[v6ops] Re: Dynamic addresses

Brian E Carpenter <brian.e.carpenter@gmail.com> Sat, 10 August 2024 02:33 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E223CC151077 for <v6ops@ietfa.amsl.com>; Fri, 9 Aug 2024 19:33:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a2ofoeDblkUZ for <v6ops@ietfa.amsl.com>; Fri, 9 Aug 2024 19:33:36 -0700 (PDT)
Received: from mail-pf1-x42f.google.com (mail-pf1-x42f.google.com [IPv6:2607:f8b0:4864:20::42f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1378C15106A for <v6ops@ietf.org>; Fri, 9 Aug 2024 19:33:36 -0700 (PDT)
Received: by mail-pf1-x42f.google.com with SMTP id d2e1a72fcca58-710cad5778fso2092621b3a.3 for <v6ops@ietf.org>; Fri, 09 Aug 2024 19:33:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1723257216; x=1723862016; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=yGTGBrGeaehEWdvCSLOeL3WlbbplULvKrE8j4lGXN7E=; b=h7d4VscsjmdHDd4Oj5/763RWOmixiv+/P6BC/EVoTBv3qC/G44m0/wX6VnHelC64Ki ydhzSt+wNc94Yvo8rgA5FYE9qfyvc7h0l8jAEAPlHkNEdO34CApq7quOYCwsT2/5NwJD ziqGS7upssQL4yOT5g2Jmm6rEYy8WH/xHzxM71mV7WsWhaahIbScOYW9PrGLfWv7YcWp mn7XpxtUsn9TuUBM0fAqZ2e0s/mh/lWG4mQaClkNYea0KNyXCDmU5QPppkBtJIlvGGkO UAn+aUGHF6kMA5iHfvBWWXdJ0iDkUSWvvKl8V9VA1dIWmjeMvo3i9d+k1LQxxWFdlLra feTQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1723257216; x=1723862016; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=yGTGBrGeaehEWdvCSLOeL3WlbbplULvKrE8j4lGXN7E=; b=T6jGAKo0jIrjvs3hYkdRB7r0JBwT80eMEn1W4lG7jqXBeshUR//0AcpTHjZo6KfkvI 3ythXldJQdhgN0Abfa+RKnYOBNppo6si6Sv4ZH0Icm195rCKpPoR72Qkv6hnrzdzEWgJ 0oBl8oWL5y3+zX2kcmkxBcvuubj9Y9h2DqGAzEAh9W8fyTv8+SsP/Iy+SFpuoL3QUN7P 1xOxxwMvoaZmmqpdtutloTnvt3lTDENnJa758yEovU5gjTX3qLUlE8LDp8klzZuEgeeg Lo4nw2iaNfXFGPKK+mqP13Jl0FJXDYiRc0j7ijvYEsj3rtkSJ/KgioUpEGfN2UnsCsjV j5Qg==
X-Forwarded-Encrypted: i=1; AJvYcCX2F7qQRYyUXHqhgYD/BWslS3LzjOtKMxyOdpzG3dmsFqCh2SDb442716F9KmF2tlktA3dwzkPGp3akwOyMfQ==
X-Gm-Message-State: AOJu0Yx7874W4+Av2zlkXdPGNXsk14tItgxZOb/pAkMIYW/6ZKtL2YUN oTtDv4JpJQYhoSxkOWcuJmfsb0eHn+X9fniXSLW0hJVM58YSQ7Db
X-Google-Smtp-Source: AGHT+IGahOy8oYpAi7+ZwbKXugjEcHzdE9ffWp3lB1yR5WItJFAFaHnNM7ELPuyLcRvQkPfypCZWCw==
X-Received: by 2002:a05:6a21:164e:b0:1c4:c3a1:f479 with SMTP id adf61e73a8af0-1c8a012858fmr3963530637.39.1723257215975; Fri, 09 Aug 2024 19:33:35 -0700 (PDT)
Received: from ?IPV6:2404:4400:541d:a600:44b7:2c2e:2bc6:8707? ([2404:4400:541d:a600:44b7:2c2e:2bc6:8707]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-7c3dbe11c7dsm370222a12.20.2024.08.09.19.33.33 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 09 Aug 2024 19:33:35 -0700 (PDT)
Message-ID: <19b076c0-ff57-471a-8f66-6ad47d7169f4@gmail.com>
Date: Sat, 10 Aug 2024 14:33:31 +1200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: Daryll Swer <contact@daryllswer.com>
References: <df01e0f8-1b0d-4792-be2c-89a59da7de49.ref@swbell.net> <df01e0f8-1b0d-4792-be2c-89a59da7de49@swbell.net> <CAJgLMKte1H3FaoQOhc7_No=SNdczQFo2_mp2c1FvTOqLCRFm2g@mail.gmail.com> <6e70bed7-6f84-4a4a-90f8-fec1d10a599b@swbell.net> <CAJgLMKsXHcxzu8Kbrg1pu9SDkGDH0b1bWzW__CrfpDaSv3Joog@mail.gmail.com> <CACyFTPFakaDLdTJVc6d1HiR_oaedNOV76MRQxJp=+z95uQFVZQ@mail.gmail.com> <CAPt1N1=rQp5U4_X=2WvCV358S9Qm+E+_+gs_mgUJHP_68dYLmg@mail.gmail.com> <d16406c6-e5d9-4aa4-a16e-7513d04d6b07@gmail.com> <CACyFTPEdh_SL3BJ6WcD18tpYzH=Q6gxYnXanTsHZxF4xQm7LuA@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <CACyFTPEdh_SL3BJ6WcD18tpYzH=Q6gxYnXanTsHZxF4xQm7LuA@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: base64
Message-ID-Hash: JJAZ3OJ6GH5PCVBGUW4HDOWHHYLRIARL
X-Message-ID-Hash: JJAZ3OJ6GH5PCVBGUW4HDOWHHYLRIARL
X-MailFrom: brian.e.carpenter@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The Multach's <jmultach@swbell.net>, v6ops@ietf.org
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [v6ops] Re: Dynamic addresses
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/i3URI9vBYYXQXqKaBySBBjOhXOo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

