Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios

Erik Kline <ek@loon.co> Thu, 21 February 2019 02:01 UTC

Return-Path: <ek@google.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73677130F81 for <v6ops@ietfa.amsl.com>; Wed, 20 Feb 2019 18:01:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.498
X-Spam-Level:
X-Spam-Status: No, score=-9.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=loon.co
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ln0cDAWZT-i5 for <v6ops@ietfa.amsl.com>; Wed, 20 Feb 2019 18:01:29 -0800 (PST)
Received: from mail-io1-xd2f.google.com (mail-io1-xd2f.google.com [IPv6:2607:f8b0:4864:20::d2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CB07130F83 for <v6ops@ietf.org>; Wed, 20 Feb 2019 18:01:29 -0800 (PST)
Received: by mail-io1-xd2f.google.com with SMTP id e186so172162ioa.0 for <v6ops@ietf.org>; Wed, 20 Feb 2019 18:01:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=loon.co; s=google; h=mime-version:references:in-reply-to:reply-to:from:date:message-id :subject:to:cc; bh=gAMmTjMOUMUxu/yIrwTW2jgDgZbPHjFszwxR7/EaLK4=; b=UunVIL2wqexpImzkRd6nKbAczK1eNbVgmW5PmOdq8O5TV2B44Umzxij0wL7F8tWPIP RLphhQtuN5ui6rwcx7GtCZp0pLUG3aNcx2KWu6+NWN1JqvehOtTb6Djl8pChRN4MKpf/ rjPpzKRJjEdtORpPl+i5xV8rpcnWBziWSYTBA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:reply-to :from:date:message-id:subject:to:cc; bh=gAMmTjMOUMUxu/yIrwTW2jgDgZbPHjFszwxR7/EaLK4=; b=ryT4wPixQwP1t7yHqg8gIQsRQ0FvbgOzCSUKZM2wZobw0RHFNo9lywxgRoxmxHHcK8 ofkTF5/GtVL6yyu9fKl0WEMoGg5k7uu9dK5mBCEVWnn1iEtTCx4ys1j1LosGJ+ml+NRU nofA8yOOjJtezBtep+G0DbN0XIrc8GLRWe2SIt9FjmIU2c/HWDMbxGynTmEdxT/+Vuru 1s3TZGDNZu4jIGe82PsOWa6HHypjc/AnLstiCYSt2rZcgLASRS55+Jj3W4RUB/4uPijZ 8/fCvxXBOsdSM2l7/0JsZOu729l0KlBBSZcIdrff9ZdrRV9u6DCd0j4uqS88SdjKy6vO qZqA==
X-Gm-Message-State: AHQUAuaFQGtvOeJYoztRgi7potEC7bDDyGqyoOjODNQoR49AA4JpCx7j Zk0Pg2jYiZ1VU0Q+NHisneHSmo26YK6gM3vMJd3sUQ==
X-Google-Smtp-Source: AHgI3IYCB2yRaoNz+3KkIY9dbFLWyN7qZgocHU08uBUjUx1zF+G+VQKlt9mCLTJ7iQlQSEl7T8wRLvWXBITe5jOkbBs=
X-Received: by 2002:a5d:824e:: with SMTP id n14mr21346225ioo.16.1550714487750; Wed, 20 Feb 2019 18:01:27 -0800 (PST)
MIME-Version: 1.0
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <alpine.DEB.2.20.1901311236320.5601@uplift.swm.pp.se> <35adea8e-704a-76f2-857f-a83a9ad689ef@si6networks.com> <CAFU7BAS1_veTu-ZXAF0MF4niJwz149nGipx3ep_6fh1bewOzgg@mail.gmail.com> <d9503983-6524-a13a-2cb0-cdcb95f76ea6@si6networks.com> <CAFU7BAQfg712UfgW9wi9pd3eVeZP9cqJEXd6=FDmchuSdauv+g@mail.gmail.com> <82c00442-bbc4-581b-2054-2d02d50d20ad@si6networks.com> <CAFU7BASDgmSwY=SLiabSqyiTOphxU0COtFLQvT8drm0iTxM+-Q@mail.gmail.com> <76c488e0-5be7-3b81-d4c3-7af826f0dbef@si6networks.com> <CAAedzxq5d0fgOq5KZu7aCL9wxoDij6C-1Ad9+nQbYyhu2aMt-Q@mail.gmail.com> <da1c6391-5e69-f09b-dee5-83d25f1cd8cd@si6networks.com>
In-Reply-To: <da1c6391-5e69-f09b-dee5-83d25f1cd8cd@si6networks.com>
Reply-To: ek@loon.co
From: Erik Kline <ek@loon.co>
Date: Wed, 20 Feb 2019 18:01:14 -0800
Message-ID: <CAAedzxouCqcmW0rA6KwDZEO-n5yVZUYHc+GSetJ8O7=Liou4tA@mail.gmail.com>
To: Fernando Gont <fgont@si6networks.com>
Cc: Jen Linkova <furry13@gmail.com>, IPv6 Operations <v6ops@ietf.org>, "6man@ietf.org" <6man@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000312c5305825dda0f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/xY2ncPqLGJ8ynC7sqEbRoPFn9Lw>
Subject: Re: [v6ops] A common problem with SLAAC in "renumbering" scenarios
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2019 02:01:32 -0000

