Re: Last Call: <draft-weil-shared-transition-space-request-14.txt> (IANA Reserved IPv4 Prefix for Shared Address Space) to BCP

Martin Millnert <martin@millnert.se> Thu, 16 February 2012 10:43 UTC

Return-Path: <martin@millnert.se>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71AD721F876D for <ietf@ietfa.amsl.com>; Thu, 16 Feb 2012 02:43:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.149
X-Spam-Level:
X-Spam-Status: No, score=-2.149 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, HELO_EQ_SE=0.35]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eZhb5D5CopFY for <ietf@ietfa.amsl.com>; Thu, 16 Feb 2012 02:43:19 -0800 (PST)
Received: from ncis.csbnet.se (ncis.csbnet.se [95.80.1.101]) by ietfa.amsl.com (Postfix) with ESMTP id 5200521F8778 for <ietf@ietf.org>; Thu, 16 Feb 2012 02:43:09 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by ncis.csbnet.se (Postfix) with ESMTP id EA1C25E1 for <ietf@ietf.org>; Thu, 16 Feb 2012 11:40:46 +0100 (CET)
Received: from ncis.csbnet.se ([127.0.0.1]) by localhost (ncis.csbnet.se [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hw079lIlUI+0 for <ietf@ietf.org>; Thu, 16 Feb 2012 11:40:46 +0100 (CET)
Received: from [192.168.120.227] (h-189-4.a189.priv.bahnhof.se [85.24.189.4]) by ncis.csbnet.se (Postfix) with ESMTPSA id BEC422B0 for <ietf@ietf.org>; Thu, 16 Feb 2012 11:40:46 +0100 (CET)
Message-ID: <1329388980.5382.44.camel@davinci.millnert.se>
Subject: Re: Last Call: <draft-weil-shared-transition-space-request-14.txt> (IANA Reserved IPv4 Prefix for Shared Address Space) to BCP
From: Martin Millnert <martin@millnert.se>
To: ietf@ietf.org
Date: Thu, 16 Feb 2012 11:43:00 +0100
In-Reply-To: <4F3B09C3.1090005@qualcomm.com>
References: <CB5FF399.1B4E7%jeff.finkelstein@cox.com> <4F3AAA08.2040204@qualcomm.com> <01OBZ9WQSHWY00ZUIL@mauve.mrochek.com> <4F3ABF6C.1030803@qualcomm.com> <m2d39hi267.wl%randy@psg.com> <4F3B09C3.1090005@qualcomm.com>
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-vIiRWIQGGwZFOoqgaBS9"
X-Mailer: Evolution 3.0.3-3
Mime-Version: 1.0
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Feb 2012 10:43:20 -0000

On Tue, 2012-02-14 at 19:26 -0600, Pete Resnick wrote:
> On 2/14/12 2:35 PM, Randy Bush wrote:
> 
> > what silliness.  it will be used as rfc 1918 space no matter what the document
> > says.
> > [...]
> > any thought that this is not just adding to rfc 1918 is pure bs.
> >    
> 
> Of course it will be used as 1918 space. That's not the point of the text.

No support.

For the various reasons people have put forth, and my own below, this
draft should not be put through.

> The text is saying, "You could read 1918 to say that we somehow promised 
> that you would never be connected to a network run by someone other than 
> yourself and see 1918 addresses on it. That's not an entirely 
> intelligent reading, but we see how you can read it that way. So, if you 
> built yourself a device where it isn't able to deal with 1918 addresses 
> on its 'outside' interface that you were using on the 'inside' 
> interfaces, we could see how that might happen. It was not at all smart 
> of you to build your device that way, but you probably were technically 
> within spec. Now we're adding some address space to the pool. It's not 
> global and it's not routable, just the same as 1918 space. But we're 
> letting you know right now: You *will* see these addresses on networks 
> that you don't run. If you want to use this space the way that you used 
> 1918 space, peachy, but understand that if you're unable to deal with 
> these addresses duplicating ones you're using, your device is toast. 
> Deal with it."

This is 100% matched by an allocation of globally unique space from a
RIR, shared by whoever the interested parties are. 
  The IETF *need not* specify any BCP on how to improve NAT444
"CGN"-scale alone, because such action is attached with high risk of
leading to a local maximum in a plot of the state of the Internet,
rather than towards a global maximum.

Citing RFC6264, "An Incremental Carrier-Grade NAT (CGN) for IPv6
Transition" warns:
   Carrier-Grade NAT (CGN) [CGN-REQS], also called NAT444 CGN or Large
   Scale NAT, compounds IPv4 operational problems when used alone but
   does nothing to encourage IPv4 to IPv6 transition.  Deployment of
   NAT444 CGN allows ISPs to delay the transition and therefore causes
   double transition costs (once to add CGN and again to support IPv6).

The draft as written, makes no effort to require the RFC6264 or
equivalent approaches to a IPv6 transition, to the CGN deployments it
specifies v4 address space for. All carrot, no stick.
  I believe the state of the Internet would be much more reliably
improved by the RIRs each having (for the purpose of being able to serve
their own users) one /10 special allocation for this purpose, which they
can assign to multiple users upon demonstrating, under contract, they
are transitioning to IPv6 according to 6264, or equivalent.

As written there is no effort to mitigate the risk mentioned in the
quote above, and I can't support a draft that will hurt the Internet and
neither should you.

Best,
Martin