Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers

tom petch <ietfc@btconnect.com> Tue, 15 September 2020 16:08 UTC

Return-Path: <ietfc@btconnect.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02B6D3A0E3B for <v6ops@ietfa.amsl.com>; Tue, 15 Sep 2020 09:08:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eRVjeoRoAncm for <v6ops@ietfa.amsl.com>; Tue, 15 Sep 2020 09:08:44 -0700 (PDT)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70110.outbound.protection.outlook.com [40.107.7.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E4ED3A0E39 for <v6ops@ietf.org>; Tue, 15 Sep 2020 09:08:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iScGhecayCzYIsAg8+WDxQ2HhYv0jrXkNzsH20IguCaNKWvwylhjvJLst6gbkcdPerlUGuj5t2NQ2EJs7bbU7HRP6PuV7jzXRTBX1POGQLBOJUO3RSPJJBIdrhY3urXML6c7zpgV/7MgJMQUCIkBB1fZQd3x4m3kMyvBk7erm9AqpVVFzG2olBIR2y7mbtJ0yUbt2Y5Ddl5QICfOMKacgIq7PJwppMGbJVwcobV5L4czgfrudXjF9xzrD6jpJApVn+gxEOEh4ZDjwAhldw/bXyX82blmbn60gjyLbUjdV323kppRiwkxgAJMjz2p1CBN+spvB4AlMxvOMt/pBwryHA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ozvhzBHED0SDHytdjjUoLKGvsMFiyuEaiK44ff+hVes=; b=QC6/GaPBYtIR4Fsh3wBx5GjXlWcTv/0qi/43sxE2CscOI1J9eTnY8GfU5dbbVPyw0Frb8UwTsWcWjq7YUM78Sdhqd4oRgUUOGtPdgpB161Qmusoh9y0fxsj71pIhLcnih5NuTZtORilapwd3mdSbpZj4YslN5YjO0XFicbUE5H1e1I2WkaKDDWpHqXmu6AndZPGTJpuRzgkA8J5bZY/DbgFUwJ7LDSNsiWdRTXL+VNayuel3dwqXL6qfqHg/nLK7JnI92J1dCT3J9/qpy5U+NxnLSZqOFrQZyLLWOK+6l+wvYGHU03eG9Q7QSQ06DFwboeqPkdwkgFfw+ozZD9EUog==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ozvhzBHED0SDHytdjjUoLKGvsMFiyuEaiK44ff+hVes=; b=vNcELotzCO255BxtBHbkgMFZKmqcbKDBZr6WrCJXzLBPWq5tsIr43lkdZibbWXnns8s5/xLhIRpk0CycvKB5Ye52S/Rf8U1AfmzDv13qyT+uFAfh+ESWzEGK/oZvlFYJbkloJeSribmEI0LXMkXmxtnPg5EYK4SNRA3mSUMdhSE=
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM5PR0701MB2913.eurprd07.prod.outlook.com (2603:10a6:203:43::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3391.8; Tue, 15 Sep 2020 16:08:36 +0000
Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::189c:ac35:ce23:d38a]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::189c:ac35:ce23:d38a%6]) with mapi id 15.20.3391.006; Tue, 15 Sep 2020 16:08:36 +0000
From: tom petch <ietfc@btconnect.com>
To: Fernando Gont <fgont@si6networks.com>
CC: IPv6 Operations <v6ops@ietf.org>
Thread-Topic: Operational Implications of IPv6 Packets with Extension Headers
Thread-Index: AQHWioRBZz2U4F4heEuV50FukUSdTKloZwuAgAD9wTiAACuwAIAASc1/
Date: Tue, 15 Sep 2020 16:08:36 +0000
Message-ID: <AM7PR07MB6248051BB6A4DCCD8545C730A0200@AM7PR07MB6248.eurprd07.prod.outlook.com>
References: <d8d59ce07f7f4031a545ff6e24fdbb88@huawei.com> <20200729084351.GG2485@Space.Net> <32BAEAEA-7352-4BAE-ADA8-FDA2395D5732@employees.org> <a6ed89a8-c12e-b8d2-c720-5cc02e127a68@si6networks.com> <FCBD1043-A0B2-435A-9AB9-0FCE3566C769@employees.org> <4573db3f-ac8d-3103-1979-e803ae40f117@si6networks.com> <DEB1318E-0E5B-4093-A691-8E1FD35B9F50@strayalpha.com> <A197EF3A-1E1E-40F1-BB50-68469E3C8E63@delong.com> <44481FC7-6E3F-4D5A-A5A9-A338C1836EA1@strayalpha.com> <2ad804a2-e714-6256-3afa-4d4a92fd6d3c@si6networks.com> <9c026e30-149b-172f-0953-456fb2d1e715@gmail.com> <AM7PR07MB6248A43FCBBB5D34AA2DA9AAA0230@AM7PR07MB6248.eurprd07.prod.outlook.com> <7bc1ea18-01c5-54f7-a65d-a53722a4d3c9@si6networks.com> <AM7PR07MB624842F364784EF3AC5B0647A0200@AM7PR07MB6248.eurprd07.prod.outlook.com>, <591f5a76-b375-7391-ad4b-bf14ad215536@si6networks.com>
In-Reply-To: <591f5a76-b375-7391-ad4b-bf14ad215536@si6networks.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: si6networks.com; dkim=none (message not signed) header.d=none;si6networks.com; dmarc=none action=none header.from=btconnect.com;
x-originating-ip: [86.155.63.66]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8c8c9c1c-8e46-4985-40d6-08d859919a4b
x-ms-traffictypediagnostic: AM5PR0701MB2913:
x-microsoft-antispam-prvs: <AM5PR0701MB291318850E9002BF8FE0D3E7A0200@AM5PR0701MB2913.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 24d2eO2rpnbZCwbcY5CtT2v6NmqK9n6iDEo4s01AXpfhKW0/A5eGX4SqJbM2apvrs7ddH7zIxt5n7e9vXnmBGjs3lFy8AQduyZyKRurHLOIAbAhij6c37wX/4lPQW+59bq5HPbolIUs5GJZBBXQvdDSX93VaQES3+X5lz9lyvH5/Nb7rHoqkSPhqcJSjsWfdxrb9LVEcPO5zeGRkXP/o8WcuNUeZXDD5qruIh0qgh2RjnPxxhIMQWVnOBxE9Ul4ghzMb+wZ8JOQNMrDtJwnPWsDioKa8TqmtcON/t7rlmPYHwnxmCSm7GWYbmzF1i+yjhbsMt8AmjPKbXO3RdSKKRg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(346002)(366004)(396003)(136003)(376002)(7696005)(9686003)(55016002)(6916009)(2906002)(66574015)(4326008)(8936002)(8676002)(86362001)(83380400001)(478600001)(316002)(66946007)(5660300002)(76116006)(91956017)(66476007)(66556008)(66446008)(52536014)(64756008)(26005)(186003)(33656002)(6506007)(71200400001)(53546011); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: 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
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: btconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8c8c9c1c-8e46-4985-40d6-08d859919a4b
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Sep 2020 16:08:36.6050 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: NIkl8kRQM/hcCyko7NqIypqcJMsZv9e7W/M2MQUctGLYV0zbHF3xMYH95SoSUbbSfc4YsZrb5wJpQwW7pNRJ6w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2913
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Ki5meRoBwKh9gb_5c29CYcCJ_qg>
Subject: Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Sep 2020 16:08:50 -0000

