Re: [v6ops] I-D Action: draft-colitti-v6ops-host-addr-availability-01.txt

Tore Anderson <tore@fud.no> Wed, 29 July 2015 05:44 UTC

Return-Path: <tore@fud.no>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9772C1A21B5 for <v6ops@ietfa.amsl.com>; Tue, 28 Jul 2015 22:44:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3HXSiUUN8w0q for <v6ops@ietfa.amsl.com>; Tue, 28 Jul 2015 22:44:54 -0700 (PDT)
Received: from greed.fud.no (greed.fud.no [IPv6:2a02:c0:1001:100::145]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D52F51A21B9 for <v6ops@ietf.org>; Tue, 28 Jul 2015 22:44:53 -0700 (PDT)
Received: from [2a02:fe0:c412:1fe0::2] (port=55963 helo=envy.fud.no) by greed.fud.no with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from <tore@fud.no>) id 1ZKKAd-0005Ps-5c; Wed, 29 Jul 2015 07:44:51 +0200
Date: Wed, 29 Jul 2015 07:44:50 +0200
From: Tore Anderson <tore@fud.no>
To: Ted Lemon <ted.lemon@nominum.com>
Message-ID: <20150729074450.6fe6adb8@envy.fud.no>
In-Reply-To: <730AF1E1-F435-4EE2-877A-A46B8A90AA4D@nominum.com>
References: <20150723130715.12113.47480.idtracker@ietfa.amsl.com> <55B1ED14.6030501@gmail.com> <m1ZIZ4w-0000CbC@stereo.hq.phicoh.net> <CAKD1Yr2z6T86gmQMPZwbgFB4mdt7=xWNuei5jaQg=vpG7-zLVg@mail.gmail.com> <m1ZJdjZ-0000CcC@stereo.hq.phicoh.net> <20150727091241.GL84167@Space.Net> <m1ZJfOr-0000CgC@stereo.hq.phicoh.net> <C9C3FBC4-44F3-45D2-B8C4-3725396E5D40@nominum.com> <CAPi140Mx96dBgeaCkrsDD+-J85OZDo5Di+gHTBiaGDzYK2us4w@mail.gmail.com> <20150728115944.GZ84167@Space.Net> <CAPi140PKh64L=nr96pv3dn7FO_Y9pW162YzBT8kZHSMsedGYtQ@mail.gmail.com> <BE811683-3BBA-40F0-B047-282DA7E774AA@nominum.com> <CAKD1Yr3pHBRk+BTOJOOSC=c6M4FNaumGEKwHvFW=ThED7M744g@mail.gmail.com> <4AB2ED61-23CF-40D5-B2A6-F1F4064EC0C6@nominum.com> <CAKD1Yr3-omr_M7pU9TgoECGnTGf-ta64UcE8ddbAom-rB8exZA@mail.gmail.com> <55B7CBB9.2050107@gmail.com> <730AF1E1-F435-4EE2-877A-A46B8A90AA4D@nominum.com>
X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.28; x86_64-redhat-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/JLAgKIdyeZICVGVkeaPwjTHEr-E>
Cc: v6ops@ietf.org
Subject: Re: [v6ops] I-D Action: draft-colitti-v6ops-host-addr-availability-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2015 05:44:56 -0000

* Ted Lemon

> On Jul 28, 2015, at 2:36 PM, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> > Not to mention encountering the problems with /120 mentioned
> > in RFC 7421, which include the problems of only having a /24 in
> > IPv4. We should be past that.
> 
> To be clear, I wasn’t proposing /120 prefixes, but the delegation
> of /120 prefixes as a way of delivering a chunk of contiguous
> addresses smaller than a /64, which I continue to think is
> impractical for Lorenzo’s use case.

I was thinking something along the same lines, and not agreeing the
draft's statement that DHCPv6-PD cannot cater for «"unlimited"
endpoints». My view was that the problem could be solved, e.g., in this
way:

- Device 1 receives a delegated (<=) /64 from ISP/network (either 3GPP
  or DHCPv6-PD), which it then chops up in (for example) 2^16 /80s
  which may be handed out using DHCPv6-PD to downstream devices or
  local software functions (which would includes including its own
  loopback interface, local containers/VMs, etc.)
- Any downstream device that receives an /80 from the above device
  chops it up in 2^16 /96s which in the same way may be handed out to
  downstream devices or local software functions.
- Any downstream device that receives a /96 from a device at the above
  level can chop it up in 2^16 /112s and use it in the same way.

This would facilitate "unlimited" endpoints, assuming all the endpoints
support DHCPv6-PD. It would preclude the use of SLAAC, though, as any
link prefixes would be >/64. (However, the use of global link prefixes
would not really be necessary in the first place, as all links could be
link-local only).

Anyway, after having discussed this with Lorenzo at IETF93 I realised
that this is not covered because it is considered an invalid
configuration: RFC3633 section 12.1 says «for each IA_PD the requesting
router assigns a subnet from each of the delegated prefixes to each of
the links to which the associated interfaces are attached» and RFC7421
section 1 describes how «a subnet prefix longer than 64 bits is outside
the current IPv6 specifications». Thus, assigning DHCPv6-PD for prefixes
longer than /64 is seen as an invalid network configuration, and thus
not discussed in the draft as a potential solution.

While I am not completely convinced of the validity of that argument (in
particular, I am not entirely convinced that RFC3633 section 12.1
actually *prohibits* a requesting router from assigning a smaller
than /64 chunk of addresses out of a delegated prefix to its loopback
interface for use with local traffic), I suppose the position is fair
enough and I do not intend to argue this point further.

That said, given that the draft is targeted at operators, I think it
would benefit from unequivocally stating that the use of prefixes (both
delegated and link) with lengths >/64 are considered invalid and any
solution involving them is therefore not being discussed - because when
I read the draft while wearing my operator hat only, I see that as a
solution that would actually work just fine from a technical point of
view. RFC 7421 section 4.3.2 appears to confirm I am not alone in this,
stating «DHCPv6 is in widespread use without any dependency on the /64
boundary».

Tore