Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?

Töma Gavrichenkov <ximaera@gmail.com> Sun, 08 August 2021 14:57 UTC

Return-Path: <ximaera@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01BEE3A2ECD; Sun, 8 Aug 2021 07:57:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9WmuQNRtHCaf; Sun, 8 Aug 2021 07:57:39 -0700 (PDT)
Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2564A3A2ECC; Sun, 8 Aug 2021 07:57:39 -0700 (PDT)
Received: by mail-ej1-x635.google.com with SMTP id hs10so24466242ejc.0; Sun, 08 Aug 2021 07:57:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sNbSd6icw1BDc/zqhB6bd1KEWkQPOA3vgC1QQxBQMkg=; b=uR//HSZaY19+W2EB5v8TMoUXlbKOjbV90ZqzyJKNc5nakOwOb6k4X5EFAYsLqWoMpd DOJrO1xUtj9O5b8/TNqpLLrxUhgD3YNyGOfBxyQ/R+zDqC3Bv7EKti5JZ3QdmBGibdbR FehPJ8A3Jkm+p0ppcxVXaJjbjt/Ks1PshmLAaAQZ1NPIjf4M4jtYR0rOUbfrNTvh8zS+ xoDMiYFxtkMSGS4Szghs8hgILXuQk/cOQrPmGHeP86pPaQ6g1QwqJIPVaWCbVXwDpZ3X uZWPeHBkP0qkIdw4OaZmZCE95P4lYDNtHlnn1RkK7p8x1BkEvLdPVAw7Xq50vUWdL9t0 NjfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sNbSd6icw1BDc/zqhB6bd1KEWkQPOA3vgC1QQxBQMkg=; b=opz1gKRyuA3RVAaw4k0m/7XWDzm6cuIPDhkyFwKvbKq48BT74ZW4TE7T7GQk4nvmN/ HJixVQT4TFYBzeXTnOKOjWqt6k2tVnAQ8VL3/NWTH9pX1V/QGZQ7GBy5VrVcS2VDV8rF WKx6stgj2wWTw/VlqfFjM5aZCv0NZNvUgsLoh6POCQA0caCSAIvsTu8x0rM5l07TVacH EB6R8kYaOYrNPypO3ZcO8Y1TAH4PK7kQTdxfJ9JzBhbfItX258KcHmpz40icd6naeBZK ejuhoU7bfdvmplpmbiPZCX28Ry15tIqHFtLqGnaYKW/jSjUsvnRHeojayaM55d8i/DPQ 3DJQ==
X-Gm-Message-State: AOAM533r9qYwYOxOZQbz7rZwYLIhDrA3qmQlBCZ+fnvebW/hkafaYjyp CNu7Ei4hhRdiAQPJZ3gKH5lNeqhEHMNXimFEa+Y=
X-Google-Smtp-Source: ABdhPJzsNpIQUrT0aGp1v5ErfaiQZiC5romEVCdfJJjn6ZOartWbw5SbTRgarFg3OKno4hT107tUU36gxe+u/UITy9M=
X-Received: by 2002:a17:906:c087:: with SMTP id f7mr18144488ejz.487.1628434652475; Sun, 08 Aug 2021 07:57:32 -0700 (PDT)
MIME-Version: 1.0
References: <db8c1a5534e9412ebcfa37682d75f862@huawei.com> <C23D7023-B5B7-47C6-8AC5-65A98822A724@lurchi.franken.de> <CANMZLAZGawUjRhSSE_rA8AyqMx=mx1WFeJ_tZq0KVEXJd2XBfQ@mail.gmail.com> <20210807014730.GA28901@faui48f.informatik.uni-erlangen.de> <CAO42Z2yezZh5-B0PwCuNt2FUMAW-FjMK8QZ8uL4TsPhs26zziw@mail.gmail.com> <20210807151716.GA3098@faui48f.informatik.uni-erlangen.de> <CALZ3u+a_7XQ+R8mV+9KzwRwxa0riP-QD_2R69ycV0NL9jy_S3Q@mail.gmail.com> <20210807175410.GA63079@faui48f.informatik.uni-erlangen.de> <CALx6S36b33LD_hNFvptOJuny4g98=dhq3RtKsGeLx3ks-yYjFg@mail.gmail.com> <6F63D7FE-8768-4BD8-846E-61E50E44228F@lurchi.franken.de> <CALx6S36pbw2angEmDpu5DnX2nix9KgxFs7ExU17x+JXQFs23TA@mail.gmail.com> <CALZ3u+Yt2X3faSVW7K0eaxmaQy6iA6p4=f0c4E_F4CP0tfjHYw@mail.gmail.com> <CAOj+MMHu9wSuG87_vBaGNY0oU0kMu9KPFPAwcP9+eFviCMErPg@mail.gmail.com> <CALZ3u+YRfWspGYbFPQQyEGBxsS+0VhSAZq4MHWnWrMaW1HU-tQ@mail.gmail.com> <CAOj+MMF2Vr1LRin0WpBTM6UeRfi4FGQUpgp0SX4G2ftvtm23mA@mail.gmail.com> <CALZ3u+a_o8tTvBqRn2vQtrxMa8oZLA3oUgD8a_5ABg+FLPOqbg@mail.gmail.com> <CAOj+MMGqYUx29En9BRZLeLSzRJCY3+k1hRodL7WG5GGve6mQPQ@mail.gmail.com>
In-Reply-To: <CAOj+MMGqYUx29En9BRZLeLSzRJCY3+k1hRodL7WG5GGve6mQPQ@mail.gmail.com>
From: Töma Gavrichenkov <ximaera@gmail.com>
Date: Sun, 08 Aug 2021 17:57:19 +0300
Message-ID: <CALZ3u+Ywd6M2fCc1YEQWTDcCOHriLiO3d5M1TUv2xFnBb3-m4g@mail.gmail.com>
Subject: Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?
To: Robert Raszuk <robert@raszuk.net>
Cc: Tom Herbert <tom@herbertland.com>, 6man WG <ipv6@ietf.org>, IETF discussion list <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000035b205c90d7ddf"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/1HO4-o5NNjP1yaCPVCXsuZXRWHE>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Aug 2021 14:57:44 -0000

