none yet                                                      A. Suhonen
Internet-Draft                         Tampere University of Technology,
Updates: 3484 (if approved)                                      Finland
Intended status: Experimental                              July 29, 2009
Expires: January 30, 2010


     Address Selection Using Source Address Specific Routing Tables
                         draft-axu-addr-sel-00

Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.  This document may contain material
   from IETF Documents or IETF Contributions published or made publicly
   available before November 10, 2008.  The person(s) controlling the
   copyright in some of this material may not have granted the IETF
   Trust the right to allow modifications of such material outside the
   IETF Standards Process.  Without obtaining an adequate license from
   the person(s) controlling the copyright in such materials, this
   document may not be modified outside the IETF Standards Process, and
   derivative works of it may not be created outside the IETF Standards
   Process, except to format it for publication as an RFC or to
   translate it into languages other than English.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on January 30, 2010.

Copyright Notice

   Copyright (c) 2009 IETF Trust and the persons identified as the
   document authors.  All rights reserved.




Suhonen                 Expires January 30, 2010                [Page 1]


Internet-Draft    Routing Table Based Address Selection        July 2009


   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info).
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.

Abstract

   RFC 3484 defines two algorithms for default source and destination
   address selection, but it has several shortcomings as specified in
   RFC 5220.  RFC 5221 lists some requirements for any attempts to
   update the original RFC.  This document specifies an alternate
   address selection algorithm to fulfill those requirements.


Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  4
     1.1.  Requirements Language  . . . . . . . . . . . . . . . . . .  4
   2.  Filter Algorithm . . . . . . . . . . . . . . . . . . . . . . .  4
     2.1.  Link Local Scope . . . . . . . . . . . . . . . . . . . . .  5
     2.2.  Autoconfiguration for Global Scope . . . . . . . . . . . .  5
     2.3.  Site Local Scope . . . . . . . . . . . . . . . . . . . . .  5
     2.4.  Additional Filter Constraints  . . . . . . . . . . . . . .  6
     2.5.  Forwarding . . . . . . . . . . . . . . . . . . . . . . . .  6
     2.6.  Dynamic Routing Protocols  . . . . . . . . . . . . . . . .  6
   3.  Precedences and Labels . . . . . . . . . . . . . . . . . . . .  7
     3.1.  Route and Table Preferences  . . . . . . . . . . . . . . .  7
       3.1.1.  Local and Link Local Scope Routing Tables  . . . . . .  8
       3.1.2.  Global Scope Routing Tables  . . . . . . . . . . . . .  8
       3.1.3.  Transition Technique Routing Tables  . . . . . . . . .  8
       3.1.4.  IPv4 Compatible Routing Tables . . . . . . . . . . . .  9
       3.1.5.  Reachability Information . . . . . . . . . . . . . . .  9
   4.  RFC3484 Rule Comparison  . . . . . . . . . . . . . . . . . . .  9
   5.  RFC5220 Concerns . . . . . . . . . . . . . . . . . . . . . . .  9
     5.1.  Multiple Routers on a Single Interface . . . . . . . . . .  9
     5.2.  Ingress Filtering Problem  . . . . . . . . . . . . . . . .  9
     5.3.  Half-Closed Network Problem  . . . . . . . . . . . . . . .  9
     5.4.  Combined Use of Global and ULA . . . . . . . . . . . . . . 10
     5.5.  Site Renumbering . . . . . . . . . . . . . . . . . . . . . 10
     5.6.  Multicast Source Address Selection . . . . . . . . . . . . 10
     5.7.  Temporary Address Selection  . . . . . . . . . . . . . . . 10
     5.8.  IPv4 or IPv6 Prioritization  . . . . . . . . . . . . . . . 11
     5.9.  ULA and IPv4 Dual-Stack Environment  . . . . . . . . . . . 11
     5.10. ULA or Global Prioritization . . . . . . . . . . . . . . . 11
   6.  RFC5221 Requirements . . . . . . . . . . . . . . . . . . . . . 11
     6.1.  Effectiveness  . . . . . . . . . . . . . . . . . . . . . . 11
     6.2.  Timing . . . . . . . . . . . . . . . . . . . . . . . . . . 11



Suhonen                 Expires January 30, 2010                [Page 2]


