Re: [mif] Route option for DHCPv6 - next steps?

Alexandru Petrescu <alexandru.petrescu@gmail.com> Thu, 29 March 2012 11:32 UTC

Return-Path: <alexandru.petrescu@gmail.com>
X-Original-To: mif@ietfa.amsl.com
Delivered-To: mif@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC5D421F8699 for <mif@ietfa.amsl.com>; Thu, 29 Mar 2012 04:32:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.299
X-Spam-Level:
X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_13=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSUDw1q2QZHI for <mif@ietfa.amsl.com>; Thu, 29 Mar 2012 04:32:13 -0700 (PDT)
Received: from mail-ey0-f172.google.com (mail-ey0-f172.google.com [209.85.215.172]) by ietfa.amsl.com (Postfix) with ESMTP id 8666021F8693 for <mif@ietf.org>; Thu, 29 Mar 2012 04:32:12 -0700 (PDT)
Received: by eaaq11 with SMTP id q11so1144474eaa.31 for <mif@ietf.org>; Thu, 29 Mar 2012 04:32:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=BJDRNeXZ8zyBf3EUcw1ksv5dAQbcEOgLospvnnh331I=; b=u9TcVNFptlPOij9qyFu1/UGB64FyG26O6/mdQjzldoPirYr6Nn/jsIC5xR5hL04osN Pc4LG4g7opm4C6jrg3LDotP7pwVwX+VzkPHQuBp9dzy1cIY2uwRtUN24uLLenBOaXHPZ wygORjW7fKg9BC0GrNQt7deGh/ZB3WS//mAe9taZKm+8j0MWnNYfs2ULVUPQ5lvewUNX cipQPmaJccpcO9y88yM0C4dyC6HdQfCnnusiXrOeJ/ysDx26SgC4M7KT0dw9A28bKZH/ PWjmfNmOxCOBwQyIlKVy8qafQv85IJHyLUBM9uTd5rdH8Hi0tF+pzgE75bf9X6oZ1oPE 8ixQ==
Received: by 10.14.28.207 with SMTP id g55mr2029994eea.67.1333020731437; Thu, 29 Mar 2012 04:32:11 -0700 (PDT)
Received: from [130.129.17.29] (dhcp-111d.meeting.ietf.org. [130.129.17.29]) by mx.google.com with ESMTPS id q45sm20282407eem.7.2012.03.29.04.32.10 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 29 Mar 2012 04:32:10 -0700 (PDT)
Message-ID: <4F744831.3070406@gmail.com>
Date: Thu, 29 Mar 2012 13:32:01 +0200
From: Alexandru Petrescu <alexandru.petrescu@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:11.0) Gecko/20120312 Thunderbird/11.0
MIME-Version: 1.0
To: mif@ietf.org
References: <75459BC2-E733-45C0-BC1C-25A19BBA1137@gmail.com> <CAE97176.17DF4%wdec@cisco.com> <CANF0JMD_zfXGcfMy+rCOFXS1aCZ3RPHoRtkBeS8kDgOFcfQ8Fg@mail.gmail.com> <75D251D1-9828-4AFE-9BEF-B376E97133C7@nominum.com> <CANF0JMBbhrF0G=hSvcvyZAddAMW7oSO5KpzUmcJXCtwcnmyWOw@mail.gmail.com> <4A221CE5-ECF0-4E07-9329-E6BAA3F06A96@nominum.com> <4EC4AADB.8030803@piuha.net> <DD1241D5-B794-49C3-A3A2-4294248DDD10@gmail.com> <4F719186.3060507@gmail.com> <CAKD1Yr3tSoDPcheriWdZEeKyhqpDANCP7Co0wVVqK5+mXc7e5A@mail.gmail.com> <4F72CD22.3080604@gmail.com> <CAKD1Yr3RUUthiawKrmxjSNqzEbJcOLpHvDGb9XLtdiU-tfEYyw@mail.gmail.com>
In-Reply-To: <CAKD1Yr3RUUthiawKrmxjSNqzEbJcOLpHvDGb9XLtdiU-tfEYyw@mail.gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit
Subject: Re: [mif] Route option for DHCPv6 - next steps?
X-BeenThere: mif@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiple Interface Discussion List <mif.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mif>, <mailto:mif-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mif>
List-Post: <mailto:mif@ietf.org>
List-Help: <mailto:mif-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mif>, <mailto:mif-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Mar 2012 11:32:13 -0000

