[Int-area] Re: Comments on draft-vanmook-intarea-ipv6-resolved-gateway
Remco van Mook <remco.vanmook@gmail.com> Fri, 08 May 2026 08:32 UTC
Return-Path: <remco.vanmook@gmail.com>
X-Original-To: int-area@mail2.ietf.org
Delivered-To: int-area@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C32AAEB165DE for <int-area@mail2.ietf.org>; Fri, 8 May 2026 01:32:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1778229164; bh=R5QDX+ezH9psQAKEQHrDsGtyKoYU0j3L6D+UUAgCEQE=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=wuPkDdNNzlRXiv3fK3M1i/wuJ50/hbxXO+Apn4sa41TmA1hzm1a6o0BZDl2nIYSCX RU6+rLcCgiOcOZqPSH32yYfcBXToX81gp3vFFE9AatVL4FhTMU93PaJCF4CXyO8eoK wthEUPsXrYFrNFdRDUs0dT0+Xy0QGGFefuQbS3q0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VquzZpB8xE7c for <int-area@mail2.ietf.org>; Fri, 8 May 2026 01:32:44 -0700 (PDT)
Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [IPv6:2a00:1450:4864:20::536]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6A779EB165D9 for <int-area@ietf.org>; Fri, 8 May 2026 01:32:44 -0700 (PDT)
Received: by mail-ed1-x536.google.com with SMTP id 4fb4d7f45d1cf-67c016820e5so247945a12.1 for <int-area@ietf.org>; Fri, 08 May 2026 01:32:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1778229163; x=1778833963; darn=ietf.org; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=R5QDX+ezH9psQAKEQHrDsGtyKoYU0j3L6D+UUAgCEQE=; b=RBh+0DYNvJNdHEjY1L1UZ397crrBEi7ml1jE35DA22+JYHQid6RbxE1ncoa8JgXgTw K1+K5pKpivunQjtGHTQg2BVtlSCZvVyNsZumPjx92KxDsXT3dEEAxmjajaGqEaafSkvt c6DI4CSiYN6US+Gk+A6hR1g03i0XtS50k76T8iok9gznlMF+pvt7fZPOt3RvWbYwXqyj JIiVARw1+Gc8u4T3dBu0F0ZQrOxQ6epxS+SRpDMJAQYfhogrbxkC4D3HdDWafLVbFN3j aN1mBDxR8Q6gtGbKNShFW3v+im6KrWa0VAIawIiXadMpfDttI0gnkU9exE9nwwHxnq0r KRGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778229163; x=1778833963; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=R5QDX+ezH9psQAKEQHrDsGtyKoYU0j3L6D+UUAgCEQE=; b=VdeuDCyAeypy3ucbuJMih20mXmXofDpWeVM1eATV0rCeIedPxV7raI8LN4cs/aLdgC XVfITPuvzYjcS+yQKCB3nkwjMMRhdjGtVD/NxSYrOOZBEHFfR67UuymC8922DOFf/1WA My2Exy037JrUfYM1shcwCEfmfUHfRP3JSW4u8llgSw0LeKW7VYRwaVLCQrc3TOcJc/No L7lP0APEL4bMYirFv8RpIONzCpCkyuQbwFLfVdFC7BC73Pu5q//vjalcVnvucNYTlCk2 fm+aZ6hAwnF8zJxlALjxAqBJhsoSGhgOgv+04AD3DRcl4dtzBdYjplZhYHnMg+71pJtY oMrg==
X-Gm-Message-State: AOJu0YzA31W9Ae4oLc1JG/m6HLSA/4mzOD+K4kPtb6TVntW2wn3eqFo5 PKEotk8iJpQh8hkzgiV1MQRAkUHF7WrABBUNV5meo4xm1px6EBmnC/cA
X-Gm-Gg: Acq92OFmdlnrqfMNLokRgxRehMJx09vYpxxilAWpomgn9RWBuV8zviMdqecl/FhyvGZ 1Bj0E6SZxzIHxhGjx8MjjgJc2xYJ+CDW6Py9qz3Cr/6ntTLvLekFYivIzf0im0mfm2RegHl0qhx u4ZB7JiOm8ycJwqrPFXJZf5HEiFgd1Ik9br9ErXX0MKhJGVCckEr14LUkSqawl941/J/s5Bv6bX nbuznLInVK1sXBJcGm7DHenUwaYhBLvYeSE69jayscL5/Kk91mHBDgpdQ8gmTCM+Txh2cyWrwOg 1LdE1hnkWRdf3HR7ORCKgUBYOUSvnqkqCCUtTG+y+aKrUwJqg01+2R6rfdkseE6kSrdjgpnajii Wr/f6VAatLpG3XSCpb5N12tGw5Z1+b7Ix1Prmb0BKnLUYcFCr4HYHOMy0qpX3esMCz2tzedg4e5 /EhbJdjApT+dCIlGH2gD/+ob9ylXp6lTfJnN903vwyHzQoFo/g1UgRznBC9w==
X-Received: by 2002:a05:6402:234b:b0:671:3091:5adf with SMTP id 4fb4d7f45d1cf-67d63d8145bmr2522386a12.1.1778229162931; Fri, 08 May 2026 01:32:42 -0700 (PDT)
Received: from smtpclient.apple ([2a06:2602:7c:8002:81e9:1e98:f094:1198]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-67ef0e1c2f9sm369807a12.28.2026.05.08.01.32.41 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 08 May 2026 01:32:42 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.300.41.1.7\))
From: Remco van Mook <remco.vanmook@gmail.com>
In-Reply-To: <6daf0c03-2226-471d-b714-b0b393586f7f@immibis.com>
Date: Fri, 08 May 2026 10:32:31 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <72D2DC69-29E7-47E2-9D82-4C227C488948@gmail.com>
References: <6daf0c03-2226-471d-b714-b0b393586f7f@immibis.com>
To: Kevin Tillery <ietf@immibis.com>
X-Mailer: Apple Mail (2.3864.300.41.1.7)
Message-ID-Hash: SZGLPGYRKVSJPPYEKUOCLVD6WAWLLXCY
X-Message-ID-Hash: SZGLPGYRKVSJPPYEKUOCLVD6WAWLLXCY
X-MailFrom: remco.vanmook@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-int-area.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: int-area@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Int-area] Re: Comments on draft-vanmook-intarea-ipv6-resolved-gateway
