Re: <draft-ietf-6man-default-iids> update to rfc2464bis

Lorenzo Colitti <lorenzo@google.com> Thu, 12 January 2017 09:58 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F14C7120725 for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 01:58:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.199
X-Spam-Level:
X-Spam-Status: No, score=-5.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2AdGVQrcTpE for <ipv6@ietfa.amsl.com>; Thu, 12 Jan 2017 01:58:02 -0800 (PST)
Received: from mail-ua0-x22c.google.com (mail-ua0-x22c.google.com [IPv6:2607:f8b0:400c:c08::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF6351294C8 for <ipv6@ietf.org>; Thu, 12 Jan 2017 01:58:01 -0800 (PST)
Received: by mail-ua0-x22c.google.com with SMTP id y9so10511933uae.2 for <ipv6@ietf.org>; Thu, 12 Jan 2017 01:58:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=I3DesrN3NWv8Mbaw+R/XreCU9+UuRnaOmiYCdxBbkFg=; b=pNA5U6pLiyJENuw/+nI0RMTz4xzWqkbUiVh38RM7jKnIM3KhnrNgHBXDdeu143fbzp +eQu+mbiR+7WZMKZFtSya6UrDGupHf35QWEI9RtJwSWPlNkJApJ9nZn65HKh7RmJuIzk 0Hysl1BMknrIvvC7UcxzCP62VEo6G2jRtwB/4A8JJPeG6F24HvmWK11ldJAFikmETGbH s4SJElyUW5Kg6a1qNK7deNEwzU+tkHv/pS8SRFwksAX6/TADQ8pNga08xydugwBCTrN+ 7d7tg4IRtkxB5n5Ogn3y6L+72vjky3PPL2EqXiMNKkrq1HBE1nrp3ld4UFm9y8+n03eQ 8itw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=I3DesrN3NWv8Mbaw+R/XreCU9+UuRnaOmiYCdxBbkFg=; b=O047hlNry8uh10Ntg5+yHMv02Tw1L+2ElWmsHIX47qZvQgsxYKtLy3Ty5lXNxxs1XO MSOC99mfTUGn619sNTDTt0xnqemBcXobrstr028tk3v9CWQIMml5boLKPuOs22v4lE14 crGgJxNU9pO1VEl6mImRnJnKY4oW6p0vujAa+J294Sqjsdw/2SIubTyriwE/WYzOmwQU 9pvdKPDRzbuUnZzSwe8sGVpTYpIpO28fQ0Sf+y96Qdz5Y2jS2hvMYZlZBy8p4uRp5ZaZ /fWUCeUmgdNjv9IGwd8m5F5AazkYYvziaBqGqdtKAsujGWCp6dptnViZBdXGTskUM1Su TW6g==
X-Gm-Message-State: AIkVDXIXMSZ80hGUhjPJ/c8ukk2slQQo+OLn9pp4ilWJeG6W30tnZJIAJG+xzgrGyti2ADPk5oMHFcAaT7YnTDRi
X-Received: by 10.176.5.138 with SMTP id e10mr5708741uae.109.1484215080826; Thu, 12 Jan 2017 01:58:00 -0800 (PST)
MIME-Version: 1.0
Received: by 10.31.49.77 with HTTP; Thu, 12 Jan 2017 01:57:40 -0800 (PST)
In-Reply-To: <89fc8838-f6cd-1647-8468-1c8c11466aff@si6networks.com>
References: <1E7F90AC-79BB-49BE-B397-EC829EA95AA4@gmail.com> <CAKD1Yr0O6gnXZc3qEY7bqkBYu-sx1_erwum2DRwpe+Vv+jmdiw@mail.gmail.com> <7456833d-aa3f-d368-6041-cfdc1ac95f6f@si6networks.com> <CAKD1Yr1dQF7Cg0mppZVcSXC15pue_y1Qb-GugKY+G8u-dRyJtg@mail.gmail.com> <89fc8838-f6cd-1647-8468-1c8c11466aff@si6networks.com>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Thu, 12 Jan 2017 18:57:40 +0900
Message-ID: <CAKD1Yr2z22ZX85ywAcqobbHZ20Kx4VvFhEmzJnSG_0hQBLLvyw@mail.gmail.com>
Subject: Re: <draft-ietf-6man-default-iids> update to rfc2464bis
To: Fernando Gont <fgont@si6networks.com>
Content-Type: multipart/alternative; boundary="94eb2c124794aa06dd0545e2c012"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/zreEubhsWFbhycFQNQZnCU3XVfY>
Cc: IPv6 List <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>, Suresh Krishnan <suresh.krishnan@ericsson.com>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jan 2017 09:58:07 -0000

On Thu, Jan 12, 2017 at 6:21 PM, Fernando Gont <fgont@si6networks.com>
wrote:

> > I don't see what RFC 4941 has to do with this discussion. RFC4941 is a
> > method of generating temporary addresses. It is not required to be used,
> > and it is not the only way of forming IP addresses that can change over
> > time.
>
> If you use temp-only, that means the inability to have e.g. long-lived
> SSH sessions. I don't think that's the current operating "model", even
> less for IPv6.
>

I don't see why we should forbid this. It's a legitimate implementation
choice, and has excellent privacy properties :-)


> So far, the only two standardized algorithms for generating IIDs with
> SLAAC are RFC7217, RFC4941, and traditional slaac (modified eui-64).
> Clearly, you can hack your code and commit it. Being that this is
> standardization body, I would expect that we're agree on standardizing
> reasonable approaches, and calling bad approaches as such.
>

Sure. If you can find rough consensus to say all other methods of
generating IIDs are bad and should not be used, the IETF will publish a
document saying that. My bet is that you won't.

To get back to the original point: in the current state of the documents
that we have published or are about to publish (e.g., the default-iids
draft), as reflecting the consensus call sin th it's not true that modified
EUI-64 is not recommended. It's only not recommended if you use stable
link-layer addresses.

Bob, Ole, Suresh: can we also amend or remove this text in 4291bis before
we publish it? I think it's an oversight because there was clear consensus
in 6man (Fernando being in the rough) that it was OK to use modified EUI-64
with non-stable MAC addresses:

   Earlier versions of this document described a method of forming
   interface identifiers derived from IEEE MAC-layer addresses call
   Modified EUI-64 format.  These are described in Appendix A and are no
   longer recommended.