sleeping proxy at the IETF

"Pascal Thubert (pthubert)" <pthubert@cisco.com> Mon, 23 March 2015 19:35 UTC

Return-Path: <pthubert@cisco.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D62BF1B29DA for <ipv6@ietfa.amsl.com>; Mon, 23 Mar 2015 12:35:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.51
X-Spam-Level:
X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id REk41EH3uDZR for <ipv6@ietfa.amsl.com>; Mon, 23 Mar 2015 12:35:12 -0700 (PDT)
Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 592AF1B29D2 for <6man@ietf.org>; Mon, 23 Mar 2015 12:35:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=28181; q=dns/txt; s=iport; t=1427139312; x=1428348912; h=from:to:cc:subject:date:message-id:mime-version; bh=x9nK47/hPV3ywhQHPK1+sr+ZlHKGBq9rDlENSIdayso=; b=TXrdn8AgZDNXJTx0yuOPz9EmuxCSOszv6QZbvS4ITl71Aoqw2DpStdl3 z/kOCJjnYeFbL19KKDFsE42/dqlM/DiQBg48JEuOyrZDIhFiipuijjAR2 UOmOJASjsTPvlFJF+jSrN0wRNOdmWpxnvIHAEXguIJo744xfd7xoJQGTp w=;
X-Files: smime.p7s : 4831
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DNBwCPaRBV/4wNJK1cgkNDUloEgwzBCTyBdAEJhXUCgS5MAQEBAQEBfYQUAQEBAwEBAQEgCjwBBAsMBgEWAwEDAQEBCh0DAgQlCxQDBgkBBAENBQgGiBkIDa5GmXoBAQEBAQEBAQEBAQEBAQEBAQEBAQEXj2UtBAYHgmIvgRYFhhiKN4FpgTJUhgCBGjqCdoJZhhODLINHIoICHIFQbwGBAQQ+fwEBAQ
X-IronPort-AV: E=Sophos;i="5.11,453,1422921600"; d="p7s'?scan'208,217";a="134680386"
Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-2.cisco.com with ESMTP; 23 Mar 2015 19:35:11 +0000
Received: from xhc-aln-x10.cisco.com (xhc-aln-x10.cisco.com [173.36.12.84]) by alln-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id t2NJZBMW013330 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 23 Mar 2015 19:35:11 GMT
Received: from xmb-rcd-x01.cisco.com ([169.254.1.225]) by xhc-aln-x10.cisco.com ([173.36.12.84]) with mapi id 14.03.0195.001; Mon, 23 Mar 2015 14:35:10 -0500
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: James Woodyatt <jhw@nestlabs.com>, Erik Nordmark <nordmark@acm.org>
Subject: sleeping proxy at the IETF
Thread-Topic: sleeping proxy at the IETF
Thread-Index: AdBloEP4/ftQFG1HRo6/ZvSGh8J/tw==
Date: Mon, 23 Mar 2015 19:35:10 +0000
Deferred-Delivery: Mon, 23 Mar 2015 19:34:00 +0000
Message-ID: <E045AECD98228444A58C61C200AE1BD849D83B09@xmb-rcd-x01.cisco.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.82.232.4]
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="SHA1"; boundary="----=_NextPart_000_0197_01D0656D.FB832160"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipv6/m_om2mh_kuWuUCZY3OREhSot7Ew>
Cc: "6man@ietf.org" <6man@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 19:35:16 -0000

Hello James:

 

Do I read from your description that the particular sleeping proxy expects a single IPv6 address per device/MAC or something? Cisco ships an implementation of such proxy function for wireless devices - used over WiFi for multicast cancellation -, and in that case we cannot make such an assumption. Instead, we implemented a state machine that echoes that of ND, and will flush unused bindings, or least recently used STALE address bindings when the number of addresses per device is bounded.

 

Requirements for a sleeping proxy are indeed discussed at the IETF. This is happening at 6lo with the 6LoWPAN ND update requirements draft <https://tools.ietf.org/html/draft-thubert-6lo-rfc6775-update-reqs-05> , with a use case where the sleeping devices are not on the Ethernet backbone where classical ND is operated, but on a 6lo link that is 1)  potentially wireless and potentially L2-meshed or L3-routed, and 2) connected to the backbone via a so-called backbone router. These requirements derive in particular from the 6TiSCH architecture <https://tools.ietf.org/html/draft-ietf-6tisch-architecture> , whereby the wireless links are in fact routed with RPL. But the fundamental design point is that the interface between the 6lo link(s) and the backbone router is agnostic to the routing technology on the 6lo side, in the same fashion as the 6lo side does not know or care what happens on the Ethernet side, be it ND proxy, MIP tunneling, redistribution in a homenet routing protocol, or else, you name it. 

