Re: [Softwires] Thoughts on provisioning and universal CPE

Ole Troan <otroan@employees.org> Fri, 18 October 2013 09:22 UTC

Return-Path: <otroan@employees.org>
X-Original-To: softwires@ietfa.amsl.com
Delivered-To: softwires@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BFCB21F9F84 for <softwires@ietfa.amsl.com>; Fri, 18 Oct 2013 02:22:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[AWL=-0.600, BAYES_00=-2.599, J_CHICKENPOX_42=0.6, J_CHICKENPOX_53=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hpvc5JCndmQ4 for <softwires@ietfa.amsl.com>; Fri, 18 Oct 2013 02:22:05 -0700 (PDT)
Received: from banjo.employees.org (banjo.employees.org [IPv6:2001:1868:205::19]) by ietfa.amsl.com (Postfix) with ESMTP id 1522A11E8108 for <softwires@ietf.org>; Fri, 18 Oct 2013 02:21:55 -0700 (PDT)
Received: from banjo.employees.org (localhost [127.0.0.1]) by banjo.employees.org (Postfix) with ESMTP id 2F9E85F57; Fri, 18 Oct 2013 02:21:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=employees.org; h= content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; s=selector1; bh=bGAiPv7VamiNClQDHqKid 5Sz5Vc=; b=UrAcfYBEfUmvGdp5hQQaYe3smuyvcHQRY28JRF1weVrs/9Ks8O9G6 X5n3N8OevRvaUHMXsK32CLgN15KDFV65yx4YbI44VDdT2Yjmt0RGOwfQLSrTC6Aj NyMe/nngN1Pm+8zNLx6KNy/AUe3PXE/I1M8bHCB7V5U3q9pc4lr5ow=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=employees.org; h= content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; q=dns; s=selector1; b=b6AT5ckmCHlNoEO 928p3UDWhuuwbrUy92H/49fdmxUcPHwGZFgTKMdailDNhJ6UZVhz2+aCe8w7G4gG qzLb1ugUwCADbN2QJf7Q3OzrozklnhGamSyZdBCcXClKFYVVOqoXO0mr2QwH1jXS BHlnCUhuRsCV0LXo5RYS1OyGIHy4=
Received: from dhcp-10-61-108-148.cisco.com (173-38-208-169.cisco.com [173.38.208.169]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: otroan) by banjo.employees.org (Postfix) with ESMTPSA id 809F15FFB; Fri, 18 Oct 2013 02:21:53 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_656EFCFA-7ECB-44CB-94DF-5CF8C37C8996"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Ole Troan <otroan@employees.org>
In-Reply-To: <5260E78E.90702@gmail.com>
Date: Fri, 18 Oct 2013 11:21:50 +0200
Message-Id: <5FAA929F-3D98-4D8B-8B3C-A82FFDA35F38@employees.org>
References: <5260E78E.90702@gmail.com>
To: Tom Taylor <tom.taylor.stds@gmail.com>
X-Mailer: Apple Mail (2.1510)
Cc: Softwires <softwires@ietf.org>
Subject: Re: [Softwires] Thoughts on provisioning and universal CPE
X-BeenThere: softwires@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: softwires wg discussion list <softwires.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/softwires>, <mailto:softwires-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/softwires>
List-Post: <mailto:softwires@ietf.org>
List-Help: <mailto:softwires-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/softwires>, <mailto:softwires-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Oct 2013 09:22:06 -0000

Tom,

tl;dr.
but did you see;
http://tools.ietf.org/html/draft-ietf-softwire-map-dhcp-05

that I think proposes what you are saying below. 3 separate containers for LW46,MAP-E and MAP-T.

cheers,
Ole


On Oct 18, 2013, at 9:47 , Tom Taylor <tom.taylor.stds@gmail.com> wrote:

