Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)

Mark Smith <markzzzsmith@gmail.com> Sat, 20 February 2021 21:55 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0F5B3A0E37; Sat, 20 Feb 2021 13:55:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.402
X-Spam-Level:
X-Spam-Status: No, score=0.402 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.999, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TrxA9lTwRl_A; Sat, 20 Feb 2021 13:55:26 -0800 (PST)
Received: from mail-ot1-x335.google.com (mail-ot1-x335.google.com [IPv6:2607:f8b0:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CC883A0E30; Sat, 20 Feb 2021 13:55:26 -0800 (PST)
Received: by mail-ot1-x335.google.com with SMTP id l23so8566365otn.10; Sat, 20 Feb 2021 13:55:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2omF7CmrsJnSeexFSTFatcy2EJ6wOYhf8OT7iOgmMWw=; b=A2nkzLpdFncP6UMgR6Q2jDwFaCBnMhx/vymxsyjX1AZ8fVlU+i9EXOd43wSrZgHZol QWRraAgaPn0FQr36eZbtj8ZFU9qaUb4bT6zn1Z5UBdHA9sWpGBU/VU7ioaeOp4k0NL3p VWuFzl/nCZS7UYun306keWq8EBWzTlGh6eM8+19lEUMqx7HcBDzCJBf/zZGuYq9m9+nw GZSfiGV4onsakoitJOA/N3NTHC6NyxDxFuLRbanh4ZnzJETtaimzJCWOniupNXUATWAY dHOaYtUSHN0N7agCtgTdiaBIOW4zls96q16O6w5Hjp2BdJRCZxapdxNYJwFX6S8QCRDT Nn5g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2omF7CmrsJnSeexFSTFatcy2EJ6wOYhf8OT7iOgmMWw=; b=QF/ghPH8HkZpWa19T/t2qpokpYN3jyb5RkqG3hTsQpzrNhR6USKMFFMScMvwn42VSa SpZfY8mHitcVN4zHbyWfJDsr1VHi5OYPnLPJ9THz9mN6s0DhqU5fcCHtaphSAWBr31Q0 FVDvzYBQkl7pNdKy4BtdGo0Q55zpVDU9keCGxNdBI1kA7eJ5900M/9pDERUE5nrc87ev wvy/2GLaLEcO6NBqLew4sJF8vLk769IWtLSJeGKFpYCFVo3WoJYtVBMuBGnC5rb6NAeK ViO+AY7b8gD1/a3nLjejHQYt7SI+OEBWiY/LIk5KbDyw6CFEMv/xm7JkVvXd8+G5IaSF Bg5A==
X-Gm-Message-State: AOAM533+0oT5w82Ph8OZfMt9NOrIzzgBPYw1ZrmDf587ZlK38V6CHSbc CcCgpmV5/zNeQVbQX8feU45ViYB52f34rhMap5U=
X-Google-Smtp-Source: ABdhPJxCSdQl/yw7QAS1Z3Rl4ICDf0SDJy53NSsSf2ycn7MomUYCz+Jwpo2gsVgI3/EZLcpw3xuhGKQZxr+ooX6mkMw=
X-Received: by 2002:a9d:3a34:: with SMTP id j49mr11561285otc.153.1613858125498; Sat, 20 Feb 2021 13:55:25 -0800 (PST)
MIME-Version: 1.0
References: <a5b9b8566ce446d3a5e5dcc9ca2fbac2@boeing.com> <CAN-Dau1xD21EpqrSXKHLzADPyjeWcwc=phHGSFP8cj6705O2BQ@mail.gmail.com> <5f0f480a-b331-7f0c-a738-5d80bd8569e6@si6networks.com> <02dd48fbe6cc44c482662fdc1978219f@boeing.com> <4908665c-94cf-810f-8bff-7407e3abe099@si6networks.com> <c09cfe42-f74b-ccaf-f03b-fb6942ed890f@gmail.com> <CAO42Z2wdgJXC3v9HtU-tNRAPv-zuhnyGuCq5m-r8T7LO84U3jg@mail.gmail.com> <ff071f80-67d3-b9a3-7352-39a0547da415@si6networks.com>
In-Reply-To: <ff071f80-67d3-b9a3-7352-39a0547da415@si6networks.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Sun, 21 Feb 2021 08:54:58 +1100
Message-ID: <CAO42Z2yoEjJumjMD_YNQ_wwCV2KUsDvODy58Vg7ar=+hRw4OJA@mail.gmail.com>
Subject: Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)
To: Fernando Gont <fgont@si6networks.com>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, "Manfredi (US), Albert E" <albert.e.manfredi@boeing.com>, IPv6 Operations <v6ops@ietf.org>, "6man@ietf.org" <6man@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/Oo2Ys-VspMooIVsTyys-W19zqeg>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Feb 2021 21:55:28 -0000

