Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)

Ted Lemon <mellon@fugue.com> Wed, 06 January 2021 12:33 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 172EA3A05D0 for <ipv6@ietfa.amsl.com>; Wed, 6 Jan 2021 04:33:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yhqwP7-Mb7Iw for <ipv6@ietfa.amsl.com>; Wed, 6 Jan 2021 04:33:16 -0800 (PST)
Received: from mail-io1-xd2b.google.com (mail-io1-xd2b.google.com [IPv6:2607:f8b0:4864:20::d2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 735DC3A0596 for <6man@ietf.org>; Wed, 6 Jan 2021 04:33:16 -0800 (PST)
Received: by mail-io1-xd2b.google.com with SMTP id e22so1996280iom.5 for <6man@ietf.org>; Wed, 06 Jan 2021 04:33:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=YNFQP3IieN1wBTliOwkbOYceBsMswg28OVyh1Bd9XMI=; b=lCZZkPEzd8QpbwjAUI/SPu5MqQOE57j+H69ehwn1yfVj8dmNNAZk72Di9qd1UOeQ24 XDysbCGHX5CR4hBwNPlDABvqoNQohEeIGa0S9qTd5fPtVl3lY9ATsQJqFX18lYgA/IBp vxyB4JqX4Mk8cWnuMSRHC+CIrCywgsk/LTQGrOx7wh80DiVqFoWYqX8CUDZvVHzG7lRg o5MnFfKRr20YiGxMURapA5oDvRgh50ffJ5fyvmw1gR3SLTnf0nZpftWD52ArQUHqAJFb A/sz56ot+cWu0RDMGdhZmCeGrCvNW3/1xMOGUEbcrR/m1UFPQdcdnmP7aX4JVoiOM0bo 6jIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=YNFQP3IieN1wBTliOwkbOYceBsMswg28OVyh1Bd9XMI=; b=rp4rA8fY+YqWbyI5ANiahYEDVxXEaYVZ4Uowr12ySfS2gVNyk7LfypNGkGIDdKz6Pv +AaacxKVayptUDdN1PmDpr7/G5eCGyGfxKhz4rtFTVtS8Yds9xGzGOEYZPHV2ozjENBf RXhriK5b3NcGt5rVpWt1FOcRj0bzN+wJDB+BjumTBZxVjzI/jWcpssODEsT4nQ2mFE04 QLIX3rE5ALEWE8PIV29JqAapABpL4ndrrEO2NOr+yKxoJTEjftJcVclOqg7BdLVwoCng rQeFQrrWvDe0VF6Vve5H1A+knszaQ9bSqmFDjihSCO43Ynd1TwTrM9BmpIalYtHswWIE m+/w==
X-Gm-Message-State: AOAM530FE132rhHVvQaRhaHIbbEztclZp6caFj+gExnWQ45R7ma41JdK hvMPv1u6Pcst8yQ90CtzxxP2FA==
X-Google-Smtp-Source: ABdhPJxr8ZJETE76M+MTzT3RPk0K8vGIXr/kjPegBYf6a6UpufGRoF0ReqUoG8GTB8HPaFcQQTAYew==
X-Received: by 2002:a02:a417:: with SMTP id c23mr3539867jal.42.1609936395443; Wed, 06 Jan 2021 04:33:15 -0800 (PST)
Received: from mithrandir.lan (c-24-91-177-160.hsd1.nh.comcast.net. [24.91.177.160]) by smtp.gmail.com with ESMTPSA id m19sm1905214ila.81.2021.01.06.04.33.14 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 06 Jan 2021 04:33:14 -0800 (PST)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <735226B9-5A0E-48AE-8B9A-CCDC5ED8C3ED@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_13BF4F69-5645-4479-9094-BEEE0BA2F6FD"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.2\))
Subject: Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)
Date: Wed, 06 Jan 2021 07:33:12 -0500
In-Reply-To: <CAL9jLaZA4y+9bdvzq5r4V=B6580ZnsdwYyvQ4nzjdeccMsM4Tg@mail.gmail.com>
Cc: Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org>, Fernando Gont <fgont@si6networks.com>, IPv6 Operations <v6ops@ietf.org>, 6MAN <6man@ietf.org>
To: Christopher Morrow <christopher.morrow@gmail.com>
References: <160989494094.6024.7402128068704112703@ietfa.amsl.com> <6fe3a45e-de65-9f88-808d-ea7e2abdcd16@si6networks.com> <CAO42Z2wR-3vbHi-NrBBMmCTNDq5fgqvSmBUbYK7P+63QTNfxkg@mail.gmail.com> <CAKD1Yr014PzVJj9Y6O=PBGc_QSVtur-0wMpaNkFA0dqr8FHGuA@mail.gmail.com> <CAL9jLaZA4y+9bdvzq5r4V=B6580ZnsdwYyvQ4nzjdeccMsM4Tg@mail.gmail.com>
X-Mailer: Apple Mail (2.3654.60.0.2.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/HAG9KO6DxMlfnU9Y9O9r5cKiM5M>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jan 2021 12:33:18 -0000

On Jan 6, 2021, at 2:30 AM, Christopher Morrow <christopher.morrow@gmail.com> wrote:
> option 4, deprecate ULA.
> the best option (tm).

If that were an option, we wouldn’t be having this argument—nobody would care about ULAs. ULAs are a good idea. The terminology around them needs work, that’s all. 

For example, we use ULAs in the HomePod Mini to route between adjacent network links where IPv6 GUA delegation isn’t available. The ULA never winds up in the global routing topology. The Mini chooses it using a secure RNG, so the likelihood of collision is vanishingly small. ULAs are _much_ more flexible than RFC1918 addresses, simply by virtue of the process by which the /48 prefix is chosen.

I would have major wibbles about using RFC1918 addresses in the Mini the way we currently use ULAs, because we’d have (at best!) eight bits of randomness, and a strong likelihood of collisions with competing private network uses of the 10.0/8 space. Because ULA is specific about each prefix being a /48, and because a /48 is most likely enough for most use cases, the worries about this sort of collision are nonexistent: nobody is going to allocate the whole ULA space to a single site, and if they do, we can legitimately say that they are at fault for things not working.

We can’t and shouldn’t deprecate ULAs. I think clarifying what the name means makes sense, though, and perhaps the term should be CUA (collision-unlikely address) prefix rather than ULA prefix.