[Kea-users] KEA sends valid-lifetime = 0

[Darren Ankney]

Oh wow - I failed to notice that those two addresses were the same address
in what Veronique sent.

On Fri, Dec 2, 2022 at 1:15 PM Silvester van der Leer <svdleer at gmail.com>
wrote:

> Silvester van der Leer
> 7:13 PM (0 minutes ago)
> to Darren
> Hi,
>
> I've opened the issue at gitlab and contacted veronique since the issue we
> encounter is similar.
>
> In this case both IA_ADDR's IP's are the same, one with correct lifetime,
> and one with zero lifetime, which may cause the client to glitch (which
> happens in my case)
>
>
> On Fri, Dec 2, 2022 at 3:35 PM Darren Ankney <darren.ankney at gmail.com>
> wrote:
>
>> https://www.rfc-editor.org/rfc/rfc3315#section-22.6
>>
>> "In a message sent by a server to a client, the client MUST use the
>> values in the preferred and valid lifetime fields for the preferred
>> and valid lifetimes."
>>
>> I believe that the server is telling the client to not use the address
>> with the 0 length lifetime and instead use the other address.  Have a
>> look at the client messages and see if both IPs are listed or perhaps
>> only the IP that the server is sending 0 for is listed in the IANA.
>>
>> On Fri, Dec 2, 2022 at 9:27 AM Veronique Lefebure
>> <Veronique.Lefebure at cern.ch> wrote:
>> >
>> > For people who would encounter the same issue, see
>> https://gitlab.isc.org/isc-projects/kea/-/issues/2660
>> > ________________________________
>> > From: Kea-users <kea-users-bounces at lists.isc.org> on behalf of
>> Veronique Lefebure <veronique.lefebure at cern.ch>
>> > Sent: Thursday, January 27, 2022 3:31 PM
>> > To: kea-users at lists.isc.org <kea-users at lists.isc.org>
>> > Subject: [Kea-users] KEA sends valid-lifetime = 0
>> >
>> >
>> > Hi,
>> >
>> > For the following query:
>> >
>> > 16:24:15.730401 IP6 (hlim 1, next-header UDP (17) payload length: 143)
>> > cs-lab11-kea.dhcpv6-client > ff02::1:2.dhcpv6-server:
>> > [bad udp cksum 0xc2bb -> 0xa8e1!]
>> > dhcp6 renew (xid=50bedb
>> > (client-ID type 4)
>> > (server-ID hwaddr/time type 1 time 692127779 00259074ca68)
>> > (option-request DNS-server DNS-search-list DNS-server DNS-search-list
>> client-ID)
>> > (elapsed-time 0) (Client-FQDN)
>> > (IA_NA IAID:795336567 T1:3600 T2:5400(IA_ADDR xxxx::101:1 pltime:7200
>> vltime:7500))
>> > )
>> >
>> > I have observed a case where KEA dhcp6 returns the following:
>> >
>> > 16:24:16.359170 IP6 (hlim 64, next-header UDP (17) payload length: 171)
>> > gateway.dhcpv6-server > cs-lab11-kea.dhcpv6-client:
>> > [udp sum ok]
>> > dhcp6 reply (xid=50bedb
>> > (client-ID type 4)
>> > (server-ID hwaddr/time type 1 time 692127779 00259074ca68)
>> > (IA_NA IAID:795336567 T1:40 T2:100
>> > (IA_ADDR xxxx::101:1 pltime:120 vltime:120)
>> > (IA_ADDR xxxx::101:1 pltime:0 vltime:0))
>> > (DNS-search-list cern.ch.) (Client-FQDN))
>> >
>> > Where there are 2 IA_ADDR, the second one having a vltime of 0.
>> >
>> > Any idea how that can happen ?
>> >
>> > wireshark shows this:
>> >
>> > [...]
>> > Message type: Reply (7)
>> > Transaction ID: 0x52a6e8
>> > Client Identifier
>> > Server Identifier
>> > Identity Association for Non-temporary Address
>> > Option: Identity Association for Non-temporary Address (3)
>> > Length: 68
>> > xxx
>> > IAID: 2f67df77
>> > T1: 40
>> > T2: 100
>> > IA Address
>> > Option: IA Address (5)
>> > Length: 24
>> > Value: xxxx10100010000007800000078
>> > IPv6 address: 2001:1458:202:1d5::101:1 (xxxx::101:1)
>> > Preferred lifetime: 120
>> > Valid lifetime: 120
>> > IA Address
>> > Option: IA Address (5)
>> > Length: 24
>> > Value: xxxx10100010000000000000000
>> > IPv6 address: 2001:1458:202:1d5::101:1 (xxxx::101:1)
>> > Preferred lifetime: 0
>> > Valid lifetime: 0
>> > Domain Search List
>> > Fully Qualified Domain Name
>> >
>> > Thanks,
>> > Veronique
>> > --
>> > ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>> >
>> > To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>> >
>> > Kea-users mailing list
>> > Kea-users at lists.isc.org
>> > https://lists.isc.org/mailman/listinfo/kea-users
>> --
>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>
>> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>>
>> Kea-users mailing list
>> Kea-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/kea-users
>>
>
>
> --
> And there was silence
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20221202/0486b96d/attachment.htm>