Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds

Philip Homburg <pch-v6ops-9@u-1.phicoh.com> Thu, 24 October 2019 07:43 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ECB3120877 for <v6ops@ietfa.amsl.com>; Thu, 24 Oct 2019 00:43:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.499
X-Spam-Level:
X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.399, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kaVP14-hXGhI for <v6ops@ietfa.amsl.com>; Thu, 24 Oct 2019 00:43:02 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 949DD120814 for <v6ops@ietf.org>; Thu, 24 Oct 2019 00:43:01 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1iNXlr-0000GGC; Thu, 24 Oct 2019 09:42:59 +0200
Message-Id: <m1iNXlr-0000GGC@stereo.hq.phicoh.net>
To: v6ops@ietf.org
Cc: Fernando Gont <fgont@si6networks.com>
From: Philip Homburg <pch-v6ops-9@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <m1iNIFE-0000IwC@stereo.hq.phicoh.net> <d1b6855d-bde9-7b53-4809-0846bb9772e4@si6networks.com>
In-reply-to: Your message of "Wed, 23 Oct 2019 11:07:20 -0500 ." <d1b6855d-bde9-7b53-4809-0846bb9772e4@si6networks.com>
Date: Thu, 24 Oct 2019 09:42:58 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/H9QYAavANDDwC0k6aHrPosiV_oI>
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Oct 2019 07:43:05 -0000

>A better mitigation is to affect the preferred and possibly the valid
>lifetimes in response to consecutive RAs from the same router that lack
>the original (stale) prefix. e.g., after two consecutive RAs that do not
>contain the existing prefix, reduce the preferred lifetime. After two
>additional RAs, reduce the valid lifetime.

I think that to avoid confusion it is probably best to have 3 documents:
- one that describes host behavior. I think that what you describe above would
  fit in such a document. There is a lot we can do to make hosts more robust.
- one that describes CPE behavior. If the CPE explicitly deprecates old
  prefixes then that solves the problem with CPE reboots. Having
  more sensible lifetimes fits in such a document, but I don't think it
  provides a solution. It just reduces some secondary effects such as
  stale prefix build up.
- Finally, a document for ISPs describing how to best provide prefixes 
  using DHCPv6-PD. 

I think all 3 approaches are needed:
- a host doesn't want to rely on a cheap CPE doing its job.
- a quality CPE can provide better support for hosts today. There will always
  be ISPs that do flash renumbering
- finally a quality ISP may have a need to renumber customers and would like
  to do so without breaking things.