RE: Adoption call for <draft-pref64folks-6man-ra-pref64-02>

"Templin (US), Fred L" <Fred.L.Templin@boeing.com> Mon, 10 December 2018 20:41 UTC

Return-Path: <Fred.L.Templin@boeing.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 598091311A0; Mon, 10 Dec 2018 12:41:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QAwf_bMS1Qhf; Mon, 10 Dec 2018 12:41:07 -0800 (PST)
Received: from clt-mbsout-01.mbs.boeing.net (clt-mbsout-01.mbs.boeing.net [130.76.144.162]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CD4113109A; Mon, 10 Dec 2018 12:41:07 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by clt-mbsout-01.mbs.boeing.net (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with SMTP id wBAKf4iS017719; Mon, 10 Dec 2018 15:41:04 -0500
Received: from XCH16-07-08.nos.boeing.com (xch16-07-08.nos.boeing.com [144.115.66.110]) by clt-mbsout-01.mbs.boeing.net (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id wBAKf1Wu017128 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=FAIL); Mon, 10 Dec 2018 15:41:01 -0500
Received: from XCH16-07-10.nos.boeing.com (144.115.66.112) by XCH16-07-08.nos.boeing.com (144.115.66.110) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.1466.3; Mon, 10 Dec 2018 12:41:00 -0800
Received: from XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5]) by XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5%2]) with mapi id 15.01.1466.003; Mon, 10 Dec 2018 12:41:00 -0800
From: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>
To: Mark Smith <markzzzsmith@gmail.com>, Sander Steffann <sander@steffann.nl>
CC: Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org>, Suresh Krishnan <suresh.krishnan@gmail.com>, 6man WG <ipv6@ietf.org>, Fernando Gont <fernando@gont.com.ar>, 6man Chairs <6man-chairs@ietf.org>
Subject: RE: Adoption call for <draft-pref64folks-6man-ra-pref64-02>
Thread-Topic: Adoption call for <draft-pref64folks-6man-ra-pref64-02>
Thread-Index: AQHUju/hQyOviJ8bOEamVTdE6GvdIKV1VqeAgALgCICAACi3doAADVBg
Date: Mon, 10 Dec 2018 20:40:59 +0000
Message-ID: <e6ec677ed83644dfbad502cb8571afbd@boeing.com>
References: <BD1717B3-C013-4718-9140-283F312C1634@employees.org> <787AE7BB302AE849A7480A190F8B93302E053EE7@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <CAKD1Yr1vD4QS7Ea42nQXCfLF-Ri6SsP8n=1BGft44iDkZyYuyg@mail.gmail.com> <787AE7BB302AE849A7480A190F8B93302E054363@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <CAKD1Yr3d924A74V84e8_N0AetH5_hnRtVhXa0aGU6bKScuCwqQ@mail.gmail.com> <da753e71-4e1d-609b-19e5-3cb5f2c2c598@foobar.org> <CAKD1Yr3spzQ=3HUQxZ3hBUwxepKmF+o1PQ9pK_uPs2mNaK0OCQ@mail.gmail.com> <17783e3a-7a57-c938-9319-4e3153b9f523@foobar.org> <CAKD1Yr2+Rak-a66JsvKcwODjc2CztFABctst5dNNvap6YW0Avw@mail.gmail.com> <c24b0bf8-bb5a-bc4c-be65-b30e64d27faa@gont.com.ar> <F07826C5-6BCD-43F8-AC22-3F0CD06C9761@steffann.nl> <dad8b2b0fe9546eaaf0e554a8556025e@boeing.com> <2E28D96F-827A-480A-97C2-CBD8EF3E2E13@steffann.nl> <CAO42Z2ybffC-2LckfkFn2SsB8fxYf0Opwwb88SzoN6-heYNq=A@mail.gmail.com>
In-Reply-To: <CAO42Z2ybffC-2LckfkFn2SsB8fxYf0Opwwb88SzoN6-heYNq=A@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [137.137.12.6]
x-tm-snts-smtp: 429FD1946305AB45D509F4DA9D1D3DC7529143916BB4E26EA29615E023CC7B162000:8
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-GCONF: 00
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/yGEycKSgDf7x23DZ1NjD0Np1JAQ>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Dec 2018 20:41:11 -0000

