Re: Question on anycast IID range(s)

Kerry Lynn <kerlyn@ieee.org> Fri, 04 January 2019 13:44 UTC

Return-Path: <kerlyn2001@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC120128CF2 for <ipv6@ietfa.amsl.com>; Fri, 4 Jan 2019 05:44:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.747
X-Spam-Level:
X-Spam-Status: No, score=-1.747 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ieee.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R7PdbqoirPkY for <ipv6@ietfa.amsl.com>; Fri, 4 Jan 2019 05:44:35 -0800 (PST)
Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 964BA1294D0 for <ipv6@ietf.org>; Fri, 4 Jan 2019 05:44:34 -0800 (PST)
Received: by mail-wr1-x436.google.com with SMTP id p4so36643558wrt.7 for <ipv6@ietf.org>; Fri, 04 Jan 2019 05:44:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ieee.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=I4EMoPgCfaBfXYwwKovBaJ4HssaLouYoH+HQWAUTYDs=; b=QA6pez5X1qjyZWClEeeNzt0Lc+c4921x9EkukM2pmz5h7T//SXGsuK0k0US97cPSev Z+A2BT558y5vxS3xyV0uuS2b1N9EWdEYDneYJ+RS+P5Ywr3dRbv92ervSqnIkS4bLupu AHX030nBCWfhBcWk2APREo59wrUyFr6voM/fc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=I4EMoPgCfaBfXYwwKovBaJ4HssaLouYoH+HQWAUTYDs=; b=bueAg2Ynj9+VzhT2JgWtB+zWvdso/stg6RsMNyQ8OzZzXcFp8hSZjHuYtgTr+/2WpK DSTxKAqlm18wxT1GwHYzG4dY2cBU6gRoPVs3mzR4UzFBKSdS3hQW5Vy9DoUaSLRHHgHq WoyQwfWaJn7DlCIymC8i5SRgpMf1xPGBOAfjdC5fwOievR3/K680684o1jJNGkOln9vk MYyO5oDYeBMSO1P+RL9V1qkRGEGW732vT8162j1bD/IA6NwBrjqwKOGdGgXcI4LPcHwJ EQ3f6pT6XDYDj0xOoqL5z8M8fTBe4Hoee+VPiKBv+EmuHcBtUqr/0k0GLtRwVji17GZK dJXw==
X-Gm-Message-State: AJcUukcChu1mZisw2DDYGgnMT7Tjg4WbpOz+Wa52koYhPxtsD4pAUeDe zg7eJivR57WjSgB5kmHku/BK98pDD5Flc3HrkV4=
X-Google-Smtp-Source: ALg8bN421wzdbm70cTRETPU4j/QhswnDNLw3tR4LR3Na/AC1ZV4AaJW17GYdzYgRh6r8Ft8kVU3VFPMmid2e0hgnHTo=
X-Received: by 2002:adf:fe8f:: with SMTP id l15mr42799538wrr.313.1546609472847; Fri, 04 Jan 2019 05:44:32 -0800 (PST)
MIME-Version: 1.0
References: <CABOxzu1O6qd_23xLgpAsx6BiZ09SCNUAgFurOL2UX4HQTvYFCA@mail.gmail.com> <CAAedzxq=AHCD6MSksz4P4ZGVxamStF3x2+xTasJH+oOxFY5H9Q@mail.gmail.com> <CABOxzu3iV7ymCTGESQ20yDtqTBdggo_5yVZquY6vcG+XfEsDQA@mail.gmail.com> <827c7f24-0161-960b-18f6-c451ac471f79@gmail.com> <CABOxzu3fUGjoy29-7=zU2Lky+1oKHQFDSnDcu346xkE8joQ_DQ@mail.gmail.com> <92a6d888-ead1-9b40-1b1c-d9584957214c@gmail.com> <6C9EA505-BAD2-42BE-9E99-680E8CB9FAE9@gmail.com> <60b1edf1-0d5f-62fd-318f-1f30ba02ca2c@gmail.com> <4F727D6F-BED2-4A7E-96BB-A1F3ECE6C803@gmail.com> <CAN-Dau2rJBNhgH7VOsN8BASnN1vLFDX0HfH_nhmy4XANc+XOGw@mail.gmail.com>
In-Reply-To: <CAN-Dau2rJBNhgH7VOsN8BASnN1vLFDX0HfH_nhmy4XANc+XOGw@mail.gmail.com>
From: Kerry Lynn <kerlyn@ieee.org>
Date: Fri, 04 Jan 2019 08:44:20 -0500
Message-ID: <CABOxzu2fQJtN__EaWN-Y7hOOBHvSOfpGxn+ApxhMZVtmRqL83Q@mail.gmail.com>
Subject: Re: Question on anycast IID range(s)
To: David Farmer <farmer@umn.edu>
Cc: Suresh Krishnan <suresh.krishnan@gmail.com>, 6man 6man <ipv6@ietf.org>, Erik Kline <ek@loon.co>
Content-Type: multipart/alternative; boundary="0000000000003c4242057ea2140d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/ovHN-HnInvv9vYlF9ZaBuaAZBdU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Jan 2019 13:44:38 -0000

Hi David,

On Thu, Jan 3, 2019 at 7:36 PM David Farmer <farmer@umn.edu> wrote:

