view Side-By-Side changes
Date: Tue, 09 Apr 2002 03:46:50 GMT Server: Apache/1.3.20 (Unix) Last-Modified: Mon, 20 Mar 1995 23:00:00 GMT ETag: "2f52d9-119ae-2f6e08f0" Accept-Ranges: bytes Content-Length: 72110 Connection: close Content-Type: text/plain INTERNET DRAFT Network Working Group S. Deering, Xerox PARCMarch 17, 1995Request for Comments: 1883 R. Hinden, IpsilonObsoletes: draft-hinden-ipng-ipv6-spec-00.txt EditorsNetworks Category: Standards Track December 1995 Internet Protocol, Version 6 (IPv6) Specification<draft-ietf-ipngwg-ipv6-spec-01.txt> Abstract This document specifies version 6 of the Internet Protocol, a proposed successor to IP version 4. Changes from the previous draft are listed in Appendix B.Status of this Memo This documentisspecifies anInternet-Draft. Internet-Drafts are working documents ofInternet standards track protocol for the InternetEngineering Task Force (IETF), its areas,community, andits working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six monthsrequests discussion andmay be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet- Drafts as reference material orsuggestions for improvements. Please refer tocite them other than as ``work in progress.'' To learnthe currentstatusedition ofany Internet-Draft, please check the ``1id-abstracts.txt'' listing contained intheInternet- Drafts Shadow Directories on ds.internic.net (US East Coast), nic.nordu.net (Europe), ftp.isi.edu (US West Coast), or munnari.oz.au (Pacific Rim)."Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.draft-ietf-ipngwg-ipv6-spec-01.txtAbstract This document specifies version 6 of the Internet Protocol (IPv6), also sometimes referred to as IP Next Generation or IPng. Deering & Hinden Standards Track [Page 1]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995Contents StatusTable ofthis Memo..............................................1Contents 1. Introduction..................................................3 2. Terminology...................................................4 3. IPv6 Header Format............................................5 4. IPv6 Extension Headers........................................6 4.1 Extension Header Order...................................8 4.2 Options..................................................9 4.3 Hop-by-Hop Options Header...............................11 4.4 Routing Header..........................................13 4.5 FragmentHeader.........................................16Header.........................................19 4.6Authentication Header...................................18 4.7Destination OptionsHeader..............................19 4.8Header..............................24 4.7 No NextHeader..........................................20Header..........................................25 5. Packet SizeIssues...........................................21Issues...........................................26 6. FlowLabels..................................................23Labels..................................................28 7.Priority.....................................................25Priority.....................................................30 8. Upper-Layer ProtocolIssues..................................26Issues..................................31 8.1 Upper-LayerChecksums...................................26Checksums...................................31 8.2 Maximum PacketLifetime.................................27Lifetime.................................32 8.3 Maximum Upper-Layer PayloadSize........................27Size........................32 Appendix A. Formatting Guidelines forOptions...................28 Appendix B. Changes from Previous Draft.........................31Options...................33 SecurityConsiderations.........................................33 Acknowledgments.................................................33 Document Editors' Addresses.....................................33 References......................................................34 draft-ietf-ipngwg-ipv6-spec-01.txtConsiderations.........................................36 Acknowledgments.................................................36 Authors' Addresses..............................................36 References......................................................37 Deering & Hinden Standards Track [Page 2]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 1. Introduction IP version 6 (IPv6) is a new version of the Internet Protocol, designed as a successor to IP version 4 (IPv4) [RFC-791]. The changes from IPv4 to IPv6 fall primarily into the following categories: o Expanded Addressing Capabilities IPv6 increases the IP address size from 32 bits to 128 bits, to support more levels of addressing hierarchy, a much greater number of addressable nodes, and simpler auto-configuration of addresses. The scalability of multicast routing is improved by adding a "scope" field to multicast addresses. And a new type of address calleda "regionan "anycast address" is defined, used toidentify topological regions rather than individualsend a packet to any one of a group of nodes. o Header Format Simplification Some IPv4 header fields have been dropped or made optional, to reduce the common-case processing cost of packet handling and to limit the bandwidth cost of the IPv6 header. o Improved Support for Extensions and Options Changes in the way IP header options are encoded allows for more efficient forwarding, less stringent limits on the length of options, and greater flexibility for introducing new options in the future. o Flow Labeling Capability A new capability is added to enable the labeling of packets belonging to particular traffic "flows" for which the sender requests special handling, such as non-default quality of service or "real-time" service. o Authentication and Privacy Capabilities Extensions to support authentication, data integrity, and (optional) data confidentiality are specified for IPv6. This document specifies the basic IPv6 header and theinitially-definedinitially- defined IPv6 extension headers and options. It also discusses packet size issues, the semantics of flow labels and priority, and the effects of IPv6 on upper-layer protocols.Other aspectsThe format and semantics of IPv6 addresses are specified separately inseparate documents, including the following: draft-ietf-ipngwg-ipv6-spec-01.txt[RFC-1884]. The IPv6 version of ICMP, which all IPv6 implementations are required to include, is specified in [RFC-1885]. Deering & Hinden Standards Track [Page 3]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995o IP Version 6 Addressing Architecture [IPV6-ADDR] o ICMP for the Internet Protocol Version 6 [IPV6-ICMP] o Transition Mechanisms for IPv6 Hosts and Routers[IPV6-TRAN]2. Terminology node - a device that implements IPv6. router - a node that forwards IPv6 packets not explicitly addressed to itself. [See Note below]. host - any node that is not a router. [See Note below]. upper layer - a protocol layer immediately above IPv6. Examples are transport protocols such as TCP and UDP, control protocols such as ICMP, routing protocols such as OSPF, and internet or lower-layer protocols being "tunneled" over (i.e., encapsulated in) IPv6 such as IPX, AppleTalk, or IPv6 itself. link - a communication facility or medium over which nodes can communicate at the link layer, i.e., the layer immediately below IPv6. Examples are Ethernets (simple or bridged); PPP links; X.25, Frame Relay, or ATM networks; and internet (or higher) layer "tunnels", such as tunnels over IPv4 or IPv6 itself. neighbors - nodes attached to the same link. interface - a node's attachment to a link. address - an IPv6-layer identifier for an interface or a set of interfaces. packet - an IPv6 header plus payload. link MTU - the maximum transmission unit, i.e., maximum packet size in octets, that can be conveyed in one piece over a link. path MTU - the minimum link MTU of all the links in a path between a source node and a destination node.draft-ietf-ipngwg-ipv6-spec-01.txtNote: it is possible, though unusual, for a device with multiple interfaces to be configured to forward non-self-destined packets arriving from some set (fewer than all) of its interfaces, and to discard non-self-destined packets arriving from its other interfaces. Such a device must obey the protocol requirements for routers when receiving packets from, and interacting with neighbors over, the former (forwarding) interfaces. It must obey the protocol requirements for hosts when receiving packets from, and interacting with neighbors over, the latter (non-forwarding) interfaces. Deering & Hinden Standards Track [Page 4]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 3. IPv6 Header Format +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Version| Prio. | Flow Label | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Payload Length | Next Header | Hop Limit | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Source Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Destination Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Version 4-bit Internet Protocol version number = 6. Prio. 4-bit priority value. See section 7. Flow Label 24-bit flow label. See section 6. Payload Length 16-bit unsigned integer. Length of payload, i.e., the rest of the packet following the IPv6 header, in octets. If zero, indicates that the payload length is carried in a Jumbo Payload hop-by-hop option. Next Header 8-bit selector. Identifies the type of header immediately following the IPv6 header. Uses the same values as the IPv4 Protocol field[RFC-1700].[RFC-1700 et seq.]. Hop Limit 8-bit unsigned integer. Decremented by 1 by each node that forwards the packet. The packet is discarded if Hop Limit is decremented to zero. Source Address 128-bit address of the originator of the packet. See[IPV6-ADDR]. draft-ietf-ipngwg-ipv6-spec-01.txt[RFC-1884]. Deering & Hinden Standards Track [Page 5]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 Destination Address 128-bit address of the intended recipient of the packet (possibly not the ultimate recipient, if a Routing header is present). See[IPV6-ADDR][RFC-1884] and section 4.4. 