[v6ops] Re: DHCPv6 PD in a multi-prefix environment

David Farmer <farmer@umn.edu> Wed, 24 July 2024 02:50 UTC

Return-Path: <farmer@umn.edu>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 215F6C180B5A for <v6ops@ietfa.amsl.com>; Tue, 23 Jul 2024 19:50:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.104
X-Spam-Level:
X-Spam-Status: No, score=-7.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umn.edu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcwP8Wt80yjV for <v6ops@ietfa.amsl.com>; Tue, 23 Jul 2024 19:50:00 -0700 (PDT)
Received: from mta-p5.oit.umn.edu (mta-p5.oit.umn.edu [134.84.196.205]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 080BAC1E0D76 for <v6ops@ietf.org>; Tue, 23 Jul 2024 19:49:57 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1]) by mta-p5.oit.umn.edu (Postfix) with ESMTP id 4WTJQY0lzCz9vYnR for <v6ops@ietf.org>; Wed, 24 Jul 2024 02:49:57 +0000 (UTC)
X-Virus-Scanned: amavisd-new at umn.edu
Received: from mta-p5.oit.umn.edu ([127.0.0.1]) by localhost (mta-p5.oit.umn.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id koBKomE9MaiO for <v6ops@ietf.org>; Tue, 23 Jul 2024 21:49:56 -0500 (CDT)
Received: from mail-ej1-f69.google.com (mail-ej1-f69.google.com [209.85.218.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mta-p5.oit.umn.edu (Postfix) with ESMTPS id 4WTJQX4KMmz9vYnQ for <v6ops@ietf.org>; Tue, 23 Jul 2024 21:49:56 -0500 (CDT)
DMARC-Filter: OpenDMARC Filter v1.3.2 mta-p5.oit.umn.edu 4WTJQX4KMmz9vYnQ
DKIM-Filter: OpenDKIM Filter v2.11.0 mta-p5.oit.umn.edu 4WTJQX4KMmz9vYnQ
Received: by mail-ej1-f69.google.com with SMTP id a640c23a62f3a-a7aa020cef5so40201366b.0 for <v6ops@ietf.org>; Tue, 23 Jul 2024 19:49:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umn.edu; s=google; t=1721789394; x=1722394194; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=/j05pgTy9fsEh7fxPXUtc7QGSbpEEO2XxDpWFu5UhLA=; b=JdfoLN+r+zsoDObZw+ndpnmswtmRMvcnHrZVIUiixQQgkAXwzFXlCSA0hfqPfjtNkd NiQb5JkXV2I6Du87hKDjuvxJoGkdg9LJ3bVMpDY+FuzQEOdtoBJqkf5V+NuMhQumArLd c1SLd+TLlH8K2hqc3jovblMTiADte27BE1PFISmNiysSddmT/7HtDica9NA8xG2RAUDF 6mkFohaKRSloeqItsVlKmrNvJGcQ6vnh2GtdjqMWu43O2J/CXVyCwYoW5S7EzyuR8IR0 YfiDXe+UjMn/aGQ36zGZ8xWLWbibc947EKitdUxRXSrXxkmTB0aTg43ooozHg3iFngV5 +C6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721789394; x=1722394194; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=/j05pgTy9fsEh7fxPXUtc7QGSbpEEO2XxDpWFu5UhLA=; b=BFpYihxe3YfwAAuWHksDw6CTpMhB+f7a5NzlX66hPnkcLj8TWTnoguyK6rn2UTqWO7 wprSRyMMdR/Ze1BZZFnX92anMrC+ew7htjuE+ZUjCZV2Tb2wTJPIv+1RGVz/xiEr6hHq VUb8SRvxE08AO6HhtXeFM6IzcE/d/8RKJrIzGc0l94wMNZeOdMFHzfuUXWxwTOMtNtnf Uk213M+hU0N0m2ymp+jPzTuJf36sacUzD0YJ166V8im1lQwzM4GzVF7Ku/YbUhP/5k9a rIynGLsRFJhdybBNoSEl5MdQ6G0VZIddYW7I/UWAfAOWClIv5EtQRltqYV0cnNt5FwnO k/aQ==
X-Gm-Message-State: AOJu0YzJRuDflmwkbwZsWRf4A9K6wiVsfa146Yc4oNlCZ4TCuHtI845C Pvep4c77CPmbBfx5JBiBX6e07c+0Ba4tonvL8TWgfp8TPkAw80So2z+2/FxMQvTAvdpqaAJ9vhb chH4ZEB+ze6ZqyRFc3NKXaw7Wtds27U38nU0iN5osCD4+e5HtQn9H7qDmk4Qv9w6ntWhK7QtXk+ /4ubUGsTNwDV4IWcS93QS06l5tvdwoTF+b
X-Received: by 2002:a17:906:dac4:b0:a7a:8378:625e with SMTP id a640c23a62f3a-a7a8378655fmr324063766b.26.1721789394050; Tue, 23 Jul 2024 19:49:54 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IFKNJl4ABcIxRrL/atBBXhdaIhdQ5MUq00FTMEHl7ht+y0WdVQtn5XAMjG/5a76Owc1dVZakbsc6V4MR6eZkfo=
X-Received: by 2002:a17:906:dac4:b0:a7a:8378:625e with SMTP id a640c23a62f3a-a7a8378655fmr324062466b.26.1721789393543; Tue, 23 Jul 2024 19:49:53 -0700 (PDT)
MIME-Version: 1.0
References: <CAN-Dau1tRp02p58O8RKcCAVeXKqnkJt_b14KM5iCcDTm4JmnGQ@mail.gmail.com> <CAPt1N1ntZmL47HH-zkryVey6NmzEenKfBzZ90hcUQaduZV3sLw@mail.gmail.com>
In-Reply-To: <CAPt1N1ntZmL47HH-zkryVey6NmzEenKfBzZ90hcUQaduZV3sLw@mail.gmail.com>
From: David Farmer <farmer@umn.edu>
Date: Tue, 23 Jul 2024 21:49:36 -0500
Message-ID: <CAN-Dau1udnxJTWWknwwTjzTa7cQejoE0qcVk94u5ijd3RaBXrw@mail.gmail.com>
To: Ted Lemon <mellon@fugue.com>
Content-Type: multipart/alternative; boundary="0000000000002e45d9061df5554e"
Message-ID-Hash: DZFAFANRITKDIG272KOU45YDPEB6WJU5
X-Message-ID-Hash: DZFAFANRITKDIG272KOU45YDPEB6WJU5
X-MailFrom: farmer@umn.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: V6 Ops List <v6ops@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [v6ops] Re: DHCPv6 PD in a multi-prefix environment
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/AKNkz3mCklWvdO1_p59mBPAh_Yk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

