Re: [v6ops] IA_PD bit in RA

Owen DeLong <owen@delong.com> Fri, 13 December 2013 18:22 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 677891ADF77; Fri, 13 Dec 2013 10:22:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.992
X-Spam-Level:
X-Spam-Status: No, score=-0.992 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eji-M55OUuRb; Fri, 13 Dec 2013 10:22:38 -0800 (PST)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 667D81AD8F0; Fri, 13 Dec 2013 10:22:37 -0800 (PST)
Received: from [10.219.5.18] (mobile-198-228-209-223.mycingular.net [198.228.209.223]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.2) with ESMTP id rBDIHQ4N019644 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 13 Dec 2013 10:17:27 -0800
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com rBDIHQ4N019644
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1386958649; bh=KTxGAijLbg6SUNNA8Sh1VeNvr08=; h=References:Mime-Version:In-Reply-To:Content-Type: Content-Transfer-Encoding:Message-Id:Cc:From:Subject:Date:To; b=5sn7GCMMUJRA0NVWk2J165WAS0iPlMCDOVY4zGlPpmDnw3c+2Fsa/xcmeEdsSXL5e iqJ4W16dX8eZS+s54xqeOLvuMkdUS6UjRsiiLqSJJoHRhrvjrj5NYvcd1VGjE67dSv fhTGfBtfzXwJHF1CT0VfgVbe2V98R3All00CpJVo=
References: <96747494E3D74D41B20907035DB1E48DC7BB@MOPESMBX03.eu.thmulti.com> <2D09D61DDFA73D4C884805CC7865E611303B0269@GAALPA1MSGUSR9L.ITServices.sbc.com> <96747494E3D74D41B20907035DB1E48DCD72@MOPESMBX03.eu.thmulti.com> <alpine.DEB.2.02.1312100803370.24602@uplift.swm.pp.se> <F92E1B55-C74B-400C-B83E-6B50D175D121@steffann.nl> <7B4820C5-B562-4BE7-8C6A-CBCDABC39728@nominum.com> <A583EFC3-71BB-4962-875C-4AB775D13491@delong.com> <46BE373C-D476-4D83-B014-56B77FD3D67E@nominum.com> <39280481-09C5-41ED-B79E-99DBBD329F44@employees.org> <52A8343C.3040202@gmail.com> <CAAedzxq6ym-uZJQVC7JTMgKnETpGiNt3JCmkJeGW2MVnw+sixA@mail.gmail.com> <52A83C92.4020204@gmail.com> <A1A3DD00-96D8-4D73-B5F1-1CA705196689@delong.com> <52A9A93F.8050804@gmail.com> <9CB9D172-BA78-492B-B836-D7A9C6CB11A5@delong.com> <52AAEDDA.6010504@gmail.com> <FED11C95-5D12-410E-8D8C-CB8A9F5D79C1@delong.com> <52AB318C.2050704@gmail.com> <D6167580-AFC2-404D-8077-229226F2EB5C@delong.com> <52AB4716.4040902@gmail.com>
Mime-Version: 1.0 (1.0)
In-Reply-To: <52AB4716.4040902@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Message-Id: <D1841BDB-6670-43CF-A4F9-A3C2A04B2A42@delong.com>
X-Mailer: iPad Mail (11B554a)
From: Owen DeLong <owen@delong.com>
Date: Fri, 13 Dec 2013 10:17:26 -0800
To: Alexandru Petrescu <alexandru.petrescu@gmail.com>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [192.159.10.2]); Fri, 13 Dec 2013 10:17:29 -0800 (PST)
Cc: "v6ops@ietf.org" <v6ops@ietf.org>, 6man WG <ipv6@ietf.org>
Subject: Re: [v6ops] IA_PD bit in RA
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Dec 2013 18:22:40 -0000

>> If the DHCP service is present, you should see an M or O bit in the
>> RA. However, that shouldn't control whether you indicate your desire
>> for a prefix or not.
> 
> Well, I think I disagree

Well...

> Since the widespread SLAAC has no PD feature it's easy to consider that
> a node would SLAAC its address and DHCP-PD its prefix for behind.  Or
> DHCP its address and prefix.

I suppose it is possible that someone would run a DHCP server strictly for PD and not offer up other configuration options to hosts (remember, O bit means ask DHCP for "other information"), so without the M bit, you shouldn't be expecting DHCP to provide an address.

> But the M/O bits can't indicate to SLAAC address and DHCP-PD prefix.