Internet-Draft    Routing Table Based Address Selection        July 2009


     6.3.  Dynamic Behavior Update  . . . . . . . . . . . . . . . . . 11
     6.4.  Node-Specific Behavior . . . . . . . . . . . . . . . . . . 12
     6.5.  Application-Specific Behavior  . . . . . . . . . . . . . . 12
     6.6.  Multiple Interface . . . . . . . . . . . . . . . . . . . . 12
     6.7.  Central Control  . . . . . . . . . . . . . . . . . . . . . 12
     6.8.  Next-Hop Selection . . . . . . . . . . . . . . . . . . . . 12
     6.9.  Compatibility with RFC 3493  . . . . . . . . . . . . . . . 12
     6.10. Compatibility and Interoperability with RFC 3484 . . . . . 13
     6.11. Security . . . . . . . . . . . . . . . . . . . . . . . . . 13
   7.  Implementation Issues and Other Concerns . . . . . . . . . . . 13
     7.1.  Low Memory and Power Concerns  . . . . . . . . . . . . . . 13
     7.2.  Differing Larger Scopes  . . . . . . . . . . . . . . . . . 13
     7.3.  Connection Pooling . . . . . . . . . . . . . . . . . . . . 14
     7.4.  Using Just One Table with Tags . . . . . . . . . . . . . . 14
   8.  Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 14
   9.  IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 15
   10. Security Considerations  . . . . . . . . . . . . . . . . . . . 15
     10.1. RFC5220 Considerations . . . . . . . . . . . . . . . . . . 15
     10.2. RFC5221 Requirements . . . . . . . . . . . . . . . . . . . 15
       10.2.1. List of threats introduced by new
               address-selection mechanism  . . . . . . . . . . . . . 15
       10.2.2. List of recommendations in which security
               mechanism should be applied  . . . . . . . . . . . . . 15
   11. References . . . . . . . . . . . . . . . . . . . . . . . . . . 15
     11.1. Normative References . . . . . . . . . . . . . . . . . . . 15
     11.2. Informative References . . . . . . . . . . . . . . . . . . 16
   Appendix A.  Routing Table Example . . . . . . . . . . . . . . . . 16
     A.1.  Before . . . . . . . . . . . . . . . . . . . . . . . . . . 16
     A.2.  After Conversion . . . . . . . . . . . . . . . . . . . . . 17
   Author's Address . . . . . . . . . . . . . . . . . . . . . . . . . 19





















Suhonen                 Expires January 30, 2010                [Page 3]


Internet-Draft    Routing Table Based Address Selection        July 2009


1.  Introduction

   [RFC3484] defines default address selection rules for IPv6 and IPv4.
   Several shortcomings in the original address selection rules have
   been identified in [RFC5220] and its sister document [RFC5221]
   specifies some requirements for any attempts to update the original
   address selection algorithm.

   A further concern comes from multipath protocols.  When SCTP
   [RFC2960], for example, finds that its active source destination
   address pair is no longer functional, it will need to start searching
   for a new one.

   The communicating hosts may both have a dozen addresses so it might
   take unacceptably long to iterate through all combinations before
   finding a functional pair.  On the other hand, many of the invalid
   combinations could be filtered out using this algorithm, making the
   process noticeably faster.

1.1.  Requirements Language

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 [RFC2119].


2.  Filter Algorithm

   When a host has several addresses, they SHOULD each be associated
   with their own routing tables.  When selecting source and destination
   addresses, the first stage is to filter out combinations where the
   routing table attached with the source (local) address does not have
   a valid route for the destination (remote) address.  In other words,
   if a destination address can't be found from the routing table for a
   given source address the system MUST discard that destination address
   for that source address.

   If none of the possible destination addresses can be found in the
   routing table for a source address, then that source address MUST be
   discarded for those destination addresses.

   One side effect of this filter algorithm is that it doesn't need to
   know anything about scopes.  The routing tables associated with
   source address candidates will determine what destination addresses
   they are usable with.  This effect is demonstrated below and later in
   this document.





