Re: [v6ops] Erik Kline's Yes on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)

Vasilenko Eduard <vasilenko.eduard@huawei.com> Wed, 26 May 2021 06:06 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 377E13A220A; Tue, 25 May 2021 23:06:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 58DFFvukTycs; Tue, 25 May 2021 23:06:43 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1F783A2209; Tue, 25 May 2021 23:06:42 -0700 (PDT)
Received: from fraeml743-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4FqgBc3h2Vz6J7YB; Wed, 26 May 2021 13:54:32 +0800 (CST)
Received: from msceml705-chm.china.huawei.com (10.219.141.144) by fraeml743-chm.china.huawei.com (10.206.15.224) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2176.2; Wed, 26 May 2021 08:06:34 +0200
Received: from msceml703-chm.china.huawei.com (10.219.141.161) by msceml705-chm.china.huawei.com (10.219.141.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2176.2; Wed, 26 May 2021 09:06:33 +0300
Received: from msceml703-chm.china.huawei.com ([10.219.141.161]) by msceml703-chm.china.huawei.com ([10.219.141.161]) with mapi id 15.01.2176.012; Wed, 26 May 2021 09:06:33 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: Erik Kline <ek.ietf@gmail.com>, Fernando Gont <fgont@si6networks.com>
CC: V6Ops Chairs <v6ops-chairs@ietf.org>, v6ops list <v6ops@ietf.org>, "draft-ietf-v6ops-cpe-slaac-renum@ietf.org" <draft-ietf-v6ops-cpe-slaac-renum@ietf.org>, The IESG <iesg@ietf.org>
Thread-Topic: [v6ops] Erik Kline's Yes on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)
Thread-Index: AQHXCz6PANaSXY8fwkipiIqgLGrKR6poRCMAgIz7wACAAJKWoA==
Date: Wed, 26 May 2021 06:06:33 +0000
Message-ID: <e3df3fb39c784efbbf04b5139cd96109@huawei.com>
References: <161423409814.30483.4228112460025308703@ietfa.amsl.com> <a38ea347-822f-f1ec-c00d-559b06616562@si6networks.com> <CAMGpriWjadt73otDYuDHaNZoa5gsWh_kApp66Hwa_bg=Ct6h0g@mail.gmail.com>
In-Reply-To: <CAMGpriWjadt73otDYuDHaNZoa5gsWh_kApp66Hwa_bg=Ct6h0g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.47.199.142]
Content-Type: multipart/alternative; boundary="_000_e3df3fb39c784efbbf04b5139cd96109huaweicom_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/z6NTaNVNgD6xtrZ6rQNI1_-suJ8>
Subject: Re: [v6ops] Erik Kline's Yes on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 May 2021 06:06:49 -0000

Hi Erik,
> If memory serves, I was thinking about clarifying that only options that use WAN-side sub-prefix information (routes/CIDR prefixes/addresses) need timer clarity.
Ed: What if prefix would become invalid because somebody (not properly developed SDN controller or Management system or human in CLI) would abruptly change prefix configuration on the LAN interface?
People are doing mistakes. Protocol resiliency is not a luxury.
Eduard
From: v6ops [mailto:v6ops-bounces@ietf.org] On Behalf Of Erik Kline
Sent: Wednesday, May 26, 2021 3:16 AM
To: Fernando Gont <fgont@si6networks.com>
Cc: V6Ops Chairs <v6ops-chairs@ietf.org>; v6ops list <v6ops@ietf.org>; draft-ietf-v6ops-cpe-slaac-renum@ietf.org; The IESG <iesg@ietf.org>
Subject: Re: [v6ops] Erik Kline's Yes on draft-ietf-v6ops-cpe-slaac-renum-07: (with COMMENT)



On Wed, Feb 24, 2021 at 11:41 PM Fernando Gont <fgont@si6networks.com<mailto:fgont@si6networks.com>> wrote:
Hello, Erik,

Thanks a lot for your comments! In-line....

On 25/2/21 03:21, Erik Kline via Datatracker wrote:
[....]
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> [[ comments ]]
>
> [ section 3.4 ]
>
> * At the end of the 2nd paragraph and the 2nd NOTES paragraph, I think it
>    could be made clearer that this recommendation especially applies to ND
>    Options that contain address or prefix information from within a prefix
>    learned on the WAN side.

Are you referring that of "the lifetimes not spanning past the remaining
lifetime", or to the recommendation to set the PIO lifetimes to
(ND_VALID_LIMIT, ND_PREFERRED_LIMIT).

If the former, I definitely agree. If the latter, I'd probably argue
that when it comes to PIOs the advice is also valid even if the prefix
is locally generated. -- e.g., consider the case where a CE Router is
simply replaced by another one. If the (VL, PL) was (1 week, 1 month)
you'd have them around for quite a while (same for e.g. RDNSS options).
-- that said, I wouldn't mind clarifying that this only applies to
sub-prefixes of prefixes learned from the WAN-side if you think that's
warranted.

>    These timers seem fine in general as well, but I think as written it's
>    a blanket recommendation without explicitly saying why these options
>    need updating, i.e. if someone asks what does "if and where applicable"
>    actually mean -- it means ND options with address/prefix information
>    taken from a delegated prefix whose lifetime has been reduced
>    (possibly to zero, possibly progressively shorter values trending to zero).

FWIW, what we *meant* with "if and where applicable" was essentially
"[any future] Neighbor Discovery options that depend in any way on
changes in the prefix employed for address configuration on the LAN-side"

Just let us know how we should clarify the above.

If memory serves, I was thinking about clarifying that only options that use WAN-side sub-prefix information (routes/CIDR prefixes/addresses) need timer clarity.

Looking again at -07, it seems like "options that depend in any way on changes in the prefix employed for address configuration" probably captures this sentiment adequately.