Re: [v6ops] draft-gont-v6ops-cpe-slaac-renum **Call for Adoption**

Mikael Abrahamsson <swmike@swm.pp.se> Thu, 20 February 2020 07:22 UTC

Return-Path: <swmike@swm.pp.se>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07535120855 for <v6ops@ietfa.amsl.com>; Wed, 19 Feb 2020 23:22:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.297
X-Spam-Level:
X-Spam-Status: No, score=-4.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=swm.pp.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y5-Cf4n0w_DQ for <v6ops@ietfa.amsl.com>; Wed, 19 Feb 2020 23:22:13 -0800 (PST)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CFBD120844 for <v6ops@ietf.org>; Wed, 19 Feb 2020 23:22:13 -0800 (PST)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 3879BAF; Thu, 20 Feb 2020 08:22:09 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1582183329; bh=lJUikaU9BSNHHHbrolSkd9T3QsVu1JIusxXzkBz5gLI=; h=Date:From:To:cc:Subject:In-Reply-To:References:From; b=rK4kPoi2O2SG/nPohYult5YtdzbY4IEDCni8c6D1MUrDA+2sGxAX0CgUidyC5o3f+ c1vYef/QBp2t5tzN6bGTNmXQTN3jBLBWeiy7LzcYYhL1bMO0wPOmMLay/+eHmSquEv d/LWIdJ3e7jRvekwELQ44aDvubA5PH0HAjcLaz/E=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 350249F; Thu, 20 Feb 2020 08:22:09 +0100 (CET)
Date: Thu, 20 Feb 2020 08:22:09 +0100
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: Fernando Gont <fgont@si6networks.com>
cc: "v6ops@ietf.org" <v6ops@ietf.org>
In-Reply-To: <250c5eae-07c3-6b30-f2e0-4c69ff1bea2c@si6networks.com>
Message-ID: <alpine.DEB.2.20.2002200804360.4069@uplift.swm.pp.se>
References: <BN7PR05MB3938CECFE3021577A57783D2AE3A0@BN7PR05MB3938.namprd05.prod.outlook.com> <alpine.DEB.2.20.2002101325370.8336@uplift.swm.pp.se> <250c5eae-07c3-6b30-f2e0-4c69ff1bea2c@si6networks.com>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: multipart/mixed; BOUNDARY="-137064504-1811925927-1582183329=:4069"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/HnupfIoDROeFr0KMOCMQZryklNY>
Subject: Re: [v6ops] draft-gont-v6ops-cpe-slaac-renum **Call for Adoption**
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Feb 2020 07:22:16 -0000

On Thu, 20 Feb 2020, Fernando Gont wrote:

>> However, I have some feedback.
>> 
>> "     *  Any prefixes that were previously advertised via SLAAC, but
>>           that are not currently intended for address configuration, MUST
>>           be advertised with a PIO option with the "A" bit set to 1 and
>>           the "Valid Lifetime" and a "Preferred Lifetime" set to 0.
>> "
>> This seems to try to address similar problem as L-13 in RFC7084? What's the 
>> rationale for requiring A=1 here? If A=0 was used before, why should it all 
>> of a sudden be 1?
>
> What the text means to say is that if the prefix was advertised for address 
> configuration (A=1), it should be advertised with A=1 and lifetimes of 0.

Ok, for me "SLAAC" doesn't mean "A=1". If that's what you mean, then write 
that.

> There's a couple of things to note here:
> * While re-reading L-13 from RFC7084, it seems the requirement is a bit 
> underspecified (e.g., regarding how to set A/L). Besides, the section from 
> 4862 being referenced is about *processing* of RAs, rather than about 
> *sending* RAs.
>
> * It would seem to me that one could say that the "A" and "L" bits of the 
> prefix should be set to the same values that have been employed before. 
> However, e.g. when A=0, the PIO is ignored for the purpose of 
> auto-configuration -- in the same way that a PIO with L=0 is ignored for 
> on-link determination. Therefore, if the whole point of including a PIO with 
> a known-to-be-stale prefix is to deprecate the prefix, it would seem 
> appropriate to for A and L to 1, and set both the Preferred and Valid 
> Lifetime to 0.
>
> Thoughts?

A=0 means it's ignored for autoconfiguration of addresses in that PIO, 
nothing else (a default route might still be configured). The word "SLAAC" 
is ambigous in what it means. I agree what you're saying, the flags should 
be kept the same, so I'd like the text changed to say that. So I propose 
that the word SLAAC is replaced with different text that says what you say 
above (which I now understand is what your intention was all along).

>
>
>> Another comment, in my home I use sub-delegation. As in "ISP->R1->R2" where 
>> ISP delegates /56 to me, and R1 delegates /<something> to R2 (depending on 
>> what OpenWrt feels like doing).
>> 
>> I'd like to have requirement for R1 and R2 to be able to figure out 
>> together that if the /56 from the ISP has changed, the DHCPv6-PD 
>> subdelegated prefix to R2 is no longer valid.
>
> Wouldn't a RECONFIGURE message be the appropriate way to go here? (although I 
> seem to recall folks noting that this is not widely implemented?)

I know this is what DHCPv6 folks thinks should be done. However, this is 
v6ops, and I see no reason why (if we have consensus) say that if the 
covering /56 RIO goes away or has zero lifetime, invalidate DHCPv6 
addresses and prefixes (or at least trigger a renew to verify that they're 
still valid).

This ties into similar mechanism that 
draft-patterson-intarea-ipoe-health-05 talks about.

> Does it send the same set of RIOs on all interfaces?

I don't know. It does send the encompassing PD as an RIO anyway.

> In any case... is it really needed? i.e., R2 know that /something is on-link, 
> and everything else needs to be sent to R1....

For the simplest use-case, yes. For more complex use-cases, no. If there 
are two routers sending RAs with two different prefixes, the RIO can tell 
which one of these should be used for traffic which /56.

> Maybe this calls for a document that specifies e.g. the interface between 
> DHCPv6-PD/SLAAC and DHCPv6-PD/DHCPv6-PD?  This would also specifiy things 
> such as: "based on what you get from your upstream, how/what you lease 
> downstream". And there are other things such as how you select subnet-ids, 
> etc.

I don't know exactly how to solve it and what documents would make more 
sense. I just know that this who problem space could work better if 
vendors did more. Right now there are gaps that mean unneccesary breakage.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se