[Snac] Re: Handling multiple AIL-interfaces in a single SNAC router

Ted Lemon <mellon@fugue.com> Wed, 15 April 2026 07:22 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: snac@mail2.ietf.org
Delivered-To: snac@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CCDB7DC92FB9 for <snac@mail2.ietf.org>; Wed, 15 Apr 2026 00:22:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776237759; bh=J/CLlEfuJZsE+H1jzn8ZTRxy96/u4/CyAKOEtZVsJ5c=; h=Date:From:To:In-Reply-To:References:Subject; b=EfDHlgplYFznmCv5pj8ksI4W/ExORFyv2hq3nRRzNGhGg1ppR7wApV63fj3RtkksE t3oAHrqwNOn7HVyAZrz4KQ+dfv6hc2KB+1obXnpb38ZQ+NPZ5iaZ4fTgClXxRSeDnY mAjLhcVfgcadECJi5t8xldru9TOexHcgl1xe5PQU=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.797
X-Spam-Level:
X-Spam-Status: No, score=-2.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=fugue.com header.b="tB8qTDGP"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="fXSuJyhc"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vF9yjGeu1r6o for <snac@mail2.ietf.org>; Wed, 15 Apr 2026 00:22:38 -0700 (PDT)
Received: from fout-b4-smtp.messagingengine.com (fout-b4-smtp.messagingengine.com [202.12.124.147]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A7BD8DC92FA9 for <snac@ietf.org>; Wed, 15 Apr 2026 00:22:38 -0700 (PDT)
Received: from phl-compute-06.internal (phl-compute-06.internal [10.202.2.46]) by mailfout.stl.internal (Postfix) with ESMTP id 1FF671D00066; Wed, 15 Apr 2026 03:22:38 -0400 (EDT)
Received: from phl-imap-07 ([10.202.2.97]) by phl-compute-06.internal (MEProxy); Wed, 15 Apr 2026 03:22:38 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue.com; h=cc :content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm3; t=1776237757; x=1776324157; bh=a759wtyd2A +YUKzg/3zvqEyBTyCpAXHu+Rp0AgM4U8U=; b=tB8qTDGP12w9EjGB11mdw4AVw5 ZgEXZysbBg4YnaBAAx6FrREzYHxI+UNZdM/RClG/kpSO9a0Z2tesZ4Ffavi6o/fx VpSnISpvDK+8EvF4Fc99qIl8EwzXlQOlsDU519qgMZXfcD59aeBkf4LVONCsX01P AuLi9JpD/APcD6jxQKjqr9h7k9xhPa1UAhYjpBLbU6fYM3dQygZ4bNktJ5xBDiRC TaWVGWnwM7VshaRlwCl0Z/BNgtzic/kmZRBN/uGh9t9F9f8Az4ZrFMYqp9o6l9jw /+IB9cRObuS86E7yQZBLuiR7r0wT7jfkkv15ppAzuCgs4sDLXT77RGg3SHBw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1776237757; x=1776324157; bh=a759wtyd2A+YUKzg/3zvqEyBTyCpAXHu+Rp 0AgM4U8U=; b=fXSuJyhcpbAGEgWYVrujyoFaNy4WAQS5aoqTnyxapDqNC8xk5IA KWLZRiRc1xu51patcnZVhJ2BHluiDdwVd+pXPZdrfFTFlbDwcF8/Oeu6ByRCyyXw t8tey9m7mk8YH1p43Zb4GHUqNR0WNxozYUpjjCroc/SqEnk0m1Aezkiuoilbfp0i nH3Eac9hKZ7p+7ipv4IkEHiPgqDAqb7nUTEPotK3g4i4qEsBmLhlcLV0PnqjDRK6 IDRfswQxAoYQHf4Phj47AL5XWIaqlhM4RFhlYF/+gDSzU5RF6kXkG+wluYVa2hgA xJyyo2PWugClCSZ2PsHu+B4Hrm9OC9SwQ5g==
