Re: [Softwires] [Int-area] Errata on RFC 6333, "Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion"

mohamed.boucadair@orange.com Tue, 11 May 2021 06:48 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: softwires@ietfa.amsl.com
Delivered-To: softwires@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A88993A1183; Mon, 10 May 2021 23:48:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KecWADThTUHF; Mon, 10 May 2021 23:48:41 -0700 (PDT)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E22FA3A117F; Mon, 10 May 2021 23:48:40 -0700 (PDT)
Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 4FfT5z0D0hz4yBh; Tue, 11 May 2021 08:48:39 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1620715719; bh=/GKp/IsgPRTmuSgvQt54OaUXmarE91gWiQWgoAZQdAo=; h=From:To:Subject:Date:Message-ID:Content-Type:MIME-Version; b=XahJjwsO3zcS2hQQayc1tXplxagC9Fg+VzXvNsV2OY2uA9mzmq4ctsCr9C+kkPUc2 pThqXwcm3UT3be1rfiInF4Tt7n9r8pkQ/zD3g4XgGv3VFH5GWiHGQiO2pyLFFEHyGU S2I+l6jp3mz1ipOIOf2+yFMNPPyVuyRWrOhO53TPUd8sjZWl2WZ94G4BQlXsa71mbU NGAqM4ppP4DjyLcAhrD0sTrgQw7hoTbxQAIeWyrLKtQoO/APEV61ESNbISl09T+66O 8lrN5yENXBPax8fsXWRHy8AWBpyu+JDHk6io3EQbYao5aqwNVWOTVlRaINyRW/UzPX g+do2xnqPhIug==
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.89]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 4FfT5y6SkMz8sYH; Tue, 11 May 2021 08:48:38 +0200 (CEST)
From: mohamed.boucadair@orange.com
To: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, "Eric Vyncke (evyncke)" <evyncke=40cisco.com@dmarc.ietf.org>
CC: "softwires@ietf.org" <softwires@ietf.org>, "int-area@ietf.org" <int-area@ietf.org>
Thread-Topic: [Int-area] [Softwires] Errata on RFC 6333, "Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion"
Thread-Index: AQHXRapvO8rHm8vPa0qcXrm5czHwward17QA
Date: Tue, 11 May 2021 06:48:37 +0000
Message-ID: <30218_1620715718_609A28C6_30218_17_1_787AE7BB302AE849A7480A190F8B933035384012@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <15FCA524-D984-4A0C-9D17-8599515F0C21@cisco.com> <B2A844E5-40B4-44D3-9B2A-D188695C450B@gmx.com>
In-Reply-To: <B2A844E5-40B4-44D3-9B2A-D188695C450B@gmx.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: multipart/alternative; boundary="_000_787AE7BB302AE849A7480A190F8B933035384012OPEXCAUBMA2corp_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/softwires/-QTb-S4aiDbnWPMW5766ZBLqzTs>
Subject: Re: [Softwires] [Int-area] Errata on RFC 6333, "Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion"
X-BeenThere: softwires@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: softwires wg discussion list <softwires.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/softwires>, <mailto:softwires-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/softwires/>
List-Post: <mailto:softwires@ietf.org>
List-Help: <mailto:softwires-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/softwires>, <mailto:softwires-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 May 2021 06:48:46 -0000

Hi all,

I agree with Ian.

Actually, the document should use a similar wording in both the section mentioned in the errata report and the one in of 6.3. I’m afraid editorial changes are also needed for 6.3 to avoid any confusion.


(1) 5.3:

OLD:

   However, as not all service providers will be able to increase their

   link MTU, the B4 element MUST perform fragmentation and reassembly if

   the outgoing link MTU cannot accommodate the extra IPv6 header.  The

   original IPv4 packet is not oversized.  The packet is oversized after

   the IPv6 encapsulation.  The inner IPv4 packet MUST NOT be

   fragmented.  Fragmentation MUST happen after the encapsulation of the

                                                                  ^^^^^^

   IPv6 packet.  Reassembly MUST happen before the decapsulation of the

   ^^^^^^^^^^

   IPv4 packet.  A detailed procedure has been specified in [RFC2473]

   ^^^^^^^^^^^^

   Section 7.2.