Suhonen                 Expires January 30, 2010                [Page 4]


Internet-Draft    Routing Table Based Address Selection        July 2009


2.1.  Link Local Scope

   The routing table associated with a link local address (e.g.
   169.254.123.45%le0) SHOULD only have one external unicast route, the
   link local network for that link (e.g. 169.254.0.0%le0 /16).  In
   addition, if the host supports multicast on this link, a route for
   the local scope multicast space SHOULD also appear in this table.

   This means that the link local address is usable only with other link
   local addresses on the same link.

   The localhost addresses and prefixes (127.0.0.1/8 and ::1/128) SHOULD
   be treated like link local scope in this algorithm.

2.2.  Autoconfiguration for Global Scope

   When addresses are assigned to interfaces dynamically through
   stateless or stateful autoconfiguration the process usually also
   yields a default route.  That default route SHOULD be placed only
   into the routing table associated with that address.  In addition, if
   the host and network support multicast, a route for the global scope
   multicast space SHOULD also appear in this table.

   This usually means that the next hop of that default route will only
   be useable with the source address learned from that default router.

   Some autoconfiguration methods (see [RFC3442] and [RFC4191]) can be
   used to communicate other routes in addition to the default route.
   Those routes SHOULD likewise be added only into the routing table
   associated with the address configured using that same interchange.

   Examples of autoconfiguration methods include RARP, DHCPv4, ICMPv6
   RA, DHCPv6, Teredo, 6to4, ISATAP, PPP, mDNS.

2.3.  Site Local Scope

   The routing tables for site local addresses SHOULD have routes for
   site local address space.  They SHOULD NOT have the default route, so
   that they would be automatically eliminated when selecting address
   pairs for site external communication.

   However, if the site edge automatically translates site local
   addresses to global addresses, the routing tables associated with
   site local scope addresses MAY have the default route.







Suhonen                 Expires January 30, 2010                [Page 5]


Internet-Draft    Routing Table Based Address Selection        July 2009


2.4.  Additional Filter Constraints

   The address selection algorithm MAY also be given additional filter
   constraints, such as "use only link#3" or "do not use next-hop
   10.0.0.1".  [RFC5014] specifies an interface that does something very
   similar.

   Work is going on in the MIF-wg [I-D.blanchet-mif-problem-statement]
   to tie address selection and next-hop selection with DNS resolver
   selection and other similar resources.  That is, when using the DNS
   resolvers received from one DHCP server, the terminal should also
   always use the default route received from that DHCP server.

   This algorithm supports those efforts by making it possible to
   restrict a process to one routing table for both address resolution
   and selection.

2.5.  Forwarding

   If a host is configured to forward packets between networks, it
   SHOULD combine the routing tables for the networks in question into
   one.  Link local scope tables MUST NOT be combined.

   If the host has multiple addresses from different global scope
   prefixes then system administration MAY specify which addresses are
   combined to form routing tables.  The resulting functionality
   resembles the VRF functionality found in some modern routers.

   One purpose behind this algorithm is to move source routing burden
   from the network to the host.  So if a router wants to advertise two
   (or more) prefixes on the subnet, but to keep their routing separate,
   it should use different link local and link layer addresses when
   advertising them.  It can then choose the correct VRF to forward a
   packet depending on which link layer address it received it on.

2.6.  Dynamic Routing Protocols

   Hosts don't usually run dynamic routing protocols, but since they
   sometimes do, this subsection is included for completeness.

   Dynamic routing protocol instances are usually bound to links or
   interfaces.  With this algorithm network administrators MAY bind
   routing protocol instances to specific addresses or prefixes on a
   link and the routing tables associated with them.  The routing
   protocol instance MUST update only the routing table it is associated
   with.

   A reasonable default setting is that all addresses that are not link



Suhonen                 Expires January 30, 2010                [Page 6]


Internet-Draft    Routing Table Based Address Selection        July 2009


   local are associated with the routing protocol instance.  Thus, they
   will share a routing table.

   If the network administration wants to separate traffic belonging to
   different upstream operator prefixes, it may wish to run separate
   routing protocol instances throughout the network for different
   upstream prefixes.


3.  Precedences and Labels

   TBD

   My original thought was to follow the metrics systems of the original
   RFC here, since candidate filtering and proper next hop selection
   were my primary concerns.  However, it might be a good idea to just
   rethink the issue one more time.

