Re: [v6ops] Why should IP networks be different? [DHCP Option 108 Issue with Mac and iOS devices]

Daryll Swer <contact@daryllswer.com> Wed, 03 January 2024 08:45 UTC

Return-Path: <contact@daryllswer.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CE10C151093 for <v6ops@ietfa.amsl.com>; Wed, 3 Jan 2024 00:45:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.105
X-Spam-Level:
X-Spam-Status: No, score=-2.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=daryllswer.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sF8eoruhA9Fg for <v6ops@ietfa.amsl.com>; Wed, 3 Jan 2024 00:44:58 -0800 (PST)
Received: from mail-ot1-x332.google.com (mail-ot1-x332.google.com [IPv6:2607:f8b0:4864:20::332]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C411C14E515 for <v6ops@ietf.org>; Wed, 3 Jan 2024 00:44:58 -0800 (PST)
Received: by mail-ot1-x332.google.com with SMTP id 46e09a7af769-6dc035ee106so3743886a34.3 for <v6ops@ietf.org>; Wed, 03 Jan 2024 00:44:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=daryllswer.com; s=google; t=1704271497; x=1704876297; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=cTwuHcQwZRxSwYx+wc1spqYmCzMBUmRp5Nj8D/yBKNk=; b=iSrOCrKFooeGvu9tp2fciXpVOupLQzn2WumDkhJMnpns/qkyOyMy7sln54q9fvx6Ur avT6ZIEere0EZe+Y9zIXnhfKcgY92zNBmo82JIAZ5x8FnAK9nwMjBqw8+CmHfFHMqgjZ jEIT7U2BOd65uPZf1/aE+yACczkdm2PBdFOBdIwTDYAFVSoIQ1jpfLBRMbmOrxMd+ISv wh/Hap3k+nj/BlkkBSVxmho0L7fBXj3riLfVu0aaR2Y+77TTS9/lBhRKJLV1Iu4UaS3t LiX/Hj3sxoIs76eL5jKfHBzNMKdgd9DTiJFkSGge1a0R0FGmxOXWB/gICbPS4JNcyrKa j6rg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1704271497; x=1704876297; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=cTwuHcQwZRxSwYx+wc1spqYmCzMBUmRp5Nj8D/yBKNk=; b=oumu5CsR98hYBLSQIWcAtAsT5gPawdHkLAUiyP8YkhHQXnZQw4lwaIvbiuF/v7NWjt IeKL3x7cNkC8oZlRkbtpnmNepcgC6LmbRad33/5tamSZD6SHwkIvBnvUefNE8nBsy2PH XFNKoNnuOUoYjI7TrpQ37lwEFDau5NWaXR7ZBfxMbe6aisR8bf13TfZMxdPw/bNpZn8R h5aKl67oQNImF28FiWNX+sMreuXcsmk5H4RL3ELu50ZSc0vbvfCDlwxbFY8awt57HZCY RRj8IdehECVleW1F8wTBQHc30A9h+IcH4SJ3+JehJkMxRsN+2I3tNhlBV5RhXJWKEXFV V3tg==
X-Gm-Message-State: AOJu0Yw0aAZwKxPhC4Qy0i9iyG1R17iwbN5BTVK2ihNT1kaUumoAM7Gx LDGkfUYreDNMqxkpsxn2wphdHsGBeDh1TdrZlx0cae2t2woUV53p
X-Google-Smtp-Source: AGHT+IFhyg2hVpwJHlW/xCUBgOMa6FmA/haq284T0I5iLSF5P+1wgNKPOF6t5Lp55Ksp/x6FcehCrQ==
X-Received: by 2002:a05:6870:5687:b0:1fb:75a:c421 with SMTP id p7-20020a056870568700b001fb075ac421mr14022423oao.74.1704271496972; Wed, 03 Jan 2024 00:44:56 -0800 (PST)
Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com. [209.85.216.48]) by smtp.gmail.com with ESMTPSA id b33-20020a630c21000000b005cd7dd8708dsm21706905pgl.52.2024.01.03.00.44.56 for <v6ops@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 03 Jan 2024 00:44:56 -0800 (PST)
Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-28cec7ae594so145409a91.3 for <v6ops@ietf.org>; Wed, 03 Jan 2024 00:44:56 -0800 (PST)
X-Received: by 2002:a17:90a:642:b0:28b:bd00:a61 with SMTP id q2-20020a17090a064200b0028bbd000a61mr9377046pje.7.1704271496004; Wed, 03 Jan 2024 00:44:56 -0800 (PST)
MIME-Version: 1.0
References: <8e5c38d1-b945-d727-12ad-2d32cb279c4f@gmail.com> <1A286541-4F15-40BE-BEBE-F339581E558F@delong.com> <CAPt1N1=+igiKPUwduqAGnGaS=pHAtUVFo4NdFRK2TK_j8d7=Cw@mail.gmail.com> <CACMsEX_PgTJX-inSAaHpp-zXVZG3keEg3mSAXQN+dcdjUTHRZw@mail.gmail.com> <412C8477-4346-4053-834A-C5CFDEC271ED@gmail.com>
In-Reply-To: <412C8477-4346-4053-834A-C5CFDEC271ED@gmail.com>
From: Daryll Swer <contact@daryllswer.com>
Date: Wed, 03 Jan 2024 14:14:16 +0530
X-Gmail-Original-Message-ID: <CACyFTPHrC7BAg8vgg+m-xw_gBaugTY7Pc03+yM8T-HjVko+j+g@mail.gmail.com>
Message-ID: <CACyFTPHrC7BAg8vgg+m-xw_gBaugTY7Pc03+yM8T-HjVko+j+g@mail.gmail.com>
To: Ivan Pepelnjak <ipepelnjak@gmail.com>
Cc: Nick Buraglio <buraglio@forwardingplane.net>, v6ops list <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001eccc9060e06a1c4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/S6Fk4ZTKTE6mT5Cj8Thw9-QF8uE>
Subject: Re: [v6ops] Why should IP networks be different? [DHCP Option 108 Issue with Mac and iOS devices]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jan 2024 08:45:02 -0000