4. IPv6 Extension Headers In IPv6, optional internet-layer information is encoded in separate headers that may be placed between the IPv6 header and theupper-layerupper- layer header in a packet. There are a small number of such extension headers, each identified by a distinct Next Header value. As illustrated in these examples, an IPv6 packet may carry zero, one, or more extension headers, each identified by the Next Header field of the preceding header: +---------------+------------------------ | IPv6 header | TCP header + data | | | Next Header = | | TCP | +---------------+------------------------ +---------------+----------------+------------------------ | IPv6 header | Routing header | TCP header + data | | | | Next Header = | Next Header = | | Routing | TCP | +---------------+----------------+------------------------ +---------------+----------------+-----------------+----------------- | IPv6 header | Routing header | Fragment header | fragment of TCP | | | | header + data | Next Header = | Next Header = | Next Header = | | Routing | Fragment | TCP | +---------------+----------------+-----------------+----------------- With one exception, extension headers are not examined or processed by any node along a packet's delivery path, until the packet reaches the node (or each of the set of nodes, in the case of multicast) identified in the Destination Address field of the IPv6 header. There, normal demultiplexing on the Next Header field of the IPv6 header invokes the module to process the first extension header, or the upper-layer header if no extension header is present. The contents and semantics of eachdraft-ietf-ipngwg-ipv6-spec-01.txt [Page 6] INTERNET DRAFT IPv6 Specification March 17, 1995extension header determine whether or Deering & Hinden Standards Track [Page 6] RFC 1883 IPv6 Specification December 1995 not to proceed to the next header. Therefore, extension headers must be processed strictly in the order they appear in the packet; a receiver must not, for example, scan through a packet looking for a particular kind of extension header and process that header prior to processing all preceding ones. The exception referred to in the preceding paragraph is theHop-by-HopHop-by- Hop Options header, which carries information that must be examined and processed by every node along a packet's delivery path, including the source and destination nodes. The Hop-by-Hop Options header, when present, must immediately follow the IPv6 header. Its presence is indicated by the value zero in the Next Header field of the IPv6 header. If,whileas a result of processing a header, a node is required to proceed to the next header but the Next Header value in the current header is unrecognized by the node, it should discard the packet and send an ICMP Parameter Problem message to the source of the packet, with an ICMP Code value of 2 ("unrecognized Next Header type encountered") and the ICMP Pointer field containing the offset of the unrecognized value within the original packet. The same action should be taken if a node encounters a Next Header value of zero in any header other than an IPv6 header. Each extension header is an integer multiple of 8 octets long, in order to retain 8-octet alignment for subsequent headers.Multi-octetMulti- octet fields within each extension header are aligned on their natural boundaries, i.e., fields of width n octets are placed at an integer multiple of n octets from the start of the header, for n = 1, 2, 4, or 8.draft-ietf-ipngwg-ipv6-spec-01.txtA full implementation of IPv6 includes implementation of the following extension headers: Hop-by-Hop Options Routing (Type 0) Fragment Destination Options Authentication Encapsulating Security Payload The first four are specified in this document; the last two are specified in [RFC-1826] and [RFC-1827], respectively. Deering & Hinden Standards Track [Page 7]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 4.1 Extension Header Order When more than one extension header is used in the same packet, it is recommended that those headers appear in the following order: IPv6 header Hop-by-Hop Options header Destination Options header(1)(note 1) Routing header Fragment header Authentication header (note 2) Encapsulating Security Payload header (note 2) Destination Options header(2)(note 3) upper-layer header(1)note 1: for options to be processed by the first destination that appears in the IPv6 Destination Address field plus subsequent destinations listed in the Routing header.(2)note 2: additional recommendations regarding the relative order of the Authentication and Encapsulating Security Payload headers are given in [RFC-1827]. note 3: for options to be processed only by the final destination of the packet. Each extension header should occur at most once, except for the Destination Options header which should occur at most twice (once before a Routing header and once before the upper-layer header). If the upper-layer header is another IPv6 header (in the case of IPv6 being tunneled over or encapsulated in IPv6), it may be followed by its own extensions headers, which are separately subject to the same ordering recommendations. If and when other extension headers are defined, their ordering constraints relative to the above listed headers must be specified. IPv6 nodes must accept and attempt to process extension headers in any order and occurring any number of times in the same packet, except for the Hop-by-Hop Options header which is restricted to appear immediately after an IPv6 header only. Nonetheless, it is strongly advised that sources of IPv6 packets adhere to the above recommended order until and unless subsequent specifications revise that recommendation.draft-ietf-ipngwg-ipv6-spec-01.txtDeering & Hinden Standards Track [Page 8]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 4.2 Options Two of the currently-defined extension headers -- the Hop-by-Hop Options header and the Destination Options header --maycarry a variable number ofType-Length-Valuetype-length-value (TLV) encoded "options", of the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - - | Option Type | Opt Data Len | Option Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - - Option Type 8-bit identifier of the type of option. Opt Data Len 8-bit unsigned integer. Length of the Option Data field of this option, in octets. Option Data Variable-length field. Option-Type-specific data. The sequence of options within a header must be processed strictly in the order they appear in the header; a receiver must not, for example, scan through the header looking for a particular kind of option and process that option prior to processing all preceding ones. The Option Type identifiers are internally encoded such that their highest-order two bits specify the action that must be taken if the processing IPv6 node does not recognize the Option Type: 00 - skip over this option and continue processing the header. 01 - discard the packet. 10 - discard the packetandand, regardless of whether or not the packets's Destination Address was a multicast address, send an ICMP Parameter Problem, Code 2, message to the packet's Source Address, pointing to the unrecognized Option Type. 11 - discard the packet and, only if the packet's Destination Addressiswas not a multicast address, send an ICMP Parameter Problem, Code 2, message to the packet's Source Address, pointing to the unrecognized Option Type. The third-highest-order bit of the Option Type specifies whether or not the Option Data of that option can change en-route to the packet's final destination.Data that canWhen an Authentication header is present in the packet, for any option whose data may changeen-routeen-route, its entire Option Data field must beexcluded from the integrity assurance computation performedtreated as zero-valued octets when computing or verifying theAuthentication header is present.packet's authenticating value. Deering & Hinden Standards Track [Page 9] RFC 1883 IPv6 Specification December 1995 0 - Option Data does not change en-route 1 - Option Data may change en-route Individual options may have specific alignment requirements, to ensure that multi-octet values within Option Data fields fall on naturaldraft-ietf-ipngwg-ipv6-spec-01.txt [Page 9] INTERNET DRAFT IPv6 Specification March 17, 1995boundaries. The alignment requirement of an option is specified using the notation xn+y, meaning the Option Type must appear at an integer multiple of x octets from the start of the header, plus y octets. For example: 2n means any 2-octet offset from the start of the header. 8n+2 means any 8-octet offset from the start of the header, plus 2 octets. There are two padding options which are used when necessary to align subsequent options and to pad out the containing header to a multiple of 8 octets in length. These padding options must be recognized by all IPv6 implementations: Pad1 option (alignment requirement: none) +-+-+-+-+-+-+-+-+ | 0 | +-+-+-+-+-+-+-+-+ NOTE! the format of the Pad1 option is a special case -- it does not have length and value fields. The Pad1 option is used to insert one octet of padding into the Options area of a header. If more than one octet of padding is required, the PadN option, described next, should be used, rather than multiple Pad1 options. PadN option (alignment requirement: none) +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - - | 1 | Opt Data Len | Option Data +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- - - - - - - - - The PadN option is used to insert two or more octets of padding into the Options area of a header. For N octets of padding, the Opt Data Len field contains the value N-2, and the Option Data consists of N-2 zero-valued octets. Appendix A contains formatting guidelines for designing new options.draft-ietf-ipngwg-ipv6-spec-01.txtDeering & Hinden Standards Track [Page 10]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 4.3 Hop-by-Hop Options Header The Hop-by-Hop Options header is used to carry optional information that must be examined by every node along a packet's delivery path. The Hop-by-Hop Options header is identified by a Next Header value of 0 in the IPv6 header, and has the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + | | . . . Options . . . | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies the type of header immediately following the Hop-by-Hop Options header. Uses the same values as the IPv4 Protocol field[RFC-1700].[RFC-1700 et seq.]. Hdr Ext Len 8-bit unsigned integer. Length of the Hop-by-Hop Options header in 8-octet units, not including the first 8 octets. Options Variable-length field, of length such that the complete Hop-by-Hop Options header is an integer multiple of 8 octets long. Contains one or more TLV-encoded options, as described in section 4.2. In addition to the Pad1 and PadN options specified in section 4.2, the following hop-by-hop option is defined: Jumbo Payload option (alignment requirement: 4n + 2) +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 194 |Opt Data Len=4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Jumbo Payload Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ The Jumbo Payload option is used to send IPv6 packets with payloads longer than 65,535 octets. The Jumbo Payload Length isdraft-ietf-ipngwg-ipv6-spec-01.txt [Page 11] INTERNET DRAFT IPv6 Specification March 17, 1995the length of the packet in octets, excluding the IPv6header. It has a maximum value of 4,294,967,295, that is, 2^32-1. It has a minimum legal value of 8, which isheader but including thelength of aHop-by-Hop Optionsheader containing only this option,header; it must be greater than 65,535. If a packet is received withno additional headers or data; however, use of thisa Jumbo Payload optionfor packets with payloadscontaining a Jumbo Payload Length less than65,535 octets is not recommended.or equal to 65,535, Deering & Hinden Standards Track [Page 11] RFC 1883 IPv6 Specification December 1995 an ICMP Parameter Problem message, Code 0, should be sent to the packet's source, pointing to the high-order octet of the invalid Jumbo Payload Length field. The Payload Length field in the IPv6 header must be set to zero in every packet that carries the Jumbo Payload option. If a packet is received with a valid Jumbo Payload option present and a non-zero IPv6 Payload Length field, an ICMP Parameter Problem message, Code 0, should be sent to the packet's source, pointing to the Option Type field of the Jumbo Payload option. The Jumbo Payload option must not be used in a packet that carries a Fragment header. If a FragmentHeaderheader is encountered in a packet that contains a valid Jumbo Payload option, an ICMP Parameter Problem message, Code 0, should be sent to the packet's source, pointing to the first octet of the Fragment header.draft-ietf-ipngwg-ipv6-spec-01.txtAn implementation that does not support the Jumbo Payload option cannot have interfaces to links whose link MTU is greater than 65,575 (40 octets of IPv6 header plus 65,535 octets of payload). Deering & Hinden Standards Track [Page 12]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995 4.4 Routing Header The Routing header is used by an IPv6 source to list one or more intermediate nodes(or topological regions)to be "visited" on the way to a packet's destination. This function is very similar to IPv4's Source Route options. The Routing header is identified by a Next Header value of 43 in the immediately preceding header, and has the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len | Routing Type | Segments Left |+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ++-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | . . . type-specific data . . . | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies the type of header immediately following the Routing header. Uses the same values as the IPv4 Protocol field[RFC-1700].