Re: SRH insertion vs SRH insertion + encapsulation

Fernando Gont <fgont@si6networks.com> Mon, 09 September 2019 17:53 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4FE7120871; Mon, 9 Sep 2019 10:53:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uuQ39B_KdqAN; Mon, 9 Sep 2019 10:53:49 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9330120852; Mon, 9 Sep 2019 10:53:48 -0700 (PDT)
Received: from [192.168.1.29] (178-9-170.dynamic.cyta.gr [178.59.9.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 3BD98864F4; Mon, 9 Sep 2019 19:53:44 +0200 (CEST)
Subject: Re: SRH insertion vs SRH insertion + encapsulation
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, Ron Bonica <rbonica=40juniper.net@dmarc.ietf.org>, Robert Raszuk <robert@raszuk.net>, Mark Smith <markzzzsmith@gmail.com>
Cc: draft-voyer-6man-extension-header-insertion <draft-voyer-6man-extension-header-insertion@ietf.org>, "6man@ietf.org" <6man@ietf.org>
References: <CAOj+MMETQa=OfovZak35VfnY+T6qzU9BxAhmFMXz1b7kSppyQg@mail.gmail.com> <CAO42Z2xMWN92m7iiLiEW2AFCx0iCMGAa_BvsRwzCzb_BnuzWhA@mail.gmail.com> <CAOj+MMGOKUjRFFq8Y977OV47x6qtCvSUixQh-7sgwAQidrtdPw@mail.gmail.com> <BYAPR05MB5463306B3328F460C2417764AEB50@BYAPR05MB5463.namprd05.prod.outlook.com> <49dd15de-3985-babe-028a-6f2ac9bbe76b@si6networks.com> <45941268-1040-0c0f-0452-f9adbc391611@gmail.com>
From: Fernando Gont <fgont@si6networks.com>
Openpgp: preference=signencrypt
Message-ID: <de3a09be-fa90-79b4-3f16-c9a09a041cf0@si6networks.com>
Date: Mon, 09 Sep 2019 19:39:52 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <45941268-1040-0c0f-0452-f9adbc391611@gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/H0x5qPZWU2PCmTH-IQsn_wTEY_8>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Sep 2019 17:53:55 -0000

On 8/9/19 02:47, Brian E Carpenter wrote:
> Hi Fernando,
> 
> On 08-Sep-19 11:11, Fernando Gont wrote:
>> On 8/9/19 01:52, Ron Bonica wrote:
>> [...]
>>>  
[....]
> 
>> That's why I think it's not even in the scope of 6man.
> 
> 6man "is not chartered to develop major changes or additions
> to the IPv6 specifications." Of course it's a matter of judgment,
> but I agree that changing this is "major".

I cannot think of many other changes that could be considered major as
this. It even changes the end-to-endness of IPv6.



> Look, this is one of the reasons we wrote
> https://tools.ietf.org/html/draft-carpenter-limited-domains
> which is currently being considered as an Independent Submission.

I will look at the I-D again (I think I had at least skimmed through it
a while ago). Was the term "limited domains" coinced there?


> If the community wants to standardise mechanisms that are *not*
> intended to work across the open Internet, we need to make that
> clear, and specify how it works safely and securely. That's a
> community choice, not a WG choice, IMHO.

I do agree that it's an IETF-wide choice, since this would be out of the
scope of 6man.

That said, while I do think the concept of limited domains is applicable
to things such as "domains where IP fragmentation or EHs can be safely
used", I think when things fail, the implications of EH insertion can
span more than the intended domain. And all this architectural mangling
to save 40 bytes for a protocol that's not the most performance/optimal
(in terms of overhead) one.

I'd bet money that if this proposal had not come from a big vendor, it
had been shot down 1 millisecond after it was made public.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492