Re: RFC4941bis: consequences of many addresses for the network

David Farmer <farmer@umn.edu> Thu, 23 January 2020 22:32 UTC

Return-Path: <farmer@umn.edu>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D03581200E9 for <ipv6@ietfa.amsl.com>; Thu, 23 Jan 2020 14:32:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.298
X-Spam-Level:
X-Spam-Status: No, score=-4.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umn.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HQSNTMGncjLX for <ipv6@ietfa.amsl.com>; Thu, 23 Jan 2020 14:32:47 -0800 (PST)
Received: from mta-p8.oit.umn.edu (mta-p8.oit.umn.edu [134.84.196.208]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 865B21200C7 for <ipv6@ietf.org>; Thu, 23 Jan 2020 14:32:47 -0800 (PST)
Received: from localhost (unknown [127.0.0.1]) by mta-p8.oit.umn.edu (Postfix) with ESMTP id 483cV706K8z9vfCk for <ipv6@ietf.org>; Thu, 23 Jan 2020 22:32:47 +0000 (UTC)
X-Virus-Scanned: amavisd-new at umn.edu
Received: from mta-p8.oit.umn.edu ([127.0.0.1]) by localhost (mta-p8.oit.umn.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JuxkC3fQtA_2 for <ipv6@ietf.org>; Thu, 23 Jan 2020 16:32:46 -0600 (CST)
Received: from mail-qk1-f198.google.com (mail-qk1-f198.google.com [209.85.222.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mta-p8.oit.umn.edu (Postfix) with ESMTPS id 483cV65pTSz9vfCW for <ipv6@ietf.org>; Thu, 23 Jan 2020 16:32:46 -0600 (CST)
Received: by mail-qk1-f198.google.com with SMTP id v2so2702968qkf.4 for <ipv6@ietf.org>; Thu, 23 Jan 2020 14:32:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umn.edu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DleldZYSYhOzopVrcKGoogOllzX2AAa0iR2PYNY25DA=; b=jSXbRRo1I16M2Im4nEiVqY501KD4rpkKSS0Fl2X2vHvhQLnOSQSY31HmtF7HPgC660 5BjiB07w7oJI9euQLBbZOuuIOdXWvgNX5W9oYDcxvZNBnTzIUeD146SXNQM5DjoNMHix 5N7oYWOmyhb1LPGZNEHNOpTTDRylCgghGNbzRG84C010PUsv8dvvOWF/hLeynPOB9ALA E1iq95wScUMg/cBjmWUs1RXwrglymI8I8rghtaq6IYaJtpHRfqIv9Qk1JScR2NxyoJfb pAkgxPKvNAqlXz8Xt4GbT+NUyI8d1S7006T4AlrcK0+kJysVQhSeznaRu99oG8Z2Py3l GonA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DleldZYSYhOzopVrcKGoogOllzX2AAa0iR2PYNY25DA=; b=jiFjKL5zWbMgG5MDNYKI9UvPuGCQatnHrxQrctMI3ndNrChqqf4px3l0BYnea7ZXn/ TkAvXNKzjMOhE3XndS60kKjHCQos/u3+LzaEnznTrsEnxzq3lM+Cr+4TimRxE73p1mzM +hIEacHN6cpm5tGIwUfsvZoNXi3uC/4FiLXrXQfIc4j6kuxIQ0duWxcocBiun1nnE79a Tzz0UBBJ3hxqsN16/mgWEKo3717xqzbk3e5eVcPoFJEjQiKpiOFLWI97K3YNviL5PF4N 7/5mopp5RYEBh/KPlzV4ulZT2FydyFYCboosuAOovfR/0S2NISh0SjyZeOKPQJbnsiax uxrg==
X-Gm-Message-State: APjAAAUyX+lINeDFeX+Uv19G3uS07f+PYfvX3+DN7gaL2zG1Ga9ybATO nO0LkaTl7+IDLuRIoypXEy9udaHEptIxonetY4kA4670fIbz8YIYbf+OEEqU93yjS+idiusQPwj Qm5juwnEToxrmieebzxgvM+AO
X-Received: by 2002:a05:6214:983:: with SMTP id dt3mr19013199qvb.145.1579818765853; Thu, 23 Jan 2020 14:32:45 -0800 (PST)
X-Google-Smtp-Source: APXvYqzHW4yPY5Akri/gJYVRLektMGsL+8huU3/ndSMU2I7jNhbgcAV5tIlk43EVr3ijFj2P1Ko6+lcD3pPMp/BY5NY=
X-Received: by 2002:a05:6214:983:: with SMTP id dt3mr19013162qvb.145.1579818765398; Thu, 23 Jan 2020 14:32:45 -0800 (PST)
MIME-Version: 1.0
References: <03C832CE-7282-4320-BF1B-4CB7167FE6BE@employees.org> <MN2PR11MB3565330989D411525D30B90DD80F0@MN2PR11MB3565.namprd11.prod.outlook.com> <80207E17-AE8E-4D19-B516-D2E6AB70721E@employees.org> <8D5610EA-49D3-483E-BB7A-67D67BC89346@jisc.ac.uk> <DE7B0688-230F-4A5C-8E24-9EAED9FD9FEB@puck.nether.net>
In-Reply-To: <DE7B0688-230F-4A5C-8E24-9EAED9FD9FEB@puck.nether.net>
From: David Farmer <farmer@umn.edu>
Date: Thu, 23 Jan 2020 16:32:29 -0600
Message-ID: <CAN-Dau3uMU-wO33bBY=qEYD8x9=qybZigDr_M9cdFSFYJA_EKg@mail.gmail.com>
Subject: Re: RFC4941bis: consequences of many addresses for the network
To: Jared Mauch <jared@puck.nether.net>
Cc: Tim Chown <Tim.Chown@jisc.ac.uk>, 6man WG <ipv6@ietf.org>, "Pascal Thubert (pthubert)" <pthubert@cisco.com>
Content-Type: multipart/alternative; boundary="000000000000524c8c059cd638ab"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/01YzefqoC2kfEY5HcPyFAThF_zg>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jan 2020 22:32:50 -0000

On Thu, Jan 23, 2020 at 7:37 AM Jared Mauch <jared@puck.nether.net> wrote:

>
>
> > On Jan 23, 2020, at 8:32 AM, Tim Chown <Tim.Chown@jisc.ac.uk> wrote:
> >
> > The problem statement section in 4941bis is all about user privacy, no
> mention of operational / management complexity, or other “general problems”
> that SLAAC has.  It seems there are unstated problems here :)
>
>
> I would +1 this here.
>
> I would also generally question if rotating IPs is a adequate privacy
> protector considering there are other ways to identify users that are being
> (broadly) employed today.
>
> The complexity that this introduces into networks for operational
> debugging (provider: what’s your IP address so I can debug? User: Well
> here’s the 20 on the host because I have limited lifetime privacy
> addresses, and I don’t know what outbound one it’s using for this
> connection.  Provider: What’s your IP address so I can debug?  Actually,
> can you just turn off v6 so I can debug your problem?  User: sure, I just
> want it fixed).
>
> - Jared
>

First, the idea of changing addresses is not a new one, this is
RFC4941bis or version 3 of this idea.  Second, if you read the draft it
discusses that this can complicate troubleshooting and the trade-off may
not be worth it in all cases.

Thanks.

-- 
===============================================
David Farmer               Email:farmer@umn.edu
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================