>
> Note to everyone else (because I’m sure Nick gets that): please don’t tell
> me how devices with 8K of RAM and 8-bit CPUs running at 4 MHz cannot do
> DHCPv6. Everyone gets that, and nobody in their right might would connect
> those devices to the same network as everything else as they probably
> contain a gazillion other shortcuts (like burned-in admin passwords).
>

Highlighting this again, on this specific aspect in case it was missed in
the discussion:
https://mailarchive.ietf.org/arch/msg/v6ops/23k33gPThhiQvuaUhRuOaAYeCuA/

Okay, what if it was:
> DHCPv6 MUST for non-resource constrained devices (such as modern day
> smartphones, PCs, laptops, network devices etc), but a section for
> exemption to SHOULD for resource constrained devices (such as industrial
> embedded devices and systems, microcontrollers etc) — I don't see any value
> for DHCPv6 on such devices anyway, SLAAC is perfectly fine for such use
> cases.
>
> It's not a perfect solution or compromise, but I would take it. If a vendor
> then, like Google or whoever, refuses to support DHCPv6, we can use the
> “MUST” keyword to apply pressure on them, because how exactly are they
> going to claim for exemption section, when their phones can perform ray
> tracing? I'm sure DHCPv6 requires less code than ray tracing.
>

*--*
Best Regards
Daryll Swer
Website: daryllswer.com
<https://mailtrack.io/link/308a2f91160d898445b3b0991efdc502d5354e10?url=https%3A%2F%2Fwww.daryllswer.com&userId=2153471&signature=d9e6209e6dafd31a>


On Wed, 3 Jan 2024 at 13:38, Ivan Pepelnjak <ipepelnjak@gmail.com> wrote:

> Thanks a million for the great summary Nick! While I agree with most of
> what you wrote, you got into a Catch-22 situation:
>
> Folks see a need for tracking a device to a user with IPv6. - I get
> this, I hear the same thing frequently. The commentary slides around
> from a simple need to associate a hardware address with a layer 3
> address to a full on mapping of user to device with a strong
> preference by some to simply mimic what IPv4 does up to and including
> state synchronization and redundancy of operations.
> Personally, I don't think it is realistic to assume that we should
> simply replicate something that exists already. We should aim for
> whatever it is to be better and to address any shortcomings. I am very
> excited about draft-ietf-dhc-addr-notification and *prefix-per-device*
> as a solution set for most of what is discussed here.
>
>
> Let me point out that "prefix-per-device” is even worse (from the
> supporting infrastructure’s perspective) than a mechanism we already have
> (DHCPv6 IA_NA). Not only is the state tracked on the DHCPv6 server, but it
> also needs to be tracked on the first-hop router (a route for the delegated
> prefix), and potentially redistributed into the rest of the network. I’m
> obviously assuming the sane scenario, not devices that grab dozens of IPv6
> addresses just because that was convenient to whoever didn’t want to write
> a bit of an orchestration code to support the in-device networking.
>
> Maybe we should stop pretending that additional layers of abstraction will
> solve the problem, and address the elephant in the room — continuous denial
> of enterprise reality by a single OS vendor.
>
> Note to everyone else (because I’m sure Nick gets that): please don’t tell
> me how devices with 8K of RAM and 8-bit CPUs running at 4 MHz cannot do
> DHCPv6. Everyone gets that, and nobody in their right might would connect
> those devices to the same network as everything else as they probably
> contain a gazillion other shortcuts (like burned-in admin passwords).
>
> On a more positive note, wish you a happy IPv6-enabled 2024!
> Ivan
>
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>