Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds

Ted Lemon <mellon@fugue.com> Wed, 30 October 2019 14:16 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E95120077 for <v6ops@ietfa.amsl.com>; Wed, 30 Oct 2019 07:16:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RVWNDuBPiDFN for <v6ops@ietfa.amsl.com>; Wed, 30 Oct 2019 07:16:01 -0700 (PDT)
Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 767FC120BF5 for <v6ops@ietf.org>; Wed, 30 Oct 2019 07:16:01 -0700 (PDT)
Received: by mail-qk1-x736.google.com with SMTP id d13so2885315qko.3 for <v6ops@ietf.org>; Wed, 30 Oct 2019 07:16:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ImXtXVjI7lt3K/Fa5+VHFu2ZoBp3lmUy3F6QiekVTkI=; b=O+t0ny5tD5PPE4JEhU9D1xe/EiM/3GLnDucdKJxSeDiccv/OCMmTu/vD8L9XIXUKAN EYVRv6dp5tdDNud6psNH+fEyhCSnxoj5eAjRy/PvvQ5TCls2riIIy49OALGC5XLvSe2v 218Q30PAokRXvvkOsdx6sxXA7/xbihs2Gh/TbmDpu4E+c7Qi+bOtyTN2x8zUpoHvTRuU 6e25UT5tm5uutGjn+UZrAAJA99rjv2C9OpoFb6EmXQuxbTRAnv9Okxkpw8+0K93giG3Z EZhZplgWBqCeHWsjP/1t7bXzdV1ni8KucHBBEFqKPEXcRnujsyyoq+O5hG10NaUH/9Mz fbkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ImXtXVjI7lt3K/Fa5+VHFu2ZoBp3lmUy3F6QiekVTkI=; b=NBsQta6oC5EhgutUTbrKxsQ+Gx4X71lzqrvFpSNheVFKjLNlgVFwSK9cWn4Fpl9irI Avse6UGUetKMzas6d7ORbdvTq4iohvu+h6grIG/CirGbVHi/s29WzXRHaZNLwGMwP0IQ 2L3V6RXOzngw0tsPgM1NXetuePQmhJgkJLnagbd9WR4tvSChcQxxRKGvYzDrYLBugiNN tcmAj+FIvR4VEpKjj0U3UTHdZtpL5pQjCRlvuOgVSza95thwwMr5XnUfzfamKuHzQvjs MzgnbtD7C1iPmbas84PrlYP7Yp4Mm9i98RrJ0KFp8MQmd8Az9qNPYk1y0e5sgtlRaAaK CvHA==
X-Gm-Message-State: APjAAAW4iaTHA/v59nxmbb9JxNHR6YX84PXPREeNN3ZvsBb0XcaIVIRc 9UpAxHSGMjDBDkW1PrEEGTMYnQ==
X-Google-Smtp-Source: APXvYqyJn52sIUaPhNUnQPbeSViTlsG5iU2lU3mcz3+qWQoNCjHjz0CDHd8jopDVx5VApGyk6mUcgg==
X-Received: by 2002:a37:a64d:: with SMTP id p74mr47789qke.285.1572444960423; Wed, 30 Oct 2019 07:16:00 -0700 (PDT)
Received: from ?IPv6:2601:18b:300:36ee:c5ad:3e58:9e29:c076? ([2601:18b:300:36ee:c5ad:3e58:9e29:c076]) by smtp.gmail.com with ESMTPSA id y82sm63505qka.130.2019.10.30.07.15.59 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Oct 2019 07:15:59 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <886D4F45-0B58-4726-9BED-BF32F2F88238@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_CF65DE2B-2EC5-4D53-985C-6DBBBE50539E"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3601.0.10\))
Date: Wed, 30 Oct 2019 10:15:58 -0400
In-Reply-To: <MWHPR1101MB22889898CBD2143BA84DA1C8CF600@MWHPR1101MB2288.namprd11.prod.outlook.com>
Cc: Timothy Winters <twinters@iol.unh.edu>, IPv6 Operations <v6ops@ietf.org>
To: "Bernie Volz (volz)" <volz@cisco.com>
References: <CAOSSMjVhK_V4HpMzprOyo9pj=ysFef+uZUs=twd_zfPaBdPu3Q@mail.gmail.com> <0F0B6068-CA62-449B-B56E-78E9EF8D998E@fugue.com> <CAOSSMjVLP4dx0Z1OKgXBgmuUCmR_C35J87fgkX7V=e7E3iQY3w@mail.gmail.com> <96344740-2F4B-4BCE-A881-EB1A5933AFA2@fugue.com> <F7F614D9-EC79-474C-B81C-CEF0B9EF6908@cisco.com> <591F3207-735E-4182-82AD-A88F4A01C678@fugue.com> <MWHPR1101MB22889898CBD2143BA84DA1C8CF600@MWHPR1101MB2288.namprd11.prod.outlook.com>
X-Mailer: Apple Mail (2.3601.0.10)
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/rCNUooaCQZQMas8rT_S9FSgm1ME>
Subject: Re: [v6ops] SLAAC renum: Problem Statement & Operational workarounds
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Oct 2019 14:16:03 -0000

On Oct 30, 2019, at 10:03 AM, Bernie Volz (volz) <volz@cisco.com> wrote:
> A Solicit kind of means “start from scratch”. So that’s why the current RFC8415 specification does not require sending information related to “old” leases. The text also does not provide for sending 0 lifetimes in an Advertise which is where this would first appear – and then also in the Reply to the Request. Perhaps there is an argument that these leases should not be added to the Advertise, but be in the Reply to the Request.
>  
> So, it does get a bit more complex and needs to be worked out.
>  
> > I don’t see any reason why this should not just be the default behavior.
>  
> As I said that as this is a change in behavior, we don’t know what the consequences for existing devices may be – and in some cases, if the device does have storage, would this confuse it? I’m not against having this be a configuration knob in the server which can be applied at various “levels” (perhaps even globally).

There are a lot of assumptions you’ve stated here that as far as I know do not appear in the standard.   E.g., you may think that a solicit kind of means “start from scratch,” but is it not okay for the DHCP server to send 0 lifetimes in the Advertise?  Or is it just not suggested?

I agree that it needs to be worked out.   As for existing devices, I think that at this point a scorched earth policy is not unreasonable: if there are devices out there that have firmware that can’t be updated to fix problems like this, it’s probably good if they stop working and have to be “recycled.”   I hope that number is zero; if for some ISP it’s sufficiently more than zero that this isn’t the right solution, then they may have to wait until those routers EOL before deploying this “new" behavior.

However, I think in practice this simply wouldn’t cause a problem, and complexifying things to prevent such a problem seems unnecessary in the absence of data.

Do we test for the case where the DHCP server sends back two IA Prefix options in an IA_PD?   I think that’s allowed, isn’t it?   Maybe the right behavior is to leave the Advertise unchanged, but send to IA Prefixes in the Reply.