Re: [v6ops] I-D Action: draft-ietf-v6ops-unique-ipv6-prefix-per-host-12.txt

[Lorenzo Colitti <[e-mail]>]

On Fri, Sep 29, 2017 at 7:10 PM, <[e-mail]> wrote:

> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> This draft is a work item of the IPv6 Operations WG of the IETF.
>
>         Title           : Unique IPv6 Prefix Per Host
>         Authors         : John Jason Brzozowski
>                           Gunter Van De Velde
>         Filename        : draft-ietf-v6ops-unique-ipv6-p
> refix-per-host-12.txt
>

LGTM. Thanks for continuing to iterate on feedback. I think this document
is very important, as it is the only  currently-deployable way to provide
users with multiple IP addresses (and thus follow RFC 7934) on public
networks where there is the possibility of devices attacking each other or
attacking the network.

A couple of minor suggestions for improvements.

1. Since most devices have privacy addresses on by default these days, I
would suggest the following tweaks:

   1. "Each host can consequently use SLAAC or any other method of choice
   to select its /128 unique address." should instead read "Each host can
   consequently use SLAAC or any other method of choice to select IPv6
   addresses in the prefix."
   2. "After the subscriber received the RA, and the associated flags, it
   will assign itself a 128 bit IPv6 address using SLAAC." should read "After
   the subscriber received the RA, and the associated flags, it will assign
   itself one or more 128-bit IPv6 addresses using SLAAC."

2. Thanks for adding text to section 5 addressing the concern about RAs
expiring. One thing I think is not covered is: current Android devices will
actually disconnect when their IPv6 address becomes deprecated. So you
might want to set the preferred lifetime to 3600s as well.

I would also suggest: given that 514 and 686 look like strange numbers,
just mention that these numbers result in an average RA interval of 600s.
:-)

Cheers,
Lorenzo