Re: [spring] SRv6 Network Programming and Link Local Source Addresses

Ron Bonica <rbonica@juniper.net> Sun, 01 December 2019 22:47 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56ECC120118 for <spring@ietfa.amsl.com>; Sun, 1 Dec 2019 14:47:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=yhzhgB57; dkim=pass (1024-bit key) header.d=juniper.net header.b=Bv0d88zY
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DAx86iLcUDDn for <spring@ietfa.amsl.com>; Sun, 1 Dec 2019 14:47:12 -0800 (PST)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87BBD120116 for <spring@ietf.org>; Sun, 1 Dec 2019 14:47:12 -0800 (PST)
Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xB1MgRFE031922; Sun, 1 Dec 2019 14:47:11 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=4lBa1dcw3JCvxHvCND37Yghb9vI4MOtgdD8gmo8oZIE=; b=yhzhgB57e/tRfhPXeSFdmEOrLrhNhIvfP6x9FTpPoRbdpXgE/ts1vxnCHAhtaBeDOlqF UyfIGTzOqJEMXxaY4AGxqGAKOC/ksxBz3PPDmE8dJYoEIk7eEHTcasXZIpEaVjSRn4gW DvIBmo1BfT6zSt1wALPYTW0cSDn3OKf91PJI37sc1hbqNQSmGN+lIzJUQyna2jAbDCVd i63Gn3ZIFxQv1useymyEIXgl0lhxLNuWC1wwTE9mYRHY6X1V1rmAfJSDfdKPD8UFlHkB cC6/DfeBNNGsseU1yxiIg+N4nXycLEPN0t2BTrKGKesJ6IJBiIQ1dcmFckQ6c/dSnCGX Zw==
Received: from nam05-co1-obe.outbound.protection.outlook.com (mail-co1nam05lp2057.outbound.protection.outlook.com [104.47.48.57]) by mx0a-00273201.pphosted.com with ESMTP id 2wkq909pa3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 01 Dec 2019 14:47:11 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JD/8ehc9CK55RWSGRX34ue7fTKOxnXFwll0P/TyrYCPCyAVN9hoD4gyoEDe/ciDcAZcjwr0tpr6VelBD0U0O3WLjo2YZwDVemaDz9NSrOITXR122QiidrMP+PhLOFxdn+zlbrvFOY6ow3ascPXvuq2LGkSU/LhuHoQyqojMe4p4BvaXqQWKQIdipNmTWeHp67ilLoC9NZ64gJX5WSeGhPWhxsV0Uq6XicqmG47Y8/EZlom1hlQpx3vNPItMwdc94F/z2o01wuQEVddDQ44nMvwCkMadptl3i3hnLhvjQeZ33q15RnuL8qlYxtrg1s8XmV621HE7PoDjvmp5+GF5zKw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4lBa1dcw3JCvxHvCND37Yghb9vI4MOtgdD8gmo8oZIE=; b=ZLZ1pPw8VLEodtVeZna6jKAWaQS34K2ZGwhmdlUXezawyX/eYuV3kJjKoUn4WhQ80ODAne0W5hta4qjEJlBUZ6mqgtTdSxf6LliolEhSGYqr+Lp8vlrpa5eSbZx/TjmGnwKXr8x0wZozkFwFIOYU/2706wkV/t1yc1Yv1CmXIpU8XI0PGIlikwHMqK8VgN/IIyzhbntrckY7z3oo0u8cSGebEA9i9Y1vsvr3g537vRUYq1y+VdOowHusIC2dwRAxy5HDhYkiRhiDnzHES87GeRigwZoHDYJMgi2NpFt1WgOBvAkUHjsuB8E2ImE7qo/ptuTWzduPu4BP9lniFKoOeg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4lBa1dcw3JCvxHvCND37Yghb9vI4MOtgdD8gmo8oZIE=; b=Bv0d88zYme7sOx71GrhJUo10Kihw8BSuhBrPEyRQZbqRBK8WRcrDZaHxDYKk5PMfqRHvKeWIi1Xd+Yfbumtbh0MAxg4K7DUWVGhlP6LPOKWJcnh+7Jk0CkxKbdhuNx39tLAnppIYcsT0g4/rHad39dnU1JC1FD7KDtvX6qC/Vx8=
Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB4451.namprd05.prod.outlook.com (52.132.222.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.3; Sun, 1 Dec 2019 22:47:09 +0000
Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::185e:d297:6499:4987]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::185e:d297:6499:4987%7]) with mapi id 15.20.2516.003; Sun, 1 Dec 2019 22:47:08 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Mark Smith <markzzzsmith@gmail.com>, Bob Hinden <bob.hinden@gmail.com>
CC: SPRING WG <spring@ietf.org>
Thread-Topic: [spring] SRv6 Network Programming and Link Local Source Addresses
Thread-Index: AdWnvRd0lqtmH80YQu+C6Oz5BkM5rgA0iXcAAAHtYYAAAH2owA==
