Re: [v6ops] WG Doc? draft-gont-v6ops-ipv6-ehs-packet-drops

Joe Touch <touch@isi.edu> Mon, 28 March 2016 23:51 UTC

Return-Path: <touch@isi.edu>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A2E12D0CC for <v6ops@ietfa.amsl.com>; Mon, 28 Mar 2016 16:51:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.91
X-Spam-Level:
X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BJ1xMM5xzMwJ for <v6ops@ietfa.amsl.com>; Mon, 28 Mar 2016 16:50:59 -0700 (PDT)
Received: from vapor.isi.edu (vapor.isi.edu [128.9.64.64]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E887127058 for <v6ops@ietf.org>; Mon, 28 Mar 2016 16:50:59 -0700 (PDT)
Received: from [128.9.184.162] ([128.9.184.162]) (authenticated bits=0) by vapor.isi.edu (8.13.8/8.13.8) with ESMTP id u2SNomkw019416 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 28 Mar 2016 16:50:49 -0700 (PDT)
To: "Fred Baker (fred)" <fred@cisco.com>
References: <CAHw9_iLbqEvsw0x4dDcA3Zy3SXKUROcQuy5nSynsL9Xi+xrZLg@mail.gmail.com> <566C93D0-62FF-4700-BC05-7F9AF12AF1BD@employees.org> <56E892B8.9030902@foobar.org> <394925FE-FAB1-4FFC-B1CF-4F64CC58F613@employees.org> <56E94275.20700@foobar.org> <3AE1DE20-D735-4262-A3FB-7C01F30BAFA2@employees.org> <56E96F74.7000206@foobar.org> <CALx6S37zP4UvCtBJsvnPN6OmDB0OQDMfRrJNy1XF0t4COStUjQ@mail.gmail.com> <56E98086.5040209@foobar.org> <EE17974D-EDA4-4732-B29E-B2B3BC36DB86@employees.org> <20160328183844.GR62900@Space.Net> <56F9A22B.2030301@isi.edu> <5E619124-0A60-45BB-86AA-7F7D5CC614AD@cisco.com> <56F9AE53.8060903@gmail.com> <56F9BEA3.9050409@isi.edu> <4542AA33-F4FA-4F52-B5FE-9ABF2627CD5E@cisco.com>
From: Joe Touch <touch@isi.edu>
Message-ID: <56F9C358.3030509@isi.edu>
Date: Mon, 28 Mar 2016 16:50:48 -0700
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.1
MIME-Version: 1.0
In-Reply-To: <4542AA33-F4FA-4F52-B5FE-9ABF2627CD5E@cisco.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: touch@isi.edu
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/gx-iB7OiHRNqqR8vYfU7roybU9g>
Cc: "v6ops@ietf.org" <v6ops@ietf.org>
Subject: Re: [v6ops] WG Doc? draft-gont-v6ops-ipv6-ehs-packet-drops
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Mar 2016 23:51:00 -0000


On 3/28/2016 4:44 PM, Fred Baker (fred) wrote:
> 
>> On Mar 28, 2016, at 4:30 PM, Joe Touch <touch@isi.edu> wrote:
>>
>>
>>
>> On 3/28/2016 3:21 PM, Brian E Carpenter wrote:
>>> On 29/03/2016 10:36, Fred Baker (fred) wrote:
>>>>
>>>> On Mar 28, 2016, at 2:29 PM, touch@isi.edu wrote:
>>>>> Note, however, that the idea of an offset to "jump" to the transport
>>>>> header makes no sense. There's no rule that HBH header lengths never
>>>>> change in transit, which means you just end up with another field that
>>>>> might be inconsistent with the actual header.
>>>>
>>>> Don't tell the 6man chairs. They think that changing the length of a HBH header (or any header) in transit would be a problem, and I can confirm that in the event that there is an AH header in the packet. We had that discussion in 6man at IETF 94.
>>>
>>> In any case, that issue is foreseen in
>>> https://tools.ietf.org/html/draft-zhang-6man-offset-option-01#section-6
>>
>> Simple counterexample - quickstart (RFC4782).
>>
>> Intermediate routers are allowed to indicate they do not support the
>> option by *deleting* it.
> 
> There's deleting and deleting. One could move any succeeding options
> forward 8 bytes (not six, as the document says), shorten the HBH header
> by 8 bytes, remove the HBH option entirely if it is now empty perhaps,
> and move everything else forward by 8+ bytes as well. Or, one could
> overwrite the quickstart option with an 8 byte PAD option. Guess which
> one I would do...

There are many ways that COULD work, but unfortunately there are as many
that won't.

The trouble happens when (not if) this jump option is part of a header
that is modified by an endpoint that knows the old option and not this
jump one. There's no rule that requires that HBH headers be modified in
a way that won't affect offsets, and unless the offset is
mandatory-to-support for intermediate devices, the situation gets worse
as new options are added.

Joe