X-ME-Sender: <xms:vTzfaXErSW2j_AVzPBiT9d6tchkT7Unc13sLHYQBf_6m7vDpmOmHmg> <xme:vTzfafLY6SpUYgBh6zOgw8oVZDAc1TL5wMtMhMKWeMdxSSiaScNKHnHf19yrnOsn_ Xt1tJrK0l9aK3yHN4phlSXjZ9KAxOi_G0pFbbkdL4mlrt6dv-XsDjg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgdegfeegiecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecunecujfgurhepofggfffhvffkjghfufgtsegrtderreertd ejnecuhfhrohhmpedfvfgvugcunfgvmhhonhdfuceomhgvlhhlohhnsehfuhhguhgvrdgt ohhmqeenucggtffrrghtthgvrhhnpedvieeihfefvdegfeduvdeiveeivedvhfevheetue ehgfethfeugefhieeuffetjeenucffohhmrghinhepphhrihhnthgvrhdrlhhotggrlhen ucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmvghllh honhesfhhughhuvgdrtghomhdpnhgspghrtghpthhtohepfedpmhhouggvpehsmhhtphho uhhtpdhrtghpthhtohepvghskhhordguihhjkhepgedtihhothgtohhnshhulhhtrghntg ihrdhnlhesughmrghrtgdrihgvthhfrdhorhhgpdhrtghpthhtohepshhnrggtsehivght fhdrohhrghdprhgtphhtthhopehmtghrodhivghtfhesshgrnhguvghlmhgrnhdrtggr
X-ME-Proxy: <xmx:vTzfaYAxYVVKerX-o1zyA8WnZ8HMu1IZWX3F5K92lXM4X-GCnYJ00A> <xmx:vTzfaSSXpTf_VKSgNmVQ6UIgmeVb4yeEXoRJavcxJf0V8lgomgzbWg> <xmx:vTzfaeot3W6rqBRzOalCLcHZyIAtJJp0UlqVJNb3-RE66Zi6R32yyg> <xmx:vTzfacxJtjWKWJt66shjITmAkJj0VyNYkE3-6-vs6IkBno9cvVIv4g> <xmx:vTzfaTp5BkfdAa8brDNA2GsT6AqvpmrVLK5DsIm-d9QG7YhLR_3GN9WP>
Feedback-ID: i1136489e:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 5119D1EA006B; Wed, 15 Apr 2026 03:22:37 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
Date: Wed, 15 Apr 2026 09:22:17 +0200
From: Ted Lemon <mellon@fugue.com>
To: Esko Dijk <esko.dijk=40iotconsultancy.nl@dmarc.ietf.org>, Michael Richardson <mcr+ietf@sandelman.ca>, "snac@ietf.org" <snac@ietf.org>
Message-Id: <d3154732-7821-40a2-b0e7-756c869096ca@app.fastmail.com>
In-Reply-To: <7e526467-174d-4f63-8bd1-1ef1c0c7b2a0@iotconsultancy.nl>
References: <ed392ae6-8127-451d-a25d-0f273c49e2b9@iotconsultancy.nl> <3140.1776107801@obiwan.sandelman.ca> <5872bff2-1b82-4f44-9656-544a91d6dc92@iotconsultancy.nl> <10707.1776190647@obiwan.sandelman.ca> <7e526467-174d-4f63-8bd1-1ef1c0c7b2a0@iotconsultancy.nl>
Content-Type: multipart/alternative; boundary="b7d3df1299c4486c09686aa4ebbb3920895f1799"
Message-ID-Hash: Q55BVD2BWGOZA4SMWQEUCLCSJUYEWYFU
X-Message-ID-Hash: Q55BVD2BWGOZA4SMWQEUCLCSJUYEWYFU
X-MailFrom: mellon@fugue.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Snac] Re: Handling multiple AIL-interfaces in a single SNAC router
List-Id: "Mailing list for discussing problems relating to the automatic connection of stub networks to existing infrastructure networks. " <snac.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/snac/FT_LSHgFRK7PDXZd-T5YhybMjY0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/snac>
List-Help: <mailto:snac-request@ietf.org?subject=help>
List-Owner: <mailto:snac-owner@ietf.org>
List-Post: <mailto:snac@ietf.org>
List-Subscribe: <mailto:snac-join@ietf.org>
List-Unsubscribe: <mailto:snac-leave@ietf.org>

Right, think of a snac router with three uplinks as being similar to a home network with three uplinks. We haven't entirely solved that problem, so trying to solve it here in snac-simple would be... ambitious. :)

I'd love to work on that, but let's do what we know how to do first. 

