Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds

"Bernie Volz (volz)" <volz@cisco.com> Wed, 30 October 2019 13:24 UTC

Return-Path: <volz@cisco.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22144120A0A for <v6ops@ietfa.amsl.com>; Wed, 30 Oct 2019 06:24:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.499
X-Spam-Level:
X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=fQib7dil; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=p5olXYnH
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aEwiEpunhZUT for <v6ops@ietfa.amsl.com>; Wed, 30 Oct 2019 06:24:41 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D5D812006F for <v6ops@ietf.org>; Wed, 30 Oct 2019 06:24:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14259; q=dns/txt; s=iport; t=1572441881; x=1573651481; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=fQib7dilev2lPvFeNFWZ/RWpMtL8yeYeXbhz4JzWOw3cfrh+DRURInuf A1yQ4vn/CYGL/sUM9m94NrR6rmD1W9r4uHqAOG0z4c47hNH0bnvI2nKqu qKqAZSFMBXFNInsgfCwlBRKdihJ1TYKeZZ0qyWf045lD78g0RnL2J/1Yr I=;
IronPort-PHdr: 9a23:BvDwuhJdABz5NisDBdmcpTVXNCE6p7X5OBIU4ZM7irVIN76u5InmIFeCuKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFKa5lQT1kAgMQSkRYnBZubDknpBPXrdCc9Ws9FUQwt8g==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AOAABDjrld/40NJK1kDgwBAQEBAQEBAQEDAQEBAREBAQECAgEBAQGBagQBAQEBCwGBGy9QBWxYIAQLKgqEHoNGA4pvgl6TCoRhgS4UgRADVAkBAQEMAQEtAgEBgUyCdAIXg08kNQgOAgMJAQEEAQEBAgEFBG2FNwyFUQEBAQEDEhEdAQE3AQ8CAQgOAwMBAigDAgICMBQJCAIEAQ0FIoMAAYF5TQMuAahHAoE4iGB1gTKCfgEBBYUbGIIXCYE2AYwQGIF/gRAoH4JMPoQtAgI0BhCCWjKCLI0LgnKFPII5lgAKgiSVMRuZXoRXhhODVplOAgQCBAUCDgEBBYFUATaBWHAVZQGCQVAQFIMGg3OKGDt0gSiLBoEwAS9eAQE
X-IronPort-AV: E=Sophos;i="5.68,247,1569283200"; d="scan'208,217";a="658787559"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 30 Oct 2019 13:24:38 +0000
Received: from XCH-ALN-015.cisco.com (xch-aln-015.cisco.com [173.36.7.25]) by alln-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id x9UDOc3F003337 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Oct 2019 13:24:38 GMT
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-015.cisco.com (173.36.7.25) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:24:38 -0500
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 30 Oct 2019 08:24:37 -0500
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 30 Oct 2019 08:24:37 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EGm7k8Po4j92F117nrlnCaycUnxJcIDXzGhpY+FzO//7pEw9SxUCHOFpPWhE7U/++peYzF4vjimND/vCK0Hmq/3pNaiQeDhdYhZTJDeoHI/1VGFXPCG6FRy+h14XVaf9QjQwBlLzjAWKJV4y3alYnJXqETSq9dXkE9Nz17XRpudyOUdmzottzfzWRujfem/+u1nOdBidAcQ4JtHvwviGnnP23oE5/PWkoQcaM1CwHR/eM+R8ELPQySK9OSI9mC69MP1Z//vd3r54A6eR4OOOqr+eqKwvQ4FgD4fWFY2csml9mU5ThNgBEIfMd2on+q1BXzbVImTHUPG5Cj8ZlGWusg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=NhLgFOv6m932S/d/eKXstMOkt5dFm4XtSffREsUD7Qh21nQ2oSuzX7AVvp/vd+0pTA9cS+0aIU629MoxlAxoOyYWnPW/L34xMk/ODLBxCRtFHBHMTcXTGY48OY4YGoTKjxJFE3nhymHVx1lJHkgoYsYYDj8z+Fq1vjg4pOetNk5hM6htyRs+1KWyZGFT6wSR9yq6oCRZiHUqLvWASGvqj+JCEDFcQUibKfidki2fPzclDUldZUd/UTK15c+Roh2DiUfBvXObem4tmMQ11XMQf9AymoPFLeq6tiwC61jOEEAJZa6u8q+e3jbSG4jPvhK8hsQ8A7RY4A8e8lXIT8ldMg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dTlqLzV7GdOv5T501STbTB/7Z2+Sp3XN19SZoDrNBpw=; b=p5olXYnHnEDIB7/A/VAmrlyRfGQ+llYmWRRaI2rlgkIeAiixpjanpJehzpLjiJGKBUfjnNc7MBw9Z4oo/jvzYpbqlTNuQ8ZEiRjhB4dQXtkKnRhiLiFeHxKxVtlpJkjSOqwqZw8lt4s8PAzGLOZhpNz2cyhAsMl6JDLp3sD3hUo=
Received: from MWHPR1101MB2288.namprd11.prod.outlook.com (10.174.97.139) by MWHPR1101MB2128.namprd11.prod.outlook.com (10.174.98.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Wed, 30 Oct 2019 13:24:36 +0000
Received: from MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6]) by MWHPR1101MB2288.namprd11.prod.outlook.com ([fe80::808:4d44:a5d1:c7f6%11]) with mapi id 15.20.2387.028; Wed, 30 Oct 2019 13:24:35 +0000
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Ted Lemon <mellon@fugue.com>, Timothy Winters <twinters@iol.unh.edu>
CC: IPv6 Operations <v6ops@ietf.org>
Thread-Topic: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
Thread-Index: AQHVibwc6PRwlsH+ZUmOeFzp+XKiI6dt8FJugAA0sICAAERiAIAAM1UOgAAj7oCAAC8lwYACBjMAgADxGbaAASHcfIAAAh0AgAAETICAAAb1gIAAEaAAgAAA6YCAAAIjAIAABSGA///EFwA=
Date: Wed, 30 Oct 2019 13:24:35 +0000
Message-ID: <F7F614D9-EC79-474C-B81C-CEF0B9EF6908@cisco.com>
References: <CAOSSMjVhK_V4HpMzprOyo9pj=ysFef+uZUs=twd_zfPaBdPu3Q@mail.gmail.com> <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <CAOSSMjVLP4dx0Z1OKgXBgmuUCmR_C35J87fgkX7V=e7E3iQY3w@mail.gmail.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com>
In-Reply-To: <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1e.0.191013
authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com;
x-originating-ip: [173.38.117.77]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a6e2bf4b-f38c-4acc-f422-08d75d3c822e
x-ms-traffictypediagnostic: MWHPR1101MB2128:
x-microsoft-antispam-prvs: <MWHPR1101MB2128C0494A99A49E50626B63CF600@MWHPR1101MB2128.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 02065A9E77
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(376002)(366004)(39860400002)(136003)(189003)(199004)(6306002)(54896002)(6512007)(2171002)(236005)(25786009)(6116002)(3846002)(66066001)(36756003)(6246003)(229853002)(4326008)(6486002)(33656002)(6436002)(14454004)(58126008)(316002)(86362001)(110136005)(8936002)(5660300002)(7736002)(81156014)(478600001)(81166006)(11346002)(8676002)(446003)(14444005)(99286004)(256004)(91956017)(76116006)(476003)(186003)(2906002)(64756008)(66556008)(66476007)(66946007)(102836004)(6506007)(71190400001)(486006)(26005)(2616005)(53546011)(76176011)(66446008)(71200400001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR1101MB2128; H:MWHPR1101MB2288.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: BaosW2f0YJkSKZThu5i3llu5JlxtdPgy9fBEAxuL3bYMCTeVP7ivuOkWh1HvLTX7AfD2ujxICGgvBmDlmTW+IiZK5p3uCVfAbvTylDogYQHMdnFZ2w+Gbz0SiX3eVrJMM3p/V8BBEBiSH9neBAGSKQqwGGpxJmTbaXyodoLZ2ie7zQrjguzCHDmrNpblA9jCjSTKUrE0XPbXhWzkst68qmBGh4uQRBIHq6rdnWo8xjjeE7CxxdXdE5/jCaZvVA9+lvNN1iTpqwU8Vig/+9faW8vEjf+eEf9tyL3O90e1xlTDF1OitcR57+yWnhGqx2d5JmeUTPB6axOxc3fUTkCHfcPg1fBiAH0jmZKmcFBJ3pg4q8wGlL/IhqXy0dQSm+zWZgOu/rguVAvFvL50r3N4apbKehkf+3MA305RP4P2nn59g1a3LkkfjbKPlNVZhUrU
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_F7F614D9EC79474CB81CCEF0B9EF6908ciscocom_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: a6e2bf4b-f38c-4acc-f422-08d75d3c822e
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2019 13:24:35.6682 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: dY8XFMIRQO+wPZka1/h/xnihx4QQjO2SVRpMRn7vzvrsTYuKxAWLAzDs7rWBdyOv
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2128
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.25, xch-aln-015.cisco.com
X-Outbound-Node: alln-core-8.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/o6lY9eF8fuiscvpMecEE76SgW88>
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Oct 2019 13:24:47 -0000

