Re: Generic anycast addresses...

Ted Lemon <mellon@fugue.com> Fri, 31 May 2019 13:58 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA686120075 for <ipv6@ietfa.amsl.com>; Fri, 31 May 2019 06:58:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s2RsmbbgPiva for <ipv6@ietfa.amsl.com>; Fri, 31 May 2019 06:58:52 -0700 (PDT)
Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FAF2120025 for <6man@ietf.org>; Fri, 31 May 2019 06:58:52 -0700 (PDT)
Received: by mail-pl1-x62c.google.com with SMTP id go2so4042528plb.9 for <6man@ietf.org>; Fri, 31 May 2019 06:58:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=7edNacPoZklb9ctRv8jHLXE8nrtarMtgRDB01U+1KJ4=; b=RRVYhpoOH5mYJkdcGr375sjSSwltfDz+sHZAvLS3P3x7aqglV5FUd4IGjr4e7ztuf1 AFTgcAjM+veV9rLaXRVqFTT+LpVal2TsOERjMOXNsAr6WbicFsPZA8yVWJ18fIQxxxaS h+oM/MY30uE+kq/dOeLmgpnhKrt9ZurnzSn5bTo9l6HSe33vEUUdA2KaP+WHC+Wu+mid UhGtHmFnKm5wQ/K3hn+VbqpL2XQx8C7nydXd+tdqwHcOt1mhiTADFdw8xjvQjUOyP0V4 WICXQGt7pUWb7PwA7aKPcMP/BprKb+bS5X6MVnyWbybiuJuQmrhNp3MAd0jIPNII6vpc kGyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=7edNacPoZklb9ctRv8jHLXE8nrtarMtgRDB01U+1KJ4=; b=n3tF4Fi1nzM154Oyt3l+5gNGQrqSMSLL/qiZixi83UWgPv+x9+BOCwB8gMxHr07iCm lv/U2j8oaCFS08USrARV64SdMsyVTpiGk2ZIcwmQqBb9UqBPSatv/bSs3ZYWwSDH6Rqz iQQHXE3rKk8vV223+gYy1OguXLPblqS1QJCP6f/Oa0knOwy5NlBhCSD4YC7oCpwoVg/X Gqm83VRJUCbYkfzKKmlib9WYKPPed6eHCoof+riN5JzCZxO4Xo4gEEgQI9Lvzf6WJx4f upTP1GY99KRsI6RlrSw5PjTM9s0VWcCXiLZCu/8axxxvx+vR8eQlK09BsmAvw1sv3uxa 6+BQ==
X-Gm-Message-State: APjAAAV3iXt4kGsFyQ26oDIvsudaVGyOppHXNkAMwf/Gi2EowsTqtvRg lbkLyd5TDfFHDz8MMtiSYyb5XSAlu5Nxog==
X-Google-Smtp-Source: APXvYqzU+7Rk24Js+yRvBg7HLVZ+cZUL3x30z18DMC8y4J29kThgEBIQqWxShK1M8InVVUy5vj3itg==
X-Received: by 2002:a17:902:205:: with SMTP id 5mr9081373plc.165.1559311131961; Fri, 31 May 2019 06:58:51 -0700 (PDT)
Received: from [10.20.12.34] ([12.217.162.130]) by smtp.gmail.com with ESMTPSA id x17sm5055239pgh.47.2019.05.31.06.58.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 31 May 2019 06:58:51 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <D3A8BD5D-9C8F-4A33-B7CA-6941BDEDF52A@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_6A7460FA-F389-4802-A8D4-BD4E577D3D6D"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Subject: Re: Generic anycast addresses...
Date: Fri, 31 May 2019 06:58:49 -0700
In-Reply-To: <alpine.DEB.2.20.1905311101160.2454@uplift.swm.pp.se>
Cc: "6man@ietf.org" <6man@ietf.org>
To: Mikael Abrahamsson <swmike@swm.pp.se>
References: <7A9560FC-0393-45DF-8389-B868455AC6DD@fugue.com> <20190530005734.7d2alod2zoaemmhc@faui48f.informatik.uni-erlangen.de> <D6E27B45-437F-45BE-A305-47DD460BCE02@fugue.com> <26144.1559226966@localhost> <1DD451A7-D898-4105-974C-53776A3DA9F2@fugue.com> <20190530152902.l2nmyhadr4e4kt7x@faui48f.informatik.uni-erlangen.de> <0FF19D6D-1A45-41EF-BE34-CC35B5E51E1E@steffann.nl> <D91629F6-73AC-4A80-80EF-16644F73DA36@fugue.com> <701687d4-842c-6a16-3c97-349125324e3f@gmail.com> <D648647D-60E1-4DCE-B0BE-11002E0AE5A4@fugue.com> <20190530220838.g2hshonsjxmfnd55@faui48f.informatik.uni-erlangen.de> <632BE7EC-26A6-44E9-9CCD-F0AE143D4256@fugue.com> <AF1967FC-526D-47FB-98BE-F9B949F26796@steffann.nl> <CAO42Z2yY=z-wKCUaCYZqJLHfT+LdyDOWz9bLG8QTh9C8sJCx3g@mail.gmail.com> <F3E48F41-DED1-4D5D-AEC1-A01356D4110B@fugue.com> <CAO42Z2xXbwUd6G2EZcUvPStP8acyM=Dt8n-R=Cdpra+wMwWf3Q@mail.gmail.com> <F1401F04-550E-41EA-880E-F66D464B3554@fugue.com> <alpine.DEB.2.20.1905311101160.2454@uplift.swm.pp.se>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/6g0r3lq31B_LDgueVl2Py4b0Sng>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 31 May 2019 13:58:55 -0000

On May 31, 2019, at 2:11 AM, Mikael Abrahamsson <swmike@swm.pp.se> wrote:
> https://tools.ietf.org/html/rfc6052#section-2.1 <https://tools.ietf.org/html/rfc6052#section-2.1> , the 64:ff9b::/96 prefix for NAT64, out of global scope. However, you typically need the traffic to only hit one of these (because of state), so I guess they will not be BGP anycasted.

That’s a similar idea, but not anycast.   There you’re hoping the packets reach an edge router that does NAT64.   So a lot of the work in the infrastructure is the same—if you have the server at the edge and only one egress, you don’t really have to do anything except make sure that the edge router forwards the packet to the right host.  If you want something fancier, you set up the right route—in the case of 64:ff9b, if you want your NAT to be somewhere other than the edge, you just arrange your internal routing so that the packets get to the network address translator.   You could do the same thing for these anycasts.

One disadvantage of allocating well-known anycast addresses out of the same address is that if your anycast servers are actually in different places, you need to have host routes in your routing fabric, or use tunnels, so that’s a downside that doesn’t exist for the NAT64 WKP.