Re: I-D Action: draft-gont-6man-slaac-renum-02.txt

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Tue, 10 March 2020 11:01 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D8973A1097 for <ipv6@ietfa.amsl.com>; Tue, 10 Mar 2020 04:01:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.624
X-Spam-Level:
X-Spam-Status: No, score=-1.624 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.274, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5QgeeugW21Gi for <ipv6@ietfa.amsl.com>; Tue, 10 Mar 2020 04:01:22 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6A6C3A109E for <ipv6@ietf.org>; Tue, 10 Mar 2020 04:01:21 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1jBcdT-0000HEC; Tue, 10 Mar 2020 12:01:19 +0100
Message-Id: <m1jBcdT-0000HEC@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Cc: Fernando Gont <fgont@si6networks.com>
X-Cc: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>, ipv6@ietf.org
Subject: Re: I-D Action: draft-gont-6man-slaac-renum-02.txt
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <158191113600.5878.10760004246455372944@ietfa.amsl.com> <35f3e826-81ce-d505-3c27-def73983d291@gmail.com> <CAMGpriVTPPcc9bKuKANp1BLnDLU2gmmeq9yfcNFm+sZaNtgoBg@mail.gmail.com> <m1j9lU7-0000JCC@stereo.hq.phicoh.net> <m1jA9CY-0000F8C@stereo.hq.phicoh.net> <299db2f5-3dad-ebe4-a5b4-76d1d6e942a1@si6networks.com> <m1jBGe0-0000KrC@stereo.hq.phicoh.net> <B3D51D07-134D-4F5D-BF12-6383FD2D79FF@employees.org> <m1jBHcL-0000FZC@stereo.hq.phicoh.net> <63d62730-0f4c-3623-926b-1ab22c4893c2@si6networks.com>
In-reply-to: Your message of "Mon, 9 Mar 2020 14:47:58 -0300 ." <63d62730-0f4c-3623-926b-1ab22c4893c2@si6networks.com>
Date: Tue, 10 Mar 2020 12:01:19 +0100
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/n_ere639acha_fsTKCb5ly155QA>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2020 11:01:23 -0000

In your letter dated Mon, 9 Mar 2020 14:47:58 -0300 you wrote:
>* Is there a rationale for "10"? Or is it mostly "routers couldn't 
>reasonably send SLAAC config split into that many RAs"?

The 10 is not supposed to be optimal. Just something that works. 

The rational is that if a router splits the prefixes over 2 RAs, then the
chance that you only get 1 of them 10 times in a row is extremely low.

If, for example, you would set the value to 2, then just one packet need to 
be lost for a misclassification to happen.

>* Are these "measurements" something you'd continually perform, or 
>something you'd only do on e.g. a link-up event?

After a link up event be also when a prefix is deprecated.

>* Would a connectivity glitch reset these measurements?

A link attachment event should reset them. Just a temporary loss of 
connection should have no effect.

>* WHile measuring, do you assume "split RA" or "non-split RA"?

Split RA. Split RA is that safe version (just let the prefix expire), 
non-split RA needs to be established.

>> by the current router and are not in the current RA then
>> - if SPLIT_RA is set, deprecate the old prefixes if they were last seen at
>>    least as long as the router lifetime (if the router is not a default
>>    router then do nothing).
>
>When using "deprecate", do you mean:
>1) unprefer, or,
>2( invalidate

Unprefer.

>If #1, what would trigger invalidation? A receipt of a similar RA?

I have no code for immediate invalidation. RFC 4862 is very conservative
in marking an address invalid (the 2 hour minimum).

It is a significant departure from RFC 4862 to invalidate addresses quickly.
If that is the behavior we want, then changing from unprefer to invalidate
would do the right thing.

>Since this bullet implies that RAs are not split, what would be the 
>rationale for "setting the preferred lifetime to a short timeout"?

This is a bit of overly clever trickery that handles the case if a router
switches from sending one RA to multiple RAs and sends them close together.

>And, as before: if this simply unprefers the address, what would 
>actually invalidate it? Receipt of a similar RA?

The current code just lets the address become invalid when the valid lifetime
expires. In my opinion, the important part is to pick a working address for
outgoing connections (i.e. making sure the right address is preferred).
Breaking exiting connections should be left to application protocols.

Though if there is consensus that existing connections should be terminated 
by the IPv6 layer, then the code can be changed to invalid addresses instead
unpreferring them.