Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)

Fernando Gont <fgont@si6networks.com> Fri, 08 November 2019 12:56 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06F19120096 for <v6ops@ietfa.amsl.com>; Fri, 8 Nov 2019 04:56:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RUDgET-fzbQt for <v6ops@ietfa.amsl.com>; Fri, 8 Nov 2019 04:56:04 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DB1A12006F for <v6ops@ietf.org>; Fri, 8 Nov 2019 04:56:04 -0800 (PST)
Received: from [192.168.1.32] (201-26-46-36.dsl.telesp.net.br [201.26.46.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 011B5869DD; Fri, 8 Nov 2019 13:56:01 +0100 (CET)
To: Ole Troan <otroan@employees.org>
Cc: v6ops list <v6ops@ietf.org>
References: <m1iPlMZ-0000J5C@stereo.hq.phicoh.net> <FACE45EC-27FC-437A-A5BF-D800DF089B50@fugue.com> <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> <CAO42Z2wz1H-x1O+k-ra09V=xON7GOYM+0uHkG0d3ExnsGNuDeA@mail.gmail.com> <03aad034-4e35-743f-975d-7d3c9f29b5cc@si6networks.com> <9EC75FDA-10A6-4FDC-BB42-EFC51C6631DE@steffann.nl> <6ecec6fd-4972-66dd-7e39-9c7ba6ec291f@si6networks.com> <B958A56E-1B79-40AF-93C6-80F0831259CC@employees.org>
From: Fernando Gont <fgont@si6networks.com>
Openpgp: preference=signencrypt
Message-ID: <404f30c0-4162-c33b-ae83-3700eb723ca9@si6networks.com>
Date: Fri, 08 Nov 2019 09:55:49 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <B958A56E-1B79-40AF-93C6-80F0831259CC@employees.org>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/M3Ye050xgwfMLVYn4qInWVVp9ws>
Subject: Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 12:56:06 -0000

On 8/11/19 09:47, Ole Troan wrote:
>>>>> I think Ole observed that this is contrary to what the PD 
>>>>> prefix's Valid Lifetime said would be the case. The ISP supplied 
>>>>> a PD Prefix with a Valid Lifetime of X seconds, and then broke 
>>>>> that promise by abruptly changing addressing before X seconds. 
>>>>> ISPs should be expected to live up to their Valid Lifetime 
>>>>> promises.
>>>>
>>>> "Hope" doesn't make networks run properly.
>>>
>>> This isn't "Hope", this is breaking promises, and that does break 
>>> networks. If you can't at least trust that promises are intended to 
>>> be kept then you have no network at all...
>>
>> They are intended to be kept, but at times s* happens e.g., CPE routers
>> don't crash and reboot on purpose.
> 
> This comment worries me.
> That a CE reboots is _not_ the problem, nor does it cause the problem.

Well, if the CPE did keep state, there would be no problem. (is there a
formal requirement for prefixes to be stable across crash & reboots?).

(just as a reminder, this is just one scenario. there have been at least
three operators that have noted that their setups experience renumbering
scenarios for other reasons... and slaac could certainly do much better
in those)

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492