>
>
> On Thu, Jan 3, 2019 at 5:56 PM Suresh Krishnan <suresh.krishnan@gmail.com>
> wrote:
>
>> Hi Brian,
>>
>> On Jan 2, 2019, at 11:15 PM, Brian E Carpenter <
>> brian.e.carpenter@gmail.com> wrote:
>>
>> On 2019-01-03 17:01, Suresh Krishnan wrote:
>>
>> <AD Hat off>
>>
>> Hi Brian/Erik/Kerry,
>>
>> On Jan 2, 2019, at 4:52 PM, Brian E Carpenter <
>> brian.e.carpenter@gmail.com> wrote:
>>
>> On 2019-01-03 09:37, Kerry Lynn wrote:
>>
>> On Wed, Jan 2, 2019 at 2:57 PM Brian E Carpenter <
>> brian.e.carpenter@gmail.com> wrote:
>>
>> On 2019-01-03 07:15, Kerry Lynn wrote:
>>
>> Thanks Erik,
>>
>> My question was ill-posed *and* contained a typo.  I'm really trying to
>> figure out
>> which range(s) of IIDs RFC 2526 is trying to reserve for anycast use.  I
>> now think
>> the answer is fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff based on RFC 5453
>>
>> and
>>
>>
>>
>> https://www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xhtml
>>
>> If I take RFC2526 literally, ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff
>> is also reserved, for IIDs not in modified EUI-64 format.
>>
>> That's the problem with RFC2526; at the time it was written there was a
>> class of
>> IPv6 address that required IIDs to be 64-bits AND in EUI-64 format.  Given
>> that the
>> latter requirement no longer seems to hold, it would seem the basis for
>> the
>> range
>> fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff no longer exists.  Yet, this range
>> is now enshrined in
>> RFC5453 and
>>
>> https://www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xhtml
>>
>> But RFC7217 doesn't mention RFC2526, which might be a bug.
>>
>>
>> RFC7217 (and any other proposal for IID generation) should take RFC5453
>> and
>> its associated registry into consideration.
>>
>>
>> It does. But the gap is that RFC5453 doesn't call out
>> ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff
>>
>>
>> Looking back at my notes on what became RFC5453, this is not a gap but
>> something I had intentionally left out of RFC5453 based on the addressing
>> usage then. I will try to explain my reason why and we can see if this
>> still makes sense or not.
>>
>> According to RFC2526, "for IPv6 address types required to have to have
>> 64-bit interface identifiers in EUI-64 format” the reserved anycast range
>> was only
>>
>> FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF
>>
>> Since RFC4291 defined all the space other than ::/3 to be used only with
>> 64-bit IIDs, and the goal of RFC5453 was to avoid address conflicts for
>> SLAAC (which used 64 bit IIDs due to reasons explored in great detail in
>> RFC7421), this is the range that was put into RFC5453.
>>
>> Yes. I've posted an erratum to 5453. At the time, ffff:etc might
>> have seemed like a corner case, but 2526 did actually cover it.
>>
>>
>> 2526 covered this *only* for non 64-bit non EUI-64 IIDs.
>>
>>
>> That's not how I read it. IMHO, it covered it for non-EUI-64 IIDs
>> of length N, and there's nothing to say that N may not be 64.
>> (In fact, our current addressing architecture states that N==64,
>> as we all know only too well.)
>>
>>
>> :-). Yes, we do. The addressing architecture also states in Section
>> 2.5.1. that
>>
>> "  For all unicast addresses, except those that start with the binary
>>    value 000, Interface IDs are required to be 64 bits long and to be
>>    constructed in Modified EUI-64 format."
>>
>
> Well, after the RFC7136 update it says;
>
>       For all unicast addresses, except those that start with the binary
>       value 000, Interface IDs are required to be 64 bits long.  If
>       derived from an IEEE MAC-layer address, they must be constructed
>       in Modified EUI-64 format.
>
> And RFC8064 effective makes Modified EUI-64 format OPTIONAL, or a MAY at
> best, one could even argue it depercated Modified EUI-64, A.K.A. NOT
> RECOMMENDED.
>
>
>> So if we want to add the omitted range, we need to restrict it to non
>> ::/3 prefixes as well.
>>
>> If we do want to cover the non 64-bit cases then the range Brian
>> suggested ave is insufficient (because the IIDs will not fit in the 64-bit
>> range suggested) and would require a more considered change.
>>
>> For the specific case of N==64 I don't see that as necessary.
>>
>> Agree that the N==64 case works fine but I was talking about whether the
>> WG wanted to cover the non-64-bit cases as well.
>>
>
> So, I believe ffff:ffff:ffff:ff80-ffff:ffff:ffff:ffff should be added to
> the reserved list and RECOMMENDED for use as Anycast addresses.
> And, fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff should remain on the reserved
> list, but NOT RECOMMENDED for use as Anycast addresses, as a result of
> RFC8064.
>
> The practical problem is that RFC8064 specifies RFC7217 as the default
method for
generating stable IIDs, and current implementations of RFC7217 take into
account
the fdff:ffff:ffff:ff80-fdff:ffff:ffff:ffff range, based on RFC5453 and its
associated registry.
We could declare the existing range to be wrong, but it would be less
disruptive to
retain it "for historical reasons".

They both should have been on the list originally.  Further, I believe the
> original intent for Modified EUI-64 is the way RFC7136 updates it to,
> especially if you take the paragraphs following that talk about "Modified
> EUI-64 format-based interface identifiers". Talking about them that way
> kind of implies there are interface identifiers that are not based on
> Modified EUI-64 format, despite the paragraph above originally said.
>
> And yes we should assume N==64. But as Ole said, it is quite clear even if
> N!=64 that RFC2526 say "the highest 128 interface identifier values are
> reserved."
>
> This language clearly doesn't work for prefixes longer than 120 bits (for
example,
point-to-point links).  If the consensus is to go with the existing
reserved range for
N==64, then we should change any confusing language in RFC2526.

Regards, Kerry

Thanks.
>
>
>> Thanks
>> Suresh
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>
>
> --
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>