Re: [v6ops] [dhcwg] IPv6-Only Preferred DHCPv4 option

Jen Linkova <furry13@gmail.com> Wed, 04 December 2019 21:51 UTC

Return-Path: <furry13@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AABA1200A3; Wed, 4 Dec 2019 13:51:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.748
X-Spam-Level:
X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D9DS8-SQwWIo; Wed, 4 Dec 2019 13:51:49 -0800 (PST)
Received: from mail-qt1-x844.google.com (mail-qt1-x844.google.com [IPv6:2607:f8b0:4864:20::844]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5AF6120033; Wed, 4 Dec 2019 13:51:48 -0800 (PST)
Received: by mail-qt1-x844.google.com with SMTP id b5so1323276qtt.11; Wed, 04 Dec 2019 13:51:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=2pWCH+JRPB3KyW00FRIWKys2BGVEPKiBfZ2pRdb20PE=; b=aJr9Ls4edS4Ga3UlJjMVjBw1O0HqTm4uSaKKb/5JFngFQC9JWns4iVnf8ygMiw9jLK NmgzEMdSWM+h3fN2EL2fiDKZIT9+SLn9wCFLG8yhBICZcbs6CFX+8D59nvjPQy2YsLm7 YFJ0mteqeP4I6+kLfzoR/Gcdii/dxlexQAkxZJMeWi00E5PJw1ujRrHuMuwE0uEQLZ/B zB/D5Mp8ppipDni33Eq61vltXPb2qt1VqTSfikpWx4ddcrv68JVqwc3YGsiuZOticdyy 8MU74wo0fEMHMqZ30jpnu+wkLysAnU7USOKMfsYXjZ7ztMiyNSIpmHYI55wvWwLHuBH0 ow7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=2pWCH+JRPB3KyW00FRIWKys2BGVEPKiBfZ2pRdb20PE=; b=TeSFnj2rpetB/GynaMPXC8ZHyd5AaTkBMnwhf9yoamKwP/PhSRR6P5128n20jnK5qv pLnJhIqIBm3JCnTclSVB5TNDUQnIDGVGW/PPJwNuHhnt2+SqFKjPe5w3dK7LpPKN8t+9 9qltW+v8d5J28Td4lnLnqWIebbpDm7NOLzEHZ8UZzOAfVt+jWx3apVZJYBJes2iG+i7w q/QJWg/xMXkDa26YJthkwopgL0eS0l/GEQzIzfZDyNbkCIpp86//9Yaxvw2wsnaADm9D d8ZcYbdKXJgJAt6WN4siQFmBkGvx/+VFkRdWpHDcUghYapzJlvqE2khKBLeQNHJA9mOt en5g==
X-Gm-Message-State: APjAAAVofop6306BD+VSUCN+g+eSJpGTUBK2VfoRK3/v0TTyWK7Z2yZR c/Tyf6ExW4JCRKZ8Tm/HA2Wxn162l3jvtidONic=
X-Google-Smtp-Source: APXvYqwKtBzrRvWyHJ375ODQJ6uggpO+SSAp0YPgdCK0APQZx86zQYBu8bYi+/eKF8dl1YG9pE51GoF1RALBXmH7oQM=
X-Received: by 2002:ac8:5313:: with SMTP id t19mr4886610qtn.118.1575496307554; Wed, 04 Dec 2019 13:51:47 -0800 (PST)
MIME-Version: 1.0
References: <CAFU7BAR1JLUZps=CAqJfeQtUf-xQ88RYvgYrPCP+QP0Ter7YFg@mail.gmail.com> <8736e0gqu2.fsf@miraculix.mork.no> <787AE7BB302AE849A7480A190F8B9330313E29BB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
In-Reply-To: <787AE7BB302AE849A7480A190F8B9330313E29BB@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
From: Jen Linkova <furry13@gmail.com>
Date: Thu, 05 Dec 2019 08:51:35 +1100
Message-ID: <CAFU7BARiwGZohd5d-hqUUpH5jzjFerbLGcOBVc+S9BC3OYMFcw@mail.gmail.com>
To: Mohamed Boucadair <mohamed.boucadair@orange.com>
Cc: Bjørn Mork <bjorn@mork.no>, "dhcwg@ietf.org" <dhcwg@ietf.org>, V6 Ops List <v6ops@ietf.org>, "draft-link-dhc-v6only@ietf.org" <draft-link-dhc-v6only@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/NwiILjGMxSxWI5aNSVEiq1iARbQ>
Subject: Re: [v6ops] [dhcwg] IPv6-Only Preferred DHCPv4 option
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Dec 2019 21:51:51 -0000