   Perhaps it might be a good idea to associate preferences with
   individual routes and/or whole routing tables.  In that case, the
   routing table lookup performed in the filtering phase would also
   yield the precedence of the address in addition to next-hop
   information.

   The label abstraction used by the original RFC loosely corresponds to
   the routing table abstraction in this algorithm.  That is, different
   scopes had different labels in [RFC3484] but in this algorithm
   different scopes SHOULD have their own routing tables.

   The rest of this section outlines one approach to sorting addresses
   by preference.

3.1.  Route and Table Preferences

   Each routing table has a default precedence, meaning all routes added
   to that table will have that precedence in the absence of a specific
   precedence.

   This precedence MUST be used to sort the source and destination
   address pairs according to preference.  In effect, the precedence is
   for the address pair, not for a single address.

   When two routes have the same precedence, their prefix lengths MUST
   be compared and the longer prefix MUST be considered more preferable.

   The algorithm normally performs both source and destination address
   selection simultaneously and efficiently.




Suhonen                 Expires January 30, 2010                [Page 7]


Internet-Draft    Routing Table Based Address Selection        July 2009


   In order to perform source address selection, only one destination
   address SHOULD be presented to the algorithm, which will then look
   for the address in all tables and sort the source addresses where it
   was found according to the precedences.

   In order to perform destination address selection, only one source
   address SHOULD be presented to the algorithm along with the set of
   destination addresses.  The algorithm will then look for all the
   given destination addresses in the table associated with the source
   address and sort the results according to the precedences.

3.1.1.  Local and Link Local Scope Routing Tables

   The default precedence for all local and link local scope route
   entries SHOULD be 50.

3.1.2.  Global Scope Routing Tables

   The default precedence for all global scope route entries SHOULD be
   40.

   System or network administrators or operating systems MAY alter this
   default precedence to account for things like link speeds.  Such
   environmental precedence modifiers SHOULD NOT alter the precedence by
   more than +-4.

   The system MAY automatically add depreference routes to global scope
   routing tables.  These routes will cover address space reserved for
   transition techniques, such as 2002::/16 (FIXME: add xrefs) and
   2001::/32.  They SHOULD have the same next-hop information as the
   default route in the same table, but their precedence SHOULD be 15.

   The system MAY automatically add blackhole routes to global scope
   routing tables for illegal address combinations.  An example of such
   an illegal combination is IPv6 prefix 2002:a00::/24, which
   corresponds to 6to4 addresses generated from IPv4 addresses inside
   10.0.0.0/8 which can't be used on the Internet.

3.1.3.  Transition Technique Routing Tables

   The default precedence for all route entries for source addresses
   generated through transition techniques SHOULD be 30.

   The transition table SHOULD NOT of course have a depreference route
   for its own address space.  Instead, the precedence of the route for
   its own address space SHOULD be 35.

   Individual transition techniques or the system administrator MAY



Suhonen                 Expires January 30, 2010                [Page 8]


Internet-Draft    Routing Table Based Address Selection        July 2009


   specify different default precedences to establish relative
   preferences between transition techniques or the proxies/servers
   associated with them.

3.1.4.  IPv4 Compatible Routing Tables

   The default precedence for all IPv4 compatible global scope route
   entries SHOULD be 20.

3.1.5.  Reachability Information

   If the next-hop information associated with a route in any table has
   been found unreachable or the interface link is down the precedence
   of that route MAY be temporarily dropped to zero until it works
   again.


4.  RFC3484 Rule Comparison

   The algorithm defined by [RFC3484] uses a set of rules to perform its
   function.  Those rules are compared to this algorithm in this
   section.

   FIXME: write this section


5.  RFC5220 Concerns

   [RFC5220] presents several problems and issues with the original
   default address selection algorithm.  The following subsections
   address these issues.

5.1.  Multiple Routers on a Single Interface

   This problem was one of the starting points for the development of
   this algorithm.  This algorithm solves the problem by having separate
   routing tables for addresses learned from different routers.

5.2.  Ingress Filtering Problem

   This problem was one of the starting points for the development of
   this algorithm.  This algorithm solves the problem by having separate
   routing tables for different addresses.

