Re: RFC3484 destination address selection rule 2 is buggy

Pekka Savola <pekkas@netcore.fi> Wed, 26 March 2008 05:52 UTC

Return-Path: <ipv6-bounces@ietf.org>
X-Original-To: ietfarch-ipv6-archive@core3.amsl.com
Delivered-To: ietfarch-ipv6-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 12A9F3A6CB0; Tue, 25 Mar 2008 22:52:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.465
X-Spam-Level:
X-Spam-Status: No, score=-100.465 tagged_above=-999 required=5 tests=[AWL=-0.028, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iX9fsgoaSrmk; Tue, 25 Mar 2008 22:52:20 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 195C03A6AA4; Tue, 25 Mar 2008 22:52:20 -0700 (PDT)
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2697B3A6AA4 for <ipv6@core3.amsl.com>; Tue, 25 Mar 2008 22:52:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fp6CZHlyZgga for <ipv6@core3.amsl.com>; Tue, 25 Mar 2008 22:52:18 -0700 (PDT)
Received: from netcore.fi (eunet-gw.ipv6.netcore.fi [IPv6:2001:670:86:3001::1]) by core3.amsl.com (Postfix) with ESMTP id EC6EB3A6C30 for <ipv6@ietf.org>; Tue, 25 Mar 2008 22:52:16 -0700 (PDT)
Received: from netcore.fi (localhost [127.0.0.1]) by netcore.fi (8.13.8/8.13.8) with ESMTP id m2Q5nhvm006170; Wed, 26 Mar 2008 07:49:43 +0200
Received: from localhost (pekkas@localhost) by netcore.fi (8.13.8/8.13.8/Submit) with ESMTP id m2Q5ng2W006166; Wed, 26 Mar 2008 07:49:42 +0200
Date: Wed, 26 Mar 2008 07:49:42 +0200
From: Pekka Savola <pekkas@netcore.fi>
To: JINMEI Tatuya / 神明達哉 <Jinmei_Tatuya@isc.org>
Subject: Re: RFC3484 destination address selection rule 2 is buggy
In-Reply-To: <m2fxueo0xg.wl%Jinmei_Tatuya@isc.org>
Message-ID: <alpine.LRH.1.10.0803260736420.4596@netcore.fi>
References: <alpine.LRH.1.00.0803140026591.6318@netcore.fi> <m2fxueo0xg.wl%Jinmei_Tatuya@isc.org>
User-Agent: Alpine 1.10 (LRH 962 2008-03-14)
MIME-Version: 1.0
X-Virus-Scanned: ClamAV 0.92.1/6391/Tue Mar 25 12:09:55 2008 on otso.netcore.fi
X-Virus-Status: Clean
Cc: Iljitsch van Beijnum <iljitsch@muada.com>, ipv6@ietf.org
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ipv6-bounces@ietf.org
Errors-To: ipv6-bounces@ietf.org

On Tue, 25 Mar 2008, JINMEI Tatuya / ???? wrote:
> v4:{site-local,global} is special and is not that harmful as long as
> the network is properly configured (I know we cannot always assume
> that, though).  When a link-local address is the only available
> address for host, there should normally be no IPv6 default router
> either.

The scenario where a router advertises the default route yet does not 
advertise any prefix information (or prefix information does not set 
the autoconfig bit) is still a valid scenario (e.g., I could imagine 
DHCPv6-only deployments using this; in fact I believe if you want to 
run DHCPv6-only this is the only choice to for deploying default 
route) and it should be addressed.

Iljitsch noted in the original mail that his default route existed 
even though he moved to ietf-464nat network (the nexthop was answering 
to ping but was not sending RAs).

It is true that the case made in draft-ietf-v6ops-v6onbydefault-03 is 
already somewhat mitigated by implementations which no longer 
implement the "on-link by default" rule but that alone does not seem 
sufficient.

Is moving from one network to another (using the same interface) a 
scenario where you should purge the default route? (Even if the 
nexthop is still responsive?)  Should you purge the default route if 
the link goes down (I suspect not -- e.g. with 802.11 link with bad 
coverage this could be a problem)?

It seems to me that there are also valid scenarios where exactly the 
same problem appears in addition to many scenarios which are usually 
due to misconfiguration.  I believe our protocols should be robust 
enough to cover both valid scenarios and (if there aren't major 
drawbacks) common misconfigurations.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------