On Fri, 19 Feb 2021 at 14:22, Fernando Gont <fgont@si6networks.com> wrote:
>
> On 18/2/21 22:21, Mark Smith wrote:
> >
> >
> > On Fri, 19 Feb 2021, 11:37 Brian E Carpenter,
> > <brian.e.carpenter@gmail.com <mailto:brian.e.carpenter@gmail.com>> wrote:
> >
> >     So, my thought (and it belongs on this thread OR the 'IPv6
> >     addressing: Gaps?' one) is something like:
> >
> >     We should abolish, delete, expunge and deprecate the word "scope"
> >     from all IPv6 documents. It clearly doesn't have an agreed meaning,
> >     so it is worse than useless.
> >
> >
> > I think the word scope is fine.
> >
> > The problem is that by itself it doesn't specify what thing the scope is
> > applying to, and people aren't explicitly saying what that scope they're
> > referring to. "Global scope" - scope of what?
>
> As per RFC4007, scope refers to address uniqueness.
>
>

RFC4007 doesn't apply to ULAs:

"Though the current address architecture specification [1] defines
unicast site-local addresses, the IPv6 working group decided to
deprecate the syntax and the usage [5] and is now investigating other
forms of local IPv6 addressing.  The usage of any new forms of
local addresses will be documented elsewhere in the future.  Thus,
this document intentionally focuses on link-local and multicast
scopes only."

RFC4193 is of course this future document.

>
> > ULAs (and addresses in general) have at least two different scopes:
> >
> > - scope or domain of intended uniqueness
>
> For ULAs, this is "set of interconnected ULA-based networks" -- i.e.,
> some sort of limited domain/scope.
>

RFC4193 explicitly says that the scope of uniqueness is global:

"Local IPv6 unicast addresses have the following characteristics:

      - Globally unique prefix (with high probability of uniqueness)."

>
>
> > - scope or domain of intended forwarding within a network or across a
> > set of networks
>
> In this case, same as before.
>
> Normally, both of these are equal:

In ULAs they aren't.

Link-Local addresses generated using RFC7271s aren't either.

The IID is likely to be globally unique, even though the Link-Local
prefix isn't. Combining the globally unique IID with the Link-Local
prefix results in a globally unique Link-Local address - the
forwarding scope of the packets with those addresses is limited to a
link, however the RFC7217 LL address's scope of uniqueness is global.


and address uniqueness will limit
> reachability.
>

I'm not sure I understand what you're saying.

I am wondering if my definition of "reachability" is different from
yours. I see it as describing the likely current forwarding capability
of the network, because the main use of the term I've encountered is
in the context of BGP.

So the "forwarding domain" is what is designed to be the case, whereas
actual reachability depends on route tables, paths and links being
available, ACLs or other security policies etc, intentional or not
duplicate addresses (i.e. anycast).


Regards,
Mark.

>
>
> > "Scope" and "domain" seem to almost be synonyms. "Global domain",
> > without specifying what "domain" refers to, would have the same problems
> > as the term "global scope".
>
> Per RFC4007, it's global uniqueness it refers to.
>
> That's why https://www.rfc-editor.org/rfc/rfc8190.txt introduced the
> flag "globally reachable" to the "IANA IPv6 Special-Purpose Address
> Registry".
>
> Thanks,
> --
> Fernando Gont
> SI6 Networks
> e-mail: fgont@si6networks.com
> PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
>
>
>
>