Re: 64bit MAC addresses and SLAAC

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Fri, 19 June 2020 14:28 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F0443A0A41 for <ipv6@ietfa.amsl.com>; Fri, 19 Jun 2020 07:28:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.622
X-Spam-Level:
X-Spam-Status: No, score=-1.622 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.276, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3OTDK70oFXyW for <ipv6@ietfa.amsl.com>; Fri, 19 Jun 2020 07:28:33 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20F663A0A25 for <ipv6@ietf.org>; Fri, 19 Jun 2020 07:28:32 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1jmI0D-0000N6C; Fri, 19 Jun 2020 16:28:21 +0200
Message-Id: <m1jmI0D-0000N6C@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Cc: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
Subject: Re: 64bit MAC addresses and SLAAC
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <e716dc36b56f4806b4c4dbfbf1ab852a@boeing.com> <04B8995F-7BF9-4DB0-826C-9E4BF95FD169@employees.org> <43ce64f0-3373-ca9a-f83d-40c44c4d5920@gmail.com> <m1jlwVZ-0000RgC@stereo.hq.phicoh.net> <MN2PR11MB356561378679A6AD1CA895B4D8980@MN2PR11MB3565.namprd11.prod.outlook.com> <m1jmHAN-0000OcC@stereo.hq.phicoh.net> <MN2PR11MB35652DAAA66B512ECB644A8FD8980@MN2PR11MB3565.namprd11.prod.outlook.com>
In-reply-to: Your message of "Fri, 19 Jun 2020 13:54:22 +0000 ." <MN2PR11MB35652DAAA66B512ECB644A8FD8980@MN2PR11MB3565.namprd11.prod.outlook.com>
Date: Fri, 19 Jun 2020 16:28:19 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/tfd07eeXnR4q0E3AlvCOLBffv4M>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jun 2020 14:28:34 -0000

> > We have that broker, it is called DHCPv6.
> 
> As of today? 

I don't think the protocol has any limitations in this regard. I.e,
a host could wait for an RA with a PIO option, generate an address and then
use DHCPv6 to obtain that address.

Whether any host does that or any dhcp server supports it is a different 
question. It doesn't need protocol changes.

> Depending on what you expect from that broker, e.g.,
> who gets to select the IID, 

The host can propose an IID, the DHCPv6 server is the final authority.

> can you use the broker for Address
> Resolution, etc...  

Obviously, DHCPv6 is not going to do address resolution.

> > Current DAD is certainly not good enough if there are regular address colli
> sions
> 
> Define "regular". I will agree if it is the opposite of quasi-impossible,
> which is how we get SLAAC to work.  Thus your original shortcut
> that SLAAC=>randomIID though deep down it does not, it's just how
> we do it with distributed DAD.

Current SLAAC has to work with current DAD. Only after we change DAD, we can
consider changing SLAAC. 

Having two hosts with the same IP address on a subnet is very hard to 
troubleshoot. So we have to keep the chance of that happening very low.

Using 64-bit pseudo random numbers is a very effective way of doing that.

> It's not just DAD, it's the whole ND system that has aged and needs
> a lifting. Think wireless, overlays, NBMA meshes, large L2 domains...

Address resolution using multicast can trivially be disabled
(except for link local) by marking prefixes as offlink.

I think that offers plenty of flexibility.