Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)

"Bernie Volz (volz)" <volz@cisco.com> Fri, 01 November 2019 13:10 UTC

Return-Path: <volz@cisco.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FD29120125 for <v6ops@ietfa.amsl.com>; Fri, 1 Nov 2019 06:10:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.499
X-Spam-Level:
X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=lvZRV0MR; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=DnkIEYKE
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4pacBHZg0ubk for <v6ops@ietfa.amsl.com>; Fri, 1 Nov 2019 06:10:00 -0700 (PDT)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 413BC1200F1 for <v6ops@ietf.org>; Fri, 1 Nov 2019 06:10:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15064; q=dns/txt; s=iport; t=1572613800; x=1573823400; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=vLkxED5mryQq4g5WUaaBC6UMG6XWdm8mBobPeKggGRk=; b=lvZRV0MRBsoFzS8ssuqHmOrwVdRk+EUi+HesXHFrswSZM9g7T1siu7xY Z1h5n8zdmkSwmdfKR0c8a/gg3w+v/b13CVerp+qBhYmhEEHwz9EPeuOKF dvIoxQ8UKXQajAdWTdWrezNZmNXAvtiXkKQiU0v54FymOLsdiF3IUoUbv g=;
IronPort-PHdr: 9a23:pNToBBI3+wtIq2m5otmcpTVXNCE6p7X5OBIU4ZM7irVIN76u5InmIFeCuKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFKa5lQT1kAgMQSkRYnBZubDknpBPXrdCc9Ws9FUQwt8g==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C4AABSLrxd/5xdJa1lGgEBAQEBAQEBAQMBAQEBEQEBAQICAQEBAYF9gRwvUAVsWCAECyoKhB6DRgOKdYJekxuEYYFCgRADVAkBAQEMAQEtAgEBhEACF4NkJDgTAgMLAQEEAQEBAgEFBG2FNwyFUQEBAQECARIRChMBATcBBAsCAQgOAwQBARYOBAMCAgIwFAkIAgQBDQUIEweDAYF5TQMOIAGnBAKBOIhgdYEygn4BAQWFFxiCFwmBNowRGIF/gRFGgh4uPoQALxg0CYJRMoIsj32FPJg9CoIklVCZZYRXhhODVplUAgQCBAUCDgEBBYFpIoFYcBWDJ1ARFIMGDBcVgzuKU3SBKIw2AYENAQE
X-IronPort-AV: E=Sophos;i="5.68,255,1569283200"; d="scan'208,217";a="370396233"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 01 Nov 2019 13:09:59 +0000
Received: from XCH-ALN-018.cisco.com (xch-aln-018.cisco.com [173.36.7.28]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id xA1D9xEx014577 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 1 Nov 2019 13:09:59 GMT
Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-018.cisco.com (173.36.7.28) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 1 Nov 2019 08:09:58 -0500
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 1 Nov 2019 08:09:58 -0500
Received: from NAM05-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 1 Nov 2019 09:09:58 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RV6S3mSF7bRpTRdedv6ze1I1gjQm7FAdUnE5x05isJCurbx752FiiJbeMeKoX8Fho3Ho/P9z55QbEsio0GajqhB/NBKggj3gdZA/sYBkZb0l3jlrcXrqNVXkn/SRMgAcq8DYclzl1pwPIUpH91OvlZXdFeNswl1ymsSJqxz4n57R2zFGzPihBxLNncJNNMemf3/e+c/JnwFM9mLwlcNvkeaOOM/1H7fQnSe7yjo0O/g4lf+cpEdRHXVeHUqjZ6oCNtL7ahsWs5zorZJiX0LqY2+HjWZLjPgzlARIxr6Vn88hGxZo3Eh0lxfU78kETAatNLzZ/e8BtW8aKAWbeq626w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vLkxED5mryQq4g5WUaaBC6UMG6XWdm8mBobPeKggGRk=; b=edWsb0n9/8k+zu5IO+bL1uJhgwlykfqav0RC2kgz7zPVbeqlGB4xAGICG6ydVGuwtt689AtWs4BFcH+ihDItLE6mcJK8uVdoFQxbjZmh2hFlBIASvvqA+I8xFAuJldI6O5fOUGfm4pZ424foDE62rzyjPyTER0aGb2gJ6DwvDekJDa/nh+5sbFC/xRzifpHydN0uhRLM/sKOP+vWrWuJWp7I1oAWjTjTmuwB5DH8jRxhZinDEgHJ0R5DEpcfs6QULqtOEQSRW8FyCpf1P8sKJ5ZxZkXwRf+ueUwtMD2gepncNjqv5RlH6THpM5VpDArPJhPKGQ3l2YwzIsZeeCCR2A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vLkxED5mryQq4g5WUaaBC6UMG6XWdm8mBobPeKggGRk=; b=DnkIEYKElzGPipzNCCzd5QBCo9GHwW9KCiDTilE2bT04z6jJ/JU/d9mmZuiAmpXkeHazvG0JIH7PtVQ2M5wYPddrWn2dgEfcAqUvUCLkMHNnMWGxTBQP/tKc6ZvDmmlYXmV1qq0DpRUiitbcOry77WyEQJk0rNgzmQ8VaiUyM8A=
Received: from CY4PR1101MB2279.namprd11.prod.outlook.com (10.172.75.137) by CY4PR1101MB2310.namprd11.prod.outlook.com (10.172.77.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.24; Fri, 1 Nov 2019 13:09:56 +0000
