Re: A long HBH Options question

Tom Herbert <tom@herbertland.com> Wed, 22 August 2018 17:16 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D33C130DD5 for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 10:16:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yBKi0cVk4WOd for <ipv6@ietfa.amsl.com>; Wed, 22 Aug 2018 10:16:57 -0700 (PDT)
Received: from mail-qk0-x22d.google.com (mail-qk0-x22d.google.com [IPv6:2607:f8b0:400d:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E52D5128CE4 for <ipv6@ietf.org>; Wed, 22 Aug 2018 10:16:56 -0700 (PDT)
Received: by mail-qk0-x22d.google.com with SMTP id b19-v6so1737756qkc.6 for <ipv6@ietf.org>; Wed, 22 Aug 2018 10:16:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=aUDtkdTzJsXZ+6YjKzVLC064rzcmV+UJBjJfy+C//Zs=; b=dc4sYPTCXbb586tTTQj/52vE6wJEZfgyyn1oH27LnKciuQE8Rr+5H0rWpc9J9zDArW 9GN0uQxAQL2gQOt5zFDef9WaNudXptvZdVFYKgsZvtXcmMwHZfQOBZ1Pu7bSVoKJe4h8 kEeexYM1jI469ts13iY0kWI5SuZ2bLyQvqq6Rnr09DTNm55iHXxwNt5UFhiWZf+uvQYD WKTi3cb5imi5Bjnp8mKcC7Jp+zszVh+dNH/Y7Z+quu9bTf5CLiQvd6T+8VEfYCDf/++R jYMBU/n/yumupYqdYVk6XODl8gfZVRw9OGDfPA1jsvJCwVfBdheqVAxoY7tP1EaAs0fD fFMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=aUDtkdTzJsXZ+6YjKzVLC064rzcmV+UJBjJfy+C//Zs=; b=cqKThsVKJoJ7NiQfd+PTTBY6ASPU1HMlD6+osb5lnBk4TeJGb4d6OtwRdElzWGqzQ1 UGHnzznEI7KG6CGeJRLk8SPCKoHi61zbpKr89cBDnOwGlPX01kaoFdn06eYpuI/+9fSG uNDczTaz078u5ngvg8aORWutUJ5x7gxcdGiXuWnz9E+4jIWoP6uc2fblNvYylseyffJG z5ixRYPX10lZ80k81UBrRtJnQbhHNFOx/ZUxdvSg7fQuHE994c9DNo8g1KINfO0NERdF ZmUvagK5WBGrraGgog2+wccuNPCoJft59YcbK4ESW6bJ3NvbDuKdE5n507nQ+be6DUWy FsxA==
X-Gm-Message-State: APzg51CIcLmOGtnDIOLSentYnj/+S1hMrrjcZ0ASQp10tYlEAnjKPC9T xvoCfoLd/g1Me2w+eQOb7IKCy3SKY0opoXvNeEZExQ==
X-Google-Smtp-Source: ANB0VdZYGSFAIxbnU2NHdkS2ujIvWU7+/u27ROk4hlRl4TOrgayuzMVGN3OvX5gAVb6POwiXjnreZlER5Zj8+NvTKNU=
X-Received: by 2002:a37:d44c:: with SMTP id l73-v6mr10894185qki.190.1534958215719; Wed, 22 Aug 2018 10:16:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac8:3312:0:0:0:0:0 with HTTP; Wed, 22 Aug 2018 10:16:55 -0700 (PDT)
In-Reply-To: <CO1PR05MB4436DFC162726D11A0DE530AE300@CO1PR05MB443.namprd05.prod.outlook.com>
References: <CACL_3VFn9x2o1OW5wk0nt3n71K0XpQ2Kv1X+2CJnpPA6QdMVgA@mail.gmail.com> <CALx6S36QbcQc-ZspeH66Z=yVfKLrWyuhTLzB8ui7HBtfcg++4g@mail.gmail.com> <CO1PR05MB4436DFC162726D11A0DE530AE300@CO1PR05MB443.namprd05.prod.outlook.com>
From: Tom Herbert <tom@herbertland.com>
Date: Wed, 22 Aug 2018 10:16:55 -0700
Message-ID: <CALx6S37QeKnHJz6MG7GsiKaAFz3D4iVkv=OG=oVZwgumOaoEbA@mail.gmail.com>
Subject: Re: A long HBH Options question
To: Ron Bonica <rbonica@juniper.net>
Cc: "C. M. Heard" <heard@pobox.com>, 6man <ipv6@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/sVA5wxD5B7_riqCWlUp1BXQIgcg>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Aug 2018 17:17:00 -0000

On Wed, Aug 22, 2018 at 9:43 AM, Ron Bonica <rbonica@juniper.net> wrote:
> Hi Tom,
>

Hi Ron,

> Judging by the feedback, those experiencing cognitive dissonance constitute a small minority. Maybe our concerns are better addressed with medication than clarifications ;-)
>
> However, if you want to reduce the number of pills that I take every day, you might add the following clarifications to your document:
>
> - What do the "act" bits mean when they appear in an HBH option?

That would be a good clarification of HBH processing in RFC8200.

> - What does the "chg" bit mean when it appears in an option where Opt Data Len is equal to 0.

Okay.

> - What does the "chg" bit mean when it appears in a Destination Options header precedes the Routing Options header.
> - What does the "chg" bit mean when it appears in a Destination Options header follows the Routing Options header (or the packet does not contain a routing header).

