Re: [v6ops] New Version Notification for draft-yourtchenko-ra-dhcpv6-comparison-00.txt (fwd)

Alexandru Petrescu <alexandru.petrescu@gmail.com> Thu, 05 December 2013 15:13 UTC

Return-Path: <alexandru.petrescu@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C0F91AE07F for <v6ops@ietfa.amsl.com>; Thu, 5 Dec 2013 07:13:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.983
X-Spam-Level:
X-Spam-Status: No, score=-4.983 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001, HELO_EQ_FR=0.35, NML_ADSP_CUSTOM_MED=0.9, RCVD_IN_DNSWL_HI=-5, SPF_SOFTFAIL=0.665] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xLpJyERe1Aew for <v6ops@ietfa.amsl.com>; Thu, 5 Dec 2013 07:13:48 -0800 (PST)
Received: from cirse-out.extra.cea.fr (cirse-out.extra.cea.fr [132.167.192.142]) by ietfa.amsl.com (Postfix) with ESMTP id EC9D61AE079 for <v6ops@ietf.org>; Thu, 5 Dec 2013 07:13:47 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by cirse.extra.cea.fr (8.14.2/8.14.2/CEAnet-Internet-out-2.3) with ESMTP id rB5FDf5O028488; Thu, 5 Dec 2013 16:13:41 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id CEF04202F9E; Thu, 5 Dec 2013 16:13:50 +0100 (CET)
Received: from muguet2.intra.cea.fr (muguet2.intra.cea.fr [132.166.192.7]) by pisaure.intra.cea.fr (Postfix) with ESMTP id C379A202EE7; Thu, 5 Dec 2013 16:13:50 +0100 (CET)
Received: from [127.0.0.1] (is010446-4.intra.cea.fr [10.8.33.116]) by muguet2.intra.cea.fr (8.13.8/8.13.8/CEAnet-Intranet-out-1.2) with ESMTP id rB5FDb30014885; Thu, 5 Dec 2013 16:13:41 +0100
Message-ID: <52A09821.20008@gmail.com>
Date: Thu, 05 Dec 2013 16:13:37 +0100
From: Alexandru Petrescu <alexandru.petrescu@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.1.1
MIME-Version: 1.0
To: Andrew Yourtchenko <ayourtch@cisco.com>
References: <alpine.OSX.2.00.1311271353550.3903@ayourtch-mac> <52A07C4E.5050004@gmail.com> <alpine.OSX.2.00.1312051455370.58549@ayourtch-mac>
In-Reply-To: <alpine.OSX.2.00.1312051455370.58549@ayourtch-mac>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit
Cc: v6ops@ietf.org
Subject: Re: [v6ops] New Version Notification for draft-yourtchenko-ra-dhcpv6-comparison-00.txt (fwd)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Dec 2013 15:13:52 -0000

Le 05/12/2013 15:40, Andrew Yourtchenko a écrit :
> Thanks a lot for the comments!
>
> inline...
>
> On Thu, 5 Dec 2013, Alexandru Petrescu wrote:
>
>> Thanks for the draft.  IMHO it goes in a good direction to compare what
>> can be done with DHCPv6 vs RA.
>>
>> I have some comments.
>>
>>> DHCPv6 needs at least 2 packets.  RA is just one packet.
>>
>> This varies.  It is mainly yes.
>>
>> But, an initial exchange is at minimum 4 DHCPv6 messages (including a
>> costly discovery),
>
> What about Rapid Commit ? I was under impression there you can do the
> address assignment with just two messages.

I guess so yes.  I doubt though it is the most used mode.  Of course, 
one would just say Rapid Commit in this draft and it would be sufficient 
at this level.

> By "Costly" I assume you mean the "takes a long time because of the long
> inbuilt timeouts", as in the paragraph further below, I comment there.

Yes.

The longer the timeouts the higher the chances to discover something. 
The shorter the timeouts the higher the chances to miss some important 
server.

>> whereas a DAD-less operation would be a single RA
>> message (forgetting the initial MLD 'join').
>
> No, it would be an RS-RA sequence - *unless* either RA interval is every
> few seconds or the host is lucky enough to be connected just before the
> periodic RA is sent.

Yes, but there is an additional thing.

The multicast RA works only if the Host has first subscribed to that 
group.  And that needs an additional initial message from the Host to 
everybody else (the MLD 'join').

Basically, if the Host does not send that MLD message it will not 
receive the periodic multicast RA either.