Received: from CY4PR1101MB2279.namprd11.prod.outlook.com ([fe80::81f5:2724:385e:dbab]) by CY4PR1101MB2279.namprd11.prod.outlook.com ([fe80::81f5:2724:385e:dbab%10]) with mapi id 15.20.2387.030; Fri, 1 Nov 2019 13:09:56 +0000
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Ted Lemon <mellon@fugue.com>, Ole Troan <otroan@employees.org>
CC: "v6ops@ietf.org" <v6ops@ietf.org>
Thread-Topic: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)
Thread-Index: AQHVj3tMtRKWxZ0q/E2E0DD0Qyz586d1wYiAgAA6nACAACb0iIAABBeAgAACf4CAAALRAIAAEiaAgAAAWoCAAAE7gIAAAsSAgAAF44CAAAICsA==
Date: Fri, 01 Nov 2019 13:09:56 +0000
Message-ID: <CY4PR1101MB22791F44933650A4E34D333FCF620@CY4PR1101MB2279.namprd11.prod.outlook.com>
References: <m1iQUNM-0000KTC@stereo.hq.phicoh.net> <94BBC308-365D-41A8-96FB-242BF63FFBF9@employees.org> <D3B1E770-F199-4605-BF78-A3637D6CDB42@fugue.com> <4288FBC0-C421-464F-9D55-7FB77AA1FA4E@employees.org> <42A7AD85-6FD3-4EDF-AE2F-4FD1FCA9A2D3@fugue.com> <13C39FBE-2AA7-4D92-A5D8-F2681A4E7115@employees.org> <5F4B1C8C-6932-4831-86D6-D735CBDD52A9@fugue.com> <6601CEF1-1BF6-461A-A656-0DF0955986A5@employees.org> <B586DB4C-7E4B-49CC-BC7F-7FAB98F47812@fugue.com>
In-Reply-To: <B586DB4C-7E4B-49CC-BC7F-7FAB98F47812@fugue.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com;
x-originating-ip: [173.38.117.77]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 6f115c5c-c230-4584-d937-08d75ecccae8
x-ms-traffictypediagnostic: CY4PR1101MB2310:
x-microsoft-antispam-prvs: <CY4PR1101MB2310E4F2D200080862CD37C5CF620@CY4PR1101MB2310.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 020877E0CB
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(376002)(136003)(346002)(396003)(366004)(189003)(199004)(55016002)(486006)(71200400001)(66446008)(71190400001)(6436002)(3846002)(64756008)(316002)(256004)(102836004)(6506007)(53546011)(110136005)(76116006)(14444005)(76176011)(7696005)(66556008)(66946007)(6116002)(790700001)(14454004)(7736002)(478600001)(86362001)(446003)(8936002)(52536014)(11346002)(26005)(66476007)(6246003)(236005)(25786009)(6306002)(54896002)(99286004)(9686003)(476003)(4326008)(2906002)(33656002)(74316002)(81156014)(81166006)(8676002)(66066001)(5660300002)(186003)(229853002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR1101MB2310; H:CY4PR1101MB2279.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: S1ZGjOIS0iM32OL2GipRXu1KScad7lOVEkrE5ZyJgtJdqDxJWco/UdF+KKzbfG9JeUHuQziVjlLXwSSDaATEJ5aqZn8eVYJ96m5RB/8fF7XV1us7ZbgOOG4BNFdGKDWudRKGkoJyE2d/H8krrJtDAvY+SZa32/2ivosk4aOvIKUdIRThq0J8HhHWWrn23kjjXMW4/wt3eSQC1e8FC7sXP2dFjF4Y+PGD90mcUUpEE21YiLX7oJFotBD1DuZKIXgtgYipcDe5TryWgCjMlJ3bRqh1LJcm1fVhAfw1dv5l0hXF9qdismSRGVRcvslWeEiCcJZNeYXCfoumzdoC3KYKyPtO1UBa7/REl8tIgpQUK7d0V5LWPK0Rwcev2d57plqdlkXxgGZddpF7ILlDLUhad63+9olaYtfOAr1NFnEdb4MAaatnXaS6qqDQNe8fJ7nA
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CY4PR1101MB22791F44933650A4E34D333FCF620CY4PR1101MB2279_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 6f115c5c-c230-4584-d937-08d75ecccae8
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2019 13:09:56.6091 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: HcQl2rzdIv54PVg70FGsY4tpE7CLGLS5ak9BHZALJtG5J3cLnhuoZt4MsRwMDt6g
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1101MB2310
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.36.7.28, xch-aln-018.cisco.com
X-Outbound-Node: rcdn-core-5.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/vqhU3EvgIsNJeQTBdiiCTTFpwws>
Subject: Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 13:10:03 -0000

