[v6ops] Re: DHCPv6 PD in a multi-prefix environment

Timothy Winters <tim@qacafe.com> Thu, 25 July 2024 16:16 UTC

Return-Path: <tim@qacafe.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33F89C1D52EE for <v6ops@ietfa.amsl.com>; Thu, 25 Jul 2024 09:16:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qacafe.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jXOE4knCfCq0 for <v6ops@ietfa.amsl.com>; Thu, 25 Jul 2024 09:16:53 -0700 (PDT)
Received: from mail-pg1-x530.google.com (mail-pg1-x530.google.com [IPv6:2607:f8b0:4864:20::530]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47643C1CAE68 for <v6ops@ietf.org>; Thu, 25 Jul 2024 09:16:53 -0700 (PDT)
Received: by mail-pg1-x530.google.com with SMTP id 41be03b00d2f7-75cda3719efso15188a12.3 for <v6ops@ietf.org>; Thu, 25 Jul 2024 09:16:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qacafe.com; s=google; t=1721924212; x=1722529012; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=i6xJ2/nbHfHbB1rFb1oId6v9iiEE05f0BRM13BzukRA=; b=ncdXfT9KVVGXmTK5b6CNIjH/hPgXE9RfzxMya52BvwGyW2A+RZBZq7tq2V5KOqjBmD JOWRtPcVYRL9rBuJZ7CopD9DcT5d2EVVocHMh1Gh4M3J/rcMLSmyKyVev6zFgh1buwtK LjkjOODPHBbjajixuSaGYgpKQ2IjErlgN56Hs=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721924212; x=1722529012; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=i6xJ2/nbHfHbB1rFb1oId6v9iiEE05f0BRM13BzukRA=; b=oiKV2PWkq5e3Jhk5LkOnQ6yPgIlAcYDc0bHZncqlCl0u1BglY10LKVY0Dz5Ztc6Mvg dHhJrM4bT2tGAkr4yR4N7yCCAbt/vx5bLNMxiGeo14aajth5bHTbK1EH2kZXXKhAI+b7 5H6s9zg8pI74wxiAepKRAOYS+lcG+r+p8WsofhfA4iA65S3o02fDkHQQXJ6oxE8R+Chm Zz1GaZf0Rh3WWgQtneV3doxyECUId9ScE8FTQ1Mt/DPKN9te+UJTsQBbc8HUOW8rPXcW yeOCL4V8p0lRDPC65ezGOeHGod/QgCe8I740LUCDEhkGO7wfU8jt65GIjlOqPXguykNc bOrw==
X-Forwarded-Encrypted: i=1; AJvYcCVuohZn9smffIBWNaXj/AeWDU3J0ZUgPMYvCYACW/tl6d46GKKbTeDTuAB6j/HhB5F7AaoR5syDKAE8Zm1Mmw==
X-Gm-Message-State: AOJu0YzcYycREkJTOiWntCGsS64MG/44WzLCao9jGkKkV1fz8HVS7QVa /eV3mv7oRcHHRmiw0bY7Jrk4KkXpongQBX/Q/3cveXs8jHJuGxSc8KsLXEonyHqRymOytU6ZLDu +gkLYYdi2mOMParoP7lHFkkP5P8/lDTf+0rd8Jh9NjvRMU26FvqjWjQ==
X-Google-Smtp-Source: AGHT+IGM0CY134OV5li6U0fa/1Gp0CL+nPCD2JCvNXQc6QJnUDsowa7vgytfBLqPNCpzWCPSETemyE5eCBLY5EjjxEc=
X-Received: by 2002:a17:90a:bc8b:b0:2c9:a015:ac2e with SMTP id 98e67ed59e1d1-2cf2379fb79mr3607466a91.14.1721924212415; Thu, 25 Jul 2024 09:16:52 -0700 (PDT)
MIME-Version: 1.0
References: <CAJgLMKunZmnS6bOsTZrkHY2XAN5n4vRJCDC_SEmprb02Q46BiQ@mail.gmail.com> <F7BAF1E3-8CE1-45B5-AF0D-ACE22F04CCAA@employees.org> <CAJgLMKskKhmNQBzTCksTbd8Az8VjoGtbE+6vESzheE+RxF3U2w@mail.gmail.com> <CAN-Dau25ts3pgcXk0FmAaHg6u3XB+XixLPSDx539NZ-e-x+Tbw@mail.gmail.com>
In-Reply-To: <CAN-Dau25ts3pgcXk0FmAaHg6u3XB+XixLPSDx539NZ-e-x+Tbw@mail.gmail.com>
From: Timothy Winters <tim@qacafe.com>
Date: Thu, 25 Jul 2024 09:16:40 -0700
Message-ID: <CAJgLMKv2JHOmx3qWhdHVRFD5Dgafh=KnvfL1fziA5_N5mr5bSQ@mail.gmail.com>
To: David Farmer <farmer@umn.edu>
Content-Type: multipart/alternative; boundary="00000000000002f875061e14b92b"
Message-ID-Hash: TMMA2FLS5LTSS7L6RXQDIKUTNO27SSRN
X-Message-ID-Hash: TMMA2FLS5LTSS7L6RXQDIKUTNO27SSRN
X-MailFrom: tim@qacafe.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: V6 Ops List <v6ops@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [v6ops] Re: DHCPv6 PD in a multi-prefix environment
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Kay3AgZFyWDAno1loxWZlTCoXOk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

