Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)

Fernando Gont <fgont@si6networks.com> Fri, 01 November 2019 08:16 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD8D7120824 for <v6ops@ietfa.amsl.com>; Fri, 1 Nov 2019 01:16:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.307
X-Spam-Level:
X-Spam-Status: No, score=-0.307 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_03_06=1.592, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iht5GCJVBFEa for <v6ops@ietfa.amsl.com>; Fri, 1 Nov 2019 01:16:05 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05DF0120147 for <v6ops@ietf.org>; Fri, 1 Nov 2019 01:16:05 -0700 (PDT)
Received: from [192.168.1.36] (unknown [177.27.208.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 441EF86957; Fri, 1 Nov 2019 09:16:01 +0100 (CET)
To: Mark Smith <markzzzsmith@gmail.com>, Ole Troan <otroan@employees.org>
Cc: v6ops list <v6ops@ietf.org>
References: <m1iPlMZ-0000J5C@stereo.hq.phicoh.net> <FACE45EC-27FC-437A-A5BF-D800DF089B50@fugue.com> <837E9523-14FC-4F6C-88FC-DCC316265299@employees.org> <CAO42Z2wz1H-x1O+k-ra09V=xON7GOYM+0uHkG0d3ExnsGNuDeA@mail.gmail.com>
From: Fernando Gont <fgont@si6networks.com>
Openpgp: preference=signencrypt
Message-ID: <03aad034-4e35-743f-975d-7d3c9f29b5cc@si6networks.com>
Date: Fri, 01 Nov 2019 01:53:05 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <CAO42Z2wz1H-x1O+k-ra09V=xON7GOYM+0uHkG0d3ExnsGNuDeA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/waJQvvnNUzUQpqIjvEmKFmjymrk>
Subject: Re: [v6ops] A broken promise - "You said PD Prefix Valid Lifetime is going to be X" (Re: SLAAC renum: Problem Statement & Operational workarounds)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Nov 2019 08:16:10 -0000

On 30/10/19 20:38, Mark Smith wrote:
> On Wed, 30 Oct 2019 at 22:02, Ole Troan <otroan@employees.org> wrote:
>>
> <snip>
> 
>> In the case when a requesting router loses a prefix, it can of course signal that to the hosts as proposed in Fernando's draft. But that doesn't solve the general problem, and I'm skeptical to using addressing as a reachability signal. E.g. if the CPE's upstream link flaps, is that enough to trigger deprecation of the prefix? Of course it shouldn't.
>>
> 
> Exactly. Transient network faults are supposed to be survived - that's
> why TCP makes quite a number of attempts at re-transmitting when
> packet loss occurs, rather than just immediately terminating the
> connection.
> 
> When an ISP "flash renumbers" a customer what's really happening is
> that the customer's network layer point of attachment to the network
> is being changed - the customer is being abruptly disconnected, moved
> and re-connected. Possibly that is easy to overlook because the
> customers physical location and their physical link to the network
> doesn't change.
> 
> I think Ole observed that this is contrary to what the PD prefix's
> Valid Lifetime said would be the case. The ISP supplied a PD Prefix
> with a Valid Lifetime of X seconds, and then broke that promise by
> abruptly changing addressing before X seconds. ISPs should be expected
> to live up to their Valid Lifetime promises.

"Hope" doesn't make networks run properly.

In any case, as previously noted, there are multiple scenarios that may
lead to this problem.


-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492