> Also, DHCP server vendors in particular do not implement what we intended that they implement, because we never said explicitly that they should do so, not specified what a CPE should expect in this situation.

That’s not true. The server I work on allows you to specify an expiration time for a prefix, and we will automatically decrease lifetimes to honor that time and also stop using the prefix for new leases. This allows you to introduce a new prefix to be used for prefix delegation for graceful renumbering. Once the expiration time has passed, you can remove the old prefix as there should no longer be any active leases. We introduced this with the first release with DHCPv6 support a long time ago.


  *   Bernie

From: v6ops <v6ops-bounces@ietf.org> On Behalf Of Ted Lemon
Sent: Friday, November 1, 2019 8:58 AM
To: Ole Troan <otroan@employees.org>
Cc: v6ops@ietf.org
Subject: Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)

On Nov 1, 2019, at 8:36 AM, Ole Troan <otroan@employees.org<mailto:otroan@employees.org>> wrote:
(4) is the definition of graceful renumbering. What makes you conclude "then we just assume that people will do whatever they want"?
(especially since your options 1-3 are exactly that, people do whatever they want…)

Okay, I missed a step (or five).  We have specified what a renumbering process should ideally look like, without taking into account several likely operational circumstances.  We have not specified in sufficient detail how renumbering works using DHCPv6 PD, e.g. in a home environment.  Consequently, providers do not have a viable way to follow our recommendations for how to renumber, and hence just do whatever they can think of, possibly without realizing that there might be a better way to do it.   Also, DHCP server vendors in particular do not implement what we intended that they implement, because we never said explicitly that they should do so, not specified what a CPE should expect in this situation.

Does that help?

FWIW, I was asked to consult with an operator who shall remain nameless about how to solve this problem, and the solution I came up with relied on the recommendations from RFC 4192. and further relied on DHCPv6 prefix delegation offering two prefixes, one valid and one preferred.  Unfortunately I don’t think this was ever implemented, but I still think it’s the right thing to do; what I’m realizing from this conversation is that not everybody saw this solution as obvious.   Which I think is a problem.