[DNSOP] Re: [v6ops] Expanded IPv6 Documentation Address Space and the "Locally-Served DNS Zones" registry

Tim Wicinski <tjw.ietf@gmail.com> Thu, 20 November 2025 18:32 UTC

Return-Path: <tjw.ietf@gmail.com>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DFB9B8D6874B for <dnsop@mail2.ietf.org>; Thu, 20 Nov 2025 10:32:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VactARft2lTf for <dnsop@mail2.ietf.org>; Thu, 20 Nov 2025 10:32:10 -0800 (PST)
Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D87A58D685BA for <dnsop@ietf.org>; Thu, 20 Nov 2025 10:30:47 -0800 (PST)
Received: by mail-ed1-x531.google.com with SMTP id 4fb4d7f45d1cf-6408f9cb1dcso1817097a12.3 for <dnsop@ietf.org>; Thu, 20 Nov 2025 10:30:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1763663447; x=1764268247; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=1BMA/+MRt1/N7psy6F6r1aMFmgWuwLNbB/O+KEuCl6Q=; b=iFgd8qWdozkAkS2LgOS6xmLpQBpVrXakAYpJPWFTfn070qXotTCqwLQutJHLo5MIqi CvLn8YD2GPjeL1CIVrhcZA7MVMyj6ZqmAtmyWrw3eyVRK+Z1By3ISBiYgyaDSyTcXab1 DDH3vRFXPwAMUv8aN+G22IdmtBajLrzDjmf88EnX9LmUYY+7IvvVVTKqVik6vuiIl4Tu wIQtBpjmAhzGGYAsd08OnHJU+sefHo6+zezseH1sKh6t/wxhhJ9M7aGi4UqFllRig3pA jnWpgDUS1HARdlACASrVUJuSwyxDwYmGt6JfE2wWOqEL6o04ijugXqUJquxSjQBrdVWW 7oug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763663447; x=1764268247; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=1BMA/+MRt1/N7psy6F6r1aMFmgWuwLNbB/O+KEuCl6Q=; b=BfdmuyxEhp5ydBoq94BMjkWu5I9n3/fiY+F+ATg/wQn3Z6wq/ELXYqCNPV6Swu6TtT AjrnAWa5chRPsimk7Z8TGTfVrqQGG8FnZ9eYPK4oPzFqITzbyYNf2GHXVna/8qbmkVRD kIgLS9NnHQmrur9U2jKokGlFmI9Bq4l745Vd8Uii9CehkBDI/7b/esuSH5CLtQmnGhMw W6uLxwdi6OcnMuT4FC9HFvsliB9Iv4HpkysWjiuF51L3QE5kbhgObY1UM6O/tjwTH2Uz F+5o0ObyDuV+rLH/qbMRGIOaGHK1xG7f6FdId5paNrc1bV1fh91h0vVr+ZZbguD3AvEA +1KA==
X-Forwarded-Encrypted: i=1; AJvYcCXRERwe4Vryymb4/mrGw7qBgZ93imWOpnohkxwDwXos8YNkJSSXyYLBz2WqIUq957U1sf/j6Q==@ietf.org
X-Gm-Message-State: AOJu0YzHBovWeHs3IZAQSchJ81s5XD35UP8DPUQohGGw9bAcZOTTC6o0 ZpwkSTq+BoGAr7cpk3hZ6gnyuYxnC3IFGJvCjvq8YQc1XeGE4RVndtJOF1XgQoLFNC8aMZ68va4 8SAjOagfenvaT+sPAf/yZ+yA7FQA4RzM=