Content-Class:
Date: Sun, 01 Dec 2019 22:47:08 +0000
Message-ID: <BN7PR05MB5699616A8A4F8DFD876C8352AE400@BN7PR05MB5699.namprd05.prod.outlook.com>
References: <BN7PR05MB5699A179E7206F3899564234AE410@BN7PR05MB5699.namprd05.prod.outlook.com> <F42D9CF3-DB62-4402-86B6-B48843959A84@gmail.com> <CAO42Z2zv9D7cncX2EfS=Amkbx9cbqNrRytZPdj5YP+h4DsSMGg@mail.gmail.com>
In-Reply-To: <CAO42Z2zv9D7cncX2EfS=Amkbx9cbqNrRytZPdj5YP+h4DsSMGg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-12-01T22:47:07.3679526Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=e5a73d99-3c98-4282-9adb-b95fde4540b7; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.3.2.8
dlp-reaction: no-action
x-originating-ip: [66.129.241.11]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: c2468a9e-0533-45dc-f36e-08d776b065b7
x-ms-traffictypediagnostic: BN7PR05MB4451:
x-microsoft-antispam-prvs: <BN7PR05MB4451C24429BB22F98C08627FAE400@BN7PR05MB4451.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0238AEEDB0
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(346002)(376002)(136003)(366004)(396003)(51444003)(189003)(199004)(76176011)(74316002)(478600001)(102836004)(86362001)(229853002)(6436002)(25786009)(6246003)(186003)(55016002)(110136005)(26005)(4326008)(8676002)(81156014)(76116006)(81166006)(316002)(66946007)(66446008)(66476007)(66556008)(64756008)(446003)(2906002)(66066001)(52536014)(71190400001)(236005)(606006)(14444005)(71200400001)(11346002)(8936002)(54896002)(9686003)(7736002)(6306002)(790700001)(14454004)(5660300002)(256004)(7696005)(33656002)(966005)(99286004)(53546011)(6506007)(3846002)(6116002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4451; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: nBPW7C/8fkOIh/ionQL/F/7B707Nf9C2iMVhZ268+Hg41x/0J2jyKT1mBzBLgGKfK5yPb54XUnTiudYmEsodkoU1xU3QpkoapyKF3p3bQ/tCcXUsbgcqGjLtQCABzrnXyq7bV/xLveolBA+nPyMbPpHRZ1iKDStZNS1M3HtLVDA/zHb9kUIxNGsoAfrDr/qZQrBRNZVC1LmPz99q/BFm8c3j80Osv76oxVFMagDXYV+TQ1hTZGhSIC7hvnFa4809BOg+UEbm0YSlKFyp3lzjMnDmHxK/xC6lKUsX6E0bun/kBBc+noYFvvcW/VQcUNnfAtHdo4N7u/ma09rsUmvKvV194tAbK5i4dEFg2naXWlyOU3IMk3/tumikQmlB895ZuIkzTibtsQDmyayBwWbMef9NFQ5aQEongxZONdN3LB1m9mZtSLM4tCyD92xS4/0pEbM6xhJRX7abGPRa7qiEcm0CYgAFQFV6d8RPwRIDMyY=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BN7PR05MB5699616A8A4F8DFD876C8352AE400BN7PR05MB5699namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: c2468a9e-0533-45dc-f36e-08d776b065b7
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Dec 2019 22:47:08.7691 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: gNxn0PYfyhJtD8eBsUe5OS9zzaVebod4uAfcW9SA/w7575ZrPN/wcqk8TUDqxQTjGsWFmjilDqT7F9FbCGww1g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4451
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-12-01_04:2019-11-29,2019-12-01 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 phishscore=0 mlxscore=0 malwarescore=0 suspectscore=0 priorityscore=1501 clxscore=1015 impostorscore=0 mlxlogscore=999 lowpriorityscore=0 spamscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1912010204
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/5i3ih7u90iguZrNpGQH7EhIU3lk>
Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Dec 2019 22:47:14 -0000

