Re: [spring] IPv6 Addresses and SIDs

Ron Bonica <rbonica@juniper.net> Mon, 14 October 2019 01:23 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: spring@ietfa.amsl.com
Delivered-To: spring@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DF4F12006B for <spring@ietfa.amsl.com>; Sun, 13 Oct 2019 18:23:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DHzGNG3vJn5G for <spring@ietfa.amsl.com>; Sun, 13 Oct 2019 18:23:22 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB062120024 for <spring@ietf.org>; Sun, 13 Oct 2019 18:23:22 -0700 (PDT)
Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x9E1McmR021065; Sun, 13 Oct 2019 18:23:22 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=l7P4+U1jIu9+Wc6I9nCOkWhdKB0iZl+zQbRsqlzjFPs=; b=T+TFPg6qSGdjdA/vLNrNgAAh/UIi3b2MqJaur9yNlLK9rOJS0TY2GA/zsfIgg46+RZXG nh0utPt7aS8V5hzduEq0Trd9NkWLRgCYbghN8BkIRVZtfxWRf3wrh18xl0AcooKlFtxN s/y4nUvlyfaR+9NumH/H9Xj+gURkK7atFxJ1O+ttdstObUDlkWaD8He5SXYbjnOf/FcX 1rznhgzBCHVmh4ipbqjtvGsRosZYSLGxJKbz2P2XagCriPZUiUDSW9Yj8SwMiDO+jIsd 2UYEDsbfrMu63a/l16xQab0yE+0bsbvjG9IPpX2VdzPy2aLOWP7iK9G5Z65dtwgsZacj AA==
Received: from nam03-by2-obe.outbound.protection.outlook.com (mail-by2nam03lp2057.outbound.protection.outlook.com [104.47.42.57]) by mx0a-00273201.pphosted.com with ESMTP id 2vkahqj0q3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 13 Oct 2019 18:23:21 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QyYGoD7BgkXNeZ5jAIeFFY4pwNT510UQMVnV2K8hhex/rJrqFgYPDnIHk0ct3aSe3twUzCLT0tR8Slxa2/NhXccU87U6fjH02M0jOl5c/qUBPO8FxaF72QplKoZrQMgl7425KL3kYdBnX08JlEq/VvxBvnSBXYW9+g22tgcCEOY7hJ0Ne7k23nJRp/MT+XKA9/ZeQrqornzkUzZJ/nznRuBduYnULRPx6bkEsgcLrGlNU43/Vg+GgdwZ1jEO4WP5aycboIGbfs4tR/XkrtSER9SY9ReU6DaASgebf1WeXm/9dSv30IYWcCjM+aE8aaGgOOLdbe4riNZXkH59CBJAWQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l7P4+U1jIu9+Wc6I9nCOkWhdKB0iZl+zQbRsqlzjFPs=; b=jFvzDa+qz0T8m9pfzoDLwX5/q7UceePX45MN56JZ09ScZ/VIb821deyQhwHqAb4ZkT59k0yPhPh3XpwOZucpaImhRReFizKv3zLft7B7vYJu9/UfX8AC/+Olwk6VxwPsZqaqLNjuF4FjCnahtEE93d0M2tRZa9CJ3Cv9ZdsgrG9nOMyUxDe+gx7ku3mc5EM7hL54lXgdF879iCXZIHhNf3tptAK0qD0Uknyham9rROPsGkAlSJYmWWIzY+TFJwp9pPKaNTOlmXj+yzDRl8rRd4xerJV/g2FTVwNDF7tchZqnuZL0rVArnjtYyPQZMhi1ftBivegZuAgbRs2aU7bllw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
Received: from BN7PR05MB5699.namprd05.prod.outlook.com (20.176.28.88) by BN7PR05MB4500.namprd05.prod.outlook.com (52.133.220.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.11; Mon, 14 Oct 2019 01:23:18 +0000
Received: from BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d]) by BN7PR05MB5699.namprd05.prod.outlook.com ([fe80::c9d9:5faf:5aee:ee8d%6]) with mapi id 15.20.2347.021; Mon, 14 Oct 2019 01:23:18 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Robert Raszuk <robert@raszuk.net>
CC: SPRING WG List <spring@ietf.org>
Thread-Topic: IPv6 Addresses and SIDs
Thread-Index: AQHVggyYvtOzs/3490quKcl2oFy9jKdZKiJggAAE5oCAAByYwA==
Content-Class:
Date: Mon, 14 Oct 2019 01:23:17 +0000
Message-ID: <BN7PR05MB56999C4E2F2D8E045D47E3C1AE900@BN7PR05MB5699.namprd05.prod.outlook.com>
References: <SN6PR05MB5710CBAF8E6DF307401A2166AE9D0@SN6PR05MB5710.namprd05.prod.outlook.com> <f5eb739b-9ae4-433e-e6c0-8bcdb7bc575e@si6networks.com> <BYAPR05MB5703169601886283700608A5AE9F0@BYAPR05MB5703.namprd05.prod.outlook.com> <B6FE2A8B-B23B-4E9C-BB33-F6A5BD78C52B@gmail.com> <BN7PR05MB5699E5EA714CC64456771712AE940@BN7PR05MB5699.namprd05.prod.outlook.com> <1076F074-EB35-4D38-9949-4A241C946E07@gmail.com> <1fce4e24590847348894d10ca8bd5816@nokia-sbell.com> <D3FE1CA3-A8D1-4392-8EEC-CDCC7FC0827F@gmail.com> <BN7PR05MB56993D1127A8CA9CCC0E4A9AAE970@BN7PR05MB5699.namprd05.prod.outlook.com> <213BB95D-0E06-4E9A-B552-2A2466DC42AF@gmail.com> <04711680-e9c4-1159-58af-609517ee8bdf@joelhalpern.com> <CABNhwV3SyZNY6GrJF+wpgTmpM6DSts4gXQgdFTEgWfN876u5WQ@mail.gmail.com> <CABNhwV1Ym_AG7svmPUpmjGz600QyGRvtY5xNP0_K-hoGewUGTA@mail.gmail.com> <424b13a9a9bf4802b57c0609c92baad2@nokia-sbell.com> <BN7PR05MB569958ADB8E7BFF6C7EBC56AAE910@BN7PR05MB5699.namprd05.prod.outlook.com> <CAOj+MMHcTyCyO5Z3KyP5otW1Xgq7un2ypEGtjjWpr00j2t9dGw@mail.gmail.com> <BN7PR05MB5699B5C42BDBD5BF244CB4A8AE910@BN7PR05MB5699.namprd05.prod.outlook.com> <CAOj+MME70PYa7mkTRPKHqhg_1cMAvHLU0qZJx-=CjVy-ZKXpAA@mail.gmail.com>
