Subject: Re: Neighbour Discovery Bug?
To: None <current-users@netbsd.org>
From: Feico Dillema <dillema@acm.org>
List: current-users
Date: 07/22/1999 00:04:05
On Thu, Jul 22, 1999 at 03:22:53AM +0900, itojun@iijlab.net wrote:
> 
> 	Now I see what you meant.  You are using same prefix for both
> 	tunnel and the ethernet (I should have asked you to draw a diagram).
> 
> 	Sorry this does not work at this moment.  This complicates many
> 	things, for example scope of link-local addresses.  Steve Deering
> 	likes this kind of "subnet over multiple link, connected by router"
> 	configuration, but I believe specification is not ready for this.
> 	(if "link-local" scope is just one link, like tunnel, what happens to
> 	DAD, RA, or ripng packets between ethernet 3ffe:2a00:100:3002::/64 and
> 	tunnel 3ffe:2a00:100:3002::/64?)
> 
> ==+=== 3ffe:2a00:100:3001::/64
>   | vx0
> pastaws0 ---------------------------------+ tunnel
>   | xl0					  |
> ==+=== 3ffe:2a00:100:3002::/64		  |3ffe:2a00:100:3002::/64
> 					spam

Yes, as this is similar to what you can do in IPv4 with proxy-arp, I made
an uninformed guess that  it would work in IPv6 with ND too. I see now
this is not the case. 

I think the most elegant solution would be to specify `link-local' scope
independent from the underlying physical network, and only specify it
in terms of addressing. I.e. link-local scope is e.g. all hosts with
network-prefix 3ffe:2a00:100:3002::/64. I think this would be rather
elegant, but I cannot oversee all the implementation difficulties
that might arrise from it. But it makes sense to me, especially
the gained flexibility in defining link-local hosts for underlying
networks that are not-quite-entirely-like-Ethernet, i.e. non-shared
medium ones.

The alternative would be to implement something similar as proxy-arp
for IPv6. I think that would be something we really would like to 
avoid as it has the taste of an ugly hack to it. Or a little less
ugly might be something like a meta-tunnel interface, i.e. a single
IPv6-interface representing all `real' tunnels with the same prefix,
and multiplexing traffic between the tunnels as if it was a shared
medium. This meta-tunnel would be similar to an Ethernet switch in
some ways. Not really elegant, but it would not require modification
of link-local specs and such. Hmmm, maybe I should try to implement
such a thing and see how well or how bad it works... Or... you tell
me now it is a very silly idea (if you think so, please do ;-}.

Not providing a solution is the final alternative, but wouldn't that
in the current v6 addressing scheme imply you'd need to assign a 64 bit
network prefix to each and every tunnel for everything to work
nicely? For a large ISP handing out v6 over v4 tunnels that might
eat-up address-space at a rather alarming rate I think.

Feico.