Hi Sander,

See below for responses:

>> You may be interested to know that there is a proposal for combining IPv6ND
>> and DHCPv6 into a single unified service:
>> 
>> https://datatracker.ietf.org/doc/draft-templin-6man-dhcpv6-ndopt/
>> 
>> It works by having IPv6ND RS/RA messages include an embedded DHCPv6
>> message. So, all messages on the wire are RS/RA, but DHCPv6 messages
>> are carried as payload. It is backwards-compatible and requires only the
>> standardization of a single new IPv6ND option. It would also eliminate
>> the need to clone existing DHCPv6 options as new IPv6ND options and
>> vice-versa. Does it satisfy the requirements?
>
> Not completely. I know that Lorenzo wants to push new options/values whenever the network wants the clients to
> update their settings, and this seems to require the client to send a new RS after it receives an RA with the Reconfigure
> option. At that point we're back at normal DHCPv6 behaviour, just with an extra layer of encapsulation. To make this
> useful for both Push (RA) and Pull (DHCPv6) scenarios there is a need to include DHCPv6 options in unsolicited
> multicast RA messages as well.

Push behavior can be accomplished by having the router's RA include an unsolicited
DHCPv6 Reply message, i.e., as if a client had issued an Information-Request. The
Reply would include any stateless info the DHCPv6 service is configured to include.

> I don't see the need to replace stateful DHCPv6 with RA options, but I do see the wish to use RA in the same way that
> stateless DHCPv6 is used. What you describe has almost exactly the same behaviour as a client that sends a DHCPv6
> Solicit without waiting for the first RA to arrive. What your proposal does is:
>
> Client: send RS with DHCPv6 Solicit inside it
> Router: extract DHCPv6 message from RS
> Router: relay DHCPv6 message
> Router: wait for DHCPv6 Reply to come back
> Router: combine RA and DHCPv6 Reply
> Client: receive RA and DHCPv6 Reply

Right - the relaying process is per "Lightweight DHCPv6 Relay Agent (LDRA)" as
specified in RFC6221.

> Combining the RA and DHCPv6 messages means that the client will only get a reply when the slowest of the two is
> completed, which will usually mean that the RA is delayed to wait for the DHCPv6 reply.

I don't know of anything in RFC4861 that guarantees fast delivery of RA responses
to RSes. Plus, the client would include the DHCPv6 option only in RS messages that
need to explicitly request DHCPv6 information meaning that the client would be
willing to wait for a reply.

> It also means that the
> router has to keep more state while waiting for DHCPv6 to complete. Normal DHCPv6 relaying can be implemented
> stateless.

No, that is not true. The router does not need to maintain state while the
DHCPv6 service is processing the message. The router is simply a stateless
LDRA relay agent.

> I'd rather see the client send an RS and a DHCPv6 Solicit in parallel. It can then receive the RA as quickly as possible.
> So for stateful or per-client specific configuration I think the existing DHCPv6 mechanisms works better than
> combining it with RA as you propose.

Again, RFC4861 offers no guarantee of timely delivery of RA responses to RSes
and the DHCPv6 process is not going to take forever - certainly no more than a
few 10's of msecs. But, if a faster response is somehow desired the client can
send two RS messages; one with a DHCPv6 option and one without.

Thanks - Fred

> What I would prefer to see is to be able to include all the generic (non client-specific) options in the RA. There are
> all kinds of options that could benefit from this: DNS options in RA are an obvious example, because they already
> have an RA specific option. But that could be extended to much more options, like the DS-Lite AFTR, MAP-E and
> MAP-T mappings, timezone info, NTP servers, etc. It shouldn't be necessary that every option is defined multiple
> times like RFC7710 does. Such a mapping should be there by default.