5.3.  Half-Closed Network Problem

   This problem was one of the starting points for the development of
   this algorithm.  This algorithm solves the problem by having separate



Suhonen                 Expires January 30, 2010                [Page 9]


Internet-Draft    Routing Table Based Address Selection        July 2009


   routing tables for different addresses.

   System or network administration MUST specify allowed or disallowed
   connections by modifying the routing tables.

5.4.  Combined Use of Global and ULA

   This algorithm solves the problem by having separate routing tables
   for different addresses.  Scope of address usage is controlled by the
   routing tables.

   Implementations MAY recognize ULA addresses and other site local
   addresses as scopes of their own, and treat them properly when
   autogenerating the routing tables.

   System or network administration MUST specify allowed or disallowed
   address pair selection by modifying the routing tables.

5.5.  Site Renumbering

   When the autoconfiguration client discovers that a prefix or address
   has been deprecated, it SHOULD drop the route precedences for all the
   routes associated with the deprecated resource to zero.

   When such deprecated routing information finally times out and is no
   longer in use, the routing table associated with it MAY be removed
   entirely.

5.6.  Multicast Source Address Selection

   TBD

5.7.  Temporary Address Selection

   Conceivably temporary addresses could be associated with routing
   tables of their own, instead of sharing routing tables with the
   addresses used to generate the temporary addresses.

   The precedences for the table for a temporary address would be lower
   than that of a similar but more permanent address.  Clients wishing
   to make use of the temporary address would add appropriate
   constraints to their address selection.

   Alternatively, if the system or network administration wishes that
   the host use a temporary address with some certain destination
   network, a route to that network could be added to the routing table
   for the temporary address with a higher than normal precedence.




Suhonen                 Expires January 30, 2010               [Page 10]


Internet-Draft    Routing Table Based Address Selection        July 2009


5.8.  IPv4 or IPv6 Prioritization

   This is a configuration issue with the routing tables.

   Connection pooling, as specified in Section 7.3, could mitigate this
   problem.

5.9.  ULA and IPv4 Dual-Stack Environment

   This special case is easily handled by omitting the default route for
   the routing table for ULA addresses.

5.10.  ULA or Global Prioritization

   Already covered in Section 5.4.


6.  RFC5221 Requirements

   [RFC5221] defines a set of requirements for the address selection
   algorithm.  The subsection headings used in that document have been
   copied here and an explanation of how this algorithm deals with each
   issue is given.

6.1.  Effectiveness

   The effectiveness of the proposed solution to solve problems
   presented in [RFC5220] is covered by Section 5.

6.2.  Timing

   This algorithm relies on other methods and protocols to submit
   address selection configuration and information and to place it in
   the routing table.

   Once the routing table is updated, the address selection algorithm
   will start making decisions based on the new information.

6.3.  Dynamic Behavior Update

   From the point of view of this algorithm, this problem is a feature
   of autoconfiguration methods.  If the autoconfiguration methods
   rewrite routing tables, the address selection algorithm will always
   use the updated information when it's invoked.







Suhonen                 Expires January 30, 2010               [Page 11]


Internet-Draft    Routing Table Based Address Selection        July 2009


6.4.  Node-Specific Behavior

   From the point of view of this algorithm, this problem is a feature
   of autoconfiguration methods.  This algorithm will happily make
   address selection decisions according to any input it is given.

6.5.  Application-Specific Behavior

   Additional filter constraints from Section 2.4 can be used to
   influence address selection per application.

6.6.  Multiple Interface

   This algorithm doesn't differenciate between cases where a host has
   multiple interfaces and where it has multiple prefixes on a single
   interface.  If it solves a problem satisfactorily for one case, it
   solves it identically for the other case as well.

6.7.  Central Control

   This algorithm doesn't specify new methods for central control.  It
   does, however, work well with other protocols that provide methods of
   central control, such as routing protocols.

6.8.  Next-Hop Selection

   The next-hop and interface used is a side product of the source
   address specific routing table lookup, which is performed in the
   filtering stage.

   A very pleasing feature of this algorithm is that there can be
   multiple routers advertising different prefixes on the same subnet,
   and this algorithm will still select proper address pairs and next-
   hops to satisfy any SAVI requirements.