NEW:

   However, as not all service providers will be able to increase their

   link MTU, the B4 element MUST perform fragmentation and reassembly if

   the outgoing link MTU cannot accommodate the extra IPv6 header.  The

   original IPv4 packet is not oversized.  The packet is oversized after

   the IPv6 encapsulation.  The inner IPv4 packet MUST NOT be

   fragmented.  Fragmentation MUST happen after the IPv6 encapsulation.

                                                    ^^^^

   Reassembly MUST happen before the decapsulation of the

   of the IPv6 header.  A detailed procedure has been specified in [RFC2473]

   ^^^^^^^^^^^^^^^^^^

   Section 7.2.


(2) 6.3



OLD:

   As noted previously, fragmentation and reassembly need to be taken

   care of by the tunnel endpoints.  As such, the AFTR MUST perform

   fragmentation and reassembly if the underlying link MTU cannot

   accommodate the encapsulation overhead.  Fragmentation MUST happen

   after the encapsulation on the IPv6 packet.  Reassembly MUST happen

                           ^^^^^^^^^^^^^^^^^^

   before the decapsulation of the IPv6 header.  A detailed procedure

   has been specified in [RFC2473] Section 7.2<https://datatracker.ietf.org/doc/html/rfc2473#section-7.2>.

NEW:

   As noted previously, fragmentation and reassembly need to be taken

   care of by the tunnel endpoints.  As such, the AFTR MUST perform

   fragmentation and reassembly if the underlying link MTU cannot

   accommodate the encapsulation overhead.  Fragmentation MUST happen

   after the IPv6 encapsulation.  Reassembly MUST happen^

             ^^^^

   before the decapsulation of the IPv6 header.  A detailed procedure

   has been specified in [RFC2473] Section 7.2<https://datatracker.ietf.org/doc/html/rfc2473#section-7.2>.

Cheers,
Med


De : Int-area [mailto:int-area-bounces@ietf.org] De la part de ianfarrer@gmx.com
Envoyé : lundi 10 mai 2021 16:40
À : Eric Vyncke (evyncke) <evyncke=40cisco.com@dmarc.ietf.org>
Cc : softwires@ietf.org; int-area@ietf.org
Objet : Re: [Int-area] [Softwires] Errata on RFC 6333, "Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion"

Hi Éric,

My reading of the current RFC6333 text is that it is trying to highlight the importance of not fragmenting the IPv4 packet before encapsulation as this will break things. This, combined with ‘… after the encapsulation of the IPv6 packet.’ which should certainly be ‘… of the IPv4 packet.’ Is where the confusion is from.

So, as a minimum, the errata is correct regarding the encapsulated IP version.

Beyond that, I don’t find the remaining text to conflict with RFC2743 section 7.2. The text is only covering how to deal with packets that you will encapsulate and forward (DF=0) - case (b) in the RFC2473 text. Case (a) - DF=1 for received packet, so drop and send ICMP error isn’t discussed as these packets will not be encapsulated and need to be fragmented.

I do agree that this is open to misreading. How about the following wording to preserve (what I think is) the authors intention:

   However, as not all service providers will be able to increase their
   link MTU, the B4 element MUST perform fragmentation and reassembly if
   the outgoing link MTU cannot accommodate the extra IPv6 header.  The
   original IPv4 packet is not oversized.  The packet is oversized after
   the IPv6 encapsulation.  The inner IPv4 packet MUST NOT be
   fragmented.  For packets forwarded by the B4 element, fragmentation
          MUST happen after the encapsulation of the IPv4 packet.  Reassembly
    MUST happen before the decapsulation of the IPv4 packet.  A detailed
    procedure has been specified in [RFC2473]
   Section 7.2.


From Mikael’s comment:
"RFC2473 7.2 says to use the DF bit and decide whether to inner fragment or drop+send ICMP error."

I can’t find anything in the Section 7.2 text that would result in inner fragmentation.

Thanks,
Ian


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.