> Dave is correct though that this assumes an engineering tradeoff; > but surely we don't have to design for the worst case as if it > was the typical case?
I agree with that. The concern (at least to me) is that
if you don't somehow assess whether a locator is
reachable, these schemes have the potential to latch on a
"down locator" (initially, or after a failure), and that
can cause a persistent failure. That failure is a new
failure mode for the Internet.
I'm also guessing that the procedure used to asses
locator liveness can use hints to avoid the asymptotic
bound (at least I would hope so). The "Possible
Optimizations" section of the draft outlines a few of
these.
I'll just note here that I'm not the only one concerned
with this property of loc/id split; draft-ietf-shim6-failure-detection
is designed to address exactly this concern.
Dave
signature.asc
Description: Digital signature
_______________________________________________ rrg mailing list [email protected] https://www.irtf.org/mailman/listinfo/rrg