[RFC-1700 et seq.]. Hdr Ext Len 8-bit unsigned integer. Length of the Routing header in 8-octet units, not including the first 8 octets. Routing Type 8-bit identifier of a particular Routing header variant. Segments Left 8-bit unsigned integer. Number of route segments remaining, i.e., number of explicitly listed intermediate nodes still to be visited before reaching the final destination. type-specific data Variable-length field, of format determined by the Routing Type, and of length such that the complete Routing header is an integer multiple of 8 octets long.If theDeering & Hinden Standards Track [Page 13] RFC 1883 IPv6node that isSpecification December 1995 If, while processing a received packet, a node encounters a Routing headerdoes not recognize thewith an unrecognized Routing Type value,itthe required behavior of the node depends on the value of the Segments Left field, as follows: If Segments Left is zero, the node mustdiscardignore thepacket and, only ifRouting header and proceed to process thepacket's Destination Addressnext header in the packet, whose type isnot a multicast address,identified by the Next Header field in the Routing header. If Segments Left is non-zero, the node must discard the packet and send an ICMP Parameter Problem, Code 0, message to the packet's Source Address, pointing to the unrecognized Routing Type. Deering & Hinden Standards Track [Page 14] RFC 1883 IPv6 Specification December 1995 The Type 0 Routing header has the following format:draft-ietf-ipngwg-ipv6-spec-01.txt [Page 13] INTERNET DRAFT IPv6 Specification March 17, 1995+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header|Routing Type=0|Num AddrsHdr Ext Len |Next AddrRouting Type=0| Segments Left | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Strict/Loose BitMaskMap | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | +Address[0]Address[1] + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | +Address[1]Address[2] + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ . . . . . . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | +Address[Num Addrs - 1]Address[n] + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies the type of header immediately following the Routing header. Uses the same values as the IPv4 Protocol field[RFC-1700]. Routing Type 0. Num Addrs[RFC-1700 et seq.]. Hdr Ext Len 8-bit unsigned integer.NumberLength of the Routing header in 8-octet units, not including the first 8 octets. For the Type 0 Routing header, Hdr Ext Len is equal to two times the number of addresses in the header, and must be an even number less than or equal to 46. Routingheader. Maximum legal value = 24. Next AddrType 0. Deering & Hinden Standards Track [Page 15] RFC 1883 IPv6 Specification December 1995 Segments Left 8-bit unsigned integer.IndexNumber ofnext addressroute segments remaining, i.e., number of explicitly listed intermediate nodes still to beprocessed; initialized to 0 byvisited before reaching theoriginating node. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 14] INTERNET DRAFT IPv6 Specification March 17, 1995final destination. Maximum legal value = 23. Reserved 8-bit reserved field. Initialized to zero for transmission; ignored on reception. Strict/Loose BitMaskMap 24-bitbit-mask,bit-map, numbered 0 to 23, left-to-right.If bit n is 1, thenIndicates, for each segment of thepacket mayroute, whether or not the next destination address must beforwarded to Address[n] bya neighbor of thenode that places Address[n]preceding address: 1 means strict (must be a neighbor), 0 means loose (need not be a neighbor). Address[1..n] Vector of 128-bit addresses, numbered 1 to n. Multicast addresses must not appear in a Routing header of Type 0, or in the IPv6 DestinationField only ifAddress field of a packet carrying a Routing header of Type 0. If bit number 0 of theinterface identified by Address[n] isStrict/Loose Bit Map has value 1, the Destination Address field of the IPv6 header in the original packet must identify a neighbor of theforwardingoriginating node. If bit number 0 has value 0, the originator may use any legal, non-multicast address as the initial Destination Address. Bits numbered greater than n, where n is0, then Address[n] need not be a neighborthe number of addresses in theforwarding node.Routing header, must be set to 0 by the originator and ignored by receivers. A Routing header is not examined or processed until it reaches the node identified in the Destination Address field of the IPv6 header. In that node, dispatching on the Next Header field of the immediately preceding header causes the Routing header module to be invoked, which, in the case of Routing Type 0, performs the following algorithm:o If Next Addr < Num Addrs, swap the IPv6 Destination Address and Address[Next Addr]. If Bit Mask[Next Addr]Deering & Hinden Standards Track [Page 16] RFC 1883 IPv6 Specification December 1995 if Segments Left = 0or if{ proceed to process thenew destination addressnext header in the packet, whose type isknown to be a neighbor of this node, increment Next Addridentified byone and re-submit the packet totheIPv6 module for forwarding toNext Header field in thenew destination,Routing header } else if Hdr Ext Len is odd or greater than 46 { send an ICMPDestination Unreachable, Not a NeighborParameter Problem, Code 0, message to the SourceAddressAddress, pointing to the Hdr Ext Len field, and discard thepacket. o If Next Addr = Num Addrs, dispatch to the next header processing module, as identified bypacket } else { compute n, theNext Header fieldnumber of addresses in the Routingheader. o If Next Addr > Num Addrs,header, by dividing Hdr Ext Len by 2 if Segments Left is greater than n { send an ICMP Parameter Problem, Code 0, message to the Source Address, pointing to theNum AddrsSegments Left field, and discard thepacket. Multicast addresses must not appear in a Routing headerpacket } else { decrement Segments Left by 1; compute i, the index ofType 0, orthe next address to be visited in the address vector, by subtracting Segments Left from n if Address [i] or the IPv6 Destination Addressfield of ais multicast { discard the packetcarrying a Routing header of Type 0. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 15] INTERNET DRAFT} else { swap the IPv6Specification March 17, 1995 4.5 Fragment Header The Fragment headerDestination Address and Address[i] if bit i of the Strict/Loose Bit map has value 1 and the new Destination Address isused bynot the address of a neighbor of this node { send an ICMP Destination Unreachable -- Not a Neighbor message to the Source Address and discard the packet } else if the IPv6sourceHop Limit is less than or equal to 1 { sendpayloads larger than would fitan ICMP Time Exceeded -- Hop Limit Exceeded inthe path MTUTransit message totheir destinations. (Note: unlike IPv4, fragmentation in IPv6 is performed only by source nodes, not by routers along a packet's delivery path -- see section 5.) The Fragment header is identified by a Next Header value of 44 intheimmediately preceding header,Source Address andhas the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Reserved | Fragment Offset |Res|M| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Identification | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies the type of header immediately followingdiscard theFragment header. Usespacket } else { decrement thesame values asHop Limit by 1 resubmit theIPv4 Protocol field [RFC-1700]. Reserved 8-bit reserved field. Initializedpacket tozero for transmission; ignored on reception. Fragment Offset 13-bit unsigned integer. The offset, in 8-octet units, ofthefollowing payload, relativeIPv6 module for transmission to thestartnew destination } } } } Deering & Hinden Standards Track [Page 17] RFC 1883 IPv6 Specification December 1995 As an example of theoriginal, unfragmented payload. Res 2-bit reserved field. Initialized to zero for transmission; ignored on reception. M flag 1 = more fragments; 0 = last fragment. Identification 32 bits. See description below. The fragmentation algorithm is as follows: The payload (including any extension headers that need be processed only byeffects of thedestination node(s)) is divided into fragments, each, except possiblyabove algorithm, consider thelast, being an integer multiplecase of8 octets long. Each fragment is prepended withaFragment header and sent insource node S sending aseparate IPv6 packet. The M ("more") flag is setpacket to1 on all fragments of the same payload exceptdestination node D, using a Routing header to cause thelast.packet to be routed via intermediate nodes I1, I2, and I3. Theoriginal payload is assigned an Identification value that is different than thatvalues ofany other fragmented payload sent recently* withthesamerelevant IPv6Source Address, IPv6 Destination Address,header andFragment Next Header value. (If aRouting headeris present,fields on each segment of theIPv6delivery path would be as follows: As the packet travels from S to I1: Source Address = S Hdr Ext Len = 6 Destination Addressis that= I1 Segments Left = 3 Address[1] = I2 (if bit 0 of thefinal destination.) The Identification valueBit Map iscarried in the Fragment header of all of the draft-ietf-ipngwg-ipv6-spec-01.txt [Page 16] INTERNET DRAFT IPv6 Specification March 17, 1995 original payload's fragments,1, Address[2] = I3 S and I1 must be neighbors; Address[3] = D this isusedchecked by S) As thedestination to identify all fragments belonging to the same original payload. * "recently" means within the maximum likely lifetime of a packet, including transit timepacket travels fromsourceI1 todestination and time spent awaiting reassembly with other fragmentsI2: Source Address = S Hdr Ext Len = 6 Destination Address = I2 Segments Left = 2 Address[1] = I1 (if bit 1 of thesame payload. However, itBit Map isnot required that a source node know1, Address[2] = I3 I1 and I2 must be neighbors; Address[3] = D this is checked by I1) As themaximumpacketlifetime. Rather, it is assumed thattravels from I2 to I3: Source Address = S Hdr Ext Len = 6 Destination Address = I3 Segments Left = 1 Address[1] = I1 (if bit 2 of therequirement canBit Map is 1, Address[2] = I2 I2 and I3 must bemetneighbors; Address[3] = D this is checked bymaintainingI2) As theIdentification value as a simple, 32-bit, "wrap-around" counter, incremented each time a payloadpacket travels from I3 to D: Source Address = S Hdr Ext Len = 6 Destination Address = D Segments Left = 0 Address[1] = I1 (if bit 3 of the Bit Map is 1, Address[2] = I2 I3 and D must befragmented. Itneighbors; Address[3] = I3 this is checked by I3) Deering & Hinden Standards Track [Page 18] RFC 1883 IPv6 Specification December 1995 4.5 Fragment Header The Fragment header is used by animplementation choice whetherIPv6 source tomaintain a single counter for the node or multiple counters, e.g., one for each of the node's possible source addresses, or one for each active (source address, destination address, next header type) combination. In a packet with a Fragment header, the Payload Length field of the IPv6 header contains the length of that packet only (excluding the IPv6 header itself), not the length ofsend packets larger than would fit in theoriginal, unfragmented payload. