Re: What flexibility do 6to4 NAT have with address formats?

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 14 October 2009 00:46 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BB2E93A6936 for <ipv6@core3.amsl.com>; Tue, 13 Oct 2009 17:46:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vg9Qo9xlk-5L for <ipv6@core3.amsl.com>; Tue, 13 Oct 2009 17:46:30 -0700 (PDT)
Received: from mail-pz0-f204.google.com (mail-pz0-f204.google.com [209.85.222.204]) by core3.amsl.com (Postfix) with ESMTP id CD7E328C137 for <ipv6@ietf.org>; Tue, 13 Oct 2009 17:46:30 -0700 (PDT)
Received: by pzk42 with SMTP id 42so270976pzk.31 for <ipv6@ietf.org>; Tue, 13 Oct 2009 17:46:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :organization:user-agent:mime-version:to:cc:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=Jdys42GuSlb08itpYWxQRl8XHBRXqKBEOCB419G/Q7M=; b=on9ALL7WKjoOOXd1EaPOX7ge4GK/pSHI//3rDl0A0tqX0oUQ2Nnos/j48U4nIwXm4k RDWhi+FQaSrK8agiiJ9WszMePfHRboJETRoQH8+YlxqEHYSW1f4If6LewffME8cmIwNa sQOzWWGGNsQeX7cilAEXrDFdjgXUttxaZc6l0=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; b=CAbryZ5zpObM8Sz+YFQ950xR/dYQuAjdi/owmENcK8MFzBtIbn0Q8ySiM6dxAow1vy KmTca2/OHfIs5CiIUNOJ9NhY/RzwYWjeLhRYi4EtQ8AlLaaLiTItUoIJCIBpM/G2GCAS lorbPQi80rW61l2sypyZGu2P24Xrb78TzPqTU=
Received: by 10.115.113.9 with SMTP id q9mr13691296wam.224.1255481189404; Tue, 13 Oct 2009 17:46:29 -0700 (PDT)
Received: from ?130.216.38.124? (stf-brian.sfac.auckland.ac.nz [130.216.38.124]) by mx.google.com with ESMTPS id 21sm131614pzk.11.2009.10.13.17.46.27 (version=SSLv3 cipher=RC4-MD5); Tue, 13 Oct 2009 17:46:28 -0700 (PDT)
Message-ID: <4AD51F5D.9070106@gmail.com>
Date: Wed, 14 Oct 2009 13:46:21 +1300
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: Christian Huitema <huitema@microsoft.com>
Subject: Re: What flexibility do 6to4 NAT have with address formats?
References: <6B55F0F93C3E9D45AF283313B8D342BA211A8C1D@TK5EX14MBXW651.wingroup.windeploy.ntdev.microsoft.com>
In-Reply-To: <6B55F0F93C3E9D45AF283313B8D342BA211A8C1D@TK5EX14MBXW651.wingroup.windeploy.ntdev.microsoft.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: 6man 6man <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2009 00:46:31 -0000

On 2009-10-14 03:38, Christian Huitema wrote:
...
> 
> First, we wonder about the importance of the 64 bit boundary.
> Addressing documents specify that the global address is
> essentially formed of a 64 bit subnet prefix and a 64 bit
> host identifier, with the host identifier compatible with
> IEEE 802 identifiers. Does that mean that the "routing"
> requirement of stateless translation can only be addressed if
> the IPv4 bytes are entirely contained within the subnet
> prefix? Different authors have different opinions, so WG
> input would be beneficial.

As I understand it, routers should never treat /64 as special
or as any kind of limit. It's just a convention that /64 is
considered the longest normal subnet prefix, which happens to
be compatible with SLAAC. So I can't see any fundamental
reason why the IPv4 address bits can't straddle the /64
boundary. However, they should clearly skip over the UG bits
so the resulting 64-bit IID is consistent with the IID rules.
That will break byte alignment.

> 
> Second, we wonder about the constraints of host identifiers.
> A first question is whether an all null identifier would be
> legitimate and practical. There is some evidence that it
> works with most stacks. But there is also a statement in the
> addressing document that the all null address is reserved for
> the subnet anycast address. Do stacks actually implement the
> subnet anycast function? Should the specification be removed
> from the addressing RFC? Can we just ignore it? If we cannot
> ignore it, we will have to specify some value different from
> zero for the suffix. A "checksum neutrality" field might do
> that, but please consider the second question.

If you do straddle the /64 boundary, you will not have a null
IID so the issue goes away. If not, using null feels wrong to
me. Firstly, it conflicts with the current (harmless and
possibly implemented) spec. Secondly, specifying a value is no
big deal as far as I can see.

> 
> The second question regards the uniqueness of host
> identifiers. Suppose we define the address used for stateless
> translation as: 32 bit "provider" prefix, 32 bit IPv4
> address, and a constant identifier, either 0 or the "checksum
> neutrality" value, which is only a function of the provider
> prefix. Suppose now that for some reason there are two "IPv4
> addressed" hosts on the same link, e.g. because many servers
> are located in the same server room. The two hosts will have
> different addresses, in different 64 bit subnets, but they
> will also have different host identifiers. Is that OK?

Why wouldn't it be OK? I can't see why it's a question.
The normal expectation is that different hosts have different
IIDs so I am curious why this matters.

   Brian

> 
> -- Christian Huitema
> 
> --------------------------------------------------------------------
>  IETF IPv6 working group mailing list ipv6@ietf.org 
> Administrative Requests:
> https://www.ietf.org/mailman/listinfo/ipv6 
> --------------------------------------------------------------------
> 
>