On Wed, Apr 15, 2026, at 9:07 AM, Esko Dijk wrote:
> Thanks, now we have ample home network case study documentation to read 
> on a train trip to Vienna :)
> 
> > So they get the highend SNAC-router that can plug into three AIL,
> > perhaps via USB ethernets.   That seems like a reasonable thing to me.
> 
> FYI the OpenThread Border Router implements a SNAC router that limits to 
> only one AIL interface. Maybe that's our typical SNAC-simple case? But 
> in general, for a high-end Linux based device it's easy to plug in 
> USB-Ethernets which then may get to do something.
> 
> (That starts to feel like doing HomeNet all over again, weirdly enough, 
> because I wasn't even active in that WG...)
> 
> Esko
> 
> 
> On 4/14/26 20:17, Michael Richardson wrote:
> > Esko Dijk <esko.dijk@iotconsultancy.nl> wrote:
> >      > On 4/13/26 21:16, Michael Richardson wrote:
> >      >> > router can have multiple AIL interfaces, hence connections to multiple
> >      >> > AILs. This is written in various places in the draft. Ted suggested
> >      >>
> >      >> Are/do these multiple AILs link up to a single ISP/Infrastructure router?
> >      >> Or different ones?
> >
> >      > The common case will be the same CE router, connected to the same ISP: this
> >      > is a Wi-Fi plus Ethernet case.
> >
> > Unless this CE is one of mine, wouldn't the WiFi and Ethernet be bridged by
> > the CE, so it's really all one AIL in that case?
> >
> >      > Another, not so common case is when a user has connected the two interfaces
> >      > to different ISPs.  For example, user has a Wi-Fi travel router used as an
> >      > "internet backup" for cases when the regular ISP (accessed preferably via
> >      > e.g. Ethernet) fails. Hotspot is turned on. Then, the SNAC router sees the
> >      > SSID appear, connects via Wi-Fi, and finds IPv4 and/or IPv6 internet
> >      > connectivity via that AIL. Its internet access now should be routed via the
> >      > Wi-Fi AIL while the discovery of IoT devices or printers etc. on the Ethernet
> >      > AIL should still continue.
> >
> > Okay, I accept this.
> >
> > I guess I'd think it was more sensible to plug the travel router into my LAN,
> > where the existing CE would bridge it to the existing WiFi, bringing all my
> > house back online.  Of course, that results in dualing DHCPv4 servers, but
> > IPv6 ought to work fine.  The existing CE *ought* to withdraw it's GUA v6
> > prefixes via a zero-lifetime RA when it sees it has no uplink.
> > Of course, if it's the CE that fails, then the bridging won't work, OTH, there won't
> > be dualing DHCPv4 servers.
> >
> > {I don't know if any actually do.  For me, that would be undesired, as I'd
> > lose local routing during the three-times weekly outages of PPPoE
> > thanks to incumbent telco incompetence  (aka enemy action IMHO. I'm not with
> > incumbent telco, but they "own" the wires, and control the PPPoE PAD redirector)
> > Mind you, I use a statically delegated v6-prefix rather than a PD
> > one... because PD wasn't implemented when we started.  I actually get a PD
> > one too, but ignore it.}
> >
> >      > In both cases, the SNAC router has 2 AILs active at the same time so it's not
> >      > an either-or situation.
> >
> > We did go through this (multiple-uplinks, multiple CE) extensively in HOMENET
> > ages ago, and this certainly was a situation which a lot of people cared
> > about.  But, still not fully solved.