I already did scenario A.3 in draft-ietf-snac-simple. It is appropriate for
the SNAC router to obtain a ULA prefix instead of a GUA prefix to reduce
the attack surface of the IOT devices.

On Tue, Jul 23, 2024 at 9:33 PM Ted Lemon <mellon@fugue.com> wrote:

> Can you give us an example of a situation where such a decision would need
> to be made?
>
> On Tue, Jul 23, 2024 at 6:48 PM David Farmer <farmer=
> 40umn.edu@dmarc.ietf.org> wrote:
>
>> The classic ISP use case for DHCPv6 PD, as envisioned initially by
>> RFC3633 and integrated into RFC8415, typically expected a single prefix to
>> be delegated to a requesting router from the ISP. Meanwhile, many of the
>> draft-ietf-v6ops-cpe-lan-pd use cases probably expect a subdelegation from
>> this ISP provided prefix. Nevertheless, an RFC7084 CE Router may also have
>> a ULA prefix to subdelegate from, and a ULA prefix may be more appropriate
>> for some of the use cases. Not to mention, there may be prefixes from more
>> than one ISP or additional prefixes while renumbering.
>>
>> Should the delegating router in draft-ietf-v6ops-cpe-lan-pd advertise
>> subdelegations from all prefixes it may have and let the requesting router
>> choose one or more? How does the requesting router know which prefixes it
>> is appropriate to select in what circumstances? If the delegating router
>> doesn't advertise subdelegations from all prefixes, how does it know which
>> prefixes to advertise to which requesting routers?
>>
>> You can also ask the question from the opposite direction: How does the
>> requesting router solicit for a ULA prefix instead of a GUA prefix if that
>> is more appropriate for its use case?
>>
>> These questions came to mind while reading draft-ietf-snac-simple, as it
>> would seem reasonable to want the SCAC router to obtain a ULA prefix from
>> the delegating router and not a GUA prefix, especially in the scenario
>> described in A.3. However, similar questions exist for downstream RFC7084
>> or PD-per-device in a multi-prefix environment.
>>
>> Thanks.
>> --
>> ===============================================
>> David Farmer               Email:farmer@umn.edu
>> Networking & Telecommunication Services
>> Office of Information Technology
>> University of Minnesota
>> 2218 University Ave SE        Phone: 612-626-0815
>> Minneapolis, MN 55414-3029   Cell: 612-812-9952
>> ===============================================
>> _______________________________________________
>> v6ops mailing list -- v6ops@ietf.org
>> To unsubscribe send an email to v6ops-leave@ietf.org
>>
>

-- 
===============================================
David Farmer               Email:farmer@umn.edu
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================