RE: [EXTERNAL] Re: AERO/OMNI dropping support for SEND/CGA

"Templin (US), Fred L" <Fred.L.Templin@boeing.com> Tue, 01 December 2020 18:44 UTC

Return-Path: <Fred.L.Templin@boeing.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6878F3A1439 for <ipv6@ietfa.amsl.com>; Tue, 1 Dec 2020 10:44:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.118
X-Spam-Level:
X-Spam-Status: No, score=-2.118 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=boeing.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mmVftKITWtA2 for <ipv6@ietfa.amsl.com>; Tue, 1 Dec 2020 10:44:41 -0800 (PST)
Received: from clt-mbsout-02.mbs.boeing.net (clt-mbsout-02.mbs.boeing.net [130.76.144.163]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2158A3A143D for <ipv6@ietf.org>; Tue, 1 Dec 2020 10:44:41 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by clt-mbsout-02.mbs.boeing.net (8.15.2/8.15.2/DOWNSTREAM_MBSOUT) with SMTP id 0B1Iiacl028209; Tue, 1 Dec 2020 13:44:38 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=boeing.com; s=boeing-s1912; t=1606848279; bh=7FKkDBkBYLTmsRXGmWKyIuCB872zAgDVWJh9jsI7oko=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=mbsU/uxnavApiyYbDdp+IxhX8Ljj+WqJAJjj1Wwsjp4XxK2XoUaHwm7P+tqW6oCoO WzqzVMviSgWmH0GWjZMSNHCnZ92jhPMTcHFcQFIISb29VgFNcUEYKLRiXjjXNxlivd AIKykYs2sH9pNbp9oWSE0KRpS9igkdHqYtumINF/EZtY6mk89rIZFxKHc/IPyVI/Gz SaySxrsDFWDD7l/I/oU+P5r8LseAmCqCEpogkjyvOkfp3gQlifY0BSSzo40XEfwmf6 8XxtR9B4GsVLLq8tw2V/4I9oVQDWA7QX4XH9bE1gjfKqUzVhYGZcLIDLEabmtvVJTD 14r7UYfTSHR8w==
Received: from XCH16-07-10.nos.boeing.com (xch16-07-10.nos.boeing.com [144.115.66.112]) by clt-mbsout-02.mbs.boeing.net (8.15.2/8.15.2/8.15.2/UPSTREAM_MBSOUT) with ESMTPS id 0B1IiU60028127 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=OK); Tue, 1 Dec 2020 13:44:30 -0500
Received: from XCH16-07-10.nos.boeing.com (144.115.66.112) by XCH16-07-10.nos.boeing.com (144.115.66.112) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.1.2044.4; Tue, 1 Dec 2020 10:44:28 -0800
Received: from XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5]) by XCH16-07-10.nos.boeing.com ([fe80::1522:f068:5766:53b5%2]) with mapi id 15.01.2044.004; Tue, 1 Dec 2020 10:44:28 -0800
From: "Templin (US), Fred L" <Fred.L.Templin@boeing.com>
To: "sarikaya@ieee.org" <sarikaya@ieee.org>
CC: "ipv6@ietf.org" <ipv6@ietf.org>
Subject: RE: [EXTERNAL] Re: AERO/OMNI dropping support for SEND/CGA
Thread-Topic: [EXTERNAL] Re: AERO/OMNI dropping support for SEND/CGA
Thread-Index: AdbHZPpW7fZRe+sEQcisGsnlYu6uigA7DvIAABBl0+A=
Date: Tue, 01 Dec 2020 18:44:28 +0000
Message-ID: <73bc2897bf4a4602858e77d940686c29@boeing.com>
References: <e9d391655a124688a121db7a6664d7bb@boeing.com> <CAC8QAcewn9+VMtBg4=kU7FDTFJ0z8PVpvGbtOkNbB70zFs7EAQ@mail.gmail.com>
In-Reply-To: <CAC8QAcewn9+VMtBg4=kU7FDTFJ0z8PVpvGbtOkNbB70zFs7EAQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [137.137.12.6]
x-tm-snts-smtp: F42A91799369E4D77A7FBD44A8C67B39F48B73EDE8ACE5B66AE4C64576DEC98E2000:8
Content-Type: multipart/alternative; boundary="_000_73bc2897bf4a4602858e77d940686c29boeingcom_"
MIME-Version: 1.0
X-TM-AS-GCONF: 00
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/yY0IGh83L4Zkxs8pWuqz3yCdSoU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Dec 2020 18:44:43 -0000

Behcet,

To be clear, there is now a -52 version of the draft that bows to the pressures
of those who still insist on the /64 boundary. Earlier draft versions can still be
referenced for those who like /65+, but there is strong resistance to using the
54 “zero” bits of fe80::/10 which is where the extra prefix bits would end up
going. I was told that trying to define a use for those bits would be pushing a
“large rock up a hill”, and I have experienced that struggle firsthand.

To your comments, yes an EUN should certainly be added to figure 2 and
adding a packet flow diagram is something that can be done as well. I can’t
give a timeframe for a next draft version but will put this in a TODO note
to myself.

Thanks - Fred

From: Behcet Sarikaya [mailto:sarikaya2012@gmail.com]
Sent: Tuesday, December 01, 2020 10:17 AM
To: Templin (US), Fred L <Fred.L.Templin@boeing.com>
Cc: ipv6@ietf.org
Subject: [EXTERNAL] Re: AERO/OMNI dropping support for SEND/CGA


Hi Fred,

In draft-templin-6man-omni-interface-51

I could not see EUN in Figure 2.
Also a figure showing the flow of packets in the network from source to destination is missing.

Maybe you need an architecture draft to clear these things out.

Behcet

On Mon, Nov 30, 2020 at 4:12 PM Templin (US), Fred L <Fred.L.Templin@boeing.com<mailto:Fred.L.Templin@boeing.com>> wrote:
Folks, this is a big decision point for the AERO/OMNI drafts but I am preparing
to drop support for SEND/CGA (RFC3971; RFC3972). This means that IPv6 ND
message authentication on OMNI interfaces will use a simple HMAC the same
as is done for Teredo (RFC4380; RFC6081). If anyone knows why that might
cause problems, it would be best to speak up now.

Fred

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org<mailto:ipv6@ietf.org>
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------