Re: <draft-ietf-6man-default-iids> update to rfc2464bis

Fernando Gont <fgont@si6networks.com> Thu, 12 January 2017 09:21 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 412F51294CE for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 01:21:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p1-9N-uaNW8S for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 01:21:42 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23CCD126CD8 for <ipv6@ietf.org>; Thu, 12 Jan 2017 01:21:42 -0800 (PST)
Received: from [192.168.3.88] (142-135-17-190.fibertel.com.ar [190.17.135.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 476D782AB8; Thu, 12 Jan 2017 10:21:35 +0100 (CET)
Subject: Re: <draft-ietf-6man-default-iids> update to rfc2464bis
To: Lorenzo Colitti <lorenzo@google.com>
References: <1E7F90AC-79BB-49BE-B397-EC829EA95AA4@gmail.com> <CAKD1Yr0O6gnXZc3qEY7bqkBYu-sx1_erwum2DRwpe+Vv+jmdiw@mail.gmail.com> <7456833d-aa3f-d368-6041-cfdc1ac95f6f@si6networks.com> <CAKD1Yr1dQF7Cg0mppZVcSXC15pue_y1Qb-GugKY+G8u-dRyJtg@mail.gmail.com>
From: Fernando Gont <fgont@si6networks.com>
X-Enigmail-Draft-Status: N1110
Message-ID: <89fc8838-f6cd-1647-8468-1c8c11466aff@si6networks.com>
Date: Thu, 12 Jan 2017 06:21:28 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1
MIME-Version: 1.0
In-Reply-To: <CAKD1Yr1dQF7Cg0mppZVcSXC15pue_y1Qb-GugKY+G8u-dRyJtg@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/yFXdAn5gcG72nI2zBqeljS1V8zs>
Cc: IPv6 List <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jan 2017 09:21:44 -0000

On 01/12/2017 05:24 AM, Lorenzo Colitti wrote:
> On Thu, Jan 12, 2017 at 4:20 PM, Fernando Gont <fgont@si6networks.com
> <mailto:fgont@si6networks.com>> wrote:
> 
>     > We do
>     > recommended that nodes use RFC7217 addresses by default, but only if the
>     > node wishes to create stable addresses, and there is no requirement that
>     > a node do so.
> 
>     So far, the current specs essentially require that. RFC4941 (the only
>     spec we have for non-temporary addresses) require that the be generated
>     along with the traditional (stable) addresses.
> 
> 
> I don't see what RFC 4941 has to do with this discussion. RFC4941 is a
> method of generating temporary addresses. It is not required to be used,
> and it is not the only way of forming IP addresses that can change over
> time.

If you use temp-only, that means the inability to have e.g. long-lived
SSH sessions. I don't think that's the current operating "model", even
less for IPv6.



>     FWIW, I do think there are scenarios in which you might want to do
>     temporary-only, but we certainly need an update to the current specs in
>     that regard (and guidance regarding where to use each).
> 
> 
> There are lots of ways of forming interface identifiers. We should
> absolutely not rule out the ability to form IIDs from non-stable MAC
> addresses (IIRC the text in default-iids was carefully modified to
> ensure that that would still be possible, based on substantial
> discussions in the WG), and we should *absolutely* not say that the only
> possible form of interface identifiers on an Ethernet interface are
> RFC7217 and RFC4941.

Clearly, default-iids talks about stable-iids, and the default algorithm
for such iids. And nobody said otherwise.

So far, the only two standardized algorithms for generating IIDs with
SLAAC are RFC7217, RFC4941, and traditional slaac (modified eui-64).
Clearly, you can hack your code and commit it. Being that this is
standardization body, I would expect that we're agree on standardizing
reasonable approaches, and calling bad approaches as such.

Better to have us discuss approaches and std'ize them, that have each
vendor come up with their own (possibly flawed) approach.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492