Re: [v6ops] draft-pref64folks-6man-ra-pref64

Jen Linkova <furry13@gmail.com> Fri, 19 October 2018 12:51 UTC

Return-Path: <furry13@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44DF0127333 for <v6ops@ietfa.amsl.com>; Fri, 19 Oct 2018 05:51:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.749
X-Spam-Level:
X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gn-OZntdHaSW for <v6ops@ietfa.amsl.com>; Fri, 19 Oct 2018 05:51:53 -0700 (PDT)
Received: from mail-qk1-x733.google.com (mail-qk1-x733.google.com [IPv6:2607:f8b0:4864:20::733]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D00731294D7 for <v6ops@ietf.org>; Fri, 19 Oct 2018 05:51:52 -0700 (PDT)
Received: by mail-qk1-x733.google.com with SMTP id g13-v6so1270156qke.8 for <v6ops@ietf.org>; Fri, 19 Oct 2018 05:51:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=ufFDCbfoTA3cLy2GP/FsgR5nTMh1pkmrjNye0DseKA8=; b=oKCBa1j3eShAcaTvCbpMs98gToAshnyggscpkJv+29GbSX5SDJI3uY6BDOW+aoXA67 qbx4vtERqq4uUy3rr7cyuaVv9jTvPi2IfzCpA0CCwovcVL4gEJxVm3BYcr+og2BMR6dv pfIM7IKMMxXISL0dC+x8TTMnag9qXkq7fphQHT4z+zYzUdpOd1VHp9mMwX+j4oTtorOF i6C3W0mlR5qs2mbvgi6C3oYFrRTm51iupboQ26FnC4ciNuJ13k/hgbz7D/byJ9dzjAr5 buv1CmQn2dSYz8iqh8F3619qWZuDm0BfBQ2dwPVmiR3fz6dkO8x0dB2L9KK21VueKT5F L8Og==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=ufFDCbfoTA3cLy2GP/FsgR5nTMh1pkmrjNye0DseKA8=; b=Kh1PFAfTO3VPiFlUmFTJUB++kV62sfDQ4t+SHqcF29wCxtosXmkEU3NzxwPykl9Czk WgEougtcNaCva2hyawA/BE0H3Mag+jtg3ZTo047RmSjKxsv8fMyQxkmJnmhqOxnoVras sUFSs5TDJ0kBnCMAwznzQS14MvTl/j45xwd3NlgKuetOOdPIAFioJsnhxXjt0XTc4vfS xvRy6IEnuMGt4BwM3hleKWN0KxCConY/P2DBSkDnhxb/XdFj73PyE2yMaFkc3XKNhBXk FSM+eMvveltWJaS/LpiVahiM1vCkdW4kGvD/NgNMN7PATTcc3P4h78ssfznU6eZRzTKr /7EA==
X-Gm-Message-State: ABuFfoit++zKY5kzfU9votiPrv2Y4wQULmclSr35wEa6U4HcxUyn3QDj U50q4v9UVCUZUdYsScJUIbRX7nH6p1Ebd9yzzWrZllTs
X-Google-Smtp-Source: ACcGV62thN1wbsdOHWeUGQFuHRuxvqtj+0B1uAyilqNkCIBx5SxihGTnNv8eKV0q9kvIKIm2wNl0yDpABC+4xo+lFnM=
X-Received: by 2002:a37:b4c7:: with SMTP id d190-v6mr31563139qkf.165.1539953511672; Fri, 19 Oct 2018 05:51:51 -0700 (PDT)
MIME-Version: 1.0
References: <BYAPR05MB424561F343F1D9980BA8BADBAEFD0@BYAPR05MB4245.namprd05.prod.outlook.com> <CAJE_bqcg7jzeUQv75zQZm8OwiysM55O75bEqNhfXTwtNkhjadw@mail.gmail.com> <CAFU7BARTd9jD3tPWEy9t_Wqxvfr_vAWr+4ZPSKPoQc7AS30Ndw@mail.gmail.com> <CAJE_bqfibpCXHYpVvzp3vGtiymn94Gv+2ky+oa5OMo=ZGY=tYg@mail.gmail.com>
In-Reply-To: <CAJE_bqfibpCXHYpVvzp3vGtiymn94Gv+2ky+oa5OMo=ZGY=tYg@mail.gmail.com>
From: Jen Linkova <furry13@gmail.com>
Date: Fri, 19 Oct 2018 23:51:39 +1100
Message-ID: <CAFU7BARKgUODc74dBC1DVT+AAWw=YACEGSBnUBYxP6PSKjakFQ@mail.gmail.com>
To: 神明達哉 <jinmei@wide.ad.jp>
Cc: V6 Ops List <v6ops@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/LgnTd0VmQlQFm9LJUzcXR-Rz0jw>
Subject: Re: [v6ops] draft-pref64folks-6man-ra-pref64
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Oct 2018 12:51:54 -0000

