Re: [v6ops] Thoughts on draft-ietf-v6ops-dhcp-pd-per-device

Lorenzo Colitti <lorenzo@google.com> Tue, 01 August 2023 19:22 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EACEC151548 for <v6ops@ietfa.amsl.com>; Tue, 1 Aug 2023 12:22:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.607
X-Spam-Level:
X-Spam-Status: No, score=-17.607 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YJ8UNCnv1pVK for <v6ops@ietfa.amsl.com>; Tue, 1 Aug 2023 12:22:23 -0700 (PDT)
Received: from mail-qv1-xf32.google.com (mail-qv1-xf32.google.com [IPv6:2607:f8b0:4864:20::f32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58411C151546 for <v6ops@ietf.org>; Tue, 1 Aug 2023 12:22:23 -0700 (PDT)
Received: by mail-qv1-xf32.google.com with SMTP id 6a1803df08f44-63d2b7d77bfso42185646d6.3 for <v6ops@ietf.org>; Tue, 01 Aug 2023 12:22:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20221208; t=1690917742; x=1691522542; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Q+77rBHPdf5yHN6X9+X6BwcRJRU2KjXjli+0ySDKdk4=; b=gQzQGtVFJyY1jdWFKB6gQ2sh9srvaBW4Ux68ZkXWMwTFiJqmvXvie6gv/vpsvNS0YS owU2z2GRDgYNRLkIMbHY//W0cquyt2lHO0De8fLZJNafN39CRfVhwk0bn7lp2qFQKPrk 1a3kFgDM9QtJipN9wZA6j4p7IrghtdzT0ezFXAGDD9lMoSvLisooXPUmrr0XFXOhfTCO Ugj5lzJ/AOSw40XG3l+YnIsXjIBC9LGFgsTl2Ek4MEh/qQ4Wv6UkzCOi9dK1/XinU1GA WtF7S74Wr9h9sfACcLUTF2CWCM74Pn4Y/Zn6w/NpZhCo0NgVzOMcYNw10US8d4I++J7V /dIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690917742; x=1691522542; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Q+77rBHPdf5yHN6X9+X6BwcRJRU2KjXjli+0ySDKdk4=; b=DkI8DpOrLQvRfXEUEaYppU/UxrHORhPNDC8RcvoDrT9w28xl0tkZtMR7sbHWfOPXyY h35xRstETkyzSTqQ/RBcIre7bJbxwAyarD8wd0zQjUSB2xGZ3lkHi8EhOrxjvceVdSQ8 uTn5F8C51GBDjMMDnGuU2cTk7T1wE5AbVf1qevB7BofRi2KcdabpEmqi/Atb69PyiFlx ItiVusmJJ7OOQ1TI633YXgVVwIUontV7FlLT9ThA5EltXc7G3uODKFwtBiOlNtubkujY 01/jYkTM4nYQUfXLVuRwWcCkMqPaZfQRJYOyq8LptG6lqlb4tzzjdMTSwOalLf+N4a0s 5P1w==
X-Gm-Message-State: ABy/qLbY8iBuP4lsj328C0cFsD/j12RYs2AM7K/B6sirtlILLpyJ8ufs Deu4pXkAIvmrQs3/2HqVp5ILLV6933Fp8taO4m+D0jWSgC0H36zuNc0mSlg6
X-Google-Smtp-Source: APBJJlHnQEq9PU35g3mp6x+cSwSKfyBTDqbKdCYZfidlQ4Z3J+9pngoIhfgcOxZ86y0EdhPavvn1V2ky7l3hWmlCJ1c=
X-Received: by 2002:ad4:410e:0:b0:63c:f71c:a888 with SMTP id i14-20020ad4410e000000b0063cf71ca888mr15647771qvp.22.1690917742150; Tue, 01 Aug 2023 12:22:22 -0700 (PDT)
MIME-Version: 1.0
References: <991D9771-A569-4A94-A980-38769A508B81@forwardingplane.net> <6F241F1D-1B5D-48AF-B4E9-25C9208739BA@employees.org> <u6nPakvnQI-84Fob2aEKVQ8rXKqNrJqahohaW61fL213m5Z986kXfTEG7364Qf2sOa2ATzpKUY5N8R4iGE2ML07omjBGiuoWKcvOzUhwWxI=@forwardingplane.net> <5978BE33-F273-4417-A4A9-4C687EA34687@employees.org> <32F3986D-17FD-4A7A-A321-3F76E1E4F3A6@forwardingplane.net>
In-Reply-To: <32F3986D-17FD-4A7A-A321-3F76E1E4F3A6@forwardingplane.net>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Tue, 01 Aug 2023 12:22:10 -0700
Message-ID: <CAKD1Yr3utmANy92kL=ftnseaeOke4wwAFBfofxuUUNcWN=pt0g@mail.gmail.com>
To: Nick Buraglio <buraglio@forwardingplane.net>
Cc: Ole Troan <otroan@employees.org>, "v6ops@ietf.org list" <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000005dfea40601e177e5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/TC2DH9sqn0GhvgfgmsAxTHXkKoc>
Subject: Re: [v6ops] Thoughts on draft-ietf-v6ops-dhcp-pd-per-device
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Aug 2023 19:22:24 -0000

