Re: Updating to RFC6434 to deal with 8200-style header insertion by IPIP

"C. M. Heard" <heard@pobox.com> Sat, 18 November 2017 18:45 UTC

Return-Path: <heard@pobox.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3656126D46 for <ipv6@ietfa.amsl.com>; Sat, 18 Nov 2017 10:45:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.301
X-Spam-Level:
X-Spam-Status: No, score=-0.301 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pobox.com; domainkeys=pass (1024-bit key) header.from=heard@pobox.com header.d=pobox.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lEiM5Q_Grqgb for <ipv6@ietfa.amsl.com>; Sat, 18 Nov 2017 10:45:07 -0800 (PST)
Received: from sasl.smtp.pobox.com (pb-smtp2.pobox.com [64.147.108.71]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9A2E126B6E for <ipv6@ietf.org>; Sat, 18 Nov 2017 10:45:07 -0800 (PST)
Received: from sasl.smtp.pobox.com (unknown [127.0.0.1]) by pb-smtp2.pobox.com (Postfix) with ESMTP id 64A559930B for <ipv6@ietf.org>; Sat, 18 Nov 2017 13:45:06 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=pobox.com; h=mime-version :from:date:message-id:subject:to:cc:content-type :content-transfer-encoding; s=sasl; bh=BA000CPiqxNZxpOfmCIugOk74 xc=; b=M1CUuQFYXXrZCPV2WrnVljxvY6kDo0isphY52RSsFZEoanliQymMKCpP1 CD6DUR4VAO+8cBYgFoV/ww2wgTRzKQgqLdn6ht/1wPzg32Xb2v36xKCS5JHTRWNp ua2ml4q4bjxSw2uWAyoE5SK7WOrBhEXoQmLpYlsm4sjKUR7JF8=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=mime-version :from:date:message-id:subject:to:cc:content-type :content-transfer-encoding; q=dns; s=sasl; b=QUZbKq08D1OhxNlgjUW 9XASn/idOxaA86RzPWfmOhuPqmq+b9go9BBPGAvAM3bGFUQtqWpwRIw3XAyS4JKD LTfkJanq/vAjbYC74e4M2Sm9uZ5q+c7idiZ9/krYBmyCQsbDtDmBVNfHRvpd8zLE FhRBgVz92ZlBVeLeBRPAXhDM=
Received: from pb-smtp2.nyi.icgroup.com (unknown [127.0.0.1]) by pb-smtp2.pobox.com (Postfix) with ESMTP id 5C99A99308 for <ipv6@ietf.org>; Sat, 18 Nov 2017 13:45:06 -0500 (EST)
Received: from mail-qt0-f171.google.com (unknown [209.85.216.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pb-smtp2.pobox.com (Postfix) with ESMTPSA id CFC32992FE for <ipv6@ietf.org>; Sat, 18 Nov 2017 13:45:05 -0500 (EST)
Received: by mail-qt0-f171.google.com with SMTP id h42so10547047qtk.11 for <ipv6@ietf.org>; Sat, 18 Nov 2017 10:45:05 -0800 (PST)
X-Gm-Message-State: AJaThX4Ny+pUvf7ZLqsgGJ+/lAAUpzffMpfofCxZxB7v42wZbUl+h3dB ka7Gml9Wj7+BkCigHdFUjNu2B3aj4ywJDtR5Myg=
X-Google-Smtp-Source: AGs4zMYBhNK7AR7z455Hs3fDBh0LtSlOngpx/cwaGegi49ovbopwhuvcnpcrjEeEAbYrn7WI3FYM/ygE8I74+VhbWD4=
X-Received: by 10.200.52.137 with SMTP id w9mr14543338qtb.290.1511030705371; Sat, 18 Nov 2017 10:45:05 -0800 (PST)
MIME-Version: 1.0
Received: by 10.140.22.139 with HTTP; Sat, 18 Nov 2017 10:44:44 -0800 (PST)
From: "C. M. Heard" <heard@pobox.com>
Date: Sat, 18 Nov 2017 10:44:44 -0800
X-Gmail-Original-Message-ID: <CACL_3VGdGWYmHBN3gb2FPLMpu2kShQ3Dov84xURp5cCqTsK3fw@mail.gmail.com>
Message-ID: <CACL_3VGdGWYmHBN3gb2FPLMpu2kShQ3Dov84xURp5cCqTsK3fw@mail.gmail.com>
Subject: Re: Updating to RFC6434 to deal with 8200-style header insertion by IPIP
To: Tim Chown <Tim.Chown@jisc.ac.uk>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, Fernando Gont <fernando@gont.com.ar>, "C. M. Heard" <heard@pobox.com>, 6man WG <ipv6@ietf.org>, Michael Richardson <mcr+ietf@sandelman.ca>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Pobox-Relay-ID: 982F11A4-CC90-11E7-A8B5-575F0C78B957-06080547!pb-smtp2.pobox.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/sdeW4TsocEurS_6dNKnKqz5QnB4>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Nov 2017 18:45:08 -0000

On Mon, Nov 13, 2017 at 8:15 AM, Tim Chown wrote:
> On 7 Nov 2017, at 19:29, Brian E Carpenter wrote:
>> On 08/11/2017 00:20, Tim Chown wrote:
>>> On 6 Nov 2017, at 19:35, Brian E Carpenter wrote:
>>>> On 07/11/2017 07:02, Fernando Gont wrote:
>>>>> On 11/02/2017 04:33 PM, Brian E Carpenter wrote:
[...]
>>>>>> Strictly speaking, RFC8200 doesn't specify what to do with
>>>>>> an unrecognized upper-layer header.
>>>>>
>>>>> Based on the std, anything that is unknown is an EH. In the
>>>>> context of RFC8200/RFC2460, there's only:
>>>>>
>>>>> * Known EHs
>>>>> * Known ULP
>>>>> * Unknown EHs
>>>>>
>>>> Yes, that's what the text says but I wish we'd fixed it in 8200
>>>> to acknowledge that there is a 4th case (Unknown ULP) and that
>>>> it cannot be distinguished from the 3rd case. Acknowledging
>>>> that is much better than ignoring it. I'm happy with Ole's
>>>> suggestion that this (and the resulting ICMP 1 behaviour) should
>>>> be mentioned in 6434bis - as a clarification, not a new
>>>> invention.

Actually, RFC 8200 is carefully worded, and the three cases it
discusses are:

* Known EHs
* Known ULP
* Unknown Next Header value

That last bullet includes both unknown EHs and unknown ULPs.
RFC 8200 says to process both in the same way.

That being said, this point is easily missed (witness this discussion
and earlier ones on the topic). So a clarification would be useful.

>>> This seems a reasonable approach to me.  Would you like to
>>> propose text, Brian?
>>
>> After this:
>>
>> 5.1.  Internet Protocol Version 6 - RFC 8200
>>
>>   The Internet Protocol Version 6 is specified in [RFC8200].  This
>>   specification MUST be supported.
>>
>>   Any unrecognized extension headers or options MUST be processed
>>   as described in RFC 8200.
>>
>> insert something like:
>>
>>   Note that it is impossible for a node to distinguish between an
>>   unrecognized extension header and an unrecognized upper layer
>>   protocol. Therefore, a node will behave in the same way for
>>   either of these cases, in particular by returning an ICMP
>>   Parameter Problem message with code 1 ("unrecognized Next Header
>>   type encountered") even for an unrecognized upper layer
>>   protocol.
>
> This is the text TimW will present in 6man; it seems fine to me,
> and hopefully we’ll have consensus.

I am fine with this text.

Mike Heard