> (I
>
>>
>>> There is one additional reason for the DHCPv6 to be slower.
>>
>> One of the reasons DHCPv4/v6 may be slower lies in the discovery phase.
>> Every discovery phase takes some time.  Old DHCPv4 implementations take
>> too much time, as do old WiFi 'scanning' operations (another discovery).
>>
>
> I found this snippet in RFC3315 interesting:
>
> "A client MUST collect Advertise messages for the first RT seconds,
>     unless it receives an Advertise message with a preference value of
>     255.  The preference value is carried in the Preference option
>     (section 22.8).  Any Advertise that does not include a Preference
>     option is considered to have a preference value of 0.  If the client
>     receives an Advertise message that includes a Preference option with
>     a preference value of 255, the client immediately begins a client-
>     initiated message exchange (as described in section 18) by sending a
>     Request message to the server from which the Advertise message was
>     received.  If the client receives an Advertise message that does not
>     include a Preference option with a preference value of 255, the
>     client continues to wait until the first RT elapses.  If the first RT
>     elapses and the client has received an Advertise message, the client
>     SHOULD continue with a client-initiated message exchange by sending a
>     Request message.
> "
>
> This means that in the case of a single-server, the discovery phase can
> be shortened by having the Preference of 255 - thus to be able to reduce
> the discovery process ? (I need to test if the hosts actually do this
> IRL, I suspect they do not).

I guess yes, the paragraph above reflects a good way for DHCP behaviour 
to approach that ideal of a single exchange.

>> Better implementations of the discovery phases take shorter time, yet
>> they are extremely lengthy compared to what agreed numbers and multicast
>> join/leave operations can achieve.
>
> ... "in the case of 0% packet loss".
>
> Add any packet loss and a single-packet scheme of RA becomes fragile and
> the worst case is dramatically worse than that of the DHCP.

I agree.

>>> An RA-based protocol interaction may influence host's routing.  A
>>> DHCPv6-based interaction today can not influence the host's routing
>>> - it was specifically denied any and all involvement into routing.
>> [...]
>>> FIXME: This section needs further debates, clarifications, and a
>>> rewrite.  Discussion welcome.
>>
>> There is an ongoing discussion in the DHC WG about this.  Namely about
>> routing at DHCP Relay during Prefix Delegation.  Implementations
>> consider seriously 'snooping' and adding routing table entries at Relay
>> during DHCP operations.  Standards e.g. BBF require a solution to this
>> problem.
>>
>> There were several drafts and presentations during recent 2-3 years.
>> Most recent draft is at
>> draft-petrescu-relay-route-pd-problem-00.txt
>
> Yes, the Prefix Delegation is a completely special beast! I reread the
> RFC3633 - it does not even talk about DHCP servers - it talks about
> routers quite explicitly!

I think the PD RFC defines a Delegating Router to be a DHCP Server, and 
then only talks DR.

> I will try to reflect this somehow, created the
> https://github.com/ayourtch/ra-dhcpv6/issues/5. Thanks!
>
>>
>>> Regarding RA for routing and DHCP for addressing, what people care
>>> about is connectivity.  What I need as an operator is a protocol
>>> (preferably a single protocol because that is simpler) which will
>>> enable my boxes to gain the connectivity they need.  Whether you
>>> call this routing or providing a default gateway, I don't much mind.
>>> Look, there's too much ideology going on here.  The IETF is being
>>> dazzled by the sight of multiple lan segments and multiple egress
>>> gateways without realising that these are the minority
>>> configuration. All this effort is going into optimising ipv6 address
>>> / lan autoconfiguration for these unusual scenarios without heeding
>>> the sober reality that most people, service providers and enterprises
>>> are only ever going to want to have a single defgw per lan segment,
>>> and that by far the most common deployment scenario will be a single
>>> lan segment per organisation.
>>>
>>> Wireless?  My smartphone already has two radios and a physical
>>> interface, connected to multiple providers.  How exactly do you then
>>> configure a "single defgw per lan segment" (without draft-troan-
>>> homenet-sadr-01)
>>>
>>> I'm aware that this viewpoint will be regarded as retrograde, and
>>> that a bunch of people on this list will probably sit there, rolling
>>> their eyes and thinking: "yeah, and 640k was enough for everyone".
>>> Just bear in mind that added complexity is not necessarily a good
>>> thing.  The support costs are high and the return on effort is
>>> dubious at best.  IOW, the IETF is optimising a corner case.
>>
>> This and later paragraphs read as a story I can understand but it would
>> need reformulation to become less personal.
>
> Yes, it is almost un-edited copy-paste from the emails, with ultra-light
> editing for the first pass.
>
>>
>> Then...
>>
>> In the past we strived to build a table comparing the parameters which
>> RA configures vs. the parameters which DHCP configures.  The value was
>> in finding which parameters are the exclusive domain of one or the other
>> in current RFCs.
>>
>> For example, Prefix Delegation is only specified for DHCPv6 (not for
>> RA), whereas the MTU parameter, and default router parameters (IP
>> address, MAC address) are only for the RA (not for DHCP).
>
> Do you have somewhere this work ? I would be happy to incorporate it.
> Else, maybe it's worth to start rebuilding it in the appendix.

