[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Comments on draft-bagnulo-multi6dt-hba-00.txt



On 19-nov-04, at 1:47, Erik Nordmark wrote:

It's far from clear to me that, should we pursue router rewriting in the future, that it can operate without being aware of individual hosts addresses.

Maybe not, but there is also the possibility that it could work per-prefix but not per-host.


For instance, if you have a site with 7 prefixes but some small devices only choose to use 3 of them, and form HBA addresses using those 3, then if the routers rewrite the source locator to any of the other 4 prefixes then it might result in a complete failure to communicate since the peer might ignore the "spoofed" packet coming from an invalid source locator of the host.

I think it's possible to solve this. We've been talking about a bit that indicates (among other things) that rewriting is allowed. For a long time, I've been saying that we could use the prefix in the source address for this. So magic prefix = rewrite, regular prefix = don't rewrite. We can reserve some bits in the magic prefix that indicate the type of rewriting that's allowed. For instance, if the prefix is <iana:32><x:16><subnet:16><iid:64> then we can encode permission to rewrite to one or more of 16 different prefixes. There is the slight problem of having all systems involved know which prefix corresponds to which bit of course, but this should be doable.


On 19-nov-04, at 10:25, Brian E Carpenter wrote:

It also seems to me that requiring the same IID for all interfaces is architecturally wrong,

I certainly wouldn't want to require this, just allow it.