On 10-Aug-24 11:34, Daryll Swer wrote:
>  > But I don't understand the statement "breaks SLAAC on the LAN". A change of prefix renumbers the LAN, but that doesn't break SLAAC, it just causes SLAAC to renumber everything. It will only break active sessions.
> 
> It will break, on the host side, because they won't know to use the new prefix, until the pref/valid values expire.
> 
> https://www.6connect.com/blog/is-your-isp-constantly-changing-the-delegated-ipv6-prefix-on-your-cpe-router/ 

Thanks, yes, I knew that of course but the description of that as breaking SLAAC confused me. (When my ISP was changing prefixes after a CE power cut and reboot, the issue was masked by other effects of the power cut.)

> There's no reason to be promoting dynamic v6 prefixes, in addition to the SLAAC context, this makes it painful, for end-users to host anything at home, even basic SSH.

I completely agree.

    Brian

> 
> *--*
> Best Regards
> Daryll Swer
> Website: daryllswer.com <https://mailtrack.io/l/8b190af15371d42cba28cde7db9581f1c207dde9?url=https%3A%2F%2Fwww.daryllswer.com&u=2153471&signature=0564b87de4f69994>
> 
> 
> On Sat, 10 Aug 2024 at 04:56, Brian E Carpenter <brian.e.carpenter@gmail.com <mailto:brian.e.carpenter@gmail.com>> wrote:
> 
>     [Public service announcement: as of now, I'm spam-filtering messages with 'Digest' subject headers.]
> 
>     My ISP used to change my prefix whenever there was a power cut and the modem restarted. Now, it appears to be stable.
> 
>     But I don't understand the statement "breaks SLAAC on the LAN". A change of prefix renumbers the LAN, but that doesn't break SLAAC, it just causes SLAAC to renumber everything. It will only break active sessions.
> 
>     Regards
>          Brian
> 
>     On 10-Aug-24 10:13, Ted Lemon wrote:
>      > In order to do this, they would have to not renew a previously assigned prefix. I think some German telecoms used to do this as a privacy message, but it was operationally very difficult because it doubled demand for prefixes.
>      >
>      > Where are you seeing this irl, and how does it happen?
>      >
>      > Op vr 9 aug 2024 om 15:08 schreef Daryll Swer <contact=40daryllswer.com@dmarc.ietf.org <mailto:40daryllswer.com@dmarc.ietf.org> <mailto:40daryllswer.com@dmarc.ietf.org <mailto:40daryllswer.com@dmarc.ietf.org>>>
>      >
>      >     Tim, is there something we can do to encourage not only "more than a /64", but also encourage "static ia_pd to ensure the customer will not experience broken IPv6 connectivity due to ever changing prefixes".
>      >
>      >     Too many ISPs out there do dynamic IPs and breaks SLAAC on the LAN.
>      >
>      >     I feel this draft could be a powerful tool, in the hands of the end user to get these ISPs doing the right way of IPv6 more often.
>      >
>      >     --
>      >     Sent from my iPhone
>      >
>      >
>      >     On Fri, 9 Aug 2024 at 7:37 PM, Timothy Winters <tim@qacafe.com <mailto:tim@qacafe.com> <mailto:tim@qacafe.com <mailto:tim@qacafe.com>>> wrote:
>      >
>      >         Yes.  I've seen several instances of /64 being used for container networks on CPEs.
>      >
>      >         ~Tim
>      >
>      >         On Fri, Aug 9, 2024 at 9:38 AM The Multach's <jmultach@swbell.net <mailto:jmultach@swbell.net> <mailto:jmultach@swbell.net <mailto:jmultach@swbell.net>>> wrote:
>      >
>      >             So are these considered a LAN link prefix assignment under 7084 L2:
>      >
>      >             - Assignment of a /64 prefix for internal IPv6 communication between a