Peace,

On Sun, Aug 8, 2021, 1:30 PM Robert Raszuk <robert@raszuk.net> wrote:

> Transport sessions cannot reliably last for 12 hours on the Internet.
>> That's the thing.
>
>
> The thing is that 1000s of people come to their desks at 8:00, they turn
> on their financial application - which uses TCP - and turn it off at 17:00
> local time. And the single session stays up just fine for 9h.  In fact
> session stays much longer such that in such application there is hard stop
> at 18 hours to kill the session. And such forced session killing does
> happen a lot every day.
>

*sigh* yes, there might be some legacy applications which don't work well
with connection reestablishment.  Such legacy applications won't be getting
any DDoS protection except for the basic one.  This is a fine trade-off for
many.

I, however, don't see the point.  For seemingly every network feature out
there there's an application which breaks on that feature.  Anycast is not
an exception.

An order of magnitude more applications break when they encounter MTUs less
than 1500, but we're not going to abandon the concept of MTU, right?


It is just real proof that your point is simply not true.
>

Not really, as you can see.


> A single BGP route announcement takes some 30 seconds to propagate, and
> > sometimes a route withdrawal takes more than 4 minutes.
>
> That's a pure occurance of spreading FUD.
>

> I do recommend running your own measurements or consult those who do it
> well. For example Geoff. In fact his cats and data presented  illustrate
> very well the point I was making earlier:
>
>  https://blog.apnic.net/2019/05/15/the-speed-of-bgp-network-propagation/
>

Kinda nothing in this article contradicts what I said before.  Well, it was
sort of implied it's rather box-and-whiskers than a constant reliable time,
as this is a statistical process, if _this_ is your concern.  Sorry if it
wasn't unclear.

Whether you count not pointing out that a statistical process is, in fact,
statistical as FUD or not is entirely up to you.

--
Töma