> (Long message)
> 
> Nothing seems to be happening to the work on the universal CPE draft and provisioning of the various transition methods since last meeting. I wanted to summarize the situation to get things moving again, and I do that below. However, after spending the last day or two reviewing the various documents and trying to think how to factor the configuration data, I've come to the conclusion that MAP configuration is too idiosyncratic to be "unified" with configuration for Public 4o6, LW4o6, or DS-Lite.
> 
> IMHO the sensible thing is to provide separate provisioning objects for each of these techniques so that, first, the CPE can signal which ones it supports through its entries in the Parameter Request List option, and then DHCP can send back the one AAA says that subscriber should use.
> 
> Here's what I understand from the Softwires, Sunset4, and DHC Working Group Berlin minutes and the odd bit of list discussion since.
> 
> Tom Taylor
> 
> (1) DHCP Provisioning of IPv4 Options
> ====================================
> 
> The conclusion out of Berlin is that the best general solution to provisioning of IPv4 and transition-specific options is to use DHCPv4 over DHCPv6 as documented in draft-ietf-dhc-dhcpv4-over-dhcpv6-01.txt. The authors of draft-ietf-softwire-map-dhcp-05.txt argue that that document is sufficient to meet the needs of MAP, but it is not a general solution and leaves the other techniques uncovered.
> 
> (2) CPE Considerations
> =====================
> 
> Here is an extract from the Softwires Berlin minutes:
> 
> Mark: Unified-CPE vendors don't have to do 5 different things. CPEs just do one thing.
> Suresh: It's not about processing, just DHCP option.
> Mark: We will have different CPEs
> Ian: There'are also people who need unified model
> Simon: Unified-CPE doesn't mean unify everything. compromise will be very ugly
> Suresh: (to Mark)Do you concern that some people won't implement some options?
> Mark: Some will only implement some of the options. fragment of CPE.
> Mark: Problem is that there will be two kinds of CPE, not a unified CPE
> Suresh: I don't see how the IETF can prevent this (implement a subset of options) from happening. Suggestion?
> Mark: We start to diverge when we start talking in "modes"
> Ian: We very carefully picked the word "mode". we can change it if you want.
> Suresh: Not sure Mark's input is actionable
> 
> From this I draw the conclusion that partial implementation will happen and it's probably a good idea to accommodate it.
> 
> 
> (3) 1-1 Mode
> ===========
> 
> 1-1 mode is the same for Public v4ov6, LW4o6, and MAP. There's no need to tie it to any particular technology. The IPv4 address should be an option on its own, as Ted suggested in the meeting.
> 
> Not sure if the last word recorded in the minutes on the MAP-DHCP topic was from Suresh, but it was:
> 
> "lw4over6 to signal it supports ea=0. we don't want multiple DHCP option draft"
> 
> Of course, calling out the IPv4 public address option in a Parameter Request List option provides such a signal.
> 
> (4) Summary of Provisioned Information
> =====================================
> 
> Common to multiple methods
> --------------------------
> 
> Every method requires signalling of the IPv6 tunnel endpoint addresses at the CPE and the BR. It is assumed that this is done as a preliminary step, as illustrated in draft-ietf-softwire-public-4over6-10.txt Figure 2. That document assumes the provisioning of both addresses is done by DHCPv6, if it is done by DHCP at all.
> 
> Note that RFC 6334 provides the AFTR-Name option, which is an FQDN.
> 
> The IPv4 public address is also common to all techniques in 1-1 mode. This would be provisioned by DHCPv4overDHCPv6, per the consensus noted in (1) above.
> 
> 
> Public 4over6
> -------------
> 
> No additional provisioning beyond public IPv4 address.
> 
> DS-Lite (RFC 6333)
> ------------------
> 
> The IPv4 address of an IPv4 DNS server can be passed via DHCPv4overDHCPv6. This would require an update to RFC 6333 section 5.5. The B4 would no longer have to act as a DNS proxy.
> 
> The source IPv4 address used by the B4 needs to be configured if it differs from the default 192.0.0.2. This would most likely be done by static configuration rather than DHCPv4.
> 
> For multicast operation as described in draft-ietf-softwire-dslite-multicast-06.txt, three IPv6 prefixes have to be provisioned: the any-source and source-specific multicast prefixes mPrefix64 and the unicast prefix uPrefix64. Since these values relate specifically to IPv4 to IPv6 transition, they would be provisioned by DHCPv4overDHCPv6.
> 
> Light-Weight 4over6
> -------------------
> 
> An object to specify the assigned port set is required. This would be carried via DHCPv4overDHCPv6.
> 
> MAP-E
> -----
> 
> The MAP CE is provided with one or more mapping rules for the domain in which it participates. That domain is distinguished by an IPv6 MAP BR address, as discussed above. The components of the rule are:
> -- the rule IPv6 prefix and length
> -- the rule IPv4 prefix and length
> -- the length of the EA bit portion of the rule IPv6 prefix.
> 
> Mapping rules would be provided by DHCPv4overDHCPv6, since they relate strictly to transition.
> 
> If multiple mapping rules are provided, mesh mode is implied. If just one mapping rule is provided, the situation is ambiguous, hence an object is required to specify hub-and-spoke versus mesh mode. The 4rd document specifically indicates that mode can vary between domains, so the same assumption is reasonable for MAP-E.
> 
> 4rd
> ---
> 
> 4rd uses similar rules to MAP-E, with the addition of a flag indicating whether well-known ports can be included in the allocated port set.
> 
> 4rd adds tunnel traffic class and domain PMTU as provisionable values.
> 
> The only mandatory addition is domain PMTU. This seems like a fragile way to distinguish 4rd support from MAP-E support. As suggested near the beginning of this note, the sensible approach IMHO is to specify technique-specific DHCPv4 container options so the CPE can indicate which transition techniques it implements by requesting them in the Parameter Request List option.
> 
> Note that 4rd currently assumes DHCPv6 provisioning, but should use DHCPv4overDHCPv6 for most of this information.
> 
> MAP-T
> -----
> 
> Quoting from the MAP-T document, section 6:
> 
>   The MAP-T CE and BR configuration is the same as for MAP-E described
>   in Section 7 of [I-D.ietf-softwire-map] except for two differences:
> 
>   o  Translation mode is used instead of Encapsulation
> 
>   o  Use of the BR's IPv6 prefix instead of address
> 
> Translation mode can be indicated by a MAP-T-specific DHCPv4 container option in line with previous suggestions.
> 
> The BR IPv6 prefix would be provided by DHCPv6, perhaps as the same option that provides BR IPv6 addresses.
> 
> _______________________________________________
> Softwires mailing list
> Softwires@ietf.org
> https://www.ietf.org/mailman/listinfo/softwires