In-Reply-To: <CAOj+MME70PYa7mkTRPKHqhg_1cMAvHLU0qZJx-=CjVy-ZKXpAA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=rbonica@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-14T01:23:16.8426733Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=2ec59061-f293-4df7-a37a-717345739c03; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic
dlp-product: dlpe-windows
dlp-version: 11.2.0.14
dlp-reaction: no-action
x-originating-ip: [108.28.233.91]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 9b4dc4a0-ad26-4878-c8b6-08d7504517fe
x-ms-office365-filtering-ht: Tenant
x-ms-traffictypediagnostic: BN7PR05MB4500:
x-microsoft-antispam-prvs: <BN7PR05MB4500728B7E21D8F60B1EECEBAE900@BN7PR05MB4500.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 01901B3451
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(396003)(136003)(346002)(376002)(199004)(189003)(51444003)(76116006)(5660300002)(5070765005)(236005)(52536014)(64756008)(66556008)(476003)(66946007)(66476007)(66066001)(478600001)(71190400001)(71200400001)(102836004)(9686003)(66446008)(486006)(54896002)(6306002)(33656002)(2906002)(14454004)(81166006)(74316002)(81156014)(53546011)(6506007)(4326008)(446003)(11346002)(316002)(76176011)(3846002)(26005)(6116002)(229853002)(25786009)(790700001)(8936002)(86362001)(7736002)(6916009)(55016002)(99286004)(6436002)(7696005)(6246003)(186003)(8676002)(14444005)(256004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB4500; H:BN7PR05MB5699.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: gp207t9n2lePzvGwQOSQB9qyDPb4VB6Lfwx76Myr3WX6UPaXva57sYukTKqli716F3ysKbjLRH20tR9WLcJ+cN1ZbhhMUBiR9hm+SlHGcCV/u0G8/N6XOeFJnxnbzTcqV6BRa/jkWe3AIps8wRvEn0B9MHwaI6rM8am35VeSWRx7/Jtwz5YujppPnpLuXfnljrRcDcouMUOLpcCXH3OsQ4s3NM16ML7oyckh5j1RANFJfXiXGM3cKY6e2vSzoYUn2k8Nx9P8RACtAOMRMn++0yaJOaBwWeYHtW/+5AL9hNGp5PlYb6joAZTv9iSqzvKJSZXhZQ8ovKT07HYc9UkY28dLBcwS6yWWAK9BL8qSKo+HIkVjGTXT3Co1xTWEUzpC1K9/dcDOQ2Ub1flCovpoBjLytGpwH3F/3PjrSuvyYrA=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BN7PR05MB56999C4E2F2D8E045D47E3C1AE900BN7PR05MB5699namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 9b4dc4a0-ad26-4878-c8b6-08d7504517fe
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2019 01:23:17.9164 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: P+NhFYvGFuL/dEuTXnDFdaoSF/CCTtRJZNMY9vthZnhTikpGdqU8q/I3pqQzmTijo6ROct82eLzqFTAFTf3tKw==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4500
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,1.0.8 definitions=2019-10-14_01:2019-10-10,2019-10-14 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 bulkscore=0 phishscore=0 spamscore=0 priorityscore=1501 impostorscore=0 suspectscore=0 mlxlogscore=999 lowpriorityscore=0 clxscore=1015 mlxscore=0 adultscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1908290000 definitions=main-1910140011
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/HCW1nNxysgm8vwAVlGGz3OHQ8Mg>
Subject: Re: [spring] IPv6 Addresses and SIDs
X-BeenThere: spring@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Source Packet Routing in NetworkinG \(SPRING\)" <spring.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spring>, <mailto:spring-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring/>
List-Post: <mailto:spring@ietf.org>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spring>, <mailto:spring-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Oct 2019 01:23:26 -0000

