Re: [v6ops] A proposal for draft-ietf-6man-rfc4291bis-07

神明達哉 <jinmei@wide.ad.jp> Tue, 07 March 2017 01:11 UTC

Return-Path: <jinmei.tatuya@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93CAD129A78 for <ipv6@ietfa.amsl.com>; Mon, 6 Mar 2017 17:11:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.369
X-Spam-Level:
X-Spam-Status: No, score=-2.369 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.229, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0WwvY36tRUEP for <ipv6@ietfa.amsl.com>; Mon, 6 Mar 2017 17:11:09 -0800 (PST)
Received: from mail-qk0-x22f.google.com (mail-qk0-x22f.google.com [IPv6:2607:f8b0:400d:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3F9E1298A0 for <ipv6@ietf.org>; Mon, 6 Mar 2017 17:11:08 -0800 (PST)
Received: by mail-qk0-x22f.google.com with SMTP id 1so184296007qkl.3 for <ipv6@ietf.org>; Mon, 06 Mar 2017 17:11:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=nAgrmHEgUTaR7kqdsFArU6G/NGmKp/nTsNhO9FGo3bM=; b=d+Brf4s2+qMPUzynBSVEqjFY7Xf6lqxijqdeS/IEBejH0+2M8n7amEAAUff/hrYRU+ sx8EPajkeP+LyOvSaVU9jTaQu4y+3zVr63dWNr9cMSywgnJG92uLhS15W5Mt9F2j4sog n3+CrUCVYoBBf64Z8ZcyM+HzPtilgfjjbGA3w2JLSU/1sKxsyKeYu/sbHrU2Tf8RvOpA v1wHKeUU7ldB9f20BmIoI7QGiPksmbzAlH3YuwGUjqThD1VIlaPjMg+d/bkxfuHJlWX+ 540CzAeqsatQuBnrYEWZ0iBMsRyAjCs7G8q9E5SjkiyXmGQ0t56JS4++jSBPl2o2yrTX MWUg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=nAgrmHEgUTaR7kqdsFArU6G/NGmKp/nTsNhO9FGo3bM=; b=L5V6YU5ujSR1dzJOpZGAzp/PfqzEnedNbbKvKJ4fsDrgp75L0xDG/RmJS1c7lzZTIz J3Yv06xOfR6gWN/W9c33sIv00wYeDCCMYINyTVBK3B1M68U4qFxKdcN4JyKdUjZS2t2H Ckd8Jk+QHhc3RXrzRDbTUDq1z+o5aP4cOfhmHDiZ4hYUXgkskR+q6cBvyOfjyTCtSlRx bYWHU4bKTsCMfhlckZ+91OFe3l3R+KORJn7wIuW1QiPfbyCSiI2Gre7G8wDy6mdLFTB5 CfoH3EN9IL6wRiXmyI7EQK0nMT5JOSmjNL42w5QShvksWJHrcnq6INgZomX0DYSJbIOC aMIg==
X-Gm-Message-State: AMke39lHFSJDPtNurJk+jeBjpKIALJrYGQ2/L4LfroIjQDZTn2oiff6TyW2kgWJ97/OVf9uWCv03p+Sd5joqvQ==
X-Received: by 10.55.112.66 with SMTP id l63mr18074178qkc.149.1488849067891; Mon, 06 Mar 2017 17:11:07 -0800 (PST)
MIME-Version: 1.0
Sender: jinmei.tatuya@gmail.com
Received: by 10.237.61.204 with HTTP; Mon, 6 Mar 2017 17:11:07 -0800 (PST)
In-Reply-To: <CAOSSMjUP6m-L1iNhE=BxHW+7hvt4YsZgxxtVn+qmgEVS9HeStA@mail.gmail.com>
References: <CAN-Dau17q_BrUuzfvB1mLDt6p5UxYikphWaHpa8VQ2L-3kx-DA@mail.gmail.com> <a484b60f9d9b4fcea24dc320c550da2c@XCH15-06-11.nw.nos.boeing.com> <ee764408573b4db4b22e58c4ea5f289c@XCH15-06-11.nw.nos.boeing.com> <2c0ab33b-abbe-caf1-6147-0c583d7f5d61@gmail.com> <CAN-Dau0bSPiubeDOFeJAg6H0wP0ZNDS514eedmJtkOqHTXWOOw@mail.gmail.com> <D6D5B476-7F21-4F49-A81D-C2A11C30ADEC@google.com> <453e5b4160514907bc1bb822770e0cac@XCH15-06-11.nw.nos.boeing.com> <ABE47051-FBFC-460F-89B0-FFD451410F7B@google.com> <m1cjviu-0000EYC@stereo.hq.phicoh.net> <5BC57F0E-50FD-4452-853F-A08291C91EB1@google.com> <m1ck5mu-0000GaC@stereo.hq.phicoh.net> <5B4AFF50-8CA9-4134-8CE2-A383DB5F8BF5@google.com> <m1ckxfo-0000IMC@stereo.hq.phicoh.net> <225F639E-27C1-4408-BC2B-26500929049B@google.com> <CAOSSMjUR203+hYFBrFBrj9Xkjux3o7fYNd4y9kNyxwpLxF11ew@mail.gmail.com> <6D825351-7F43-4540-89AB-48DC2B5E92E3@google.com> <CAOSSMjUP6m-L1iNhE=BxHW+7hvt4YsZgxxtVn+qmgEVS9HeStA@mail.gmail.com>
From: 神明達哉 <jinmei@wide.ad.jp>
Date: Mon, 06 Mar 2017 17:11:07 -0800
X-Google-Sender-Auth: b_dg3CNvmVy4Tq1bfgy6FZgKymc
Message-ID: <CAJE_bqfpE-NWwG12S4CXM+ZnHdHHH31-y+_+pYhuCuq2FtqZ4w@mail.gmail.com>
Subject: Re: [v6ops] A proposal for draft-ietf-6man-rfc4291bis-07
To: Timothy Winters <twinters@iol.unh.edu>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/zQX_KMeQ7yRF6TRVFqhthMSOXvI>
Cc: james woodyatt <jhw@google.com>, 6man WG <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Mar 2017 01:11:10 -0000