List-Id: IETF Internet Area WG Mailing List <int-area.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/VAP5z9Aibinq-G9m2NcDZRtQkU4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Owner: <mailto:int-area-owner@ietf.org>
List-Post: <mailto:int-area@ietf.org>
List-Subscribe: <mailto:int-area-join@ietf.org>
List-Unsubscribe: <mailto:int-area-leave@ietf.org>
Hi Kevin, Thanks for the feedback; you've actually identified both the problem and the solution in your message, which suggests the draft needs to be clearer about the distinction it's drawing. The mechanism you describe, using an IPv6 address as the next-hop for an IPv4 default route, is precisely what this draft standardises for the host side. The issue is not whether it can be done manually on Linux today; it clearly can. The issue is that without a standard, every operator implements it differently, no DHCPv4 server can signal it automatically, and no host OS does it by default. Hosting providers like Hetzner, OVH, and Scaleway all solve this problem in production today using different per-OS workarounds that are undocumented in any RFC and not interoperable across providers. On your suggested alternatives: a new DHCP option or implicit behaviour when no router is specified both require DHCPv4 client changes across every OS implementation. Given typical deployment timescales for changes to that layer of the stack, we would be looking at a decade before meaningful coverage -- if it ever reached full deployment at all. The sentinel address approach requires no changes to DHCPv4 clients or servers. Any existing DHCPv4 infrastructure can advertise 192.0.0.11 as the router option today. The change is solely in how host stacks interpret one well-known address: a far smaller, and more importantly incremental implementation surface. Happy to discuss further. Remco > On 7 May 2026, at 06:15, Kevin Tillery <ietf@immibis.com> wrote: > > Hi, > It's not clear to me what problem is meant to be solved by draft-vanmook-intarea-ipv6-resolved-gateway. > IPv4 routes with IPv6 next hop are supported on at least some equipment, and do not require a special address allocation, or any other standards action. > You can simply place an IPv6 address in the next-hop field of a route and it already works. For example on Linux: ip route add 0.0.0.0/0 via 2001:db8:1::1 > > This is fairly trivial because IP forwarding doesn't actually use the next-hop IP address. It only gets used to look up the egress interface and the layer-2 address (very often an Ethernet MAC address) of the next hop. Those are the parameters that are actually needed when forwarding. It's trivial to use the lookup result from one IP version to forward packets from the other IP version. It's only a matter of whether the software supports it. No silicon changes are needed since this is generally not done by ASICs AFAIK. > > The draft mentions a desire to completely eliminate IPv4 subnetting and ARP in the local segment - this can already be done with the existing mechanism. > > I'm not sure if this behaviour is standard. If not, it might be useful to publish an RFC describing it anyway. But there would be no need for any number allocations. > > The only real use I can see for the address allocation in the draft is to automatically configure DHCP clients to use their IPv6 default gateway for IPv4 packets. Are we sure that a special sentinel address is the right way to signal this? It could be a new DHCP option (although unused codes appear to be scarce), or a behaviour of dual-stack DHCP clients whenever DHCP doesn't specify an IPv4 router but there is an IPv6 router. > > Kevin > > > _______________________________________________ > Int-area mailing list -- int-area@ietf.org > To unsubscribe send an email to int-area-leave@ietf.org
- [Int-area] Comments on draft-vanmook-intarea-ipv6… Kevin Tillery
- [Int-area] Re: Comments on draft-vanmook-intarea-… Remco van Mook
- [Int-area] Re: Comments on draft-vanmook-intarea-… Kevin Tillery
- [Int-area] Re: Comments on draft-vanmook-intarea-… Remco van Mook
- [Int-area] Re: Comments on draft-vanmook-intarea-… Kevin Tillery