Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)

[Fernando Gont <[e-mail]>]

On 13/2/21 00:55, Michael Richardson wrote:
> 
> Brian E Carpenter <[e-mail]> wrote:
>      > ULAs SHOULD be treated exactly like GUAs for all practical purposes
>      > (including using a default router for them), with the exception that
>      > they MUST be filtered by border routers at a domain boundary that is
>      > defined administratively. The only extra requirement is that ULA
>      > prefixes MUST be unique within that domain boundary. That's all, I
>      > think.
> 
> But, that's pretty much always just BCP38, right?

Not really. BCP38 means that you don't allow packets to enter your 
network if they are employing the address space of your network (i.e., 
traffic that could only originate from your network). And you only allow 
packets out of your network if they are sourced from your own address space.

In the case of ULAs,  you'd probably want to drop incoming/outgoing 
packets that employ ULAs at e.g. your CPE router -- regardless of 
whether they employ your own ULA prefix or not (I consider my home 
network to be a different domain than, say, my ISP network). But that's 
certainly not BCP38.

OTOH, my ISP seems to employ ULAs in their infrastructure... so 
filtering ULAs at my CPE router would "break" traceroute.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492