Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds

Philip Homburg <pch-v6ops-9@u-1.phicoh.com> Sun, 27 October 2019 15:05 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12ED9120086 for <v6ops@ietfa.amsl.com>; Sun, 27 Oct 2019 08:05:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.499
X-Spam-Level:
X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tBCWtq9Dv-_X for <v6ops@ietfa.amsl.com>; Sun, 27 Oct 2019 08:05:38 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AEF312009E for <v6ops@ietf.org>; Sun, 27 Oct 2019 08:05:38 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iOk6q-0000IyC; Sun, 27 Oct 2019 16:05:36 +0100
Message-Id: <m1iOk6q-0000IyC@stereo.hq.phicoh.net>
To: v6ops@ietf.org
From: Philip Homburg <pch-v6ops-9@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <CAO42Z2yQ_6PT3nQrXGD-mKO1bjsW6V3jZ_2kNGC2x586EMiNZg@mail.gmail.com> <B53CE471-C6E8-4DC1-8A72-C6E23154544F@fugue.com>
In-reply-to: Your message of "Sun, 27 Oct 2019 08:02:40 -0400 ." <B53CE471-C6E8-4DC1-8A72-C6E23154544F@fugue.com>
Date: Sun, 27 Oct 2019 16:05:35 +0100
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/49TDLOc5Cyib4GAEM_7SbYhAlmw>
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 27 Oct 2019 15:05:40 -0000

> Indeed, this would also
> not actually solve the problem.   At present, the ISPs are doing
> something that is out of spec and causes problems.   If we fix this
> by accommodating what they do, does that help, or does it just
> encourage them to continue doing it?

At the moment, ISPs are doing something that sort of works in IPv4 because
of NAT. It causes significant issues in IPv6.

Of course, can we can tell ISPs that they are doing it wrong and that they
should not deploy IPv6 until they have fixed their networks.

I would like to have IPv6 now. And if that requires some tweaks to deal with
broken behavior then so be it.

> If you Really Really want to be able to have the routers send out
> RAs that deprecate the default route, and, as Mark is saying here,
> to upgrade millions or perhaps billions of hosts, why not ask for
> something thats a real improvement?

Because bundling features is a good way to ensure that nothing gets done.

Dealing with flash renumbering in the CPE is a relatively small tweak that
can be implemented at any time.

> Second, fix RA so that its
> non-repudiable by a device that doesnt have the secret key.

If you think that this is an important thing to fix, feel free to 
talk about it. But why in this discussion? SEND doesn't do anything for
flash renumbering. From an operational point of view, RA-guard is much
more attractive then SEND. So it is not clear to me that there is any
need for SEND. But I could be wrong. In any case, if there is a need
to discuss SEND we could do that separately.

This discussion is on how to deal with flash renumbering.