The O bit doesn't specifically indicate to ask for prefix, true. However, it does indicate that there is a DHCP server available and that other information should be requested from said DHCP server.

I would think that the rational thing to do in an environment where you want to provide DHCP-PD and not other information via DHCP (which is hard for me to imagine why, but let's ignore that for the moment) would be to advertise an O bit and then answer with empty or negative responses for non PD requests.

>>> If the service is absent there is no reason to insist.
>> 
>> I'm not sure what you mean by insist in this context. I would agree
>> that there is no reason to persist with alternative requests in the
>> absence of a denial. That you should, instead, retry the same
>> request until receiving an acknowledgement or a denial.
>> 
>>>> Either way, you have nothing to delegate to your subordinate
>>>> networks.
>>> 
>>> Right.
>>> 
>>> If the network tells the node there is no DHCP service to look
>>> for, then the node may decide to fall back into a 64share mode, or
>>> so. This can happen very quickly (it boils down to evaluating the
>>> probability of time length between the random link up signal and
>>> the next periodic RA).
>> 
>> Is there any reason not to use 64share mode until you receive a
>> positive DHCP response?
> 
> Sure.  There are reasons to not use 64share altogether.  It does not
> work on 4G links like CDC-Ethernet.  It has other drawbacks described in
> a draft.

But it's not going to be any worse than what happens while you don't have a prefix.

> Instlaling 64share followed by a positive DHCP-PD Ack involves
> renumbering the Host in smartphone's network, i.e. breaking their
> ongoing communications (the prefix of 64share is different than the
> prefix obtained by DHCP PD).

I believe I discussed ways to mitigate this above.

>>> If on another hand the network does not tell the node whether DHCP
>>> is present, then the node must emit a request and wait for a
>>> response.  If it waits too short and decides there is no service
>>> DHCP, even if there is one, then the subsequent decision to use
>>> 64share is a wrong decision.
>> 
>> No, it must emit a request. It does not have to wait for the
>> response, the response can be processed asynchronously. I don't see
>> the decision to use 64share is wrong so much as suboptimal. It's not
>> at all invalid to use 64share until receiving the PD and then switch
>> to the delegated prefix.
> 
> The smartphone may switch, but renumbering all the Hosts in smartphone's
> hotspot?

Why not? They're no worse off than they would have been if they'd been stuck waiting for a DHCP response.

>> If you want to provide a better user experience, 64share behavior can
>> be preserved for some duration until early flows expire. Simply stop
>> including 64share prefix in locally generated RAs and wait for valid
>> timer to count down.
> 
> I agree.  Althoug measuring how flows may expire may not be straightforward.

If you can't be sure the flows expired (easy with TCP, harder with other protocols), then you use the Valid timer and you're done.

>>> That's why conservative DHCP discovery phases take long, and also
>>> that's why conservative WiFi AP discovery clients take long,
>>> whereas quick such clients often miss some important Access Point.
>> 
>> Discovering an AP has nothing to do with DHCP and has to happen well
>> before the first piece of the DHCP process.
> 
> Hmmm... they have nothing to do (different layers).  Yes, link
> association must happen before DHCP process.  Link association involves
> a discovery phase.  Worse, the 3 can't be parallelized.
> 
> Their discovery algorithms work in the same way: their messages and core
> data structures have similar semantics: ND's RS and DHCP's Request is
> WiFi's Ass'n Request, ND's RA and DHCP's Reply is WiFi's Beacon, ND
> cache and DHCP's cache is WiFi's preferred networks, etc.

Perhaps that is because many years of research and experience has shown that these mechanisms work.

>>> This distinction is even more important for entities which are
>>> mainly mobile, doing frequent handovers.
>> 
>> If you're doing frequent handovers and they are changing your layer
>> 3 topology frequently then you already have a number of other
>> problems which go well beyond the difficulties you are describing
>> here.
> 
> YEs, just to say they exacerbate this perspective.
> 
>> Most frequent handovers in the mobile world do not affect the layer
>> 3 information.
> 
> YEs, I agree.
> 
> I guess by most mobile world is meant smartphones on cellular links.
> YEs, they are widely deployed and involve expensive business cases.
> 
> The good thing is thatthere's more to it than that: smartphones handing
> over between wifi and cellular links, smartphones handing over from one
> operator to another, bus train and roadside IP deployments, DMM
> concepts, etc.

Mobile is a tough problem to solve, to be sure. There's lots of work and optimization to be done in this area in the future. I'm still not convinced that adding a "PD available" flag to RA provides a benefit.

Owen