Le 28/03/2012 10:55, Lorenzo Colitti a écrit :
> [Putting mif back into CC, since now we're talking about the merits of
> the proposal]
>
>> On Wed, Mar 28, 2012 at 10:34, Tomek Mrugalski
>> <tomasz.mrugalski@gmail.com <mailto:tomasz.mrugalski@gmail.com>> wrote:
>>
>>     Let me comment on the deprecation a bit more. You mentioned previously
>>     that you are concerned about route entries becoming invalid. Let me
>>     explain how we plan this to defend against it:
>>     - if a host detects link flap, it must flush all routes installed
>>     - host verifies that router is reachable using ND, before using it
>>     - host detects that router died using NUD
>
> And then what does the host? Ask the server again for another default
> route? Why would the server return anything different than what it
> already returned? After all, the server doesn't share state with the
> router, so it has not idea that the host can't reach it.

I agree with this point of view.

In our work we were confronted with the question about what does the 
Client when the default router's lifetime expire: should it issue an RS 
or a DHCPv6 Request?

Also, it may be good to have error processing in the route option draft. 
  Maybe with error codes that would explain why the Server is not able 
to deliver some routes.

Alex

>
>     - you also expressed concerns about new server not being able to
>     invalidate old server's configuration in case of old server crash. That
>     is actually an invalid argument. Failure of the server does not imply
>     failure of the router. Furthermore, it is possible to invalidate old
>     server's information. If you want to do this, your new server can
>     announce route to become obsolete by announcing it with lifetime of 0.
>
>     Do you have any other deprecation mode in mind that is not covered?
>
>
> Example A:
> 1. There are two routers on the link connected to a switch.
> 2. You get a default route from a DHCPv6 server pointing at one of them.
> 3. The router crashes or is taken out of service. You default route is
> not working any more. The server doesn't know this, and so doesn't
> validate your route
> 4. You have no default route.
>
> Example B:
> 1. There are two routers on the link connected to a switch.
> 2. You get a default route from a DHCPv6 server pointing at one of them.
> 3. The server crashes or is unreachable.
> 4. The router is taken out of service for planned maintenance.
> 5. You have no default route, and nobody can invalidate your route,
> since only the crashed / unreachable server has the nonce.
>
> In IPv4, the typical solution to these problems are NOT "use reconfigure
> accept", but "run VRRP". With RAs, we can get rid of VRRP; we just won't
> have the problem.
>
> In the homenet, where stuff can go away permanently at any time, things
> get even worse.
>
>      > DHCPv6 servers often don't share fate with the routers.
>     So? There are over 65 options defined for DHCPv6, much more will be
>     defined. Do you expect server to share fate with all announced services?
>
>
> No. I'm saying we already have a way to do this that shares fate, and
> that it's more reliable, and that we don't need another way.
>
>     This mechanism may affect many groups: MIF, DHC, homenet, shim6, 6man
>     and v6ops. Do you expect us to ask for adoption of this draft to all of
>     those groups in turn? My idea is that this mechanism may affect many
>     WGs, but such document must be adopted somewhere.
>
>
> Agreed, it needs a place to live. I believe MIF is not the right place,
> because 11 of the 14 use cases are not about multiple interfaces. I
> believe that 6man is the right place, because this option provides a
> complete replacement for the basic way in which hosts learn about routers.
>
> If you take this to 6man and get consensus there, then that's fine.
>
> Cheers,
> Lorenzo
>
>
> _______________________________________________
> mif mailing list
> mif@ietf.org
> https://www.ietf.org/mailman/listinfo/mif