diff --git a/draft-nbourbaki-6man-classless-ipv6.xml b/draft-nbourbaki-6man-classless-ipv6.xml index 1557e69..31d64fe 100644 --- a/draft-nbourbaki-6man-classless-ipv6.xml +++ b/draft-nbourbaki-6man-classless-ipv6.xml @@ -70,26 +70,30 @@ It is also assumed that the reader understands IPv6 , the IP Version 6 Addressing Architecture , the proposed changes to RFC4291 , and the recent recommendations for the generation of stable Interface Identifiers . + target="I-D.hinden-6man-rfc4291bis"/>, and the recent + recommendations for the generation of stable Interface Identifiers + . An important recent development in IPv6 is that for host computers on local area networks, the way in which interface identifiers are formed is no longer bound to layer 2 addresses (MAC - addresses) . We can therefore appreciate - that their length, previously fixed at 64 bits , is in fact a free parameter as stated in . + addresses) . We + can therefore appreciate that their length, previously fixed at 64 + bits , is in fact a free parameter as stated + in . @@ -103,7 +107,8 @@ don't een need /64 for SLAAC, except for backward compatibility. (*) Some confusion has been caused by the IP Version 6 Addressing Architecture, , and the proposed changes in - with respect to the minimum subnet size. + with respect to the + minimum subnet size. Meanwhile, link prefixes of varied lengths, /127, /126, /124, /120, ... /64 have been successfully deployed for many years. @@ -123,14 +128,18 @@ don't een need /64 for SLAAC, except for backward compatibility. (*) @@ -153,9 +162,11 @@ don't een need /64 for SLAAC, except for backward compatibility. (*) should not operate with different interface identfier lengths on different physical interfaces. Thus a correct implementation of SLAAC must in fact allow for any length of prefix, with the value - being parameterised per interface. For instance, the Interface Identifier length in the recommended - (see ) algorithm for selecting stable - interface identifiers is a parameter, rather than a hardcoded value. + being parameterised per interface. For instance, the Interface + Identifier length in the recommended (see ) + algorithm for selecting stable interface identifiers is a parameter, rather than a hardcoded + value. NOTE: should we comment on the fact that at least Linux and Windows seem to assume that the default prefix is /64 in the @@ -165,16 +176,23 @@ don't een need /64 for SLAAC, except for backward compatibility. (*)
-Assumming that nodes employ unpredictable interface identifiers , the subnet size may have an -impact on some security and privacy properties of a network. Namely, the smaller the subnet size, the more feasible it -becomes to perform IPv6 address scans . -However, that for some specific subnets (such as point to point links), this may be less of an issue. + Assumming that nodes employ unpredictable interface identifiers + , the subnet size may have an impact on some + security and privacy properties of a network. Namely, the smaller + the subnet size, the more feasible it becomes to perform IPv6 + address scans . + However, that for some specific subnets (such as point to point + links), this may be less of an issue. -On the other hand, we assume that a number of IPv6 implementations fail to enforce limits on the size of some of the data -structures they employ for communicating with neighboring nodes, such as the Neighbor Cache. In such cases, the use of smaller -subnets essentially enforces an operational limit on such data structures, thus helping mitigate some pathological behaviors -(such as Neighbor Cache Exhaustion attacks). - + On the other hand, we assume that a number of IPv6 + implementations fail to enforce limits on the size of some of the + data structures they employ for communicating with neighboring + nodes, such as the Neighbor Cache. In such cases, the use of smaller + subnets essentially enforces an operational limit on such data + structures, thus helping mitigate some pathological behaviors (such + as Neighbor Cache Exhaustion attacks). + +
@@ -191,8 +209,8 @@ subnets essentially enforces an operational limit on such data structures, thus
The original draft was by Randy Bush, who was immediately aided - and abetted by Brian Carpenter, Chris Morrow, Job Snijders, [ your - name here ]. + and abetted by Brian Carpenter, Chris Morrow, Fernando Gont, Job + Snijders, [ your name here ].