Re: [v6ops] draft-ietf-v6ops-slaac-renum and draft-ietf-v6ops-cpe-slaac-renum

Fernando Gont <fernando@gont.com.ar> Mon, 25 May 2020 16:49 UTC

Return-Path: <fernando@gont.com.ar>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 766603A0DCA for <v6ops@ietfa.amsl.com>; Mon, 25 May 2020 09:49:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iS_bLjH0Kitt for <v6ops@ietfa.amsl.com>; Mon, 25 May 2020 09:49:42 -0700 (PDT)
Received: from tools.si6networks.com (v6toolkit.go6lab.si [IPv6:2001:67c:27e4::57]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E0133A0DC9 for <v6ops@ietf.org>; Mon, 25 May 2020 09:49:42 -0700 (PDT)
Received: from [IPv6:2800:810:464:8801:dd85:c59a:9374:35d6] (unknown [IPv6:2800:810:464:8801:dd85:c59a:9374:35d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tools.si6networks.com (Postfix) with ESMTPSA id 9CCE63FFBF; Mon, 25 May 2020 18:49:36 +0200 (CEST)
To: Philip Homburg <pch-v6ops-9@u-1.phicoh.com>, v6ops@ietf.org
References: <m1jb1gz-0000MZC@stereo.hq.phicoh.net> <8aa3102e-22b1-60ed-2d99-838f3fdf1736@si6networks.com> <m1jbKVd-0000L7C@stereo.hq.phicoh.net> <CAHL_VyDWYz=hUTZ+RDZ0JuF-KCsh5HBsM1pFFy3FqtL6pC_hCw@mail.gmail.com> <m1jbRI7-0000LCC@stereo.hq.phicoh.net> <CAHL_VyA23QJzgTy_nauxmjPM4PJT00YC451QL+s6d3dMomkX5Q@mail.gmail.com> <m1jc9R0-0000I4C@stereo.hq.phicoh.net> <B45A0FFE-5AE4-42BF-A8C7-B33F60B1BCAD@delong.com> <m1jdESc-0000H0C@stereo.hq.phicoh.net>
From: Fernando Gont <fernando@gont.com.ar>
Message-ID: <c744344e-9dac-6d75-28b3-752d903c4d5e@gont.com.ar>
Date: Mon, 25 May 2020 13:49:30 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <m1jdESc-0000H0C@stereo.hq.phicoh.net>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/t2s0mf5xG253KQtheH8DmvVmVvk>
Subject: Re: [v6ops] draft-ietf-v6ops-slaac-renum and draft-ietf-v6ops-cpe-slaac-renum
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 May 2020 16:49:47 -0000

On 25/5/20 11:52, Philip Homburg wrote:
> [note, I'm replying here to multiple messages]
> 
>> Why wouldnt the operator in such a case simply configure the RA
>> side as static?
> 
> Yes, but it introduces extra complexity. In particular, the CPE has to
> continue to request a prefix using DHCPv6. Then a naive implementation may
> end up with two entries for the same prefix in a single RA. Finally, the
> implementor may realize that filtering out the prefix from DHCPv6 may
> actually cause the CPE to violate a MUST NOT, so a strict interpretation of
> the CPE may cause the CPE to remove the user supplied prefix.

Again: this document specifies a recommended behavior when the CE Router 
handles the whole thing automatically. You don't even need permission to 
have a manual knob that allows you to do something else.




>> That is indeed a good point. Maybe we should copy the terminology
>> section from RFC7084, which describes the usage of these terms in
>> this document? Namely:
>>
>> ---- cut here ---- X.Y.  Requirements Language
>>      Take careful note: Unlike other IETF documents, the key words
>>      "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD",
>>      "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
>>      document are not used as described in RFC 2119 [RFC2119].  This
>>      document uses these keywords not strictly for the purpose of
>>      interoperability, but rather for the purpose of establishing
>>      industry-common baseline functionality.  As such, the document
>>      points to several other specifications (preferable in RFC or
>>      stable form) to provide additional guidance to implementers
>>      regarding any protocol implementation required to produce a
>>      successful CE router that interoperates successfully with a
>>      particular subset of currently deploying and planned common
>>      IPv6 access networks.
> 
> I'm not sure what that means. Does it mean that an implementation is
> free to violate a MUST NOT, because it doesn't really mean MUST NOT?

It means this is not a protocol spec. In fact, you might well decide to 
not implement this spec and still be compliant with all the protocol specs.



>> So the answer to that corner case is simply "properly build your
>> network". Personally I think trying to cater for all use cases, so
>> as to allow a corporate level network to be built without any router
>> config (or, it seems, admin skills), is a road to a massively
>> over-complicated spec that makes it harder rather than easier to
>> build "non-trivial" networks.
> 
> The only thing I'm asking for is an exception to the MUST NOT that allows
> the admin of the CPE to override the lifetimes. That is not a remote
> corner case, that's the kind of stuff every serious router allows the admin
> to do.

As noted, you're allowed to, already. In fact, I had suggested this text 
(for the "Introduction" section) in another email, which hopefully makes 
this very explicit:

"This document specifies recommendations for the default behavior of CE 
Routers, and does not preclude the availability of configuration knobs 
that might allow an operator or user to manually-configure the CE Router 
to deviate from these recommendations"

Thoughts?

Thanks!

Cheers,
-- 
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@si6networks.com
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1