Mark, Bob,

Yes, I agree that routers should not forward packets with link local source addresses.

Pablo,

Maybe we should update section 4.2 of the network programming draft to reflect this?

                                                                 Ron


From: Mark Smith <markzzzsmith@gmail.com>
Sent: Sunday, December 1, 2019 5:31 PM
To: Bob Hinden <bob.hinden@gmail.com>
Cc: Ron Bonica <rbonica@juniper.net>; SPRING WG <spring@ietf.org>
Subject: Re: [spring] SRv6 Network Programming and Link Local Source Addresses


On Mon, 2 Dec 2019, 08:35 Bob Hinden, <bob.hinden@gmail.com<mailto:bob.hinden@gmail.com>> wrote:
Ron,

> On Nov 30, 2019, at 12:36 PM, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org<mailto:40juniper.net@dmarc.ietf.org>> wrote:
>
> Pablo,
>
>
>
> Consider the packet (SA,DA) (S3, S2, S1; SL) where:
>
>
>
>       * SA is link-local (fe80)
>       * DA, S3, S2, and S1 are all END.X
>
>
> Section 4.2 suggests that this packet will be delivered over multiple hops to its destination, regardless of its link-local source address.

I would think that RFC2460 Section 2.5.6. "Link-Local IPv6 Unicast Addresses" covers this:

   Link-Local addresses are for use on a single link.  Link-Local
   addresses have the following format:

   |   10     |
   |  bits    |         54 bits         |          64 bits           |
   +----------+-------------------------+----------------------------+
   |1111111010|           0             |       interface ID         |
   +----------+-------------------------+----------------------------+

   Link-Local addresses are designed to be used for addressing on a
   single link for purposes such as automatic address configuration,
   neighbor discovery, or when no routers are present.

   Routers must not forward any packets with Link-Local source or
   destination addresses to other links.

I think that's RFC4291.

RFC4007, "IPv6 Scoped Address Architecture" does too, more generally and probably more formally, in particular section 9, "Forwarding".

Regards,
Mark.



Bob


>
>
>
> Is this the case?
>
>
>
>                                                              Ron
>
>
>
>
>
>
>
>
>
>
> Juniper Business Use Only
> _______________________________________________
> spring mailing list
> spring@ietf.org<mailto:spring@ietf.org>
> https://www.ietf.org/mailman/listinfo/spring<https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/spring__;!8WoA6RjC81c!QkzoS4tJW9v0MWl7yOK40dnKAzRQeQGFdX7602on56clngTIGsSc3opZDFf6Y6uT$>

_______________________________________________
spring mailing list
spring@ietf.org<mailto:spring@ietf.org>
https://www.ietf.org/mailman/listinfo/spring<https://urldefense.com/v3/__https:/www.ietf.org/mailman/listinfo/spring__;!8WoA6RjC81c!QkzoS4tJW9v0MWl7yOK40dnKAzRQeQGFdX7602on56clngTIGsSc3opZDFf6Y6uT$>


Juniper Business Use Only