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 17] INTERNET DRAFT IPv6 Specification March 17, 1995 4.6 Authentication Header The Authentication header is usedpath MTU toprovide authentication and integrity assurance fortheir destinations. (Note: unlike IPv4, fragmentation in IPv6packets. Non-repudiation may be provided by an authentication algorithm used with the Authentication header, but itis performed only by source nodes, notprovided with all authentication algorithms that might be used with this header.by routers along a packet's delivery path -- see section 5.) TheAuthenticationFragment header is identified by a Next Header value of5144 in the immediately preceding header, and has the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Payload Type | Auth Data LenNext Header | Reserved | Fragment Offset |Res|M| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Security Association ID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | . . . Authentication Data . . . |Identification | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+Payload TypeNext Header 8-bit selector. Identifies the initial header type ofheader immediately followingtheAuthentication header.Fragmentable Part of the original packet (defined below). Uses the same values as the IPv4 Protocol field[RFC-1700]. Auth Data Len 8-bit unsigned integer. Length of the Authentication Data field in 8-octet units.[RFC-1700 et seq.]. Reserved 8-bit reserved field. Initialized to zero for transmission; ignored on reception.Security Assoc. ID 32 bits. When combined withFragment Offset 13-bit unsigned integer. The offset, in 8-octet units, of theIPv6 Destination Address, identifiesdata following this header, relative to thereceiver(s) the pre-established security association to which this packet belongs. Authentication Data Variable-length field, an integer multiplestart of8 octets long. Algorithm-specific information required authenticatethesourceFragmentable Part of thepacket and assure its integrity, as specifiedoriginal packet. Res 2-bit reserved field. Initialized to zero forthe pre-established security association. Use of the Authentication headertransmission; ignored on reception. M flag 1 = more fragments; 0 = last fragment. Identification 32 bits. See description below. In order to send a packet that isspecified in [IPV6-AUTH]. All IPv6 nodes are requiredtoo large tosupportfit in thekeyed MD5 algorithm used withMTU of theAuthentication headerpath to its destination, a source node may divide the packet into fragments and send each fragment asdescribed ina separate packet, to be reassembled at the receiver. For every packet thatdocument. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 18] INTERNET DRAFT IPv6 Specification March 17, 1995 4.7 Destination Options Header The Destination Options headerisusedtocarry optional information that needbeexamined only by a packet's destination node(s).fragmented, the source node generates an Identification value. TheDestination Options header is identified by a Next Header valueIdentification must be different than that ofTBD inany other fragmented packet sent recently* with theimmediately preceding header,same Source Address andhas the following format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + | | . . . Options . . . | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies the type ofDestination Address. If a Routing headerimmediately followingis present, the DestinationOptions header. UsesAddress of concern is that of thesame values asfinal destination. * "recently" means within theIPv4 Protocol field [RFC-1700]. Hdr Ext Len 8-bit unsigned integer. Lengthmaximum likely lifetime ofthe Destination Options header in 8-octet units, nota packet, includingthe first 8 octets. Options Variable-length field,transit time from source to destination and time spent Deering & Hinden Standards Track [Page 19] RFC 1883 IPv6 Specification December 1995 awaiting reassembly with other fragments oflength such thatthecomplete Destination Options header issame packet. However, it is not required that a source node know the maximum packet lifetime. Rather, it is assumed that the requirement can be met by maintaining the Identification value as a simple, 32- bit, "wrap-around" counter, incremented each time a packet must be fragmented. It is anintegerimplementation choice whether to maintain a single counter for the node or multipleof 8 octets long. Containscounters, e.g., oneor more TLV-encoded options, as described in section 4.2. The only destination options defined in this document arefor each of thePad1 and PadN options specified in section 4.2. Note that there are twonode's possibleways to encode optionalsource addresses, or one for each active (source address, destinationinformation in an IPv6 packet: eitheraddress) combination. The initial, large, unfragmented packet is referred to asan option intheDestination Options header, or"original packet", and it is considered to consist of two parts, asa separate extension header.illustrated: original packet: +------------------+----------------------//-----------------------+ | Unfragmentable | Fragmentable | | Part | Part | +------------------+----------------------//-----------------------+ TheFragmentUnfragmentable Part consists of the IPv6 header plus any extension headers that must be processed by nodes en route to the destination, that is, all headers up to and including theAuthenticationRouting headerare examples ofif present, else thelatter approach. Which approach can be used depends on what action is desiredHop-by-Hop Options header if present, else no extension headers. The Fragmentable Part consists ofa destination node that does not understandtheoptional information: o ifrest of thedesired action is forpacket, that is, any extension headers that need be processed only by the final destinationnode to discardnode(s), plus thepacket and, only ifupper-layer header and data. The Fragmentable Part of thepacket's Destination Addressoriginal packet isnot a multicast address, send an ICMP Unrecognized Type message to the packet's Source Address, thendivided into fragments, each, except possibly theinformation may be encoded draft-ietf-ipngwg-ipv6-spec-01.txtlast ("rightmost") one, being an integer multiple of 8 octets long. The fragments are transmitted in separate "fragment packets" as illustrated: original packet: +------------------+--------------+--------------+--//--+----------+ | Unfragmentable | first | second | | last | | Part | fragment | fragment | .... | fragment | +------------------+--------------+--------------+--//--+----------+ Deering & Hinden Standards Track [Page19] INTERNET DRAFT20] RFC 1883 IPv6 SpecificationMarch 17,December 1995either as a separate header or as an option in the Destination Options header whose Option Type has the value 11 in its highest- order two bits. The choice may depend on such factors as which takes fewer octets, or which yields better alignment or more efficient parsing.fragment packets: +------------------+--------+--------------+ | Unfragmentable |Fragment| first | | Part | Header | fragment | +------------------+--------+--------------+ +------------------+--------+--------------+ | Unfragmentable |Fragment| second | | Part | Header | fragment | +------------------+--------+--------------+ oif any other action is desired, the information must be encoded as an option in the Destination Options header whose Option Type has the value 00, 01, or 10 in its highest-order two bits, specifying the desired action (see section 4.2). 4.8 No Nexto o +------------------+--------+----------+ | Unfragmentable |Fragment| last | | Part | Header | fragment | +------------------+--------+----------+ Each fragment packet is composed of: (1) Thevalue 59 in the Next Header fieldUnfragmentable Part ofan IPv6 header or any extension header indicates that there is nothing following that header. Ifthe original packet, with the Payload Lengthfieldof the original IPv6 headerindicateschanged to contain thepresencelength ofoctets pastthis fragment packet only (excluding theendlength ofathe IPv6 headerwhoseitself), and the Next Header fieldcontains 59, those octets must be ignored, and passed on unchanged ifof thepacket is forwarded. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 20] INTERNET DRAFT IPv6 Specification March 17, 1995 5. Packet Size Issues IPv6 requireslast header of the Unfragmentable Part changed to 44. (2) A Fragment header containing: The Next Header value thatevery link inidentifies theinternet have an MTUfirst header of576 octets or greater. On any link that cannot convey a 576-octet packet in one piece, link-specific fragmentation and reassembly must be provided at a layer below IPv6. Note: this minimum link MTU is NOTthesame asFragmentable Part of theoneoriginal packet. A Fragment Offset containing the offset of the fragment, inIPv4. In IPv4,8-octet units, relative to theminimum link MTUstart of the Fragmentable Part of the original packet. The Fragment Offset of the first ("leftmost") fragment is68 octets [RFC-791, page 25]; 576 octets0. An M flag value of 0 if the fragment is theminimum reassembly buffer size required inlast ("rightmost") one, else anIPv4 node, which has nothing to do with link MTUs. From each link to which a node is directly attached,M flag value of 1. The Identification value generated for thenodeoriginal packet. (3) The fragment itself. The lengths of the fragments must beable to accept packets as large as that link's MTU. Linkschosen such thathave a configurable MTU (for example, PPP links [RFC-1548]) must be configured to have anthe resulting fragment packets fit within the MTU ofat least 576 octets; it is recommended that a larger MTU be configured,the path toaccommodate possible encapsulations (i.e., tunneling) without incurring fragmentation.the packets' destination(s). Deering & Hinden Standards Track [Page 21] RFC 1883 IPv6nodesSpecification December 1995 At the destination, fragment packets areexpected to implement Path MTU Discovery [RFC-1191], in order to discover and take advantage of paths with MTU greater than 576 octets. However, a minimal IPv6 implementation (e.g., in a boot ROM) may simply restrict itself to sendingreassembled into their original, unfragmented form, as illustrated: reassembled original packet: +------------------+----------------------//------------------------+ | Unfragmentable | Fragmentable | | Part | Part | +------------------+----------------------//------------------------+ The following rules govern reassembly: An original packet is reassembled only from fragment packetsno larger than 576 octets,that have the same Source Address, Destination Address, andomit implementationFragment Identification. The Unfragmentable Part ofPath MTU Discovery. In order to send athe reassembled packetlarger than a path's MTU, a node