Re: [v6ops] Focused discussion: draft-ietf-v6ops-unique-ipv6-prefix-per-host

"Eric Vyncke (evyncke)" <evyncke@cisco.com> Wed, 06 January 2016 16:30 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB77D1AD0C8 for <v6ops@ietfa.amsl.com>; Wed, 6 Jan 2016 08:30:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.51
X-Spam-Level:
X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PeF3X4oIneTp for <v6ops@ietfa.amsl.com>; Wed, 6 Jan 2016 08:30:07 -0800 (PST)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA5E31B2DBD for <v6ops@ietf.org>; Wed, 6 Jan 2016 08:30:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5932; q=dns/txt; s=iport; t=1452097806; x=1453307406; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=Pm6Sr5rjFmvv4uNQqlsCiRelEuKHYMMiAVz2AL6fZoI=; b=bKieneS4XUoa9Ia5KbeeUoprAeMJiggxaQFiEmq7/26UgAYrbrvT7xYm WtdTbnuvhaIQScD3SqieB9Vi2mtlepJ7HfXYA7LxTVAUnGFcvW2Z0pRua 5xo2NNMyiCndTR0TXLXjEJusQCMWE6hmFIg7AVuFV2GJ0LYpbVyybUSxv 0=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0D7AQA+QI1W/5RdJa1egm5MUnOIU7NXAQ2BZIYPAhyBBzgUAQEBAQEBAX8LhDUBAQQjVhACAQgEPgICAjAlAgQOGYgbsTuQXgEBAQEBAQEBAQEBAQEBAQEBAQEBARiGVgGEfodzgUkFlwoBjVSBXI0eilSDcgEgAQFChAqFS4EIAQEB
X-IronPort-AV: E=Sophos;i="5.20,529,1444694400"; d="scan'208,217";a="224637961"
Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jan 2016 16:30:05 +0000
Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id u06GU4Kl031369 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 6 Jan 2016 16:30:05 GMT
Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Wed, 6 Jan 2016 11:30:03 -0500
Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1104.009; Wed, 6 Jan 2016 11:30:04 -0500
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: "draft-ietf-v6ops-unique-ipv6-prefix-per-host@tools.ietf.org" <draft-ietf-v6ops-unique-ipv6-prefix-per-host@tools.ietf.org>
Thread-Topic: [v6ops] Focused discussion: draft-ietf-v6ops-unique-ipv6-prefix-per-host
Thread-Index: AQHRRrIF7o8qQUloLkyynK24JTNGyJ7vFi6A
Date: Wed, 06 Jan 2016 16:30:03 +0000
Message-ID: <D2B2F846.63BCC%evyncke@cisco.com>
References: <201601031900.u03J0LMe009763@irp-lnx1.cisco.com> <CAKD1Yr3RY1oUtQnN675djc22f7B1Fhx0Ntsmr9rmZVEqmygRDg@mail.gmail.com>
In-Reply-To: <CAKD1Yr3RY1oUtQnN675djc22f7B1Fhx0Ntsmr9rmZVEqmygRDg@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.5.9.151119
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.55.56.4]
Content-Type: multipart/alternative; boundary="_000_D2B2F84663BCCevynckeciscocom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/8ojBsp0pSr4F-CyiDneplBwRzok>
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>
Subject: Re: [v6ops] Focused discussion: draft-ietf-v6ops-unique-ipv6-prefix-per-host
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jan 2016 16:30:12 -0000

Belated comments on this useful draft...

I am confused by the wording of 'IPv6 only experience even if IPv4 support is present'

It appears to me that the security among users only relies on the AP in isolation mode (or split-horizon)... This makes the I-D mainly relevant to your use case :-(

It is not clear whether the UE will always receive the same /64 even when 'roaming' within the community WiFi as it would have privacy implications.

Section 4.3.2, do we have data backing that most OS still do DNS request over IPv4?

Section 5, I must admit that I do not understand why the GW has to send periodic unsolicited (unicast I hope to get the WiFi ACK) RA... Why not wait for the RS by the UE?

Section 5, when the GW 'pings' the UE, does it use ICMP? Or plain NS ? Can the AP leverage any WiFi polling?

A big  advantage  (which is not described) is that there will be a minimum of NDP multicast traffic which is a pain over WiFI cfr draft-vyncke-6man-mcast-not-efficient-01

Cosmetic:

  *   ASCII art topology would increase the readability of section 3 or move the ASCII art from section 4 in section 3 or remove section 3 or ...
  *   Any chance to replace the HTTP captive portal by a more secure HTTPS captive portal (and I know the issue with certificates are not easy). Or remove it => too specific

I also agree with:

  *   Lorenzo & Tom Herbert: the scope is much broader => the I-D should be made less specific
  *   David: this has nothing to do with AERO :-)

Finally, I cannot refrain from thinking that there are several I-D (including this one) attempting to fix NDP...

Hope this helps

-éric