Softwire WG | M. Boucadair |
Internet-Draft | France Telecom |
Intended status: Standards Track | I. Farrer |
Expires: December 01, 2013 | Deutsche Telekom |
S. Perreault, Ed. | |
Viagenie | |
S. Sivakumar, Ed. | |
Cisco Systems | |
May 30, 2013 |
Unified IPv4-in-IPv6 Softwire CPE
draft-ietf-softwire-unified-cpe-01
Transporting IPv4 packets encapsulated in IPv6 is a common solution to the problem of IPv4 service continuity over IPv6-only provider networks. A number of differing functional approaches have been developed for this, each having their own specific characteristics. As these approaches share a similar functional architecture and use the same data plane mechanisms, this memo describes a specification whereby a single CPE can interwork with all of the standardized and proposed approaches to providing encapsulated IPv4 in IPv6 services.
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."
This Internet-Draft will expire on December 01, 2013.
Copyright (c) 2013 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
IPv4 service continuity is one of the major technical challenges which must be considered during IPv6 migration. Over the past few years, a number of different approaches have been developed to assist with this problem. These approaches, or modes, exist in order to meet the particular deployment, scaling, addressing and other requirements of different service provider's networks. Section 2 of this document describes these approaches in more detail.
A common feature shared between all of the differing modes is the integration of softwire tunnel end-point functionality into the CPE router. Due to this inherent data plane similarity, a single CPE may be capable of supporting several different approaches. Users may also wish to configure a specific mode of operation.
A service provider's network may also have more than one mode enabled in order to support diverse CPE client functionality, during migration between modes or where services require specific supporting softwire architectures.
For softwire based services to be successfully established, it is essential that the customer end-node, the service provider end-node and provisioning systems are able to indicate their capabilities and preferred mode of operation.
This memo describes the logic required by both the CPE tunnel end-node and the service provider's provisioning infrastructure so that softwire services can be provided in mixed-mode environments.
The following rationale has been adopted for this document:
The solutions which have been proposed within the Softwire WG can be categorized into three main functional approaches, differentiated by the amount and type of state that the service provider needs to maintain within their network:
Several cases can be envisaged:
As this document describes a provisioning profile whereby a single CPE could be capable of supporting any, or multiple modes, the customer should not be required to have any knowledge of the capabilities and configuration of their CPE, or of their service provider's network.
The service provider, however, may have only a single mode enabled, or may have multiple modes, but with one preferred mode. For this reason, it is necessary to approach the configuration of CPEs from the standpoint of the service provider's network capabilities.
The functional elements for each of the solution modes are listed in Table 1:
Mode | Customer side | Network side |
---|---|---|
DS-Lite | B4 | AFTR |
Lw4o6 | lwB4 | lwAFTR |
MAP | MAP CE | MAP BR |
Table 2 describes each functional element:
Functional Element | Description |
---|---|
B4 | An IPv4-in-IPv6 tunnel endpoint; the B4 creates a tunnel to a pre-configured remote tunnel endpoint. |
AFTR | Provides both an IPv4-in-IPv6 tunnel endpoint and a NAT44 function implemented in the same node. |
lwB4 | A B4 which supports port-restricted IPv4 addresses. An lwB4 MAY also provide a NAT44 function. |
lwAFTR | An IPv4-in-IPv6 tunnel endpoint which maintains per-subscriber address binding. Unlike the AFTR, it MUST NOT perform a NAPT44 function. |
MAP CE | A B4 which supports port-restricted IPv4 addresses. It MAY be co-located with a NAT44. A MAP CE forwards IPv4-in-IPv6 packets using provisioned mapping rules to derive the remote tunnel endpoint. |
MAP BR | An IPv4-in-IPv6 tunnel endpoint. A MAP BR forwards IPv4-in-IPv6 packets following pre-configured mapping rules. |
Table 3 identifies features required by the customer end-node.
Functional Element | IPv4-in-IPv6 tunnel endpoint | Port-restricted IPv4 | Port-restricted NAT44 |
---|---|---|---|
B4 | Yes | N/A | No |
lwB4 | Yes | Yes | Optional |
MAP-E CE | Yes | Yes | Optional |
Table 4 identifies the provisioning information required for each solution mode.
Mode | Provisioning Information |
---|---|
DS-Lite | Remote IPv4-in-IPv6 Tunnel Endpoint Address |
Lw4o6 | Remote IPv4-in-IPv6 Tunnel Endpoint Address |
IPv4 Address | |
Port Set | |
MAP-E | Mapping Rules |
MAP Domain Parameters |
Note: MAP Mapping Rules are translated into the following configuration parameters: Set of remote IPv4-in-IPv6 tunnel endpoint addresses, IPv4 address and port set.
