Re: [v6ops] Benjamin Kaduk's No Objection on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)

Fernando Gont <fgont@si6networks.com> Thu, 25 February 2021 21:58 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 593833A0C6C; Thu, 25 Feb 2021 13:58:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.889
X-Spam-Level:
X-Spam-Status: No, score=-6.889 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jXtbH_2Rp7Dj; Thu, 25 Feb 2021 13:58:45 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6EAE3A0C70; Thu, 25 Feb 2021 13:58:40 -0800 (PST)
Received: from [IPv6:2800:810:464:2b9:a449:5f08:346f:44bd] (unknown [IPv6:2800:810:464:2b9:a449:5f08:346f:44bd]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 4FA3D280153; Thu, 25 Feb 2021 21:58:36 +0000 (UTC)
To: "Bernie Volz (volz)" <volz@cisco.com>, Benjamin Kaduk <kaduk@mit.edu>, The IESG <iesg@ietf.org>
Cc: "draft-ietf-v6ops-cpe-slaac-renum@ietf.org" <draft-ietf-v6ops-cpe-slaac-renum@ietf.org>, "v6ops-chairs@ietf.org" <v6ops-chairs@ietf.org>, "v6ops@ietf.org" <v6ops@ietf.org>, Owen DeLong <owen@delong.com>
References: <161411841162.993.9337833948854729986@ietfa.amsl.com> <2f375954-aae1-8089-c59c-f575d2ef8dde@si6networks.com> <BN7PR11MB25479DA70A9E62A0BA91BED3CF9E9@BN7PR11MB2547.namprd11.prod.outlook.com>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <c4c2808d-27d5-8161-75ed-32aa23007c8a@si6networks.com>
Date: Thu, 25 Feb 2021 18:57:47 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <BN7PR11MB25479DA70A9E62A0BA91BED3CF9E9@BN7PR11MB2547.namprd11.prod.outlook.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Ny3dp1mbbxGmTNTjAUYsW1DqMD0>
Subject: Re: [v6ops] Benjamin Kaduk's No Objection on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Feb 2021 21:58:48 -0000

On 25/2/21 18:09, Bernie Volz (volz) wrote:
> As DHCPv6 uses the DUID and IA Type (this is fixed based on what client wants - such as IA_PD) and IA_ID, a device should keep these consistent (across reboots, ...).
> 
> If the DUID changes, then there's no reason that the IA_ID cannot change (it's a different client).
> 
> If the DUID doesn't change, you MUST keep the IA_ID for a particular interface constant (I'm not sure I would tie this to the interface's link-layer address, but I guess you could).

My take is that this is a bit of a stretch in RFC7844.



> If a device changes the IA_ID (without changing the DUID), the problem is that the DHCPv6 server will think this is a "different" request than the earlier IA_ID and assign new prefixes or addresses (and no communication about previously used ones).
> 
> If the DUID changes, it is a different client anyway - so then the IA_ID can be a new value.

Thinking back about this: maybe it would be simpler to state something 
along the lines of:

       o  WPD-10: CE Routers MUST by default use a WAN-side IAID
          value that is stable between CE Router restarts, DHCPv6
          client restarts, or interface state changes (e.g., Transient
          PPP interfaces) unless the CE Router implements [RFC7844]. See
          Section 3.2 for further details.

?

Thanks!

Regards,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492