On Thu, Dec 5, 2019 at 12:56 AM <mohamed.boucadair@orange.com> wrote:
> Blindly releasing the IPv4 address when an IPv6 connectivity is available is problematic because the host does not know if a NAT64 function is available for a given network attachment. A host that discovers the presence of NAT64 (because a pref64 was discovered) can safely release any assigned IPv4 address. No additional signal is needed in such case.

it would be no difference from what
https://tools.ietf.org/html/draft-ietf-6man-ipv6only-flag was
proposing. And as many of us know, that draft was not able to reach
consensus, the main objection being 'we can not allow an IPv6 packet
to turn off IPv4'.
What dhc-v6only draft does is  allowing the DHCPv4 server to be
configured in such way that  hosts can selectively turn off IPv4. No
IPv6 traffic involved, everything operates over IPv4.

> Jen, do you have a case where you want to deploy IPv6-only host without announcing pref64 to that host?

I *am* deploying them right now, because pref64 draft is with IESG
right now and many of my routers are not able to send out PREF64 RA
option yet.

I agree that in theory pref64 presence is a very good implicit signal
for 'you don't really need IPv4'. However when a host connects to a
network it does not know if pref64 is available when it starts DHCPv4
process. So to use RAs as a signal you need to either delay DHCPv4 (==
penalize v4-only and dual-stack networks) or do all those undesirable
RELEASE tricks later.
I believe this is discussed in the Introduction and the Section 2 of
the draft but I'll look into how to clarify the text.

> > -----Message d'origine-----
> > De : dhcwg [mailto:dhcwg-bounces@ietf.org] De la part de Bjørn Mork
> > Envoyé : mercredi 4 décembre 2019 14:31
> > À : Jen Linkova
> > Cc : dhcwg@ietf.org; V6 Ops List; draft-link-dhc-v6only@ietf.org
> > Objet : Re: [dhcwg] IPv6-Only Preferred DHCPv4 option
> >
> > Jen Linkova <furry13@gmail.com> writes:
> >
> > > Hello,
> > >
> > > One of the biggest issue in deploying IPv6-only LANs is how to do it
> > > incrementally, when some hosts work just fine in NAT64 environment
> > > while some legacy devices still need IPv4. Doubling the number of
> > > network segments (having an IPv6-only and dual-stack segments of each
> > > type) is an operational nightmare. So it would be just awesome if all
> > > devices can co-exist in the same network segment and hosts capable of
> > > operating in IPv6-only environment do not consume IPv4 addresses.
> > > So here is the draft proposing a new DHCPv4 option to help saving IPv4
> > > addresses and deploying IPv4-as-a-service:
> > >
> > > Name:           draft-link-dhc-v6only
> > > Revision:       00
> > > Title:          IPv6-Only-Preferred Option for DHCP
> > > Document date:  2019-12-04
> > > Group:          Individual Submission
> > > Pages:          9
> > > URL:
> > > https://www.ietf.org/internet-drafts/draft-link-dhc-v6only-00.txt
> > > Status:         https://datatracker.ietf.org/doc/draft-link-dhc-v6only/
> > > Htmlized:       https://tools.ietf.org/html/draft-link-dhc-v6only-00
> > > Htmlized:       https://datatracker.ietf.org/doc/html/draft-link-dhc-
> > v6only
> > >
> >
> >   "While IPv6-only capable devices might use a
> >    heuristic approach to learning if the network provdes IPv6-only
> >    functionality and stop using IPv4 if it does, it might be practically
> >    undesirable.  One important reason is that when a host connects to a
> >    network, it does not know if the network is IPv4-only, dual-stack or
> >    IPv6-only.  To ensure that the connectivity over whatever protocol is
> >    present becomes available as soon as possible the host usually starts
> >    configuring both IPv4 and IPv6 immidiately.  If hosts were to delay
> >    requesting IPv4 until IPv6 reachability is confirmed, that would
> >    would penalize IPv4-only and dual-stack networks, which does not seem
> >    practical. "
> >
> >
> > Why can't the client just release the IPv4 address when it finds it has
> > IPv6 connectivity?  This would also avoid the problems you introduce
> > when the network falsely claims IPv6 support.
> >
> >
> >
> > Bjørn
> >
> > _______________________________________________
> > dhcwg mailing list
> > dhcwg@ietf.org
> > https://www.ietf.org/mailman/listinfo/dhcwg



-- 
SY, Jen Linkova aka Furry