While I haven’t followed this discussion in detail, I do wonder if the SP DHCP server could provide some assistance to CPEs that don’t have storage …

When a CPE boots and does a Solicit / Request, it could include a new option that tells the DHCP server that it has no storage and therefore no knowledge of any “past” leases. The DHCP server in this case could include any “old” leases it still has a record of (i.e., that have not expired but are no longer “valid” in terms of the configuration because of renumbering or other conditions) with 0 lifetimes. That would allow a rebooting CPE to learn old delegated prefixes that it might have advertised to its clients and initiate deprecation of these prefixes (and any addresses generated from them).

This would improve the situation when the CPE has no storage and reboots (whether customer or SP initiated).

Note: There could be conditions in which this would fail (such as if SP removed all configuration related to the older prefixes from the DHCP server), but in many cases it would allow for clean renumbering. Of course, it requires updating the DHCP software (on the SP servers and in the CPEs), but it probably easier to accomplish than requiring use of storage on the CPE device.

Be a relative easy draft to write up (at least in theory).


  *   Bernie

From: v6ops <v6ops-bounces@ietf.org> on behalf of Ted Lemon <mellon@fugue.com>
Date: Wednesday, October 30, 2019 at 9:00 AM
To: Timothy Winters <twinters@iol.unh.edu>
Cc: "v6ops@ietf.org" <v6ops@ietf.org>
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds

On Oct 30, 2019, at 8:40 AM, Timothy Winters <twinters@iol.unh.edu<mailto:twinters@iol.unh.edu>> wrote:
We check both, the handling of the IA_PD and the error message.

And to be clear, you mean that if the CPE asks for a prefix delegation and doesn’t get the prefix it previously had, it deprecates it as described in L-14?  When this deprecation happens, what ways are being tested for it to happen?

E.g., is it the case that the client sends an IA PD containing an IA Prefix option, is the server returning the IA Prefix option containing the same prefix, with a status code encapsulated in it?   What status code?   Or is it returning an IA Prefix option with a different prefix?   Or is it doing both?