Re: [v6ops] MAC table shortage in IPv6 networks caused by multiple IPv6 prefixes/addresses//FW: New Version Notification for draft-liu-v6ops-running-multiple-prefixes-01.txt

Andrew Yourtchenko <ayourtch@cisco.com> Fri, 11 July 2014 12:01 UTC

Return-Path: <ayourtch@cisco.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3275F1B2879 for <v6ops@ietfa.amsl.com>; Fri, 11 Jul 2014 05:01:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.152
X-Spam-Level:
X-Spam-Status: No, score=-15.152 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ldUJPCtAAXbI for <v6ops@ietfa.amsl.com>; Fri, 11 Jul 2014 05:01:17 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8B7C1B2877 for <v6ops@ietf.org>; Fri, 11 Jul 2014 05:01:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1700; q=dns/txt; s=iport; t=1405080086; x=1406289686; h=date:from:to:cc:subject:in-reply-to:message-id: references:mime-version; bh=q4+aPervZkkdt+IenRrffDg9sy1rvQ40MKxoN5xJEvg=; b=J3/nzx/DqZlfk8cmYJfpxlqbL9RwDLDAHmtVQdFi7l0Je6GLThjDviNX NXQmAdU3t+amF+v8fsWGCyGXWzDqF1f1IeHYFFgNRf3FJquEIHDJC69Vf PluTVrf3K+uvg/QTi3+IhV8hbPpUF50sZuo+UYL+AGdTN6oIcscugtX0C s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AnwHABfRv1OtJV2d/2dsb2JhbABZgw6BLKwBAQEBBQFumzwBgQwWdYQDAQEBAwE4Aj0CBQsLOwtOCQYOI4gcCMZ7F4V6iUwHhEMBBK8gggKBRIIu
X-IronPort-AV: E=Sophos;i="5.01,642,1400025600"; d="scan'208";a="336214458"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-9.cisco.com with ESMTP; 11 Jul 2014 12:01:25 +0000
Received: from xhc-aln-x10.cisco.com (xhc-aln-x10.cisco.com [173.36.12.84]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id s6BC1F1n009907 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 11 Jul 2014 12:01:16 GMT
Received: from dhcp-10-149-0-20.cisco.com (10.149.0.20) by xhc-aln-x10.cisco.com (173.36.12.84) with Microsoft SMTP Server (TLS) id 14.3.123.3; Fri, 11 Jul 2014 07:01:15 -0500
Date: Fri, 11 Jul 2014 14:00:54 +0200
From: Andrew Yourtchenko <ayourtch@cisco.com>
X-X-Sender: ayourtch@ayourtch-mac
To: "Liubing (Leo)" <leo.liubing@huawei.com>
In-Reply-To: <8AE0F17B87264D4CAC7DE0AA6C406F453D8F2AF9@nkgeml506-mbx.china.huawei.com>
Message-ID: <alpine.OSX.2.00.1407111359480.77389@ayourtch-mac>
References: <8AE0F17B87264D4CAC7DE0AA6C406F453D8EEA21@nkgeml506-mbx.china.huawei.com> <8AE0F17B87264D4CAC7DE0AA6C406F453D8F1C32@nkgeml506-mbx.china.huawei.com> <alpine.DEB.2.02.1407091226000.7929@uplift.swm.pp.se> <CFE32281.2067C%evyncke@cisco.com> <alpine.DEB.2.02.1407091710020.7929@uplift.swm.pp.se> <alpine.OSX.2.00.1407091840270.99248@ayourtch-mac> <8AE0F17B87264D4CAC7DE0AA6C406F453D8F291C@nkgeml506-mbx.china.huawei.com> <alpine.OSX.2.00.1407101220310.93503@ayourtch-mac> <8AE0F17B87264D4CAC7DE0AA6C406F453D8F2AB4@nkgeml506-mbx.china.huawei.com> <alpine.OSX.2.00.1407111029250.37292@ayourtch-mac> <8AE0F17B87264D4CAC7DE0AA6C406F453D8F2AF9@nkgeml506-mbx.china.huawei.com>
User-Agent: Alpine 2.00 (OSX 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
X-Originating-IP: [10.149.0.20]
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/DXzqJbEY_RF1PXa1lK2bpQAgB1w
Cc: "v6ops@ietf.org" <v6ops@ietf.org>
Subject: Re: [v6ops] MAC table shortage in IPv6 networks caused by multiple IPv6 prefixes/addresses//FW: New Version Notification for draft-liu-v6ops-running-multiple-prefixes-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Jul 2014 12:01:40 -0000

Hi Leo,

On Fri, 11 Jul 2014, Liubing (Leo) wrote:

> Hi Andrew,
>
>>> Now there are some enterprise/campus networks under real use or
>>> considering using L2 networks. Some are aiming at better user isolation
>>> through VLANs (some even consider QinQ mechanism); while some are
>>> aiming less configuration/management than the traditional L3 networks.
>>> So there would be thousands of hosts aggregated to the core switch
>>> (normally there are two core switches stacked together, but only share one
>> cache space).
>>> As IPv6 is beginning real use, for example, some of the campus networks
>>> are already dual-stack, and the majority of the hosts are Win 7, we
>>> once observed in one campus that DHCPv6/SLAAC are both enabled, each
>>> Win 7 host had 4 IPv6 addr (SLAAC+DHCPv6+Privacy+link-local)+1 IPv4 addr.
>>
>> If the majority of the hosts are Win 7, and are under the control of the
>> administrator, this looks more like a misconfiguration rather than anything
>> else: clear the "A" bit on the prefix, and they'll half the address usage - down
>> to just link-local and DHCPv6-based.
>
> [Bing] I can hardly say SLAAC and DHCPv6 co-existing is a misconfiguration,

Note, I said "for this specific case". If you control your devices *and* 
devices are DHCPv6-capable *and* you want to minimize the number of 
addresses using SLAAC is not ideal.

> but I agree DHCPv6-only deployment can partly relieve the problem.
> However, even DHCPv6-only would have 2 IPv6 addr+1 IPv4 addr, which 
> would cause approximately 5~8 times cache space than IPv4-only.

You can work towards turning off IPv4.

Past that - it's just protocol's properties.

--a