Re: IPv6, was IPv10

"John Levine" <johnl@taugh.com> Thu, 29 December 2016 16:19 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA919129412 for <ietf@ietfa.amsl.com>; Thu, 29 Dec 2016 08:19:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RPe6fqxe1y3C for <ietf@ietfa.amsl.com>; Thu, 29 Dec 2016 08:19:00 -0800 (PST)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83095129451 for <ietf@ietf.org>; Thu, 29 Dec 2016 08:19:00 -0800 (PST)
Received: (qmail 68622 invoked from network); 29 Dec 2016 16:19:05 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 29 Dec 2016 16:19:05 -0000
Date: 29 Dec 2016 16:18:37 -0000
Message-ID: <20161229161837.34614.qmail@ary.lan>
From: "John Levine" <johnl@taugh.com>
To: ietf@ietf.org
Subject: Re: IPv6, was IPv10
In-Reply-To: <D48A924B.6D79F%lee@asgard.org>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/Y3tcgajc8BWwBujwQLv1P-9IUjs>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Dec 2016 16:19:01 -0000

>>No, we are obviously not ready with [3] yet,
>
>I don¹t understand this statement, since thousands of access providers and
>enterprises are running IPv6.

There are still all sorts of places that things that are easy and
painless with IPv4 are much too hard with IPv6.

Here's an example: in my house I have a network behind a router
connected to Time-Warner cable.  T-W gives me one IPv4 address so my
router NATs.  I configured it once to use 192.168.80.0/24 and it works
great.  I have a separate server running DHCP and DNS and some other
local services.  It hands out fixed addresses for devices like
printers and the backup server, and dynamic ones for devices like
phones.  The DNS cache (unbound) knows names for all of the fixed
address devices, and handles queries from devices on the LAN, which
are all configured by DHCP to use it.  This took about an hour to set
up.

T-W apppears to give me a /48 of IPv6 addresses, so every time my
router reboots it picks a /64 at random out of that /48, and all of
the IPv6 addresses on my LAN change.  There is probably some way to
tell the router, a linux based Ubiquiti Edgerouter, to pick the same
v6 /64 every time, but I can't figure out what it us.  It was hard
enough to reverse engineer the router config to make SLAAC work at
all.  Maybe I should use DHCPv6, but I'd have to figure it out on the
server side, and then see how well all of my devices support it.

If IPv6 is going to be useful, I also need a v6 DNS cache.  Since the
global v6 addresses are unstable, I set the cache to answer on link
local address FE80::2, and set the router announcements to announce
it.  All set?  Nope.  That's a link-local address so the address is
actually FE80::2%xxx where xxx is each device's LAN interface, and
devices do a generally rotten job of appending the interface name to
the address they get from SLAAC.  I might be able to use ULAs but I
have no idea how well ULAs actually work and how I would set them up
on my servers, so my DNS cache is at 192.168.80.2 and will stay there
for the indefinite future.

Perhaps there are ways to deal with all of these, but I am a fairly
sophisticated network operator, and I doubt I am all that much less
competent than everyone else.  So when people say IPv6 still isn't
ready for prime time, they're not kidding.

R's,
John