Turning routers into hosts (Re: Death by extension header (was:RE: New Version Notification for draft-li-6man-hbh-fwd-hdr-00.txt))

Mark Smith <markzzzsmith@gmail.com> Mon, 13 July 2020 21:23 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8241F3A0D4C for <ipv6@ietfa.amsl.com>; Mon, 13 Jul 2020 14:23:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.598
X-Spam-Level:
X-Spam-Status: No, score=-0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1dr5Ha4-i2nK for <ipv6@ietfa.amsl.com>; Mon, 13 Jul 2020 14:23:45 -0700 (PDT)
Received: from mail-pj1-x1031.google.com (mail-pj1-x1031.google.com [IPv6:2607:f8b0:4864:20::1031]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8C2C3A0D4B for <6man@ietf.org>; Mon, 13 Jul 2020 14:23:42 -0700 (PDT)
Received: by mail-pj1-x1031.google.com with SMTP id k5so501472pjg.3 for <6man@ietf.org>; Mon, 13 Jul 2020 14:23:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=XKWO0Y/WdN880T8T+L0b6AdOf/7Ut77+Bp7SmmGJJYI=; b=pnyqgdMyHOUDJJOTd1E5SXHhMJczlkS8LccWHZ56EZZn0KOw9fL1mwpsB9O7FXFS7U nnjxRKHIobJb1vgK1zGHiCRLimIyFOIhv7txGM6+HMzdW3Bc/bwDV/DP+qpV+e3MC373 kkzxf98NYXq0tS6e05tFCl0oNYIjntF/3wc57YJGV4BbfOGcTt7PWuR53KotNoVfH4BC xGom/YK+l+m1tnMxaBY9awj4KQCwZFDJvb1m6rnWto/YZx3w8xgnDEM4j8pmYkwrD2sr eJsrfvd6d6eDG6DcRVpafpwc8SIoFZeTY5PAZCoMTg5ni+qCobiTAOInxSNbOQmE/jFB +pAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=XKWO0Y/WdN880T8T+L0b6AdOf/7Ut77+Bp7SmmGJJYI=; b=gM2zFon3LoRdT9DW7TSu2w/+UJ0PkRc8vRBiVRKl8+owr+MmpMKT7Aaj0N7mp7/n2u ifYMiV/or1lzwiV6r/zGuKbWA6TwezU1nL2+zUPSn2GtJfNw8pvEPWafbBl92woK7xhk GNuH7so+S02XmHQz8+egPX9yGILuSg4FkcQydaVnhqRKcD/27M3An8PeNavsb+Lr0k/a aGOkRfAKnqgvEFPqkU2el7mluTu2sXVfEBAJP4lpMNBZzl+Iz+S1C2Kwx763gU0wei6Y gtjovBN0I353oYRu9X4fXSnuH/s5HRsXNP5ahL68VfOGDHJM5zili6ZV0gci93Jk8g73 420Q==
X-Gm-Message-State: AOAM533uUGMThikZGKcVMPzUArX0VJ7iSmLwPFKjfn7nEdYMIrtUZ2Ry /bHZxgx0VQ8r/tWo/o0Wfcbm5Ejx6FZGo4BTqgqCag==
X-Google-Smtp-Source: ABdhPJxNkPqFK+LcMlR7mVhWrctsI6tk+jUS7Fvo15K2eIUyCc3PezIC5SrzHaWyauWlGY2zY9k8YVgp6IyduV7PEFI=
X-Received: by 2002:a17:90a:e57:: with SMTP id p23mr1306794pja.164.1594675422282; Mon, 13 Jul 2020 14:23:42 -0700 (PDT)
MIME-Version: 1.0
From: Mark Smith <markzzzsmith@gmail.com>
Date: Tue, 14 Jul 2020 07:23:15 +1000
Message-ID: <CAO42Z2zMsYm8SaZM34z7Qm+90iFx75qQMo8=67=N7woqQEvO7w@mail.gmail.com>
Subject: Turning routers into hosts (Re: Death by extension header (was:RE: New Version Notification for draft-li-6man-hbh-fwd-hdr-00.txt))
To: Toerless Eckert <tte@cs.fau.de>
Cc: Fernando Gont <fernando@gont.com.ar>, "6man@ietf.org" <6man@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/lsN6IstuDsaq0fG9c55mnR8LJkk>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Jul 2020 21:23:51 -0000

On Tue, 14 Jul 2020 at 06:02, Toerless Eckert <tte@cs.fau.de> wrote:
>
> On Mon, Jul 13, 2020 at 03:00:44PM -0300, Fernando Gont wrote:
> > On 10/7/20 15:32, Toerless Eckert wrote:
> > > IMHO: See my email earlier in the thread about punting stuff to slow-path, especially when/before
> > > you figure out that you should have just ignored something at linerarte.
> > >
> > > Aka: not sufficiently prescriptive RFCs + bad implementations == extension header based features killed in deployments.
> >
> > Indeed. And add to that that the EH structure itself seems to be rather
> > unfriendly with some popular hardware architectures. (unless with "not
> > sufficiently prescriptive RFCs" you are meaning to set the maximum EH-header
> > chain length to some sane value that folks might agree to comply with).
>
> I think we might want to start with a draft collecting what we think to
> kow about the problem and figure out if we can structure it accordingl
> to make sense out of it to make progress that is not just incrementally fixing
> one single bit.
>

I think one of the first sections needs to be titled:

"Turning Routers into Hosts"

because in-flight processing of packets' EHs, payloads etc, rather
than just dumb, fast and simple forwarding them, is host processing of
packets.

How to tell it's host processing?

- processing of packets requires going past the IPv6 fixed header

- in-flight processing would fail if everything but the fixed header
was encrypted

- processing beyond the fixed (forwarding) header is occuring at a
node that *doesn't* hold the packet's destination address:


RFC8200:

router       a node that forwards IPv6 packets not explicitly
                addressed to itself.  (See Note below.)

   host         any node that is not a router.  (See Note below.)

(Note is about a node's interfaces being forwarding or not)


In this discussion and similar, people are really discussing paths
between a packet's original source and a final destination constructed
of a set of packet host processing hops.


Regards,
Mark.



> Cheers
>     Toerless
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------