Note: Required provisioning information for each mode may also be represented as follows: DS-Lite: - Remote IPv4-in-IPv6 Tunnel Endpoint Lw4o6: - DS-Lite set of provisioning information - IPv4 address - Port set MAP-E: - Lw4o6 set of provisioning information - Forwarding mapping rules
The following two requirements must be met by the functional elements:
The generic provisioning logic is designed to meet the following requirements:
This section sketches a generic algorithm to be followed by a CPE supporting one or more of the modes listed above. Based on the retrieved information, the CPE will determine which mode to activate.
This section describes how the logic is implemented using DHCPv6 to provision the necessary parameters for Unified CPE configuration. Other provisioning mechanisms (e.g. static, PCP etc.) may be used instead of, or in addition to DHCPv6 to provision the CPE. DHCP-based configuration SHOULD be implemented by the customer end-node. The following two DHCPv6 options are used:
By default, the customer end-node SHOULD support DHCPv6 MAP options to provision IPv4-related connectivity parameters. If a dynamic port assignment scheme is adopted, [I-D.ietf-dhc-dhcpv4-over-dhcpv6] SHOULD be supported.
The following additional sub-options are used to convey the different possible configurations options for Binding Mode (using static or dynamic IPv4 addressing plus additional DHCPv6 options):
The customer end-node uses the DHCP Option Request Option (ORO) to request either one or both of these options depending on which modes it is capable of and configured to support.
The DHCP option(s) sent in the response allow the service provider to inform the customer end-node which operating mode to enable.
The following table shows the different DHCP options (and sub-options) that the service provider can supply in a response. The CPE's interpretation of the different Binding Options parameters are described below.
DHCP Option | Stateful Mode | Binding Mode | Stateless Mode |
---|---|---|---|
OPTION_AFTR_NAME | Yes | Yes | Yes |
Binding Option(s) | No | Yes | No |
OPTION_MAP_RULE | No | No | Yes |
OPTION_MAP_PORTPARAMS | No | Optional | Optional |
The customer side device MUST interpret the received DHCP configuration parameters according to the logic defined in Section 3.2:
From the service providers side, the following rule MUST be followed:
For all modes, the longest prefix match algorithm MUST be enforced to forward outbound IPv4 packets.
Specifically, this algorithm will:
The mechanism that is described here can be extended to cater for other IPv4 service continuity approaches, outside of those specifically covered in this document. In order to achieve this, the following rules MUST be applied (in addition to the generic CPE bootstrapping logic described in section 3.2 above):
The mechanism in extended by defining a new combination of configuration parameters, unique to that mode of operation so that the CPE can unambiguously determine which service continuity mode to configure. This could be based on a new combination of existing parameters, or on new parameters that are specific to the new continuity mode.
It is important to note that it is the presence, or absence of configuration parameters that are used to extend the Unified CPE model, not the value of any individual (or multiple) parameters.
Except for the less efficient port randomization and routing loops [RFC6324], stateless 4/6 solutions are expected to introduce no more security vulnerabilities than stateful ones. Because of their stateless nature, they may in addition, reduce denial of service opportunities. Security considerations defined in Section 11 of [RFC6333] should be taken into account.
This document does not require any action from IANA.
Many thanks to T. Tsou, O. Troan, W. Dec, M. Chen, for their review and comments.
Special thanks to S. Krishnan for the suggestions and guidance.
[RFC6334] | Hankins, D. and T. Mrugalski, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Option for Dual-Stack Lite", RFC 6334, August 2011. |
[I-D.ietf-softwire-public-4over6] | Cui, Y., Wu, J., Wu, P., Vautrin, O. and Y. Lee, "Public IPv4 over IPv6 Access Network", Internet-Draft draft-ietf-softwire-public-4over6-04, October 2012. |
[I-D.ietf-softwire-stateless-4v6-motivation] | Boucadair, M., Matsushima, S., Lee, Y., Bonness, O., Borges, I. and G. Chen, "Motivations for Carrier-side Stateless IPv4 over IPv6 Migration Solutions", Internet-Draft draft-ietf-softwire-stateless-4v6-motivation-05, November 2012. |
[I-D.ietf-dhc-dhcpv4-over-dhcpv6] | Sun, Q., Cui, Y., Siodelski, M., Krishnan, S. and I. Farrer, "DHCPv4 over DHCPv6 Transport", Internet-Draft draft-ietf-dhc-dhcpv4-over-dhcpv6-00, April 2013. |