Re: [v6ops] IA_PD bit in RA

Owen DeLong <owen@delong.com> Fri, 13 December 2013 16:48 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 365071ADFCB; Fri, 13 Dec 2013 08:48:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.992
X-Spam-Level:
X-Spam-Status: No, score=-0.992 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K576kw-wUm1M; Fri, 13 Dec 2013 08:48:15 -0800 (PST)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id C2AE71ADFC6; Fri, 13 Dec 2013 08:48:14 -0800 (PST)
Received: from [10.219.5.18] (mobile-198-228-209-223.mycingular.net [198.228.209.223]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.2) with ESMTP id rBDGiFej016054 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Fri, 13 Dec 2013 08:44:16 -0800
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com rBDGiFej016054
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1386953057; bh=b9V94XcP6Mb9zHfma3cWOBW+FDU=; h=References:Mime-Version:In-Reply-To:Content-Type: Content-Transfer-Encoding:Message-Id:Cc:From:Subject:Date:To; b=hAxXTlBkeBB67+9/9kwkSmyjHfdu2DOkfZx7iavr5PPnNRur5bDBB3o6Ltva446zi h1AIJK9qW7Lk3Z4NtEwtJu0BpG8Q44GpRYMOS3opQ/U2T/Sm5MlouymH0+WHlkI89E mHhLRLdJBRrao9lLTqSPLyQ3bvx8rf8GKNIYMmjk=
References: <96747494E3D74D41B20907035DB1E48DC7BB@MOPESMBX03.eu.thmulti.com> <2D09D61DDFA73D4C884805CC7865E611303B0269@GAALPA1MSGUSR9L.ITServices.sbc.com> <96747494E3D74D41B20907035DB1E48DCD72@MOPESMBX03.eu.thmulti.com> <alpine.DEB.2.02.1312100803370.24602@uplift.swm.pp.se> <F92E1B55-C74B-400C-B83E-6B50D175D121@steffann.nl> <7B4820C5-B562-4BE7-8C6A-CBCDABC39728@nominum.com> <A583EFC3-71BB-4962-875C-4AB775D13491@delong.com> <46BE373C-D476-4D83-B014-56B77FD3D67E@nominum.com> <39280481-09C5-41ED-B79E-99DBBD329F44@employees.org> <52A8343C.3040202@gmail.com> <CAAedzxq6ym-uZJQVC7JTMgKnETpGiNt3JCmkJeGW2MVnw+sixA@mail.gmail.com> <52A83C92.4020204@gmail.com> <A1A3DD00-96D8-4D73-B5F1-1CA705196689@delong.com> <52A9A93F.8050804@gmail.com> <9CB9D172-BA78-492B-B836-D7A9C6CB11A5@delong.com> <52AAEDDA.6010504@gmail.com> <FED11C95-5D12-410E-8D8C-CB8A9F5D79C1@delong.com> <52AB318C.2050704@gmail.com>
Mime-Version: 1.0 (1.0)
In-Reply-To: <52AB318C.2050704@gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <D6167580-AFC2-404D-8077-229226F2EB5C@delong.com>
X-Mailer: iPad Mail (11B554a)
From: Owen DeLong <owen@delong.com>
Date: Fri, 13 Dec 2013 08:39:14 -0800
To: Alexandru Petrescu <alexandru.petrescu@gmail.com>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [192.159.10.2]); Fri, 13 Dec 2013 08:44:17 -0800 (PST)
Cc: "v6ops@ietf.org" <v6ops@ietf.org>, 6man WG <ipv6@ietf.org>
Subject: Re: [v6ops] IA_PD bit in RA
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Dec 2013 16:48:17 -0000

>> Treat it as no response until you get one.
> 
> There is a problem in the until.
> 

Is there? What? What would you do differently with a deterministic no?

> Until one gets an answer one can't decide whether or not there is
> DHCP-PD available.  And if one does not have enough time to wait then
> one would quickly decide there is no DHCP-PD available.

Does it matter? What matters is that you don't have a prefix to delegate.

Again, I ask... What do you do differently with a deterministic no vs. a lack of information?

> On another hand, frequent beacon telling precisely whether or not
> DHCP-PD is available would lead to more informed decisions.

It would also lead to a number of other problems in many networks.

>> Really, what are you going to do differently after you get denied a
>> prefix (assuming a model of active denial like you suggest) than you
>> can do while you’re waiting and haven’t yet received a prefix?
> 
> But there is a difference in being denied a particular prefix and DHCP
> service absence altogether.

If you have DHCP service present, then, you should get a denial response to IA_PD relatively quickly if you ask. The timeout should only apply to circumstances where there is no DHCP.

> If the DHCP service is present, there are DHCP means to insist upon
> being denied a particular prefix (requester another one, etc).

If the DHCP service is present, you should see an M or O bit in the RA. However, that shouldn't control whether you indicate your desire for a prefix or not.

> If the service is absent there is no reason to insist.

I'm not sure what you mean by insist in this context. I would agree that there is no reason to persist with alternative requests in the absence of a denial. That you should, instead, retry the same request until receiving an acknowledgement or a denial.

>> Either way, you have nothing to delegate to your subordinate
>> networks.
> 
> Right.
> 
> If the network tells the node there is no DHCP service to look for, then
> the node may decide to fall back into a 64share mode, or so.  This can
> happen very quickly (it boils down to evaluating the probability of time
> length between the random link up signal and the next periodic RA).

Is there any reason not to use 64share mode until you receive a positive DHCP response?

> If on another hand the network does not tell the node whether DHCP is
> present, then the node must emit a request and wait for a response.  If
> it waits too short and decides there is no service DHCP, even if there
> is one, then the subsequent decision to use 64share is a wrong decision.

No, it must emit a request. It does not have to wait for the response, the response can be processed asynchronously. I don't see the decision to use 64share is wrong so much as suboptimal. It's not at all invalid to use 64share until receiving the PD and then switch to the delegated prefix. If you want to provide a better user experience, 64share behavior can be preserved for some duration until early flows expire. Simply stop including 64share prefix in locally generated RAs and wait for valid timer to count down.

> That's why conservative DHCP discovery phases take long, and also that's
> why conservative WiFi AP discovery clients take long, whereas quick such
> clients often miss some important Access Point.

Discovering an AP has nothing to do with DHCP and has to happen well before the first piece of the DHCP process.

> This distinction is even more important for entities which are mainly
> mobile, doing frequent handovers.

If you're doing frequent handovers and they are changing your layer 3 topology frequently then you already have a number of other problems which go well beyond the difficulties you are describing here.

Most frequent handovers in the mobile world do not affect the layer 3 information.

> (I guess it is also the reason why 802.11p removes altogether all
> beaconing and discovery activities of 802.11bgn, and proposes a new
> timestamp beacon - too long for essentially moving devices.)

Among other reasons.

Owen

> 
> Alex
> 
>> 
>>> 
>>> Alex
>>> 
>>>> 2.Denial 3.Requested prefix size granted 4.Longer prefix
>>>> (smaller net block) granted 5.Shorter prefix (larger net block)
>>>> granted
>>>> 
>>>> Nobody has yet made a good case for why this behavior is
>>>> problematic.
>>>> 
>>>> Owen
>>>> 
>>> 
>> 
>> 
>> 
>