There is this paragraph only in draft-mouton-mif-dhcpv6-drlo-02
>    In addition to the default router address, lifetime and link-layer
>    address, the neighbor discovery mechanism also provides MTU, hop
>    limit, reachable time, retransmission timer[...]

But I would very well see a table like this:

                      |       Configured by       |
                      +-------------+-------------+
   Parameter on Host  |    DHCP     |      RA     |
   -------------------+-------------+-------------+
   Default Router IP  |             |      X      |
   -------------------+-------------+-------------+
   Default Router MAC |             |      X      |
   -------------------+-------------+-------------+
   Global Address     |     X       | X (w/ other)|
   -------------------+-------------+-------------+
   Delegated Prefix   |     X       |             |
   -------------------+-------------+-------------+
   Link MTU           |             |      X      |
   -------------------+-------------+-------------+
   Hop Limit          |             |      X      |
   -------------------+-------------+-------------+
   Link's reachable   |             |      X      |
   time, retr timer   |             |             |
   -------------------+-------------+-------------+
   DNS Resolver       |     X       |      X      |
   -------------------+-------------+-------------+

Alex

>
> I'll be tracking it in https://github.com/ayourtch/ra-dhcpv6/issues/6.
>
> --a
>
>>
>> Alex
>>
>> Le 27/11/2013 14:06, Andrew Yourtchenko a écrit :
>>> Hello all,
>>>
>>> Finally I managed to comb a little bit and finally submit the doc
>>> that aims to compare RAs with DHCPv6 which emerged from the
>>> discussion on this list a few weeks ago.
>>>
>>> I'll be very happy to hear any comments, suggestions, flames, etc.
>>>
>>> --a
>>>
>>>
>>> p.s. The "realtime changes" repository is at:
>>> https://github.com/ayourtch/ra-dhcpv6, in case you want to send the
>>> feedback via a pull request :)
>>>
>>> ---------- Forwarded message ---------- Date: Wed, 27 Nov 2013
>>> 04:52:14 -0800 From: internet-drafts@ietf.org To: Andrew Yourtchenko
>>> <ayourtch@cisco.com> Subject: New Version Notification for
>>> draft-yourtchenko-ra-dhcpv6-comparison-00.txt
>>>
>>>
>>> A new version of I-D, draft-yourtchenko-ra-dhcpv6-comparison-00.txt
>>> has been successfully submitted by Andrew Yourtchenko and posted to
>>> the IETF repository.
>>>
>>> Filename:     draft-yourtchenko-ra-dhcpv6-comparison Revision:
>>> 00 Title:         A comparison between the DHCPv6 and RA based host
>>> configuration Creation date:     2013-11-27 Group:         Individual
>>> Submission Number of pages: 12 URL:
>>> http://www.ietf.org/internet-drafts/draft-yourtchenko-ra-dhcpv6-comparison-00.txt
>>>
>>>
>>>
>>> Status:
>>> http://datatracker.ietf.org/doc/draft-yourtchenko-ra-dhcpv6-comparison
>>>
>>>
>> Htmlized:
>>> http://tools.ietf.org/html/draft-yourtchenko-ra-dhcpv6-comparison-00
>>>
>>>
>>> Abstract: This document attempts to make a balanced comparison
>>> between the RA- based and DHCPv6-based host configuration mechanisms.
>>> It compares the two on different aspects, e.g: underlying media
>>> assumptions, coordination, locality, etc.  and highlights the strong
>>> and weak sides of both protocols for each scenario.
>>>
>>>
>>>
>>>
>>> Please note that it may take a couple of minutes from the time of
>>> submission until the htmlized version and diff are available at
>>> tools.ietf.org.
>>>
>>> The IETF Secretariat _______________________________________________
>>> v6ops mailing list v6ops@ietf.org
>>> https://www.ietf.org/mailman/listinfo/v6ops
>>>
>>>
>>
>>