X-Gm-Gg: ASbGncvNRB3k2zi7Q7gvQuDWeKdriSNOQ8boHj8OzPdB9lMUlbaWsQ6NNSyWltTXzZI pD/shk3jPLe/5pJWXncpd8j5kdoCwEyn/8SpYyS/2eL6lQUHBG98PvlAoHI4wl9PMBJgx12YBKW WFltcp6vP1E+bMC9EvVBgj5bX/+Us2u3Q700yjTtyJweA1UJqQg9pZeq80Njqr5/LbgfnMd78ID dtpQNzsl39NDKjEK3WyNytCJmSEUC9YOQjxahcm31hqKez3Z2BUJe8Wvfc4xBp3xyZCP78eFmlb YVbZL0ndu2TK5vT5FrgFVG8W2sSf5grHCbBZM7gmCGrB4MZFs8/7rxNNgA==
X-Google-Smtp-Source: AGHT+IFZxQqNugzHaNvbaMEJpKmpwcXaylQ7QC/Tg93PF3IhnKsprr5GySKtIq2e7oDccOhhoTPgIQo8cJRzlB86Vpo=
X-Received: by 2002:a05:6402:40d5:b0:640:c454:e8 with SMTP id 4fb4d7f45d1cf-6453648e0d9mr3816409a12.30.1763663446719; Thu, 20 Nov 2025 10:30:46 -0800 (PST)
MIME-Version: 1.0
References: <CAN-Dau3YR6kTAp5w6ZpVsCsePPV_i2cT0nCK0PtFPWSSt5uXfw@mail.gmail.com> <PR0P264MB2885F8C58CC9859118837DA588D4A@PR0P264MB2885.FRAP264.PROD.OUTLOOK.COM> <CADyWQ+EgLzMXqTVY1i+f40H6igTX3qkEjX+fg4RLLHosD63C0A@mail.gmail.com> <MR1P264MB28829A3525E4AC52AF4F95B288D4A@MR1P264MB2882.FRAP264.PROD.OUTLOOK.COM>
In-Reply-To: <MR1P264MB28829A3525E4AC52AF4F95B288D4A@MR1P264MB2882.FRAP264.PROD.OUTLOOK.COM>
From: Tim Wicinski <tjw.ietf@gmail.com>
Date: Thu, 20 Nov 2025 13:30:35 -0500
X-Gm-Features: AWmQ_bld5HjlSZFmvuTmm7xhF8JsDc9nSvnNKC6isuSDQuUhS5JPESmBb4bW-iQ
Message-ID: <CADyWQ+EdMd1baYD26R9hfU8VmGFxuHXnCgA_914Hv9Xkorw_4g@mail.gmail.com>
To: mohamed.boucadair@orange.com
Content-Type: multipart/alternative; boundary="0000000000003ec06f06440ae5cc"
Message-ID-Hash: S2NRSFNVCY3R2ALVPFMTXSL3PMYG53YN
X-Message-ID-Hash: S2NRSFNVCY3R2ALVPFMTXSL3PMYG53YN
X-MailFrom: tjw.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: David Farmer <farmer@umn.edu>, V6 Ops List <v6ops@ietf.org>, dnsop <dnsop@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: [v6ops] Expanded IPv6 Documentation Address Space and the "Locally-Served DNS Zones" registry
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/l8lVDWyCXWLSuu0MlbUENs6sjGg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Med

