[141916] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: The stupidity of trying to "fix" DHCPv6

daemon@ATHENA.MIT.EDU (Leo Bicknell)
Tue Jun 14 08:02:28 2011

Date: Tue, 14 Jun 2011 05:01:21 -0700
From: Leo Bicknell <bicknell@ufp.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <alpine.DEB.2.00.1106141017430.26305@uplift.swm.pp.se>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--CE+1k2dSO48ffgeK
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

In a message written on Tue, Jun 14, 2011 at 10:20:07AM +0200, Mikael Abrah=
amsson wrote:
> On the AMSIX peering LAN there is more than 100pps of ND traffic (at leas=
t=20
> there was when we checked). Since they do not do IPv6 multicast=20
> intelligent handling (MLD snooping I guess) certain highend (legacy)=20
> router platforms run into trouble because all these packets are punted to=
=20
> RP.

Note that an exchange point LAN is a bit of an odd duck.  RA's are
supposed to be disabled.  There is no DHCP.

Rather, the ND behavior is casued by people statically configuring
BGP sessions and then a participant leaving.  So ND (or even ARP)
tries over and over to find the missing participant.

The thing to investigate here is if ND rate limiting is implemented
correctly by the vendors involved, similar to ARP rate limiting.  I'm
not sure if there are standards requirements that could be in play as
well.

I'm not sure this has anything to do with the RA/DHCP issues...

--=20
       Leo Bicknell - bicknell@ufp.org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/

--CE+1k2dSO48ffgeK
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
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=3ZB5
-----END PGP SIGNATURE-----

--CE+1k2dSO48ffgeK--


home help back first fref pref prev next nref lref last post