ZeroConfNetworking

Differences between revisions 1 and 11 (spanning 10 versions)
Revision 1 as of 2006-11-08 02:09:11
Size: 2077
Editor: 207
Comment: initial note dump
Revision 11 as of 2006-11-09 02:36:46
Size: 5772
Editor: 207
Comment:
Deletions are marked like this. Additions are marked like this.
Line 7: Line 7:
 * '''Packages affected''': `avahi-autoipd`, `libnss-mdns`  * '''Packages affected''': `basefiles`, `dhclient`, `zeroconf`, `libnss-mdns`, `network-manager`, `avahi-autoipd`, `avahi-daemon`, `ifupdown`, `gnome-system-tools`
Line 10: Line 10:
This spec involves the proper handling of assigning link-local addresses, and using them successfully when no static configurations are used and no DHCP responses are seen. When a dynamic network configuration is desired and a local DHCP server is not available for a network, Ubuntu needs to correctly assign itself a link-local address. This is implemented by `avahi-autoipd`, but requires some additional configuration and packaging corrections to have the system behave in a fully correct way.
Line 13: Line 13:
Other operating system correctly use link-local addresses for communicating on adhoc networks or local LANs without a DHCP server. Ubuntu users will be much happier and more productive when they are effortlessly able to communicate with other device with link-local addresses.
Line 16: Line 17:
 1. Claudia and Mary set up an adhoc wireless network between between their laptops. They want to be able to communicate without needing to do anything special with interface address assignments.
 2. John's home server was booted and it got a link-local address. He adds a DHCP server to his network, and boots his laptop, which receives a regular DHCP-assigned address. He wants his server and laptop to be able to communicate without fiddling with their interfaces.
 3. Ellen uses a name server that makes a `.local` top-level-domain available. She upgrades her computer from Edgy to Feisty, where link-local addresses are assigned by default. She needs notification that the unicast `.local` TLD and the link-local `.local` domain conflict with each other, and offer her instructions on how to disable link-local networking.
Line 17: Line 22:

Up to version 6.10, Ubuntu does not create or use link-local addresses by default. Changes to implement this spec will be limited to making this functionality available without impacting the existing dynamic and static network assignments methods. The work will mostly surround `avahi-autoipd` and `libnss-mdns`, with supporting changes in related packages. Changes to, or enhancements of, DNS service-discovery are out of scope for this spec.
Line 20: Line 27:
 * avahi-autoipd
  * audit and promote to main (see http://avahi.org/wiki/SecurityConsiderations)
  * require both ll routes, as described in "Routes" at http://avahi.org/wiki/AvahiAutoipd
  * multiple interfaces need to be handled (dhclient must be taught?)
 * network manager
  * patch with proper avahi ll hooks, especially adhoc modes
 * remove zeroconf package from archive
 * libnss-mdns
  * start with version 0.8-5
  * audit and promote to main
  * read debian #393711 (pay attention to nsswitch.conf!)
 * avahi-daemon
  * enable by default
 * in /etc/network/interfaces add some comments on how to set up manual ll addresses correctly.
 * keep ".local" out of the dns search path
 * After coming up, interfaces must be able to correctly route traffic to the local network for the link-local IANA network (169.254.0.0/16).
 * Dynamic interfaces that do not get a DHCP address must assign themselves a link-local address.
 * The `.local` TLD must be resolvable via the link-local mDNS.
 * Users new to link-locale addressing need to be educated about the changes.
Line 38: Line 34:
=== Code ===

=== Data preservation and migration ===

== Unresolved issues ==

== BoF agenda and discussion ==
 * `base-files`:
  * add "link-local 169.254.0.0" to /etc/networks so that `route` will be less confusing to users
 * `dhclient` -- add hook for DNS changes to check for unicast "local" TLD
  * When a unicast `local` TLD is available, notify the user about the problem, and offer to fix it. Since this is not a compatible operational situation, the only sane thing to do is to disable Avahi entirely. With Avahi (and the desired libnss-mdns configuration) running, the unicast `local` domain would be totally unavailable to the user.
   {{{if ! host -t soa local. >/dev/null 2>&1; then NOTIFY; fi
}}}
 * `zeroconf` -- incompatible with avahi-autoipd
  * remove package from archive
 * `libnss-mdns` -- to resolve link-local `local` TLD
  * start with Debian version 0.8-5 (with Sjoerd's fixes), -6 has many fixes reverted
  * audit and promote to main
  * read [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393711 debian #393711]
   * audit for error conditions around automatic update of the `nsswitch.conf` 'hosts' line
   * build package with `--disable-legacy` (drops potentially dangerous ministack fall-back)
 * `network-manager`
  * when n-m brings up an adhoc network, make sure that avahi-autoipd is launched for the interface.
 * `avahi-autoipd` -- the actual core of ipv4ll assignment
  * audit and promote to main
 * `avahi-daemon`
  * enable by default and make sure that the check-box in network-admin shows the expected Avahi state.
 * `ifupdown`
  * All activated interfaces must add a 169.254.0.0/16 route to their local network. Those with multiple active interfaces will likely not be using ipv4ll in any meaningful way, so this won't break them any worse than they already are.
  * To bring up an ipv4ll address correctly with avahi-autoipd, a new network method for use in /etc/network/interfaces is needed. It should be called "ipv4ll". (Other existing methods are the common "dhcp", "static", etc.) This method will need to be taught to network-admin as well, and documented in the `interfaces(5)` manpage.
Line 47: Line 59:
Zeroconf is a collection of protocols including ipv4 link local, mdns, and dns service-discovery. Apple's implementation of zeroconf was named "Rendezvous", and was later renamed to "Bonjour". Avahi is a free software implementation of zeroconf. See http://avahi.org/wiki/AboutAvahi. Zeroconf is a collection of protocols including ipv4 link local networking, mDNS, and DNS service-discovery. Apple's implementation of zeroconf was originally named "Rendezvous" and was later renamed to "Bonjour". Avahi is a free software implementation of zeroconf. See http://avahi.org/wiki/AboutAvahi.
Line 49: Line 61:
IPv4 link-local addresses are in the 165.254.0.0/16 space.  * IPv4 link-local addresses are in the 165.254.0.0/16 space.
 * mDNS is DNS over multicast on the local network.
 * DNS-sd allows for service discovery using mDNS and unicast DNS (which is out of scope for this spec).
Line 51: Line 65:
mDNS is DNS over multicast on the local network. == Comments ==
 * To potentially assist in auditing Avahi, there are some items already available for review at http://avahi.org/wiki/SecurityConsiderations
Line 53: Line 68:
DNS-sd allows for service discovery using mDNS.