I was just reviewing 6303 over lunch along with 9650 for the vibes and this
makes sense.
Let me work something up here while I go into network quiet periods.

tim


On Thu, Nov 20, 2025 at 1:26 PM <mohamed.boucadair@orange.com> wrote:

> Hi Tim,
>
>
>
> Thank you for volunteering. Much appreciated!
>
>
>
> Unless we need to touch other parts of 6303, I think that a simple draft
> that updates 6303 (but still fall under BCP 163) and basically includes the
> following would be sufficient:
>
>
>
> OLD:
>
>    This registry can be amended through "IETF Review" as per [RFC5226].
>
>    As part of this review process, it should be noted that once a zone
>
>    is added it is effectively added permanently; once an address range
>
>    starts being configured as a local zone in systems on the Internet,
>
>    it will be impossible to reverse those changes.
>
>
>
> NEW:
>
>    This registry can be amended through "Expert Review" policy (Section
> 4.5 of [RFC8126]).
>
>    As part of this review process, it should be noted that once a zone
>
>    is added it is effectively added permanently; once an address range
>
>    starts being configured as a local zone in systems on the Internet,
>
>    it will be impossible to reverse those changes. More guidance for
> Designated
>
>    Experts is provided in Section X.
>
>
>
>    6.1. Designated Expert Review Guidance
>
>
>
>    TBC.
>
>
>
> Would that works for you?
>
>
>
> Thank you.
>
>
>
> Cheers,
>
> Med
>
>
>
> *De :* Tim Wicinski <tjw.ietf@gmail.com>
> *Envoyé :* jeudi 20 novembre 2025 18:50
> *À :* BOUCADAIR Mohamed INNOV/NET <mohamed.boucadair@orange.com>
> *Cc :* David Farmer <farmer@umn.edu>; V6 Ops List <v6ops@ietf.org>; dnsop
> <dnsop@ietf.org>
> *Objet :* Re: [DNSOP] Re: [v6ops] Expanded IPv6 Documentation Address
> Space and the "Locally-Served DNS Zones" registry
>
>
>
>
>
> Med
>
>
>
> I think you're talking about "rfc6303-bis" with some updates? I'd be
> willing to give that a go if that pleases you
>
>
>
> tim
>
>
>
>
>
> On Thu, Nov 20, 2025 at 4:24 AM <mohamed.boucadair@orange.com> wrote:
>
> Hi David, all,
>
> (also adding dnsop)
>
>
>
> Adding 3fff::/20 to "Locally-Served DNS Zones" registry makes sense.
> However, given the registration policy of that registry and lack of a rule
> that would allow us to automatically add prefixes with similar properties
> to that registry, I checked with IANA and also consulted with the IESG
> colleagues about how we better handle this.
>
>
>
> Given also that future similar issues may happen (the DNS registry may not
> be known for other WGs, in particular), the suggested approach is to relax
> the registration policy of "Locally-Served DNS Zones" registry to “Expert
> Review” instead of “IETF Review”. This would be similar to the fix in
> https://datatracker.ietf.org/doc/rfc9650/ but for another registry.
>
>
>
> If there is a volunteer to write a short draft to fix this, and there are
> no objections to relax the registration policy, I think that this is a
> document that we can fast track in DNSOP (or even as AD sponsored).
>
>
>
> Comments are welcome.
>
>
>
> Cheers,
>
> Med
>
>
>
> *De :* David Farmer <farmer=40umn.edu@dmarc.ietf.org>
> *Envoyé :* vendredi 17 octobre 2025 19:33
> *À :* Nick Buraglio <buraglio@forwardingplane.net>; Geoff Huston <
> gih@apnic.net>; V6Ops Chairs <v6ops-chairs@ietf.org>
> *Cc :* V6 Ops List <v6ops@ietf.org>
> *Objet :* [v6ops] Expanded IPv6 Documentation Address Space and the
> "Locally-Served DNS Zones" registry
>
>
>
>
>
> V6ops Chairs and RFC9637 Authors,
>
>
>
> I have been reviewing several IANA registries and noticed that
> the Expanded IPv6 Documentation Address Space 3fff::/20 has not been added
> to the "Locally-Served DNS Zones" registry.
>
>
>
> Given that RFC 9637 updates RFC 3849, and RFC 6303 referenced RFC 3849 and
> included 2001:db8::/32 (8.B.D.0.1.0.0.2.IP6.ARPA) in the "Locally-Served
> DNS Zones" registry [1], I believe 3fff::/20 (0.F.F.F.3.IP6.ARPA) should
> also be added to that registry, but it has not been added.
>
>
>
> What is the proper procedure to correct this?
>
>
>
> I think, with RFC 9637 and the "IETF Review" registration procedure for
> that registry, it should simply be a request to the IESG and/or IANA.
>
>
>
> Thanks.
>
>
>
> [1]
> https://www.iana.org/assignments/locally-served-dns-zones/locally-served-dns-zones.xhtml#ipv6
>
>
>
> --
>
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
>
> ____________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
>
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
>
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
>
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
>
>
>
> This message and its attachments may contain confidential or privileged information that may be protected by law;
>
> they should not be distributed, used or copied without authorisation.
>
> If you have received this email in error, please notify the sender and delete this message and its attachments.
>
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
>
> Thank you.
>
> _______________________________________________
> DNSOP mailing list -- dnsop@ietf.org
> To unsubscribe send an email to dnsop-leave@ietf.org
>
> ____________________________________________________________________________________________________________
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
>
>