Re: [BEHAVE] RFC6147 and RFC7208 interoperability issues

Klaus Frank <klaus.frank@posteo.de> Mon, 07 February 2022 21:14 UTC

Return-Path: <klaus.frank@posteo.de>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C17D73A0B69 for <behave@ietfa.amsl.com>; Mon, 7 Feb 2022 13:14:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J9l5MhwQC945 for <behave@ietfa.amsl.com>; Mon, 7 Feb 2022 13:14:24 -0800 (PST)
Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED99F3A0B3C for <behave@ietf.org>; Mon, 7 Feb 2022 13:14:23 -0800 (PST)
Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id 3DAAB240026 for <behave@ietf.org>; Mon, 7 Feb 2022 22:14:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1644268460; bh=W5vTfLXhYxtPRwrPCY16vAVD5KNJfZuoaedRpZapORg=; h=Date:Subject:To:From:From; b=fJfYd95lDhurRvLABqk/SO4hKsQPoGQRAVnLh02bxOGoXZqlIEQqARxK0pkiPyUyJ t1IUmgpNmz9Ym66yJMIoGchKQGNhONLpbH15p3kzTIMp9mjeFHBzuY9Qi49DwAJjFg VA/+MIiZvx3u/zl0vynuRmULJNvw8nG8Jk32WGcJGulbS2tf4dA0FimY8zzNI7O8DJ V1quiOzplTR6uZZRlSi8X64OhrSz9PSoHJWSoVOB9D1BY9iKR9IK2Qn2MwMAmPFNzk qQYGHgZ4gEr/U4meBUgC0TTiW6gDSWAvbtw5KkFrW8RXv99bZSfGRh/6lW9DbR95z6 bn1Zg7I+1ND3Q==
Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4JszRH04D5z9rxL for <behave@ietf.org>; Mon, 7 Feb 2022 22:14:18 +0100 (CET)
Message-ID: <3492513e-4ff3-7d8f-5449-c06968403461@posteo.de>
Date: Mon, 07 Feb 2022 21:14:16 +0000
MIME-Version: 1.0
Content-Language: en-US
To: behave@ietf.org
References: <077D662F-5E6D-44F5-8DD3-B58D8B535C5D@network-heretics.com> <B6D6B4CC-AC1F-459C-952A-E9493E00FDB3@huitema.net> <7e53925e-46b0-29e4-6deb-47bcf389ff97@posteo.de> <3ff58733-ccd5-fe15-8b06-dd69bfad0c74@network-heretics.com> <59E4D416-0B86-46D3-BE0E-9C12881A07FD@virtualized.org> <56ecaebb-7a20-ea05-c203-a5f898d6fd21@huitema.net>
From: Klaus Frank <klaus.frank@posteo.de>
In-Reply-To: <56ecaebb-7a20-ea05-c203-a5f898d6fd21@huitema.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms010506040900040306000409"
Archived-At: <https://mailarchive.ietf.org/arch/msg/behave/CQrXOfcI_otKPISz95ZRrQV-byM>
Subject: Re: [BEHAVE] RFC6147 and RFC7208 interoperability issues
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/behave/>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Feb 2022 21:14:32 -0000

On 2022-02-07 21:38, Christian Huitema wrote:
>
> On 2/7/2022 9:18 AM, David Conrad wrote:
>> As far as I can tell, Klaus has identified a specific issue in which 
>> existing IETF specifications are deficient in order to facilitate 
>> interoperability in a specific protocol when NAT64 is in use.
>
> Yes.
>
> We have an unresolved tension between recommending end-to-end 
> solutions and recommending more processing in DNS64, which means the 
> IETF will probably need to charter some work if we want to publish a 
> consensus document. But the current discussion yielded both ideas and 
> data.
>
> According to Klaus, practical deployments of NAT64 in ISP use WKP, not 
> NSP. That's interesting. I trust Klaus on that one, and it makes 
> sense: ISP want to avoid breakage, and if using WKP is less likely to 
> cause breakage than using NSP, they will use that. That also means 
> that the job of the application writer becomes simpler: it is much 
> easier to have a special case for WKP than to invent a way to learn 
> the NSP. This could lead to an interesting feedback loop, in which 
> more applications working with WKP means even less incentives for ISP 
> to use NSP. This kind of loop is common and powerful. And maybe that's 
> something that we can document.

 From what I've seen ISPs use both (and while I worked at a cloud 
provider we provided dualstack + WKP to allow customers to build IPv6 
only infra).
WKP in access i.e. customer facing (where DNS64 is necessary) and
NSP in backends for routing and peering/transit (where no DNS is needed) 
but also only if WKP is not an option for whatever reason.

>
> -- Christian Huitema
>
>
> _______________________________________________
> Behave mailing list
> Behave@ietf.org
> https://www.ietf.org/mailman/listinfo/behave