6.9.  Compatibility with RFC 3493

   TBD

   On first impression, this algorithm shouldn't have any impact on the
   Socket API.  Then again, routing table index could be referenced as
   part of some process.

   Solaris, for example, creates new alias-interfaces for each new
   address assigned to a physical interface.  So if_index could also be
   used to uniquely identify a source address specific routing table on
   that platform.  Other operating systems do not work the same way.




Suhonen                 Expires January 30, 2010               [Page 12]


Internet-Draft    Routing Table Based Address Selection        July 2009


6.10.  Compatibility and Interoperability with RFC 3484

   When a host implementing this address selection algorithm and a host
   implementing the [RFC3484] algorithm interact, this algorithm will
   become constrained by the choices made by the peer.

6.11.  Security

   Security issues raised in [RFC5221] are covered by Section 10.2.


7.  Implementation Issues and Other Concerns

   Some popular operating systems already implement all the features
   required to implement this algorithm.  In such cases all that is
   required is to integrate the features together.

   The trickiest feature required by this algorithm is probably support
   for multiple routing tables.  This may also create backward
   compatibility issues in some implementations.  More discussion may be
   required here.

7.1.  Low Memory and Power Concerns

   The biggest worry is that creating lots of routing tables will waste
   memory and power.  However, when compared to the old way (see
   Appendix A), memory consumption doesn't explode.  Every route that
   was present in the monolithic routing table will usually be present
   in only one source address specific routing table.

   CGAs (ADD XREF) MAY reuse the same routing table.

7.2.  Differing Larger Scopes

   The default route for global scope addresses is 0::0/0, but this
   route will also cover addresses of potentially incompatible scopes.
   For example, the basic algorithm would accept a link local
   destination address with a global scope source address.

   One way to prevent this would be to add blackhole routes into the
   routing tables of global scope addresses for address space belonging
   to incompatible scopes.  The filter algorithm SHOULD treat a
   blackhole route as an indication that no valid route was found for
   addresses matching the blackhole in that table.







Suhonen                 Expires January 30, 2010               [Page 13]


Internet-Draft    Routing Table Based Address Selection        July 2009


7.3.  Connection Pooling

   When trying to establish a new connection, the stack MAY send open
   packets to all source/destination/nexthop combinations that pass the
   filter stage at a pace of three per second until it receives a
   response.

   When the connection is established the addresses are fixed (for non-
   multipathing protocols, such as TCP).

   If the peer also responds to the other connection attempts after the
   first connection is established, those connections MAY either be
   reset immediately, or the stack MAY pool them for a short while in an
   incomplete handshake state, in case some application tries to open an
   identical socket.

   This would benefit applications such as web browsers, mail transfer
   agents and database clients, which routinely create more than one
   connection between the same two hosts and the same destination port.

   It would also benefit dual stacked or multi-homed hosts where some of
   the addresses or networks are misconfigured and don't work.

7.4.  Using Just One Table with Tags

   It is possible to implement this algorithm with just one routing
   table, if tags or bitfields are used to identify which routing table
   each route really belongs to.

   However, since a less specific route in one table can have higher
   precedence than a more specific route in another table, care must be
   taken in the implementation.

   It is also possible to implement this algorithm without interfering
   with the actual routing table at all, by just mirroring all the
   routing table information and changes in a policy table used by this
   algorithm only.


8.  Acknowledgements

   This document was written using the template derived from an initial
   version written by Pekka Savola and contributed by him to the xml2rfc
   project.

   Thanks to the following people for giving feedback during the writing
   of this document: Jari Arkko, Jan Melen, Arifumi Matsumoto, James
   Morse, .



Suhonen                 Expires January 30, 2010               [Page 14]


Internet-Draft    Routing Table Based Address Selection        July 2009


9.  IANA Considerations

   This document has no IANA Actions.


10.  Security Considerations

10.1.  RFC5220 Considerations

   Section 4 of [RFC5220] raises a concern that a malicious attacker can
   gather information about addresses connected to the target host by
   triggering the address selection algorithm on the target host by
   various methods and listening to what candidates it produces.

   This algorithm doesn't completely remove that possibility, but due to
   the filtering stage, the attacker can only gain information on
   addresses routable to the address used by the attacker.

