Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 28 July 2020 23:11 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C344E3A0A7D; Tue, 28 Jul 2020 16:11:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E49mzpkzcHam; Tue, 28 Jul 2020 16:11:37 -0700 (PDT)
Received: from mail-pg1-x544.google.com (mail-pg1-x544.google.com [IPv6:2607:f8b0:4864:20::544]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14DE23A0A8C; Tue, 28 Jul 2020 16:11:37 -0700 (PDT)
Received: by mail-pg1-x544.google.com with SMTP id j19so13153768pgm.11; Tue, 28 Jul 2020 16:11:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=PIe6LDDWhUTyl4BlbBZotFuiNOWbpUKIja57ORS2TGk=; b=hiAg9R6qYrXyrNMulDG+uYfJdseEOVNR3XpRdJuKYrrTYuC8UlKfb28SpytMor4kbI EhCYy0ugq39U7NSSIUIkOMs5kc8NhfOxXntKV1B1txCNuhOmPMBG2O7S3O930+u4mqF2 40AOJRSq/FbsvEg0Byp33e0QtUELOA1uBpN9S9rOjAMkxsvSwxLUTC7+iV6IOriN7l9z ++kj9CtQNlCENIeEl6M61Lul5KFHJqyxll/aCkL0yOQA2hTb1fhIZ3hlw0ueXdK575Ar vnD1hb1JFg29WLA3W5jMyLwnbBm2fRxPhyXKY+zflfoNf5dHe9ui/uEx50nQ4OQEZ4JX rLEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=PIe6LDDWhUTyl4BlbBZotFuiNOWbpUKIja57ORS2TGk=; b=fnH3m7uHYIfXMZXqyFB5A2E6o18fZGafeJK1Tr03w8/MVLkjJdgfyR6hTjZjqVbWZt Jf5ZUgxgWHKjhD7xnHI72tKhu+u7MHaLuQzYIUe+8Ak3EL7k+L3gRpXo5ckG7meSqRjQ +UFAJjy6KQBessGnSOhPegUfY+DK9slqpRfCl6FuviXUHOJ+zErZs/MmI49r2p17cRv3 RtwA3Cc6fjgzkNSjRlDc8nt/nR6Cw5mkyb8aEKsrlaFJtmloe3EB74FVcW932LB+wxTm bATMyfiLO6kAsFZyMVmURwpEp2BMpd3/73+rM08Z5IIncmFs17OzVagy2gBi2W3EUJqw wQ/w==
X-Gm-Message-State: AOAM533TxhNjRXY99z5uz7Ni6im2xipMhnW3C23x9QqOLTdDqrBSbz34 t5DtbK53kkrZ23KllGiZ86WGPEOq
X-Google-Smtp-Source: ABdhPJwVCSec7TzGOpmFbMGA8C2hUs7ja1n+Nf3MwUsISc0BG8BQhlhfeCbhxb1xcwzfN3xLZrtECg==
X-Received: by 2002:a63:4545:: with SMTP id u5mr26144588pgk.229.1595977896272; Tue, 28 Jul 2020 16:11:36 -0700 (PDT)
Received: from [192.168.178.20] ([151.210.139.192]) by smtp.gmail.com with ESMTPSA id s89sm208453pjj.28.2020.07.28.16.11.33 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Jul 2020 16:11:35 -0700 (PDT)
To: Geoff Huston <gih@apnic.net>, Tom Herbert <tom@herbertland.com>
Cc: Fernando Gont <fgont@si6networks.com>, IPv6 Operations <v6ops@ietf.org>, "draft-gont-v6ops-ipv6-ehs-packet-drops@ietf.org" <draft-gont-v6ops-ipv6-ehs-packet-drops@ietf.org>
References: <b380408712364589a45ab9f39ab6f764@huawei.com> <CALx6S35rkA5nVPm6C6MToUdHKFmcAabGfMN9prTiUfWr+GKwCA@mail.gmail.com> <6439ceb9d73b435d950e73a7a2d68fc7@huawei.com> <CALx6S37ih8VabN2PHvQ3ELDvV2DoiUqnd28LRxr4ofj6zUq3Jw@mail.gmail.com> <947a50398cbb4bbcad85462a69d7dd45@huawei.com> <CALx6S35FX-SNoNFhd2JXFio9B0vGVyXGkeob=7x+dn6u4qOaVw@mail.gmail.com> <42B3046E-6157-4460-A10B-F13E299340B6@apnic.net>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <4720fdaa-71b6-4816-e800-938c01a30abb@gmail.com>
Date: Wed, 29 Jul 2020 11:11:30 +1200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <42B3046E-6157-4460-A10B-F13E299340B6@apnic.net>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/h2X6S8fyF5bR5HKgNat2CaLsIWE>
Subject: Re: [v6ops] Operational Implications of IPv6 Packets with Extension Headers - Load Balancer
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jul 2020 23:11:39 -0000

Hi Geoff,

We can do two things in the IETF: document reality, and try to make the
best standards and guidelines we can. Unfortunately these two goals are
sometimes contradictory.

On the "document reality" side, thanks for your pointer. And that sort
of factual input should probably be used in v6ops work starting with
"Operational Implications...". But I believe that at the same time we
need to do as much as we can on the standards & guidelines side of the
house to make reality better in the long term. That was rather the point
of RFC7098.

Middleboxes that gratuitously change the flow label are faulty. That
needs to be spelled out again, apparently.

Regards
   Brian

On 29-Jul-20 08:03, Geoff Huston wrote:
>> On 29 Jul 2020, at 5:18 am, Tom Herbert <tom@herbertland.com> wrote:
>>
>>
>>
>>> They have disputable conclusion: "Avoid using the flow label as a hash component".
>>
>> This guidance could just as easily be "Avoid fragmentation", "Avoid
>> using any protocols other than UDP or TCP", "Avoid using extension
>> headers", "Avoid ICMP", "Avoid using encapsulation", "Avoid using
>> encryptions" as any of these can break some meddling device somewhere
>> such that packet delivery becomes unreliable on the Internet. More
>> generally, the guidance could simply be "Avoid doing anything that
>> disrupts the status quo”!
> 
> 
> It all depends on the motivation Tom. If the motivation is “maximise the
> likelihood of successful packet delivery on transit paths across the public 
> Internet", then yes, all these are relevant considerations. And your point
> is?
> 
> Geoff
> 
> 
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>