> >
> >      >> So my Thread doorbell ("stub network client") that wants to *print* the
> >      >> picture it took, can look up printer.local, and this turns into multiple mDNS
> >      >> queries, one on each AIL?
> >      >> Is that what this means?
> >
> >      > Yes, so the printer can be found on either AIL (e.g. Wi-Fi or Ethernet). And
> >      > on either IPv4 or IPv6.
> >
> > If the SNAC router is the only device connected to both AIL, is it doing
> > enough DNS-SD and/or mDNS collision helping so that the two printer.local
> > have found themselves unique names?   Like, what if there are answers from
> > both AIL?
> > Or maybe this is all really irrelevant to SNAC??  (... as the doorbells should just
> > use the printers in the nearby ICE van)
> >
> >      >> > We may decide to either tackle these details, or update the draft to limit
> >      >> > the scope to a single AIL only.
> >
> >      >> I think the scope should be limited. This is snac-simple, and I thought it
> >      >> was done.  Maybe some thinking goes into snac-many-garlic (AIL = French for Garlic)
> >      >> such that if we go there, it doesn't break something else.
> >
> >      > Simple as in 1 AIL sounds good here. In botanical French and older recipes,
> >      > apparently multiple ail is written as "aulx". (Les aulx.) Not so simple!
> >
> > aulx. . o O ( "C> COPY myletter.txt AUX:" ... Amiga could do same. )
> >
> >      > Some considerations why 1 AIL may be a perfectly fine limitation:
> >
> >      > - for the common case of Wi-Fi + Ethernet and same ISP, the CE router may be
> >      > already doing the bridging of the links or the proxying of mDNS between
> >      > links. So if the SNAC router only uses Ethernet for discovery, it will also
> >      > find a service/host on Wi-Fi.
> >
> > +100
> >
> >      > - vendors may extend SNAC-simple with their own solution for multiple AILs
> >      > (as Ted commented on the Github issue), even when SNAC-simple doesn't
> >      > define that.
> >
> > okay.
> > I also wonder about multi-tenant Small-Office IoT situations.
> > Like, the hair dresser and talent agent occupy the front and back of a
> > streetfront, but do not share Internet with the web designer/building owner
> > who lives upstairs.   But, they all should be able to adjust lighting, heat,
> > and the like.  Being reasonable friends, there are no authorization
> > complexities.  (No they don't share printers, there is no routing)
> >
> > So they get the highend SNAC-router that can plug into three AIL,
> > perhaps via USB ethernets.   That seems like a reasonable thing to me.
> >
> >  From what I am understanding there is nothing that keeps the SNAC-router from
> > offering it's generated ULA on more than one AIL.  There are probably
> > subtle complexities when one AIL has an infrastructure v6 prefix and another
> > does not.
> > And... first PD wins with hystersis to avoid frequent renumbers of the Stub
> > Network?   Does the delegated prefix from AIL-1 get RIO's onto the other AIL?
> >
> >      > - for the case of Ethernet + "backup Wi-Fi" earlier in my mail, the discovery
> >      > only has to work on one AIL (Ethernet) not on the other because typically
> >      > there's nothing to discover there. (Think phone Wi-Fi hotspot with client
> >      > isolation.)
> >
> >      > - two Ethernet "uplink" / AIL ports is very rare for a non-CE-router device
> >
> > +1
> >
> > I'm not hearing a huge argument for new text for snac-simple.
> > It's been enough months since I've been immersed in the document, that I am
> > having to go back to make sure I'm using the right terms.
> >
> > --
> > Michael Richardson <mcr+IETF@sandelman.ca <mailto:mcr%2BIETF@sandelman.ca>>   . o O ( IPv6 IøT consulting )
> >             Sandelman Software Works Inc, Ottawa and Worldwide
> >
> > **       My working hours and your working hours may be different.         **
> > ** Please do not feel obligated to reply outside your normal working hours **
> >
> >
> >
> >
> 
> -- 
> Snac mailing list -- snac@ietf.org
> To unsubscribe send an email to snac-leave@ietf.org
>