[nemo] PD and frustration

[Francis Dupont <[e-mail]>]

I am not happy at all with the current prefix delegation for NEMO proposals
(draft-ietf-nemo-dhcpv6-pd-00.txt and draft-ietf-nemo-prefix-delegation-00.txt)
I've complained privately but I've been asked to do it in the list.

In the first proposal there are some very strange statements:
 - 3.1.1 assumes the MR-HA tunnel is a part of the home link and
   tries to play with the "intercepted" word. I am sorry but IPv6
   has a clear definition of what is a link and the proposed solution
   is not valid at all.
 - 3.1.3 claims that DHCPv6 relays are not defined for DHCPv6 PD
   when it is not in the RFC nor in recent drafts
   (cf draft-droms-dhc-dhcpv6-agentopt-delegate-00.txt for instance)
But IMHO the DHCPv6 PD service is the right tool, I can see two ways to
support it:
 - put a DHCPv6 relay in the MR itself (i.e., colocated a client and a relay).
   This solves the MR-HA tunnel issue but can be seemed as not natural.
 - put a DHCPv6 relay in the HA and use a dedicated transport on the MR-HA
   tunnel exactly as RS/RA are replaced by MPS/MPA in MIPv6.

The second proposal follows the MPD way but in place to reuse the DHCPv6
service it proposes a fully new and very complex protocol. I don't
understand why and the rationale (quoted below) doesn't convince me.

   Yet, in a deployment where the MNPs are preassigned to the MR, a AAA
   server, interfacing with the HA, and eventually coupled with a
   provisioning system in its back-end, can provide the required service
   for assigning and authorizing the prefixes to the MRs; in such a
   case, the value of implementing a DHCPv6PD server is highly arguable.
   It is more generic to let the HA handle the backend interfaces on
   behalf of the MR and expose a consistent NEMO interface for all
   deployments.

If the issue is the AAA system and DHCPv6 PD service must be interfaced,
for instance to assign only authorized prefix, this issue is not a NEMO
one and is already addresses (fortunately because in the real world
where DHCPv6 PD is already deployed security is not an option).

So I'd like to know what this proposal can do the DHCPv6 PD service can't...

Regards

[e-mail]