I think that's already covered in the draft (section 3). Please let me
know if it's not clear.

Tom

>
>                                                                               Ron
>
>
>> -----Original Message-----
>> From: Tom Herbert <tom@herbertland.com>
>> Sent: Wednesday, August 22, 2018 10:28 AM
>> To: C. M. Heard <heard@pobox.com>
>> Cc: Ron Bonica <rbonica@juniper.net>; 6man <ipv6@ietf.org>
>> Subject: Re: A long HBH Options question
>>
>> On Tue, Aug 21, 2018 at 5:39 PM, C. M. Heard <heard@pobox.com> wrote:
>> > On Tue, 21 Aug 2018 19:16:55 +0000, Ron Bonica wrote:
>> >> [ … ] let's assume that:
>> >>
>> >> - A packet contains an HBH option and the high-order bits of the HBH
>> >>   Option type are "10" [could also be "01" or "11']
>> >>
>> >> - The packet traverses Router A and Router B on route to its
>> >>   destination
>> >>
>> >> - Router A is not configured to process HBH options
>> >>
>> >> - Router B is configured to process HBH options
>> >>
>> >> - Neither Router A nor Router B recognize the HBH option contained by
>> >>   the above-mentioned packet.
>> >>
>> >> I think that RFC 8200 requires the following behavior:
>> >>
>> >> - Router A forwards the packet to Router B, without examining the HBH
>> >>   Options header
>> >>
>> >> - Router B discards the packet, because it doesn't recognize the
>> >>   option.
>> >>
>> >> Is this the required behavior?
>> >
>> > Yes.
>> >
>> >> If so, does this behavior cause cognitive dissonance for anybody else?
>> >
>> > It sure does.
>> >
>> >> I am thinking that the "act" bits are meaningless in the HBH
>> >> extension header. This discussion may also be applicable to
>> >> draft-herbert-ipv6-update-dest-ops.
>> >
>> > The "act" bits are not exactly meaningless, but only the encoding "00"
>> > will elicit consistent behavior from nodes that  comply with RFC 8200
>> > and don't recognize the option. To me, it would seem quite odd if the
>> > designer of any new HbH option were to choose an encoding with "act"
>> > bits other than "00". For already allocated options, any encoding
>> > other than "00" will not have the results expected by those who
>> > designed the options assuming that the rules in RFC 2460 would be
>> > followed. Thus, that the maintainers of existing HbH options with the
>> > "act" bits other than "00" should probably re-examine the option
>> > encoding in light of the change wrought by RFC 8200. Here is the list:
>> >
>> > 0x63  RPL (RFC 6553, PS)
>> > 0x6D  MPL (RFC 7731, PS)
>> > 0xC2  Jumbo Payload (RFC 2675, PS)
>> > 0xEE  IP_DFF (RFC 6971, Experimental)
>> >
>> > The ROLL WG has in fact taken this step with the RPL option, though
>> > for reasons independent of the change made in RFC 8200. The thinking
>> > behind the original design in RFC 6553 was that it was undesirable for
>> > the RPL option to escape from the RPL domain in which it was
>> > originated, so "act" was set to "01" to force nodes external to the
>> > domain to silently discard escaped packets. That thinking has been
>> > revised, and there is a document in last call that will deprecate the
>> > existing code point and get a new one (probably 0x23) with "act" set to
>> "00".
>> >
>> > A re-examination of already allocated destination options would be
>> > called for if the change proposed in
>> > draft-herbert-ipv6-update-dest-ops
>> > were to be implemented. Here is that list:
>> >
>> > 0xC9  Home Address (RFC 6275, PS)
>> > 0x8A  Endpoint Identification (DEPRECATED) 0x8B  ILNP Nonce (RFC 6744,
>> > Experimental) 0x8C  Line-Identification (RFC 6788, PS)
>> >
>> Mike,
>>
>> Thanks for looking into this.
>>
>> Neither RFC6744 nor RFC6788 explicitly prohibit putting the option in front of
>> a routing header, but I don't think doing that would make much sense in either
>> case. In case of ILNP nonce, the option is used to communicate to a peer node
>> information about the reverse path so it's really intended for the transport
>> destination endpoint.
>> Line-Identification is only used in conjunction with a ND packet being tunneled
>> in the payload so only the ultimate destination should do anything with the
>> option. It would be a good idea if specifications for new Destination Options
>> explicitly said whether or not they can appear before a Routing header.
>>
>> Tom
>>
>> > The Home Address option would actually not be affected by the proposed
>> > change in draft-herbert-ipv6-update-dest-ops since it isn't allowed to
>> > appear appear before a Routing Header. I have not examined the others,
>> > however.
>> >
>> > Mike Heard
>> >
>> > --------------------------------------------------------------------
>> > IETF IPv6 working group mailing list
>> > ipv6@ietf.org
>> > Administrative Requests:
>> > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mail
>> > man_listinfo_ipv6&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-
>> ndb3voDTXcWzo
>> > CI&r=Fch9FQ82sir-BoLx84hKuKwl-
>> AWF2EfpHcAwrDThKP8&m=kq67Q11JdAIfRhVwF5c
>> > N-DpFwRB9d3ip8DQlPOmzaII&s=UJLxrCn-N92TYQRkRq9QD_0-
>> Du3MfKXlx3a1n1bVe7U
>> > &e=
>> > --------------------------------------------------------------------