On Wed, 20 Feb 2019 at 17:49, Fernando Gont <fgont@si6networks.com> wrote:

> Hi, Eric,
>
> On 20/2/19 22:12, Erik Kline wrote:
> >
> >
> > On Wed, 20 Feb 2019 at 17:07, Fernando Gont <fgont@si6networks.com
> > <mailto:fgont@si6networks.com>> wrote:
> >
> >     On 20/2/19 06:36, Jen Linkova wrote:
> >     [...]
> >     >> Example:
> >     >>
> >     >> Say you have two network interfaces: If1 and If2.
> >     >> Say If1, is configured with 2001:db8:1::/64, and If2 with
> >     2001:db8:2::/64
> >     >>
> >     >> Say the first default router is that associated with If1.
> >     >>
> >     >> Say prefix 2001:db8:1::/64 stops being announced, or that you stop
> >     >> receiving RAs on If1, but RAs on If2 keep arriving fine.
> >     >>
> >     >> Based on the logic of your algorithm, one would expect that a new
> >     >> connection uses 2001:db8:2::/64/If2 (since that's the "more
> recently
> >     >> advertised information). However, Rule #5 would override that and
> >     make
> >     >> you employ 2001:db8:1::/64/If1, since Rule #5 prioritizes
> >     addresses on
> >     >> the outgoing interface.
> >     >
> >     > I'm even more confused now, sorry ;((
> >
> >     I was referring to the fact that some of the previous rules might
> >     prevent the evaluation of the rule about freshness. e.g.:
> >
> >     * You have two network interfaces eth0 and eth1 (say each connected
> to a
> >     different ISP)
> >     * eth0 has stopped receiving RAs
> >     * eth1 receives RAs as usual (hence all info associated with this
> >       interface is "fresher" than than corresponding to eth0)
> >     * The default router employed by eth0 has precedence (whether
> because it
> >       had a higher preference value, because it was the first one that
> was
> >       learned, or whatever)
> >     * When you evaluate the rules in RFC6724, rule 5 will say that the
> >       outgoing interface will be eth0, and thus you should pick an
> address
> >       associated with it --- however, as noted above, the addresses on
> eth1
> >       are fresher than those from eth1.
> >
> >
> > Not receiving multicast RAs is not a condition you can really take any
> > action on.
>
> Agreed.
>
> The main issue I see with incorporating an explicit rule in RFC6724
> about "freshness" is that in multi-prefix scenarios, it's guaranteed
> that the default SA will oscillate among the different prefixes, and
> that if you only implement this workaround, you wouldn't be able to
> communicate with hosts actively employing your stale prefix.
>

that's where rule 5.5 would help (wherever it is actually implemented;
alas...)