Re: [v6ops] draft-ietf-v6ops-slaac-renum and draft-ietf-v6ops-cpe-slaac-renum

Philip Homburg <pch-v6ops-9@u-1.phicoh.com> Mon, 25 May 2020 14:52 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5850B3A0CFE for <v6ops@ietfa.amsl.com>; Mon, 25 May 2020 07:52:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n--3_moT0zpZ for <v6ops@ietfa.amsl.com>; Mon, 25 May 2020 07:52:18 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 038973A0CFC for <v6ops@ietf.org>; Mon, 25 May 2020 07:52:17 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-CHACHA20-POLY1305) (Smail #157) id m1jdESc-0000H0C; Mon, 25 May 2020 16:52:14 +0200
Message-Id: <m1jdESc-0000H0C@stereo.hq.phicoh.net>
To: v6ops@ietf.org
From: Philip Homburg <pch-v6ops-9@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <m1jb1gz-0000MZC@stereo.hq.phicoh.net> <8aa3102e-22b1-60ed-2d99-838f3fdf1736@si6networks.com> <m1jbKVd-0000L7C@stereo.hq.phicoh.net> <CAHL_VyDWYz=hUTZ+RDZ0JuF-KCsh5HBsM1pFFy3FqtL6pC_hCw@mail.gmail.com> <m1jbRI7-0000LCC@stereo.hq.phicoh.net> <CAHL_VyA23QJzgTy_nauxmjPM4PJT00YC451QL+s6d3dMomkX5Q@mail.gmail.com> <m1jc9R0-0000I4C@stereo.hq.phicoh.net> <B45A0FFE-5AE4-42BF-A8C7-B33F60B1BCAD@delong.com>
In-reply-to: Your message of "Fri, 22 May 2020 11:53:05 -0700 ." <B45A0FFE-5AE4-42BF-A8C7-B33F60B1BCAD@delong.com>
Date: Mon, 25 May 2020 16:52:13 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/BWnZIiL_yUe4yE7klXMt4Y0i8Is>
Subject: Re: [v6ops] draft-ietf-v6ops-slaac-renum and draft-ietf-v6ops-cpe-slaac-renum
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 May 2020 14:52:21 -0000

[note, I'm replying here to multiple messages]

> Why wouldnt the operator in such a case simply configure the RA
> side as static?

Yes, but it introduces extra complexity. In particular, the CPE has to
continue to request a prefix using DHCPv6. Then a naive implementation may
end up with two entries for the same prefix in a single RA. Finally, the
implementor may realize that filtering out the prefix from DHCPv6 may
actually cause the CPE to violate a MUST NOT, so a strict interpretation of
the CPE may cause the CPE to remove the user supplied prefix.

> If the prefix is static, I wonder why you'd use DHCPv6. That said,
> a static prefix would be, I guess, a prefix with an infinite
> lifetime. So, if anything, one might consider this value as a
> special case -- i..e, if the DHCPv6 valid-lifetime is infinity
> (0xffffffff), set the RA lifetime to infinity.

The DHCPv6 lifetime is actually very short for reasons I described before.

> That is indeed a good point. Maybe we should copy the terminology
> section from RFC7084, which describes the usage of these terms in
> this document? Namely:
> 
> ---- cut here ---- X.Y.  Requirements Language
> 
>     Take careful note: Unlike other IETF documents, the key words
>     "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD",
>     "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
>     document are not used as described in RFC 2119 [RFC2119].  This
>     document uses these keywords not strictly for the purpose of
>     interoperability, but rather for the purpose of establishing
>     industry-common baseline functionality.  As such, the document
>     points to several other specifications (preferable in RFC or
>     stable form) to provide additional guidance to implementers
>     regarding any protocol implementation required to produce a
>     successful CE router that interoperates successfully with a
>     particular subset of currently deploying and planned common
>     IPv6 access networks.  

I'm not sure what that means. Does it mean that an implementation is
free to violate a MUST NOT, because it doesn't really mean MUST NOT?

> Riiight.  So the network admin has built a network using "consumer
> grade" or ISP supplied CPE, using default configuration.  

What does this mean? Do we have 'real' routers that allowed to use
longer lifetimes in RAs, because they are expensive and there are
'consumer grade' routers that are not?

Is that how we want to make standards?

> So the answer to that corner case is simply "properly build your
> network". Personally I think trying to cater for all use cases, so
> as to allow a corporate level network to be built without any router
> config (or, it seems, admin skills), is a road to a massively
> over-complicated spec that makes it harder rather than easier to
> build "non-trivial" networks.

The only thing I'm asking for is an exception to the MUST NOT that allows
the admin of the CPE to override the lifetimes. That is not a remote
corner case, that's the kind of stuff every serious router allows the admin
to do.