On Thu, Oct 18, 2018 at 5:22 AM 神明達哉 <jinmei@wide.ad.jp> wrote:
> I'm afraid we're talking about different issues...maybe I wasn't clear
> enough in the above comment, so let me rephrase it: assume if you have
> 100 leaf subnets, each of which has an RA-advertising router.  If you
> want to deploy draft-pref64folks-6man-ra-pref64, you'll need to
> configure those 100 routers separately; if the prefix is changed,
> you'll need to update the config on these 100 routers.  On the other
> hand, if you use a DNS-based approach (RFC7050) you'll only have to
> configure/update the DNS(64) server (there may be multiple instances
> of such server and you may have to configure each of them by hand, but
> I assume the number of such instances is generally much smaller than
> the number of leaf subnets).

I see your point. I think I just assumed that router configuration
provisioning problem is slightly outside of the scope of this draft.
I need to configure with  much more than 100 routers with:
- PIO (unique config for each interface on each router);
- RDNSS (limited number of configuration templates applied on each inteface)
- other SLAAC options (usually identical for all routers or very
limited number of templates).

Most likely large-scale deployments would need some provisioning
systems anyway so I'm not sure the draft should discuss it - at least
I'm not sure about wording..

> This is different from other SLAAC parameters such as PIO, since the
> information is different for different subnets and each router needs
> to be configured separately anyway.

Not necessary - one might need to configure RDNSS and timers.

> > >   Similarly, we might want to note that this case in Section 5 should
> > >   be (very?) atypical even if not forbidden:
> > >
> > >    o  The pref64 option presents in a single RA more than once;
> >
> > It would be necessary for renumbering from one pref64 to another.
> > The old pref64 needs to be advertised with zero Lifetime, while the
> > new pref64 would have non-zero lifetime.
>
> Ah, okay.  Perhaps that was just my bad reading, but the intent wasn't
> clear to me from the draft's context.  In fact, it looks like the
> other two bullets talk about the case of multiple usable prefixes
> (right?)

Well, the logic is:
- we should allow more than one PREF64 option per RA (as it would be
needed for renumbering);
- as we can not say 'PREF64 Option can be seen only once' we need to
define the host behavior if multiple prefixes are received;
- for consistency reason we refer to RFC7050.

>Also, if I understand it correctly, "the recommendations
> given in Section 3 of [RFC7050]" also discusses the case of multiple
> usable prefixes:

We shall either explicitly prohibit multiple prefixes (which might be
undesirable) or define what to do.

>    When multiple Pref64 were discovered via RA Pref64 Option [...],
>    host behaviour with regards to synthesizing IPv6 addresses from IPv4
>    addresses SHOULD follow the recommendations given in Section 3 of
>    [RFC7050], limited to the NAT64 prefixes that have non-zero
>    lifetime..
>
> Only the above one bullet should mean the renumbering case since the
> pref64 option should only support at most one usable prefix.

One option specifies one PREF64 (the same way as one PIO defines one prefix).
Multiple options/multiple prefixes do not make much sense from
operational perspective (IMHO) but I'm not sure we shall say 'MUST
NOT'.

>And then
> the above paragraph still looks awkward: since "this option specifies
> exactly one NAT64 prefix for all IPv4 destinations" (from Section 3)
> I'd expect we only have at most one prefix that has non-zero
> lifetime.  And then there's no point of applying the above
> "recommendation" since it's "limited to the NAT64 prefixes that have
> non-zero lifetime" (btw there's a redundant period here).
>
> Perhaps I'm still misunderstanding something fundamental, but I
> personally see some need for editorial clarification.

I see your point - thanks a lot for your comments, it's really
valuable to get a readability feedback. We'll see if we can improve
the text.

-- 
SY, Jen Linkova aka Furry