From: Fernando Gont <fgont@si6networks.com>
Sent: 15 September 2020 12:24

Hi, Tom,

On 15/9/20 06:05, tom petch wrote:
[...]
>
> I wouldn't mind writing a Section that sits between the current Sections
> 2 and 3 with more background on extension headers, if you think that
> would be of value.
>
> <tp>
> Yes please.  One page or two pages max, summarising why they were thought a good idea, the different types and their uses, how widely used they are  and with references;  RFC8200 may be Normative but it takes a while to appear and that after RFC2460!

An intro to EHs -- and e.g., how the structure compares to the IPv4
packet structure is simply and doable. OTOH, what you suggest might now. :-)

e.g.,Not sure one can tell how widely used they are. Also, getting into
enumerating EHs will result in the relevant section becoming stale soon,
since there seems to be quite a bit of development in this area.

<tp>
My sense is of the middle part of the I-D, the technical detail, is floating in mid-air, lacking an introduction, lacking a conclusion. and as such will only convince those who are already convinced.  I have to read between the lines to divine that there is a connection between fragmentation and EH, between length of packet header and EH, between security and EH and so on.  By not making the connection explicit, I think that you will lose your target audience.

Tom Petch


> Section 3 makes reference to security, fragmentation and such like with no apparent connection to EH; I think that such a connection should be explicit earlier.

I'll craft some text and post to the list for review before
incorporating into the I-D...


[...]
> <tp>
> but it leaves the I-D without an ending, it just peters out.  With an introduction saying what EH are used for then you could have a summary harking back to that and saying which, or which kind of, work and which do not implying, without being explicit, what future developments might or might not be a problem.

The think is that, on the public Internet, all that I have checked are
unreliable. -- That's a sad fact... but a fact. :-)

If you control the network, well.. you control whether they are dropped.

And the obvious corollary is that use cases that are targetted at
limited domains will likely work, where any targetted at the public
Internet will fail, at least for some time.

That's as much as we can say so far -- based on data... since otherwise,
guesswork is just guesswork.

Thoughts?

Thanks,
--
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492