may useconsists of all headers up to, but not including, theIPv6Fragment headerto fragmentof the first fragment packetat the source and have it reassembled at(that is, thedestination(s). However,packet whose Fragment Offset is zero), with theusefollowing two changes: The Next Header field ofsuch fragmentation is discouraged in any application that is able to adapt its packets to fitthemeasured path MTU (i.e., down to 576 octets). A node must not send a packet larger thanlast header of thepath MTU (i.e., fragments that reassemble to a size larger thanUnfragmentable Part is obtained from thepath MTU) unless it has explicit knowledge thatNext Header field of thedestination(s) can reassemble a packetfirst fragment's Fragment header. The Payload Length ofthat size. In response to an IPv6the reassembled packetthatissent to an IPv4 destination (i.e., a packet that undergoes translationcomputed fromIPv6 to IPv4),theoriginating IPv6 node may receive an ICMP Packet Too Big message reporting a Next- Hop MTU less than 576. In that case,length of theIPv6 node is not required to reduceUnfragmentable Part and thesizelength and offset ofsubsequent packets to less than 576, but must include a Fragment header in those packets so thattheIPv6-to-IPv4 translating router can obtainlast fragment. For example, asuitable Identification value to use in resulting IPv4 fragments. Note that this means the payload may have to be reduced to 528 octets (576 minus 40formula for computing theIPv6 header andPayload Length of the reassembled original packet is: PL.orig = PL.first - FL.first - 8for+ (8 * FO.last) + FL.last where PL.orig = Payload Length field of reassembled packet. PL.first = Payload Length field of first fragment packet. FL.first = length of fragment following Fragment header of first fragment packet. FO.last = Fragment Offset field of Fragment header of last fragment packet. FL.last = length of fragment following Fragment header of last fragment packet. The Fragmentable Part of the reassembled packet is constructed from the fragments following the Fragmentheader), and smaller still if additional extensionheadersare used. Note: Path MTU Discovery must be performed evenincases where a host "thinks" a destinationeach of the fragment packets. The length of each fragment isattached tocomputed by subtracting from thesame link as itself. draft-ietf-ipngwg-ipv6-spec-01.txtpacket's Payload Length the length of the headers between the IPv6 header and fragment itself; its relative position in Fragmentable Part is computed from its Fragment Offset value. Deering & Hinden Standards Track [Page21] INTERNET DRAFT22] RFC 1883 IPv6 SpecificationMarch 17,December 1995Note: Unlike IPv4, itThe Fragment header isunnecessarynot present inIPv6the final, reassembled packet. The following error conditions may arise when reassembling fragmented packets: If insufficient fragments are received tosetcomplete reassembly of a"Don't Fragment" flag in thepacketheader in order to perform Path MTU Discovery; that is an implicit attributewithin 60 seconds ofevery IPv6 packet. Also, those partsthe reception of theRFC-1191 procedures that involve usefirst-arriving fragment ofa tablethat packet, reassembly ofMTU "plateaus" do not apply to IPv6, because the IPv6 version of the "Datagram Too Big" message always identifies the exact MTU tothat packet must beused. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 22] INTERNET DRAFT IPv6 Specification March 17, 1995 6. Flow Labels The 24-bit Flow Label field inabandoned and all theIPv6 header may be used by a source to label those packetsfragments that have been received forwhich it requests special handling bythat packet must be discarded. If theIPv6 routers, such as non-default quality of service or "real-time" service. This aspect of IPv6 is, atfirst fragment (i.e., thetimeone with a Fragment Offset ofwriting, still experimental and subjectzero) has been received, an ICMP Time Exceeded -- Fragment Reassembly Time Exceeded message should be sent tochange as the requirements for flow support intheInternet become clearer. Hosts or routerssource of thatdo not supportfragment. If thefunctionslength ofthe Flow Label field are required to set the field to zero when originatingapacket, passfragment, as derived from thefield on unchanged when forwardingfragment packet's Payload Length field, is not apacket,multiple of 8 octets andignorethefield when receiving a packet. A flow is a sequenceM flag ofpacketsthat fragment is 1, then that fragment must be discarded and an ICMP Parameter Problem, Code 0, message should be sentfrom a particular sourcetoa particular (unicast or multicast) destination for whichthe sourcedesires special handling by the intervening routers. The natureofthat special handling might be conveyedthe fragment, pointing to therouters byPayload Length field of the fragment packet. If the length and offset of acontrol protocol,fragment are suchas a resource reservation protocol, or by information withinthat theflow's packets themselves, e.g., in a hop-by-hop option. The detailsPayload Length ofsuch control protocols or options are beyondthescope of this document. There may be multiple active flowspacket reassembled froma source to a destination, as well as trafficthatis not associated with any flow. A flow is uniquely identified by the combination of a source address and a non- zero flow label. Packetsfragment would exceed 65,535 octets, then thatdo not belong to a flow carry a flow label of zero. A flow label is assigned to a flow by the flow's source node. New flow labelsfragment must bechosen (pseudo-)randomlydiscarded anduniformly from the range 1an ICMP Parameter Problem, Code 0, message should be sent toFFFFFF hex. The purposethe source of therandom allocation isfragment, pointing tomake any set of bits withintheFlow LabelFragment Offset fieldsuitable for use as a hash key by routers, for looking up the state associated withof theflow. All packets belongingfragment packet. The following conditions are not expected tothe same flow must be sent with the same source address, same destination address,occur, but are not considered errors if they do: The number andsame non-zero flow label. If anycontent ofthose packets includes a Hop-by-Hop Options header, then they all must be originated withthesame Hop-by-Hop Options header contents (excludingheaders preceding theNext Header fieldFragment header ofthe Hop-by-Hop Options header). If anydifferent fragments ofthose packets includes a Routing header, then they all must be originated withthe samecontents in all extensionoriginal packet may differ. Whatever headersup to and includingare present, preceding theRoutingFragment header(excluding the Next Header fieldinthe Routing header). The routers or destinationseach fragment packet, arepermitted, but not required,processed when the packets arrive, prior toverify that these conditionsqueueing the fragments for reassembly. Only those headers in the Offset zero fragment packet aresatisfied. If a violation is detected, it should be reported toretained in thesource by an ICMP Parameter Problem message, Code 0, pointing toreassembled packet. The Next Header values in thehigh-order octetFragment headers of different fragments of theFlow Label field (i.e., offset 1 withinsame original packet may differ. Only theIPv6 packet). Routers are free to "opportunistically" set up flow-handling statevalue from the Offset zero fragment packet is used forany flow, even when no explicit flow establishment information has been draft-ietf-ipngwg-ipv6-spec-01.txtreassembly. Deering & Hinden Standards Track [Page 23]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995provided4.6 Destination Options Header The Destination Options header is used tothem via a control protocol, a hop-by-hop option, or other means. For example, upon receiving a packet from a particular source with an unknown, non-zero flow label,carry optional information that need be examined only by arouter may process its IPv6packet's destination node(s). The Destination Options headerand any necessary extension headers as if the flow label were zero. That processing would include determining the next-hop interface, and possibly other actions, such as updatingis identified by ahop-by-hop option, advancing the pointer and addressesNext Header value of 60 ina Routing header, or deciding on how to queuethepacket based on its Priority field. The router may then choose to "remember"immediately preceding header, and has theresults of those processing steps and cache that information, using the source address plusfollowing format: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + | | . . . Options . . . | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Next Header 8-bit selector. Identifies theflow label astype of header immediately following thecache key. Subsequent packets withDestination Options header. Uses the samesource address and flow label may then be handled by referring to the cached information rather than examining all those fields that, according tovalues as therequirementsIPv4 Protocol field [RFC-1700 et seq.]. Hdr Ext Len 8-bit unsigned integer. Length of theprevious paragraph, can be assumed unchanged from the first packet seenDestination Options header in 8-octet units, not including theflow. Cached flow-handling statefirst 8 octets. Options Variable-length field, of length such thatis set up opportunistically, as discussed inthelast paragraph, must be discarded no more than 6 seconds after itcomplete Destination Options header isestablished, regardlessan integer multiple ofwhether8 octets long. Contains one ornot packets ofmore TLV-encoded options, as described in section 4.2. The only destination options defined in this document are thesame flow continuePad1 and PadN options specified in section 4.2. Note that there are two possible ways toarrive. If another packet withencode optional destination information in an IPv6 packet: either as an option in thesame source addressDestination Options header, or as a separate extension header. The Fragment header andflow label arrives afterthecached state has been discarded,Authentication header are examples of thepacket undergoes full, normal processing (as if its flow label were zero), which may result in the re-creation of cached flow state for that flow. The lifetime of flow-handling state that is set up explicitly, for example by a control protocol or a hop-by-hop option, mustlatter approach. Which approach can bespecified as part of the specificationused depends on what action is desired ofthe explicit set-up mechanism; it may exceed 6 seconds. A source must not re-use a flow label foranew flow within the lifetime of any flow-handling statedestination node thatmight have been established fordoes not understand theprior use of that flow label. Since flow-handling state with a lifetime of 6 seconds may be established opportunistically for any flow,optional information: o if theminimum interval betweendesired action is for thelast packet of one flow anddestination node to discard thefirstpacketof a new flow usingand, only if thesame flow labelpacket's Destination Address is6 seconds. Flow labels used for explicitly set-up flows with longer flow-state lifetimes must remain unused for those longer lifetimes before being re-used for new flows. When a node stops and restarts (e.g., as a result of a "crash"), it must be carefulnotto useaflow label that it might have used formulticast address, send anearlier flow whose lifetime may not have expired yet. ThisICMP Unrecognized Type message to the packet's Source Address, then the information may beaccomplished by recording flow label usage on stable storage so that it can be remembered across crashes,encoded either as a separate header orby refraining from using any flow labels until the maximum lifetime of any possible previously established flows has expired (at least 6 seconds; more if explicit flow set-up mechanisms with longer lifetimes might have been used). Ifas an option in theminimum draft-ietf-ipngwg-ipv6-spec-01.txtDeering & Hinden Standards Track [Page 24]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995time for rebooting the node is known (often more than 6 seconds), that time can be deducted fromDestination Options header whose Option Type has thenecessary waiting period before starting to allocate flow labels. There is no requirement that all,value 11 in its highest-order two bits. The choice may depend on such factors as which takes fewer octets, oreven most, packets belong to flows, i.e., carry non-zero flow labels. This observationwhich yields better alignment or more efficient parsing. o if any other action isplaced here to remind protocol designers and implementors not to assume otherwise. For example, it woulddesired, the information must beunwise to design a routerencoded as an option in the Destination Options header whoseperformance would be adequate only if most packets belonged to flows,Option Type has the value 00, 01, orto design a10 in its highest-order two bits, specifying the desired action (see section 4.2). 