10.2.  RFC5221 Requirements

   Section 3 of [RFC5221] lists two security concerns which are dealt
   with in subsections below.

10.2.1.  List of threats introduced by new address-selection mechanism

   This specification relies on existing autoconfiguration methods and
   routing protocols to distribute address selection hints.  Each of
   those SHOULD have their own methods to combat leakage, hijacking and
   denial of service.

10.2.2.  List of recommendations in which security mechanism should be
         applied

   This specification relies on existing autoconfiguration methods and
   routing protocols to distribute address selection hints.  Each of
   those SHOULD have their own methods to combat leakage, hijacking and
   denial of service.


11.  References

11.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC2960]  Stewart, R., Xie, Q., Morneault, K., Sharp, C.,
              Schwarzbauer, H., Taylor, T., Rytina, I., Kalla, M.,



Suhonen                 Expires January 30, 2010               [Page 15]


Internet-Draft    Routing Table Based Address Selection        July 2009


              Zhang, L., and V. Paxson, "Stream Control Transmission
              Protocol", RFC 2960, October 2000.

   [RFC3442]  Lemon, T., Cheshire, S., and B. Volz, "The Classless
              Static Route Option for Dynamic Host Configuration
              Protocol (DHCP) version 4", RFC 3442, December 2002.

   [RFC3484]  Draves, R., "Default Address Selection for Internet
              Protocol version 6 (IPv6)", RFC 3484, February 2003.

   [RFC4191]  Draves, R. and D. Thaler, "Default Router Preferences and
              More-Specific Routes", RFC 4191, November 2005.

   [RFC5220]  Matsumoto, A., Fujisaki, T., Hiromi, R., and K. Kanayama,
              "Problem Statement for Default Address Selection in Multi-
              Prefix Environments: Operational Issues of RFC 3484
              Default Rules", RFC 5220, July 2008.

   [RFC5221]  Matsumoto, A., Fujisaki, T., Hiromi, R., and K. Kanayama,
              "Requirements for Address Selection Mechanisms", RFC 5221,
              July 2008.

11.2.  Informative References

   [I-D.blanchet-mif-problem-statement]
              Blanchet, M. and P. Seite, "Multiple Interfaces Problem
              Statement", draft-blanchet-mif-problem-statement-01 (work
              in progress), June 2009.

   [RFC5014]  Nordmark, E., Chakrabarti, S., and J. Laganier, "IPv6
              Socket API for Source Address Selection", RFC 5014,
              September 2007.


Appendix A.  Routing Table Example

   This section demonstrates how this algorithm affects the routing
   table of a multi-homed host.  Appendix A.1 shows the routing table
   using only methods without this algorithm.  Appendix A.2 shows the
   routing tables produced on the same host if this algorithm is
   applied.

A.1.  Before

   This routing table was initially copied from a system running Linux
   2.6.25.  The addresses were then greatly simplified to make the table
   fit better on the page.




Suhonen                 Expires January 30, 2010               [Page 16]


Internet-Draft    Routing Table Based Address Selection        July 2009


      +--------------------------------+----------+--------+--------+
      | Network                        | Next-Hop | Link   | Metric |
      +--------------------------------+----------+--------+--------+
      | 2001::/32                      | ::       | teredo | 256    |
      | 2001:db8:1::/64                | ::       | eth0   | 256    |
      | 2001:db8:2::/64                | ::       | eth1   | 256    |
      | fe80::/64                      | ::       | teredo | 256    |
      | fe80::/64                      | ::       | eth0   | 256    |
      | fe80::/64                      | ::       | eth1   | 256    |
      | ::/0                           | ::       | teredo | 1029   |
      | ::/0                           | fe80::13 | eth0   | 1024   |
      | ::/0                           | fe80::ce | eth1   | 1024   |
      | ::/0                           | ::       | lo     | -1 !U  |
      | ::1/128                        | ::       | lo     | 0      |
      | 2001:db8:1:0:a00:ff:fedc:a/128 | ::       | lo     | 0      |
      | 2001:db8:2:0:200:ff:fec4:b/128 | ::       | lo     | 0      |
      | 2001:0:c200:201::3/128         | ::       | lo     | 0      |
      | fe80::a00:ff:fedc:a/128        | ::       | lo     | 0      |
      | fe80::200:ff:fec4:b/128        | ::       | lo     | 0      |
      | fe80::ffff:ffff:ffff/128       | ::       | lo     | 0      |
      +--------------------------------+----------+--------+--------+

                 Table 1: Routing Table w/o Modifications

   "!U" after metric denotes unreachable or blackhole routes.

