 February 2020 02:39 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CB2B3A0CA6 for <ipv6@ietfa.amsl.com>; Thu, 27 Feb 2020 18:39:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0M1vFXKkYKow for <ipv6@ietfa.amsl.com>; Thu, 27 Feb 2020 18:39:51 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E5D13A0CA5 for <ipv6@ietf.org>; Thu, 27 Feb 2020 18:39:50 -0800 (PST)
Received: from [192.168.0.10] (unknown [181.45.84.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 2D0FE82D50; Fri, 28 Feb 2020 03:39:42 +0100 (CET)
Subject: Re: RFC 8200: The Devil's Paragraph
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>, 6man WG <ipv6@ietf.org>
References: <DM6PR05MB63482DDA36EEA130FF988178AEEB0@DM6PR05MB6348.namprd05.prod.outlook.com> <06451689-cb75-7158-aeaa-5a7bbdcc7867@gmail.com>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <8a3d1054-3178-c632-e7f3-d896c33cd4f5@si6networks.com>
Date: Thu, 27 Feb 2020 23:38:58 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <06451689-cb75-7158-aeaa-5a7bbdcc7867@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/lfVUP6MEZlU2O0LUv1YUv4lyv0s>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Feb 2020 02:39:54 -0000

On 27/2/20 23:08, Brian E Carpenter wrote:
> Ron,
> 
> Rather than getting involved in the errata/appeal discussion, I'll comment here.
> 
> On 28-Feb-20 11:52, Ron Bonica wrote:
>> Folks,
>>
>> Looking more closely at “The Devil’s Paragraph”, it may have a few problems.  Currently, it says:
>>
>> “Extension headers (except for the Hop-by-Hop Options header) are not
>>     processed, inserted, or deleted by any node along a packet's delivery
>>     path, until the packet reaches the node (or each of the set of nodes,
>>     in the case of multicast) identified in the Destination Address field
>>     of the IPv6 header.”
>>
>> The problem is that the rules for processing, insertion and deletion are different. It should say the following about extension header processing:
>>   
>> “The Hop-by-Hop Options header can be processed by any node in packet’s delivery path.
> 
> The word "process" itself is troublesome, and I believe I said this at some point in the 2460bis discussion. I'd rather see it broken into two parts
>    "read and interpreted"
>    "modified (without changing the data length)"
> with separate rules for each.

The problem is, that as anything that's produced by humans, if you want, 
you will probably always find something that could have been said better.

When it comes to this discussion, it has always bee clear to everyone 
that IPv6 does not support header insertion/removal along the delivery path.

In fact, even with RFC2460, it was only the proponents of RFC2460 that 
said there was ambiguity, and that's why we tried to add more text and 
polish the existing one.

One would expect that if in good faith/will, you try to understand the 
intent, and if not clear, you go to the source (i.e., the folks that 
worked on the spec (ideally the authors, and possibly folks that 
participated in the process).

But in this case, it has been totally the opposite: the proponents have 
tried to lecture 6man about their own interpretation of the standard, 
and when faced with the response, essentially they did their best to 
intentially leave as much ambiguity in the spec as possible, to prepare 
the playground we are seeing. -- remember 6man shipped rfc2460bis with 
no clarification on the topic, and only incororated it as a result of 
IETF LC.

So we're now operating in a mode of having to craft text knowing that 
folks will willingly try to read from it what they want to read.

Similarly, I have submitted an errata (which fixes other issues with the 
EH-processing text).. but still pretending that the intent of RFC8200 is 
not clear.

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492