Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios

Nick Hilliard <nick@foobar.org> Sun, 03 February 2019 18:53 UTC

Return-Path: <nick@foobar.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E433126BED; Sun, 3 Feb 2019 10:53:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.801
X-Spam-Level:
X-Spam-Status: No, score=-2.801 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TEkdQ11451PE; Sun, 3 Feb 2019 10:53:43 -0800 (PST)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A07B5124B0C; Sun, 3 Feb 2019 10:53:42 -0800 (PST)
X-Envelope-To: v6ops@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id x13IrdXs052801 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 3 Feb 2019 18:53:40 GMT (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
To: "Joel M. Halpern" <jmh@joelhalpern.com>
Cc: v6ops list <v6ops@ietf.org>, 6man WG <ipv6@ietf.org>
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <alpine.DEB.2.20.1901311236320.5601@uplift.swm.pp.se> <m1gpCcz-0000FlC@stereo.hq.phicoh.net> <ddd28787-8905-bafd-3546-2ceef436c8b0@si6networks.com> <m1gptWx-0000G3C@stereo.hq.phicoh.net> <69609C58-7205-4519-B17A-4FBC8AE2EA16@employees.org> <ac773bb5-0da8-064b-d46b-3a218b8c9e7a@si6networks.com> <CFAEACC4-BA78-4DF9-AD8A-3EB0790B8000@employees.org> <a4f6742e-f18e-3384-d4cc-06bfab49101f@si6networks.com> <FEFA99C2-4F09-4D8F-8D51-C9D9D7090637@employees.org> <a484d5de-0dce-a41a-928e-785d8d80d05d@si6networks.com> <CAO42Z2xzYQESqqsz4AEE89vx=AhvBEf8Yzyae9o7z1U1XYyarw@mail.gmail.com> <alpine.DEB.2.20.1902031813310.23912@uplift.swm.pp.se> <23b3ffc3-7f01-6d15-ae93-c0e6932d53a6@si6networks.com> <857eef9b-e37d-1e3e-cf7f-ce2122f4d645@joelhalpern.com>
From: Nick Hilliard <nick@foobar.org>
Message-ID: <ff42613e-30a6-1e11-f512-6e78bcf7ead5@foobar.org>
Date: Sun, 03 Feb 2019 18:53:38 +0000
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 PostboxApp/6.1.9
MIME-Version: 1.0
In-Reply-To: <857eef9b-e37d-1e3e-cf7f-ce2122f4d645@joelhalpern.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-GB
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/YXnlM8A-IkCok5S_kv5AjtOhWKk>
Subject: Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 03 Feb 2019 18:53:46 -0000

Joel M. Halpern wrote on 03/02/2019 18:30:
> Have I missed something in the "problem"?  Robustness is nice.  But 
> let's not bend over backwards trying to fix a problem of multiple failures.

the issue is that when this happens, it causes a cascading failure 
situation which can only be fixed either by the end user manually 
prodding all the ipv6 interfaces on the network to refresh the prefix, 
or if the slaac prefix times out naturally across the home network.

If this doesn't happen, the end user experience is going to be that ipv6 
stops cat videos and I.M. apps from working properly.  After a quick 
call-out, the family tech-support dude will cheerily confirm that this 
can be fixed by disabling ipv6, as she/he fumes while rebooting every 
goddamned device on the network because granny moved the cable modem and 
that jiggled the cable, third time this week (YU NO WORK??!?!?).

Mikael pointed out a related problem that if the cpe is delegated a 
prefix via dhcp6-pd and splits this across multiple home networks, it 
needs to do this in a repeatable way so that even if the SP remembers 
what prefix it previously delegated, the CPE will divvy that up the same 
way it did before the reboot.

For whatever sets of underlying reasons, this is a real world problem, 
which indicates that between CPE vendors and provisioning system 
vendors, there are problems which lead to end user loss of service. The 
IETF may well be able to offer reasonable guidance here.

Nick