On Mon, Jul 31, 2023 at 9:38 AM Nick Buraglio <buraglio@forwardingplane.net>
wrote:

> >> It can, and that's how I had originally built it - pretty much exactly
> how an ONT or DOCSIS system works in common designs. The difference that I
> wanted to work around was that I didn't want to necessarily require a
> secondary /64 for the "host" vs the "guests" - I wanted to use the same /64
> for both to minimize complexity for troubleshooting and operational
> reasons. For those reasons I would personally prefer for the guest to
> number itself from the /64, which adds a bit more work up front but
> simplifies the overall support model.
> >
> > I couldn’t find the text in the IPv6 CE router document, but I think we
> put in a provision for running “unnumbered” northbound, and then taking a
> subnet out of the delegated prefix to put on a loopback interface.
> > That behaviour could be triggered by the node not receiving an IA_NA in
> the DHCP request and an empty PIO in the RA.
>

I think you're referring to this?

=====
   WAA-7:   If the IPv6 CE router does not acquire a global IPv6
            address(es) from either SLAAC or DHCPv6, then it MUST create
            a global IPv6 address(es) from its delegated prefix(es) and
            configure those on one of its internal virtual network
            interfaces, unless configured to require a global IPv6
            address on the WAN interface.
=====



> > It’s going to be a little tricky with this approach to share a link with
> other hosts.
> > But I think numbering the northbound interface or not that should be a
> choice by the network operator. Not by the implementation.
>
> I definitely agree that it should be up to the operator, but I also
> believe there should be guidance. This is the tricky part and if left
> unsaid there will be a wide variety of implementations that may or may not
> necessarily make sense, which will impede deployment.
> We should probably talk through how the route is installed as well and
> decide if that guidance needs to be in the document as well.
>

We do plan to leave this up to the operator. draft-collink-6man-pio-pflag
<https://datatracker.ietf.org/doc/draft-collink-6man-pio-pflag/> specifies
a PIO flag that tells the device whether to run SLAAC on the uplink or not.
If the device supports DHCPv6 IA_NA, the IA_NA would also be usable for
off-link communication. We were thinking that when the device and network
are using the deployment model described in this draft, and doesn't get any
IPv6 addresses via SLAAC or DHCPv6, it would do something like RFC 7084
WAA-7. We didn't say that in this draft because it's an operational device
and can't specify host behaviour. But perhaps we could put text to that
effect draft-collink-6man-pio-pflag
<https://datatracker.ietf.org/doc/draft-collink-6man-pio-pflag/> ?