 

There is an obsoleting spec <http://tools.ietf.org/id/draft-thubert-6lowpan-backbone-router-03.txt>  for the backbone router that implements the above – obsoleting since the spec was not updated after the lessons learnt from running code and testing through 2 consecutive plugtests at the IETF. In that spec, an updated efficient/6LoWPAN ND is used  the method to redistribute routes between the 6lo router and the backbone router – an operation that is done classically inside a router without a protocol. Thomas and I have brought the hardware for a live demo of the backbone router with a TSCH-based routed mesh; please contact us if you want to see it and we’ll bring it up for you.

 

Cheers,

 

Pascal

 

From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of James Woodyatt
Sent: lundi 2 mars 2015 12:53
To: Hemant Singh (shemant)
Cc: 6man@ietf.org
Subject: Re: To DAD or not to DAD?

 

The new Apple TV doesn't start up the first time asleep. It starts up awake, and the sleep proxy, which is listening on the network promiscuously just for this purpose, receives the first NA the Apple TV sends for its previously used IPv6 address, and it consequently flushes its cache entry pointing at the stale MAC address.

 

On Sat, Feb 28, 2015 at 4:45 PM, Hemant Singh (shemant) <shemant@cisco.com> wrote:

The ECMA-393 standard as described bellows looks useful.  However, how is information in the proxy purged?  I replace the sleeping Apple TV node with a new one.  How does the proxy purge the old one?    What if the new one gets the same IPv6 address as the old one?  The devices do not use Modified EUI-64 format for IPv6 address generation.

Thanks,

Hemant

-----Original Message-----
From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Erik Nordmark
Sent: Saturday, February 28, 2015 4:55 PM
To: James Woodyatt; Erik Nordmark
Cc: 6man@ietf.org
Subject: Re: To DAD or not to DAD?

On 2/25/15 11:43 AM, James Woodyatt wrote:
> Well, there's the ECMA-393 standard, which was mostly written from the
> perspective of sleep proxies integrated with network interface
> peripheral devices, but it's not hard to see that what those sleep
> proxies inside the NIC are doing could be extended to work with a
> network sleep proxy like what Apple shipped in OS X hosts, the Apple
> TV and the AirPort base station product line: when a host goes to
> sleep, it registers its services with a sleep proxy, which acts as a
> ND and ARP proxy for the sleeping host, answers mDNS-SD service
> requests for it, and sends wake-on-LAN packets to the sleeping host
> when a TCP SYN, or initial UDP packet, or what have you arrives at the
> sleep proxy host.  When the sleeping host awakens, it sends ARP and ND
> advertisements to invalidate cache entries on the network that
> previously pointed to the sleep proxy.

Thanks - I'll at least add a reference to ECMA-393 and the wikpedia page for Bonjour sleep proxies to the draft.

    Erik


>
> On Thu, Feb 19, 2015 at 3:57 PM, Erik Nordmark <nordmark@acm.org
> <mailto:nordmark@acm.org>> wrote:
>
>     On 2/19/15 3:15 PM, James Woodyatt wrote:
>
>
>             The slides offered these options:
>             1. Deprecate DAD - it is expensive and duplicates are not
>         common
>
>
>         I wish I had a euro for every second I've spent chasing
>         problems caused by expected MAC/IPv6-IID address collisions,
>         which had the root causes of either A) MAC address cloning, or
>         B) some network sleep proxy protocol misbehaving somewhere. I
>         would go live on a nice beach in Italy, and I would never wear
>         shoes again.
>
>         I've also yet to work for an employer who didn't have to deal
>         with the problem that the factory shipped a pile of machines
>         into the market with duplicate MAC addresses, and now we can't
>         rely on them being unique hardware identifiers anymore. The
>         EUI-48 and EUI-64 specifications don't actually require that,
>         you know.
>
>
>     James,
>
>     FWIW I don't believe we should deprecate it either. Put it on the
>     slides to wake folks up. That seems to work better on the mailing
>     list than it did in the meeting room in Honolulu ;-)
>
>         That draft needs to say something about network sleep proxies.
>
>
>     Is there any detailed descriptions of what sleep proxies do with
>     ND? I've just seem a wikipedia article which didn't have any detail.
>
>        Erik
>
>
>
>         --
>         james woodyatt <jhw@nestlabs.com <mailto:jhw@nestlabs.com>
>         <mailto:jhw@nestlabs.com <mailto:jhw@nestlabs.com>>>
>         Nest Labs, Communications Engineering
>
>
>
>
>
> --
> james woodyatt <jhw@nestlabs.com <mailto:jhw@nestlabs.com>> Nest Labs,
> Communications Engineering

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------





 

-- 

james woodyatt <jhw@nestlabs.com>

Nest Labs, Communications Engineering