4.7 No Next Header The value 59 in the Next Header field of an IPv6 headercompression schemeor any extension header indicates thatonly worked on packetsthere is nothing following thatbelonged to flows. 7. Priority The 4-bit Priorityheader. If the Payload Length fieldinof the IPv6 headerenables a source to identifyindicates thedesired delivery prioritypresence ofits packets, relative to other packets fromoctets past thesame source. The Priority values are divided into two ranges: Values 0 through 7 are used to specify the priorityend oftraffic for whicha header whose Next Header field contains 59, those octets must be ignored, and passed on unchanged if thesourcepacket isproviding congestion control, i.e., trafficforwarded. Deering & Hinden Standards Track [Page 25] RFC 1883 IPv6 Specification December 1995 5. Packet Size Issues IPv6 requires that"backs off"every link inresponse to congestion, such as TCP traffic. Values 8 through 15 are used to specifythepriorityinternet have an MTU oftraffic576 octets or greater. On any link thatdoes not back offcannot convey a 576-octet packet inresponse to congestion, e.g., "real-time" packets being sentone piece, link-specific fragmentation and reassembly must be provided at aconstant rate. For congestion-controlled traffic, the following Priority values are recommended for particular application categories: 0 - uncharacterized traffic 1 - "filler" traffic (e.g., netnews) 2 - unattended data transfer (e.g., email) 3 - (reserved) 4 - attended bulk transfer (e.g., FTP, NFS) 5 - (reserved) 6 - interactive traffic (e.g., telnet, X) 7 - internet control traffic (e.g., routing protocols, SNMP) For non-congestion-controlled traffic,layer below IPv6. From each link to which a node is directly attached, thelowest Priority value (8) shouldnode must beused for thoseable to accept packets as large as thatthe sender is most willinglink's MTU. Links that have a configurable MTU (for example, PPP links [RFC-1661]) must be configured to havediscarded under conditionsan MTU ofcongestion (e.g., high-fidelity video traffic), and the highest value (15) should be used for those packetsat least 576 octets; it is recommended thatthe sendera larger MTU be configured, to accommodate possible encapsulations (i.e., tunneling) without incurring fragmentation. It isleast willingstrongly recommended that IPv6 nodes implement Path MTU Discovery [RFC-1191], in order tohave discardeddiscover and take advantage of paths with MTU greater than 576 octets. However, a minimal IPv6 implementation (e.g.,low-fidelity audio traffic). There isin a boot ROM) may simply restrict itself to sending packets norelative ordering implied between the congestion-controlled prioritieslarger than 576 octets, and omit implementation of Path MTU Discovery. In order to send a packet larger than a path's MTU, a node may use thenon-congestion-controlled priorities. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 25] INTERNET DRAFTIPv6Specification March 17, 1995 8. Upper-Layer Protocol Issues 8.1 Upper-Layer Checksums Any transport or other upper-layer protocol that includesFragment header to fragment theaddresses frompacket at theIP headersource and have it reassembled at the destination(s). However, the use of such fragmentation is discouraged in any application that is able to adjust itschecksum computationpackets to fit the measured path MTU (i.e., down to 576 octets). A node must bemodified for use over IPv6,able toincludeaccept a fragmented packet that, after reassembly, is as large as 1500 octets, including the128-bitIPv6addresses insteadheader. A node is permitted to accept fragmented packets that reassemble to more than 1500 octets. However, a node must not send fragments that reassemble to a size greater than 1500 octets unless it has explicit knowledge that the destination(s) can reassemble a packet of32-bit IPv4 addresses.that size. Inparticular, the following illustration shows the TCP and UDP "pseudo-header" for IPv6: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Source Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Destination Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | zero | Next Header | Payload Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ o If theresponse to an IPv6 packetcontains a Routing header, the Destination Address used in the pseudo-headerthat is sent to an IPv4 destination (i.e., a packet thatof the final destination. Atundergoes translation from IPv6 to IPv4), the originatingsystem,IPv6 node may receive an ICMP Packet Too Big message reporting a Next-Hop MTU less than 576. In thataddress will be in the last element of the Routing header; atcase, therecipient(s), that address will be inIPv6 node is not required to reduce theDestination Address fieldsize of subsequent packets to less than 576, but must include a Fragment header in those packets so that theIPv6 header. o The Next HeaderIPv6-to-IPv4 translating router can obtain a suitable Identification value to use in resulting IPv4 fragments. Note that this means thepseudo-header identifies the upper- layer protocol (e.g., 6 for TCP, or 17payload may have to be reduced to 528 octets (576 minus 40 forUDP). It will differ from the Next Header value inthe IPv6 header and 8 for the Fragment header), and smaller still ifthere areadditional extension headersbetween theare used. Deering & Hinden Standards Track [Page 26] RFC 1883 IPv6header and the upper-layer header. o The Payload Length usedSpecification December 1995 Note: Path MTU Discovery must be performed even inthe pseudo-headercases where a host "thinks" a destination is attached to thelength of the upper-layer packet, including the upper-layer header. It will be less than the Payload Length in the IPv6 header if there are extension headers between the IPv6 header and the upper-layer header. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 26] INTERNET DRAFT IPv6 Specification March 17, 1995 osame link as itself. Note: Unlike IPv4,when UDP packets are originated by an IPv6 node, the UDP checksumit isnot optional. That is, whenever originating a UDP packet, anunnecessary in IPv6node must computeto set aUDP checksum over"Don't Fragment" flag in the packetandheader in order to perform Path MTU Discovery; that is an implicit attribute of every IPv6 packet. Also, those parts of thepseudo-header, and, ifRFC-1191 procedures thatcomputation yieldsinvolve use of aresulttable ofzero, it must be changedMTU "plateaus" do not apply tohex FFFF for placement in the UDP header. IPv6 receivers must discard UDP packets containing a zero checksum, and should logIPv6, because theerror. TheIPv6 version ofICMP [IPV6-ICMP] includes the above pseudo-header in its checksum computation; this is a change fromtheIPv4 version of ICMP, which does not include a pseudo-header in its checksum. The reason for"Datagram Too Big" message always identifies thechange isexact MTU toprotect ICMP from misdelivery or corruption of those fields of thebe used. Deering & Hinden Standards Track [Page 27] RFC 1883 IPv6header on which it depends, which, unlike IPv4, are not covered by an internet-layer checksum.Specification December 1995 6. Flow Labels TheNext Header24-bit Flow Label field in thepseudo-headerIPv6 header may be used by a source to label those packets forICMP contains the value 58,whichidentifiesit requests special handling by the IPv6version of ICMP. 8.2 Maximum Packet Lifetime Unlike IPv4,routers, such as non-default quality of service or "real-time" service. This aspect of IPv6nodes are not required to enforce maximum packet lifetime. That is the reasonis, at theIPv4 "Timetime of writing, still experimental and subject toLive" field was renamed "Hop Limit"change as the requirements for flow support inIPv6. In practice, very few, if any, IPv4 implementations conform totherequirementInternet become clearer. Hosts or routers thatthey limit packet lifetime, so this isdo nota change in practice. Any upper-layer protocol that relies onsupport theinternet layer (whether IPv4 or IPv6) to limit packet lifetime oughtfunctions of the Flow Label field are required tobe upgradedset the field toprovide its own mechanisms for detectingzero when originating a packet, pass the field on unchanged when forwarding a packet, anddiscarding obsolete packets. 