Please check the status of this specification in Launchpad before editing it. If it is Approved, contact the Assignee or another knowledgeable person before making changes.

Summary

When a dynamic network configuration is desired and a local DHCP server is not available for a network, Ubuntu needs to correctly assign itself a link-local address. This is implemented by avahi-autoipd, but requires some additional configuration and packaging corrections to have the system behave in a fully correct way.

Rationale

Other operating system correctly use link-local addresses for communicating on adhoc networks or local LANs without a DHCP server. Ubuntu users will be much happier and more productive when they are effortlessly able to communicate with other device with link-local addresses.

Use cases

  1. Claudia and Mary set up an adhoc wireless network between between their laptops. They want to be able to communicate without needing to do anything special with interface address assignments.
  2. John's home server was booted and it got a link-local address. He adds a DHCP server to his network, and boots his laptop, which receives a regular DHCP-assigned address. He wants his server and laptop to be able to communicate without fiddling with their interfaces.
  3. Ellen uses a name server that makes a .local top-level-domain available. She upgrades her computer from Edgy to Feisty, where link-local addresses are assigned by default. She needs notification that the unicast .local TLD and the link-local .local domain conflict with each other, and offer her instructions on how to disable link-local networking.

Scope

Up to version 6.10, Ubuntu does not create or use link-local addresses by default. Changes to implement this spec will be limited to making this functionality available without impacting the existing dynamic and static network assignments methods. The work will mostly surround avahi-autoipd and libnss-mdns, with supporting changes in related packages. Changes to, or enhancements of, DNS service-discovery are out of scope for this spec.

Design

  • After coming up, interfaces must be able to correctly route traffic to the local network for the link-local IANA network (169.254.0.0/16).
  • Dynamic interfaces that do not get a DHCP address must assign themselves a link-local address.
  • The .local TLD must be resolvable via the link-local mDNS.

  • Users new to link-locale addressing need to be educated about the changes.

Implementation

  • base-files:

    • add "link-local 169.254.0.0" to /etc/networks so that route will be less confusing to users

  • dhclient -- add hook for DNS changes to check for unicast "local" TLD

    • When a unicast local TLD is available, notify the user about the problem, and offer to fix it. Since this is not a compatible operational situation, the only sane thing to do is to disable Avahi entirely. With Avahi (and the desired libnss-mdns configuration) running, the unicast local domain would be totally unavailable to the user.

      • {{{if ! host -t soa local. >/dev/null 2>&1; then NOTIFY; fi

}}}

  • zeroconf -- incompatible with avahi-autoipd

    • remove package from archive
  • libnss-mdns -- to resolve link-local local TLD

    • start with Debian version 0.8-5 (with Sjoerd's fixes), -6 has many fixes reverted
    • audit and promote to main
    • read [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393711 debian #393711]

      • audit for error conditions around automatic update of the nsswitch.conf 'hosts' line

      • build package with --disable-legacy (drops potentially dangerous ministack fall-back)

  • network-manager

    • when n-m brings up an adhoc network, make sure that avahi-autoipd is launched for the interface.
  • avahi-autoipd -- the actual core of ipv4ll assignment

    • audit and promote to main
  • avahi-daemon

    • enable by default and make sure that the check-box in network-admin shows the expected Avahi state.
  • ifupdown

    • All activated interfaces must add a 169.254.0.0/16 route to their local network. Those with multiple active interfaces will likely not be using ipv4ll in any meaningful way, so this won't break them any worse than they already are.
    • To bring up an ipv4ll address correctly with avahi-autoipd, a new network method for use in /etc/network/interfaces is needed. It should be called "ipv4ll". (Other existing methods are the common "dhcp", "static", etc.) This method will need to be taught to network-admin as well, and documented in the interfaces(5) manpage.

Clarification of terminology

Zeroconf is a collection of protocols including ipv4 link local networking, mDNS, and DNS service-discovery. Apple's implementation of zeroconf was originally named "Rendezvous" and was later renamed to "Bonjour". Avahi is a free software implementation of zeroconf. See http://avahi.org/wiki/AboutAvahi.

  • IPv4 link-local addresses are in the 165.254.0.0/16 space.
  • mDNS is DNS over multicast on the local network.
  • DNS-sd allows for service discovery using mDNS and unicast DNS (which is out of scope for this spec).

Comments


CategorySpec

ZeroConfNetworking (last edited 2008-08-06 17:00:50 by localhost)