A.2.  After Conversion

   These tables contain and implement just the basic idea.  Thus the
   combined size of these tables is equal to Table 1.  Optional
   improvements are presented in the next subsection.

                  +---------+----------+------+--------+
                  | Network | Next-Hop | Link | Metric |
                  +---------+----------+------+--------+
                  | ::/0    | ::       | lo   | -1 !U  |
                  | ::1/128 | ::       | lo   | 50     |
                  +---------+----------+------+--------+

                      Table 2: Routing Table for ::1











Suhonen                 Expires January 30, 2010               [Page 17]


Internet-Draft    Routing Table Based Address Selection        July 2009


          +------------------------+----------+--------+--------+
          | Network                | Next-Hop | Link   | Metric |
          +------------------------+----------+--------+--------+
          | 2001::/32              | ::       | teredo | 35     |
          | ::/0                   | ::       | teredo | 30     |
          | 2001:0:c200:201::3/128 | ::       | lo     | 50     |
          +------------------------+----------+--------+--------+

           Table 3: Routing Table for 2001:0:c200:201::3%teredo

         +--------------------------+----------+--------+--------+
         | Network                  | Next-Hop | Link   | Metric |
         +--------------------------+----------+--------+--------+
         | fe80::/64                | ::       | teredo | 50     |
         | fe80::ffff:ffff:ffff/128 | ::       | lo     | 50     |
         +--------------------------+----------+--------+--------+

          Table 4: Routing Table for fe80::ffff:ffff:ffff%teredo

       +--------------------------------+----------+------+--------+
       | Network                        | Next-Hop | Link | Metric |
       +--------------------------------+----------+------+--------+
       | 2001:db8:1::/64                | ::       | eth0 | 40     |
       | ::/0                           | fe80::13 | eth0 | 40     |
       | 2001:db8:1:0:a00:ff:fedc:a/128 | ::       | lo   | 50     |
       +--------------------------------+----------+------+--------+

        Table 5: Routing Table for 2001:db8:1:0:a00:ff:fedc:a%eth0

          +-------------------------+----------+------+--------+
          | Network                 | Next-Hop | Link | Metric |
          +-------------------------+----------+------+--------+
          | fe80::/64               | ::       | eth0 | 50     |
          | fe80::a00:ff:fedc:a/128 | ::       | lo   | 50     |
          +-------------------------+----------+------+--------+

            Table 6: Routing Table for fe80::a00:ff:fedc:a%eth0

       +--------------------------------+----------+------+--------+
       | Network                        | Next-Hop | Link | Metric |
       +--------------------------------+----------+------+--------+
       | 2001:db8:2::/64                | ::       | eth1 | 40     |
       | 2001:db8:2:0:200:ff:fec4:b/128 | ::       | lo   | 50     |
       | ::/0                           | fe80::ce | eth1 | 40     |
       +--------------------------------+----------+------+--------+

        Table 7: Routing Table for 2001:db8:2:0:200:ff:fec4:b%eth1




Suhonen                 Expires January 30, 2010               [Page 18]


Internet-Draft    Routing Table Based Address Selection        July 2009


          +-------------------------+----------+------+--------+
          | Network                 | Next-Hop | Link | Metric |
          +-------------------------+----------+------+--------+
          | fe80::/64               | ::       | eth1 | 50     |
          | fe80::200:ff:fec4:b/128 | ::       | lo   | 50     |
          +-------------------------+----------+------+--------+

            Table 8: Routing Table for fe80::200:ff:fec4:b%eth1


Author's Address

   Aleksi Suhonen
   Tampere University of Technology, Finland
   Korkeakoulunkatu 1
   Tampere  33720
   FI

   Phone: +358 45 670 2048
   Email: i-d-2009@ssd.axu.tm































Suhonen                 Expires January 30, 2010               [Page 19]