Re: [v6ops] MAC table shortage in IPv6 networks caused by multiple IPv6 prefixes/addresses//FW: New Version Notification for draft-liu-v6ops-running-multiple-prefixes-01.txt

"Liubing (Leo)" <leo.liubing@huawei.com> Thu, 10 July 2014 10:08 UTC

Return-Path: <leo.liubing@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EC4E1B282A for <v6ops@ietfa.amsl.com>; Thu, 10 Jul 2014 03:08:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.852
X-Spam-Level:
X-Spam-Status: No, score=-4.852 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H55wbzoPBC1z for <v6ops@ietfa.amsl.com>; Thu, 10 Jul 2014 03:08:54 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4091A1B27E6 for <v6ops@ietf.org>; Thu, 10 Jul 2014 03:08:54 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BJV08735; Thu, 10 Jul 2014 10:08:52 +0000 (GMT)
Received: from NKGEML404-HUB.china.huawei.com (10.98.56.35) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.158.1; Thu, 10 Jul 2014 11:08:52 +0100
Received: from NKGEML506-MBX.china.huawei.com ([169.254.3.24]) by nkgeml404-hub.china.huawei.com ([10.98.56.35]) with mapi id 14.03.0158.001; Thu, 10 Jul 2014 18:08:45 +0800
From: "Liubing (Leo)" <leo.liubing@huawei.com>
To: "Eric Vyncke (evyncke)" <evyncke@cisco.com>, Mikael Abrahamsson <swmike@swm.pp.se>
Thread-Topic: [v6ops] MAC table shortage in IPv6 networks caused by multiple IPv6 prefixes/addresses//FW: New Version Notification for draft-liu-v6ops-running-multiple-prefixes-01.txt
Thread-Index: AQHPm1EfCs1tJ+3fVEGmUhRkiSIjZJuXBNiAgABJCACAAce3cA==
Date: Thu, 10 Jul 2014 10:08:45 +0000
Message-ID: <8AE0F17B87264D4CAC7DE0AA6C406F453D8F292D@nkgeml506-mbx.china.huawei.com>
References: <8AE0F17B87264D4CAC7DE0AA6C406F453D8EEA21@nkgeml506-mbx.china.huawei.com> <8AE0F17B87264D4CAC7DE0AA6C406F453D8F1C32@nkgeml506-mbx.china.huawei.com> <alpine.DEB.2.02.1407091226000.7929@uplift.swm.pp.se> <CFE32281.2067C%evyncke@cisco.com>
In-Reply-To: <CFE32281.2067C%evyncke@cisco.com>
Accept-Language: en-US, zh-CN
Content-Language: zh-CN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.111.98.132]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/LGbED-DnK_5njAC3Rc4WQZg-UjE
Cc: "v6ops@ietf.org" <v6ops@ietf.org>
Subject: Re: [v6ops] MAC table shortage in IPv6 networks caused by multiple IPv6 prefixes/addresses//FW: New Version Notification for draft-liu-v6ops-running-multiple-prefixes-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jul 2014 10:08:57 -0000

Hi Eric,

> Another corner case is the WLAN used at large large conferences where it is
> easy to end up with thousands of WiFi stations on the same layer-2.
> And, if those WiFi stations have privacy extension addresses (99.9% of them),
> then the NDP cache can grow and grow...

[Bing] We also had experience of the problem in a conference, but I think maybe it would not need to be a "large large" conference to encounter the problem.
Say, the administrators use a medium-end switch which could handle traffic of hundreds of WiFi stations but doesn't have enough ND/ARP cache space to support the full table of each host.

B.R.
Bing

> -éric
> 
> 
> On 9/07/14 12:30, "Mikael Abrahamsson" <swmike@swm.pp.se> wrote:
> 
> >On Wed, 9 Jul 2014, Liubing (Leo) wrote:
> >
> >> This issue was found in real deployment experience. The most
> >> straightforward solution is to just increase the MAC table size.
> >> However, relevant hardware resource such as TCAM is very expensive
> >> and high power consumption that in some cost-sensitive scenarios it
> >> might not be a good solution. So I was thinking whether this could be
> >> considered as an operational issue, and whether there could be some
> >> operational mitigation approach.
> >>
> >> Your comments would be appreciated very much.
> >>
> >> "In some scenarios such as campus networks and enterprise networks,
> >>   the "big L2 network" architecture is often used to reduce the cost
> >>   and ease the management. In a big L2 network, a large amount of
> hosts
> >>   (e.g. 10K users) are aggregated to the core at layer 2.
> >
> >Yeah, this was a bad idea for IPv4, and it's a bad idea for IPv6. I
> >propose making smaller L2 domains by means of L3 switches closer to the
> >devices, and then do routing. This solves several issues when it comes
> >to scalability, while it might be seen as causing problems in other aspects.
> >
> >I am a firm believer in creating a distributed L3 network and that
> >large
> >L2 domains cause problems. The issue you mentioned is just one of them...
> >
> >Only way I can imagine to mitigate this operationally without doing
> >anything else, is to turn off SLACC and just use single DHCPv6_IA. You
> >still use 3 times more space (2 IPv6 addresses and 1 IPv4 address) for
> >dual stacked host than you do for a single stacked host, but that's
> >hard to avoid.
> >
> >--
> >Mikael Abrahamsson    email: swmike@swm.pp.se
> >
> >_______________________________________________
> >v6ops mailing list
> >v6ops@ietf.org
> >https://www.ietf.org/mailman/listinfo/v6ops