Hi David,


On Wed, Jul 24, 2024 at 9:38 AM David Farmer <farmer@umn.edu> wrote:

>
>
> On Wed, Jul 24, 2024 at 10:23 AM Timothy Winters <tim@qacafe.com> wrote:
>
>> Hi Ole,
>>
>> I think we could add a Section to the draft for ULAs in particular.   If
>> you have ULAs enabled on the Customer Edge Router, delegating makes sense.
>>   It's a use case that I didn't include, but I can't think of a good reason
>> not too.
>>
>> David,
>>    The draft doesn't exclude ULAs it's just only applied to prefixes
>> delegated on the WAN.
>>
>
> Ok, now I need clarification.
>
> LPD-2 concerns the prefixes assigned to the CE router's local interfaces.
> Do you expect LPD-2 to override RFC7084: L-2?
>
No

> Does that mean that if you implement CPE-lan-pd, you no longer have ULA on
> even the CE router's local interfaces?
>
No, I was poorly trying to communicate that the ULA prefixes aren't
delegated beyond the LAN interface unless they were provisioned on the WAN
interface.

>
> LPD-2:
> The IPv6 CE Router MUST assign a prefix from the delegated prefix to each
> of its LAN links. If not enough addresses are available the IPv6 CE Router
> SHOULD log a system management error.
>
>
> RFC7084: L-2:
> The IPv6 CE router MUST assign a separate /64 from its delegated
> prefix(es) (and ULA prefix if configured to provide ULA addressing) for
> each of its LAN interfaces.
>
>
> It is LPD-4 that speaks to what prefixes are advertised to DHCPv6-PD
> Clients.
>
> LPD-4:
> After LAN link prefix assignment, the IPv6 CE Router MUST make the
> remaining IPv6 prefixes available to other routers via Prefix Delegation.
>
>
> So, at the very least, we want a CE Router capable of PD distribution to
> generate a ULA prefix and assign subnets to each local interface, as
> RFC7084 does now. I'm with Ole, and if one is generated, the ULA prefix
> should be advertised to DHCPv6 PD clients, along with the GUA prefix.
>
Yes, that isn't supported in the current model.  I will update it to
support this.


> That aligns with the design intent of ULA to be used "inside of a more
> limited area such as a site." But then we need to include logic that if you
> receive an upstream ULA prefix, you SHOULD use it and not generate another
> new ULA prefix if you are cascading CE Routers. If you want to create
> separate requirements for ULA, that will work.
>
This is interesting point that I will need to give some thought too.

My first thought is if a Router is advertising ULAs, say ULA-1. Then gets
IA_PD for a different ULA, ULA-2 does it invalidate the ULA-1 and disrupt
any connections between clients?

>
>

> Also, I would like SNAC routers to use the ULA prefix from the upstream CE
> Router instead of generating a new ULA prefix if a ULA prefix is advertised
> for local communications when the ISP GUA prefix is unavailable.
>
> Is there a reason for PD-per-device to not behave similarly?
>
> Thanks.
>
> --
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
>