Robert,

Yeah, there were a few typos in my original message. What I meant to say was:


  *   If a /64 contains a SID, it MUST NOT contain any addresses that represent interfaces.
  *   If a /64 contains an address that represents an interface, it MUST NOT contain SIDs.

If we don't do this, we have to specify how nodes behave when they receive ICMPv6 NS messages in which the target is:


  *   A locally instantiated SID
  *   A SID learned from the IGP

                                                                      Ron


From: Robert Raszuk <robert@raszuk.net>
Sent: Sunday, October 13, 2019 6:57 PM
To: Ron Bonica <rbonica@juniper.net>
Cc: SPRING WG List <spring@ietf.org>
Subject: Re: IPv6 Addresses and SIDs

Hi Ron,

/64 prefix is a pile of addresses ... if someone would be to follow your suggestion I could not allocate some blocks of that prefix on R1, then some other blocks on R2 then yet more on my servers.

You said:

"With a /64, if one /128 represents an IPv6 interface, as described in RFC 4291, all /128 MUST either:


  *   Represent an IPv6 interface, as described in RFC 4291, or
  *   Be unassigned"

Maybe you meant to say something else:

"When a /64 is used as SRv6 locator prefix, if one /128 represents an IPv6 interface, as described in RFC 4291, all /128 MUST either:


  *   Represent an IPv6 interface, as described in RFC 4291, or
  *   Be unassigned"
But then you sent this to SPRINT indicating that 6MAN should be the audience :).

Best,
R.


On Mon, Oct 14, 2019 at 12:45 AM Ron Bonica <rbonica@juniper.net<mailto:rbonica@juniper.net>> wrote:
Robert,

I'm having a hard time understanding exactly how I have violated the longest match principle. Could you provide:


  *   A pointer to a statement of the longest match principle
  *   A few words regarding how I have violated it

                                                              Ron


From: Robert Raszuk <robert@raszuk.net<mailto:robert@raszuk.net>>
Sent: Sunday, October 13, 2019 5:24 PM
To: Ron Bonica <rbonica@juniper.net<mailto:rbonica@juniper.net>>
Cc: SPRING WG List <spring@ietf.org<mailto:spring@ietf.org>>
Subject: IPv6 Addresses and SIDs

Hi Ron,

I disagree.

Your suggestion violates longest prefix match principle in routing.

It is huge waist of address space and is not specific to IPv6 at all.

Let me describe the deployment case where your suggestion would cause it to break:

I have /64 prefix where a few  /128s from that space I allocate to local interfaces making it a local v6 destinations on those nodes.

However in the spirit of CIDR I still want to to use some blocks of that space - say  /126 or /124 as blocks which I only use to trigger local NAT as per rfc6296. And NAT does not require local address to be a destination address so it would be a big disservice to kill such deployment option.

Many thx,
R.


On Sun, Oct 13, 2019 at 10:59 PM Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org<mailto:40juniper.net@dmarc.ietf.org>> wrote:
Folks,

I think that we need a global rule that says:

"With a /64, if one /128 represents an IPv6 interface, as described in RFC 4291, all /128 MUST either:


  *   Represent an IPv6 interface, as described in RFC 4291, or
  *   Be unassigned"

The 6man WG will need to make such a statement since it owns RFC 4291.

                                                             Ron


Juniper Business Use Only


Juniper Business Use Only