>      >             primary SoC and a secondary chip (e.g., a Wi-Fi chip which uses IPv6).
>      >
>      >             - Assignment of a /64 prefix for usage by an internal container or VM.
>      >
>      >
>      >             On 8/9/2024 7:56 AM, Timothy Winters wrote:
>      >              >
>      >              >
>      >              > On Thu, Aug 8, 2024 at 10:58 PM The Multach's <jmultach@swbell.net <mailto:jmultach@swbell.net> <mailto:jmultach@swbell.net <mailto:jmultach@swbell.net>>> wrote:
>      >              >
>      >              >     The following, while being user focused, fails to take into
>      >              >     account that
>      >              >     some of those prefixes may be used internally (or reserved for
>      >              >     internal
>      >              >     use) by the CPE or for ISP purposes and not assignable:
>      >              >
>      >              >     "SHOULD" (or an elongated exception for the above) would be more
>      >              >     appropriate.
>      >              >
>      >              >     LPD-4: After LAN link prefix assignment the IPv6 CE Router MUST
>      >              >     make the
>      >              >     remaining IPv6 prefixes available to other routers via Prefix
>      >              >     Delegation.
>      >              >
>      >              > I think this covers that case.   After local assignment, unused
>      >              > prefixes MUST be made available.
>      >              > LPD-2:  The IPv6 CE Router MUST assign a prefix from the delegated
>      >              >            prefix as specified by L-2 [RFC7084].
>      >              >
>      >              > 7084
>      >              >    L-2:   The IPv6 CE router MUST assign a separate /64 from its
>      >              >           delegated prefix(es) (and ULA prefix if configured to provide
>      >              >           ULA addressing) for each of its LAN interfaces.
>      >              >
>      >              >
>      >              >     _______________________________________________
>      >              >     v6ops mailing list -- v6ops@ietf.org <mailto:v6ops@ietf.org> <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>
>      >              >     To unsubscribe send an email to v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org> <mailto:v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org>>
>      >              >
>      >
>      >         _______________________________________________
>      >         v6ops mailing list -- v6ops@ietf.org <mailto:v6ops@ietf.org> <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>
>      >         To unsubscribe send an email to v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org> <mailto:v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org>>
>      >
>      >     45efe8dfc775213ded0fc41c7d84ccccb0d6aa20 _______________________________________________
>      >     v6ops mailing list -- v6ops@ietf.org <mailto:v6ops@ietf.org> <mailto:v6ops@ietf.org <mailto:v6ops@ietf.org>>
>      >     To unsubscribe send an email to v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org> <mailto:v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org>>
>      >
>      >
>      > _______________________________________________
>      > v6ops mailing list -- v6ops@ietf.org <mailto:v6ops@ietf.org>
>      > To unsubscribe send an email to v6ops-leave@ietf.org <mailto:v6ops-leave@ietf.org>
>