8.3 Maximum Upper-Layer Payload Size When computingignore themaximum payload size availablefield when receiving a packet. A flow is a sequence of packets sent from a particular source to a particular (unicast or multicast) destination forupper-layer data, an upper-layer protocol must take into accountwhich thelarger size ofsource desires special handling by theIPv6 header relativeintervening routers. The nature of that special handling might be conveyed to theIPv4 header. For example, in IPv4, TCP's MSS option is computedrouters by a control protocol, such asthe maximum packet size (a default value oravalue learned through Path MTU Discovery) minus 40 octets (20 octets forresource reservation protocol, or by information within theminimum-length IPv4 header and 20 octets forflow's packets themselves, e.g., in a hop-by-hop option. The details of such control protocols or options are beyond theminimum-length TCP header). When using TCP over IPv6,scope of this document. There may be multiple active flows from a source to a destination, as well as traffic that is not associated with any flow. A flow is uniquely identified by theMSScombination of a source address and a non-zero flow label. Packets that do not belong to a flow carry a flow label of zero. A flow label is assigned to a flow by the flow's source node. New flow labels must becomputed aschosen (pseudo-)randomly and uniformly from themaximum packet size minus 60 octets, becauserange 1 to FFFFFF hex. The purpose of theminimum-length IPv6 header (i.e., an IPv6 header with no extension headers)random allocation is20 octets longer thanto make any set of bits within the Flow Label field suitable for use as aminimum-length IPv4 header. draft-ietf-ipngwg-ipv6-spec-01.txt [Page 27] INTERNET DRAFT IPv6 Specification March 17, 1995 Appendix A. Formatting Guidelineshash key by routers, forOptions This appendix gives some advice on how to lay outlooking up thefields in optionsstate associated with the flow. All packets belonging to the same flow must beused insent with the same source address, destination address, priority, and flow label. If any of those packets includes a Hop-by-Hop Options header, then they all must be originated with the same Hop-by-Hop Options headerorcontents (excluding theDestinationNext Header field of the Hop-by-Hop Options header). If any of those packets includes a Routing header,as described in section 4.2. These guidelines are based on the following assumptions: o One desirable feature is that any multi-octet fields within the Option Data area of an option be aligned on their natural boundaries, i.e., fields of width n octets shouldthen they all must beplaced at an integer multiple of n octets from the start of the Hop-by-Hop or Destination Options header, for n = 1, 2, 4, or 8. o Another desirable feature is thatoriginated with theHop-by-Hop or Destination Options header takesame contents in all extension headers upas little space as possible, subjectto and including therequirement that theRouting headerbe an integer multiple of 8 octets long. o It may be assumed that, when either of(excluding theoption-bearing headersNext Header field in the Routing header). The routers or destinations arepresent, they carrypermitted, but not required, to verify that these conditions are satisfied. If avery small number of options, usually only one. These assumptions suggest the following approachviolation is detected, it should be reported tolaying outthefields ofsource by anoption: order the fields from smallestICMP Parameter Problem message, Code 0, pointing tolargest, with no interior padding, then derive the alignment requirement for the entire option based onthealignment requirementhigh-order octet of thelargestFlow Label field(up(i.e., offset 1 within the IPv6 packet). Deering & Hinden Standards Track [Page 28] RFC 1883 IPv6 Specification December 1995 Routers are free to "opportunistically" set up flow-handling state for any flow, even when no explicit flow establishment information has been provided to them via amaximum alignment of 8 octets). This approach is illustrated in the following examples: Example 1 Ifcontrol protocol, a hop-by-hop option, or other means. For example, upon receiving a packet from a particular source with anoption X required two data fields, one of length 8 octetsunknown, non-zero flow label, a router may process its IPv6 header andone of length 4 octets, itany necessary extension headers as if the flow label were zero. That processing wouldbe laid outinclude determining the next-hop interface, and possibly other actions, such asfollows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Its alignment requirement is 8n+2,updating a hop-by-hop option, advancing the pointer and addresses in a Routing header, or deciding on how toensure thatqueue the8-octet field ends draft-ietf-ipngwg-ipv6-spec-01.txt [Page 28] INTERNET DRAFT IPv6 Specification March 17, 1995 uppacket based ona multiple-of-8 offset fromits Priority field. The router may then choose to "remember" thestartresults of those processing steps and cache that information, using theenclosing header. A complete Hop-by-Hop or Destination Options header containing this one option would looksource address plus the flow label asfollows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=1 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Example 2 If an option Y required three data fields, one of length 4 octets, one of length 2 octets,the cache key. Subsequent packets with the same source address andone of length 1 octet, it would be laid outflow label may then be handled by referring to the cached information rather than examining all those fields that, according to the requirements of the previous paragraph, can be assumed unchanged from the first packet seen in the flow. Cached flow-handling state that is set up opportunistically, asfollows: +-+-+-+-+-+-+-+-+ | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Its alignment requirementdiscussed in the preceding paragraph, must be discarded no more than 6 seconds after it is4n+3,established, regardless of whether or not packets of the same flow continue toensure thatarrive. If another packet with the4-octet field endssame source address and flow label arrives after the cached state has been discarded, the packet undergoes full, normal processing (as if its flow label were zero), which may result in the re-creation of cached flow state for that flow. The lifetime of flow-handling state that is set uponexplicitly, for example by amultiple-of-4 offset fromcontrol protocol or a hop-by-hop option, must be specified as part of thestartspecification of theenclosing header.explicit set-up mechanism; it may exceed 6 seconds. Acomplete Hop-by-Hop or Destination Options header containing thissource must not re-use a flow label for a new flow within the lifetime of any flow-handling state that might have been established for the prior use of that flow label. Since flow-handling state with a lifetime of 6 seconds may be established opportunistically for any flow, the minimum interval between the last packet of oneoption would lookflow and the first packet of a new flow using the same flow label is 6 seconds. Flow labels used for explicitly set-up flows with longer flow-state lifetimes must remain unused for those longer lifetimes before being re-used for new flows. When a node stops and restarts (e.g., asfollows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=1 | Pad1 Option=0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=2 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ draft-ietf-ipngwg-ipv6-spec-01.txta result of a "crash"), it must be careful not to use a flow label that it might have used for an earlier flow whose lifetime may not have expired yet. This may be accomplished by recording flow label usage on stable storage so that it can be remembered across crashes, or by refraining from using any flow labels until the maximum lifetime of any possible previously established flows has expired (at least 6 seconds; more if explicit Deering & Hinden Standards Track [Page 29]INTERNET DRAFTRFC 1883 IPv6 SpecificationMarch 17,December 1995Example 3 A Hop-by-Hopflow set-up mechanisms with longer lifetimes might have been used). If the minimum time for rebooting the node is known (often more than 6 seconds), that time can be deducted from the necessary waiting period before starting to allocate flow labels. There is no requirement that all, or even most, packets belong to flows, i.e., carry non-zero flow labels. This observation is placed here to remind protocol designers and implementors not to assume otherwise. For example, it would be unwise to design a router whose performance would be adequate only if most packets belonged to flows, or to design a header compression scheme that only worked on packets that belonged to flows. 7. Priority The 4-bit Priority field in the IPv6 header enables a source to identify the desired delivery priority of its packets, relative to other packets from the same source. The Priority values are divided into two ranges: Values 0 through 7 are used to specify the priority of traffic for which the source is providing congestion control, i.e., traffic that "backs off" in response to congestion, such as TCP traffic. Values 8 through 15 are used to specify the priority of traffic that does not back off in response to congestion, e.g., "real-time" packets being sent at a constant rate. For congestion-controlled traffic, the following Priority values are recommended for particular application categories: 0 - uncharacterized traffic 1 - "filler" traffic (e.g., netnews) 2 - unattended data transfer (e.g., email) 3 - (reserved) 4 - attended bulk transfer (e.g., FTP, NFS) 5 - (reserved) 6 - interactive traffic (e.g., telnet, X) 7 - internet control traffic (e.g., routing protocols, SNMP) For non-congestion-controlled traffic, the lowest Priority value (8) should be used for those packets that the sender is most willing to have discarded under conditions of congestion (e.g., high-fidelity video traffic), and the highest value (15) should be used for those packets that the sender is least willing to have discarded (e.g., low-fidelity audio traffic). There is no relative ordering implied between the congestion-controlled priorities and the non-congestion- controlled priorities. Deering & Hinden Standards Track [Page 30] RFC 1883 IPv6 Specification December 1995 8. Upper-Layer Protocol Issues 8.1 Upper-Layer Checksums Any transport or other upper-layer protocol that includes the addresses from the IP header in its checksum computation must be modified for use over IPv6, to include the 128-bit IPv6 addresses instead of 32-bit IPv4 addresses. In particular, the following illustration shows the TCP and UDP "pseudo-header" for IPv6: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Source Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + Destination Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Payload Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | zero | Next Header | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ o If the packet contains a Routing header, the Destination Address used in the pseudo-header is that of the final destination. At the originating node, that address will be in the last element of the Routing header; at the recipient(s), that address will be in the Destination Address field of the IPv6 header. o The Next Header value in the pseudo-header identifies the upper-layer protocol (e.g., 6 for TCP, or 17 for UDP). It will differ from the Next Header value in the IPv6 header if there are extension headers between the IPv6 header and the upper- layer header. o The Payload Length used in the pseudo-header is the length of the upper-layer packet, including the upper-layer header. It will be less than the Payload Length in the IPv6 header (or in Deering & Hinden Standards Track [Page 31] RFC 1883 IPv6 Specification December 1995 the Jumbo Payload option) if there are extension headers between the IPv6 header and the upper-layer header. o Unlike IPv4, when UDP packets are originated by an IPv6 node, the UDP checksum is not optional. That is, whenever originating a UDP packet, an IPv6 node must compute a UDP checksum over the packet and the pseudo-header, and, if that computation yields a result of zero, it must be changed to hex FFFF for placement in the UDP header. IPv6 receivers must discard UDP packets containing a zero checksum, and should log the error. The IPv6 version of ICMP [RFC-1885] includes the above pseudo-header in its checksum computation; this is a change from the IPv4 version of ICMP, which does not include a pseudo-header in its checksum. The reason for the change is to protect ICMP from misdelivery or corruption of those fields of the IPv6 header on which it depends, which, unlike IPv4, are not covered by an internet-layer checksum. The Next Header field in the pseudo-header for ICMP contains the value 58, which identifies the IPv6 version of ICMP. 8.2 Maximum Packet Lifetime Unlike IPv4, IPv6 nodes are not required to enforce maximum packet lifetime. That is the reason the IPv4 "Time to Live" field was renamed "Hop Limit" in IPv6. In practice, very few, if any, IPv4 implementations conform to the requirement that they limit packet lifetime, so this is not a change in practice. Any upper-layer protocol that relies on the internet layer (whether IPv4 or IPv6) to limit packet lifetime ought to be upgraded to provide its own mechanisms for detecting and discarding obsolete packets. 