At Mon, 6 Mar 2017 19:34:43 -0500,
Timothy Winters <twinters@iol.unh.edu> wrote:

> I don't believe this test is too strict based on 4862 Section 6.3.4 "
> Similarly,
>
>    [ADDRCONF <https://tools.ietf.org/html/rfc4861#ref-ADDRCONF>] may
> impose certain restrictions on the prefix length for
>    address configuration purposes.  Therefore, the prefix might be
>    rejected by [ADDRCONF
> <https://tools.ietf.org/html/rfc4861#ref-ADDRCONF>] implementation in
> the host.  However, the
>
>    prefix length is still valid for on-link determination when combined
>    with other flags in the prefix option."
>
> Basically ND still works even if SLAAC thinks the prefix length is
> invalid.   It's really a ND test for on-link deteremination.

I'd also note that the above text didn't exist in RFC2461; it was
newly introduced in RFC4861.  If I remember it correctly the added
text was an attempt of clarifying validation for on-link determination
and validation for SLAAC are independent, as it had often been
misunderstood.  RFC4862 also tried to clarify that point, e.g., in
this text:

      [...]  It should be noted, however, that this does not mean
      the advertised prefix length is meaningless.  In fact, the
      advertised length has non-trivial meaning for on-link
      determination in [RFC4861] where the sum of the prefix length and
      the interface identifier length may not be equal to 128.

But this thread and another similar discussion seem to suggest that
it's still not clear enough for some people.  At least two different
readers interpret this text:

      If the sum of the prefix length and interface identifier length
      does not equal 128 bits, the Prefix Information option MUST be
      ignored.

as the PIO MUST be ignored for all purposes including on-link
determination.  In a sense, it's not necessarily surprising - no
matter how we try to clarify a point there's always a reader that
still interprets it differently.  But if there is really a protocol
conformance test that doesn't interpret the text differently it's
really surprising to me.

The bottom line is, if there is an implementation that ignores a PIO
- with both L and A flag on, and
- with prefix length being something other than 64
- received on a link whose IID is specified to be 64 (like Ethernet)
even for on-link determination, then that implementation violates
RFC4861.  I can also assure that the document editor of RFC4862 didn't
intend such "strictness" - on the contrary, he actually tried to
clarify that's not the intent, but it looks like it's still not super
clear.

--
JINMEI, Tatuya