8.3 Maximum Upper-Layer Payload Size When computing the maximum payload size available for upper-layer data, an upper-layer protocol must take into account the larger size of the IPv6 header relative to the IPv4 header. For example, in IPv4, TCP's MSS option is computed as the maximum packet size (a default value orDestination Optionsa value learned through Path MTU Discovery) minus 40 octets (20 octets for the minimum-length IPv4 headercontaining both options XandY from Examples 1 and 2 would have one of20 octets for thetwo following formats, depending on which option appeared first: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=1 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=1 | 0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=2 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=1 | Pad1 Option=0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=4 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 0 | 0 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ draft-ietf-ipngwg-ipv6-spec-01.txtminimum-length TCP header). When using TCP over IPv6, the MSS must be computed as the maximum packet size minus 60 octets, because the minimum-length IPv6 header (i.e., an IPv6 header with no extension headers) is 20 octets longer than a minimum-length IPv4 header. Deering & Hinden Standards Track [Page30] INTERNET DRAFT32] RFC 1883 IPv6 SpecificationMarch 17,December 1995 AppendixB. Changes from Previous Draft Changes from draft-hinden-ipng-ipv6-spec-00.txt, October 1994: o Changed "cluster address" to "region address". o Added definitions of "upper layer" and "packet" to Terminology section. o Changed all references of "transport layer" to "upper layer". o Changed name of "TClass" field to "Priority", changed name of "Flow ID" fieldA. Formatting Guidelines for Options This appendix gives some advice on how to"Flow Label", and dropped the use oflay out thename "Flow Label" to referfields when designing new options to be used in thecombination of those two fields. o Added note thatHop-by-Hop Optionsmust be processed by source and destination nodes, as wellheader or the Destination Options header, asintermediate nodes along a delivery path.described in section 4.2. These guidelines are based on the following assumptions: oSpecifiedOne desirable feature is thatunknown Next Header values, as well as a Next Value of zero inanyheader other thanmulti-octet fields within the Option Data area of anIPv6 header,option be aligned on their natural boundaries, i.e., fields of width n octets shouldinvokebe placed at anICMP Parameter Problem message. o Changed nameinteger multiple of"End-to-End Options" to "Destination Options", and specifiedn octets from the start of the Hop-by- Hop or Destination Options header, for n = 1, 2, 4, or 8. o Another desirable feature is that the Hop-by-Hop or Destination Options header take up as little space as possible, subject to the requirement that the header be an integer multiple of 8 octets long. o It mayoccur twice in a packet, once beforebe assumed that, when either of the option-bearing headers are present, they carry aRouting Header and once beforevery small number of options, usually only one. These assumptions suggest theupper- layer header. o Changed text regarding advisabilityfollowing approach to laying out the fields of an option: order the fields from smallest to largest, with no interior padding, then derive the alignment requirement for the entire option based on the alignment requirement of the largest field (up to a maximum alignment ofviolating recommended ordering for extension headers ("be conservative in what you send; be liberal8 octets). This approach is illustrated inwhat you receive"). o Specified thatthe following examples: Example 1 If anunrecognizedoptiontriggers an ICMP Parameter Problem, Code 2, message, not an "ICMP Unrecognized Type" message. o The third-highest-order bitX required two data fields, one of length 8 octets and one of length 4 octets, it would be laid out as follows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | OptionType codes, which indicates whether or not an option's data can change en-route, now appliesType=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Its alignment requirement is 8n+2, toDestination Options as well as Hop-by-Hop Options, because Destination Options can now precedeensure that the 8-octet field starts at aRouting header and thus may be modified en-route. o Addedmultiple-of-8 offset from theJumbo Payload hop-by-hop option. o Deleted prohibition of en-route insertionstart ofRouting headers (though I still think it's a bad idea). o Added Strict/Loose Bit Map totheType 0 Routing header. draft-ietf-ipngwg-ipv6-spec-01.txtenclosing Deering & Hinden Standards Track [Page31] INTERNET DRAFT33] RFC 1883 IPv6 SpecificationMarch 17,December 1995o Deleted IPv6-in-IPv6 Encapsulation section -- moved to a separate document. o Added the "no next header"header. A complete Hop-by-Hop or Destination Options header containing this one option would look as follows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Headertype. o Added a recommendation that links with configurable MTU, such as PPP links, be configured with| Hdr Ext Len=1 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Example 2 If anMTU larger than the minimum (576) so as to accommodate encapsulations (tunneling) without incurring fragmentation. o Split the Flow Label and Priority discussion into two sections. o Changed the descriptionoption Y required three data fields, one of length 4 octets, one ofthe fields that must not change within a flow to include all headers up tolength 2 octets, andincluding the Routing header. o Added discussionone of"opportunistic" flow state set-up, and added requirement that such state mustlength 1 octet, it would bediscarded within 6 seconds of being established. Also discussed source behaviorlaid out as follows: +-+-+-+-+-+-+-+-+ | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Its alignment requirement is 4n+3, toavoid reusing an active flow label after a reboot. o Added a warning about assumingensure thatmost packets will belong to flows. o In making the distinction between the two sub-ranges of Priority values, changedtheterminology4-octet field starts at a multiple-of-4 offset from"flow-controlled" to "congestion-controlled". o Deleted statement about flow set-up mechanisms possibly redefiningthesemanticsstart of thePriority (formerly TClass) field. o Rearranged some text in the Upper-Layer (formerly Transport-Layer) Checksums section, added requirement thatenclosing header. A complete Hop-by-Hop or Destination Options header containing this one option would look as follows: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=1 | Pad1 Option=0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=2 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Deering & Hinden Standards Track [Page 34] RFC 1883 IPv6hosts discard UDP packets with zero checksum,Specification December 1995 Example 3 A Hop-by-Hop or Destination Options header containing both options X andchanged the ICMP pseudo-header to be the same asY from Examples 1 and 2 would have one of theTCP/UDP pseudo-header. o Added a small section about upper-layer maximum payload size. o Updated references to newer documents. o Put Deering's name backtwo following formats, depending onas an editor. draft-ietf-ipngwg-ipv6-spec-01.txtwhich option appeared first: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=3 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=1 | 0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=2 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Next Header | Hdr Ext Len=3 | Pad1 Option=0 | Option Type=Y | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Opt Data Len=7 | 1-octet field | 2-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | PadN Option=1 |Opt Data Len=4 | 0 | 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 0 | 0 | Option Type=X |Opt Data Len=12| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | 4-octet field | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + 8-octet field + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Deering & Hinden Standards Track [Page32] INTERNET DRAFT35] RFC 1883 IPv6 SpecificationMarch 17,December 1995 Security Considerations This document specifies that theformat of anIP Authenticationheader, which is part of the machinery intended to provide end-to-end authenticationHeader [RFC-1826] andintegrity assurance for IPv6 packets. Non-repudiation may be provided by an authentication algorithm used withtheAuthentication option, but it is not provided with all authentication algorithms that mightIP Encapsulating Security Payload [RFC-1827] be used withthis option. Usage of the option is specifiedIPv6, in[IPV6-AUTH].conformance with the Security Architecture for the Internet Protocol [RFC-1825]. Acknowledgments Thedocument editorsauthors gratefully acknowledge the many helpful suggestions of the members of the IPng working group, the End-to-End Protocols research group, and the Internet Community At Large.Document Editors'Authors' Addresses Stephen E. Deering Robert M. Hinden Xerox Palo Alto Research Center Ipsilon Networks, Inc. 3333 Coyote Hill Road2465 Latham Street,2191 E. Bayshore Road, Suite 100 Palo Alto, CA 94304Mt. View,Palo Alto, CA9404094303 USA USAphone:Phone: +1 415 812 4839phone:Phone: +1 415528846 4604fax:Fax: +1 415 812 4471fax:Fax: +1 415528 4653 email:855 1414 EMail: deering@parc.xerox.comemail:EMail: hinden@ipsilon.comdraft-ietf-ipngwg-ipv6-spec-01.txtDeering & Hinden Standards Track [Page33] INTERNET DRAFT36] RFC 1883 IPv6 SpecificationMarch 17,December 1995 References[IPV6-AUTH] R.[RFC-1825] Atkinson,IPv6R., "Security Architecture for the Internet Protocol", RFC 1825, Naval Research Laboratory, August 1995. [RFC-1826] Atkinson, R., "IP AuthenticationHeader, MarchHeader", RFC 1826, Naval Research Laboratory, August 1995.[IPV6-ICMP] A. Conta[RFC-1827] Atkinson, R., "IP Encapsulating Security Protocol (ESP)", RFC 1827, Naval Research Laboratory, August 1995. [RFC-1885] Conta, A., and S. Deering,ICMP"Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6(IPv6), October 1994. [IPV6-TRAN] R. Gilligan and E. Nordmark, Transition Mechanisms for IPv6 Hosts and Routers, March(IPv6) Specification", RFC 1885, Digital Equipment Corporation, Xerox PARC, December 1995.[IPV6-ADDR] R.[RFC-1884] Hinden,Editor, IPR., and S. Deering, Editors, "IP Version 6 AddressingArchitecture, MarchArchitecture", RFC 1884, Ipsilon Networks, Xerox PARC, December 1995. [RFC-1191]J. MogulMogul, J., and S. Deering,Path"Path MTUDiscovery, RFC-1191,Discovery", RFC 1191, DECWRL, Stanford University, November 1990. [RFC-791]J.Postel,Internet Protocol, RFC-791,J., "Internet Protocol", STD 5, RFC 791, USC/Information Sciences Institute, September 1981. [RFC-1700]J. ReynoldsReynolds, J., and J. Postel,Assigned Numbers, RFC-1700,"Assigned Numbers", STD 2, RFC 1700, USC/Information Sciences Institute, October 1994.[RFC-1548] W.[RFC-1661] Simpson,TheW., Editor, "The Point-to-Point Protocol(PPP), RFC-1548, April(PPP)", STD 51, RFC 1661, Daydreamer, July 1994.draft-ietf-ipngwg-ipv6-spec-01.txtDeering & Hinden Standards Track [Page34]37] ----