Re: Confirmation to advance: draft-ietf-6man-ipv6only-flag-05

Nick Hilliard <nick@foobar.org> Tue, 28 May 2019 14:22 UTC

Return-Path: <nick@foobar.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FBA0120164 for <ipv6@ietfa.amsl.com>; Tue, 28 May 2019 07:22:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0U8FxGhePi7t for <ipv6@ietfa.amsl.com>; Tue, 28 May 2019 07:22:57 -0700 (PDT)
Received: from mail.netability.ie (mail.netability.ie [IPv6:2a03:8900:0:100::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4AAD120163 for <ipv6@ietf.org>; Tue, 28 May 2019 07:22:56 -0700 (PDT)
X-Envelope-To: ipv6@ietf.org
Received: from crumpet.local (089-101-070074.ntlworld.ie [89.101.70.74] (may be forged)) (authenticated bits=0) by mail.netability.ie (8.15.2/8.15.2) with ESMTPSA id x4SEMsTJ033541 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 28 May 2019 15:22:54 +0100 (IST) (envelope-from nick@foobar.org)
X-Authentication-Warning: cheesecake.ibn.ie: Host 089-101-070074.ntlworld.ie [89.101.70.74] (may be forged) claimed to be crumpet.local
Subject: Re: Confirmation to advance: draft-ietf-6man-ipv6only-flag-05
To: David Farmer <farmer@umn.edu>
Cc: Sander Steffann <sander@steffann.nl>, 6man WG <ipv6@ietf.org>
References: <F8BFFCAD-E58E-4736-8A1C-56579B6F6032@employees.org> <m1hQ7Dm-0000M3C@stereo.hq.phicoh.net> <CAN-Dau040j6U+1CCn0QJiVMy2nVShHqqSFdCkM-FbMAH-2wjRA@mail.gmail.com> <m1hQCYr-0000KBC@stereo.hq.phicoh.net> <561d9dc3-c769-c774-8f65-f975ac2a10a0@gont.com.ar> <m1hT1DZ-0000HEC@stereo.hq.phicoh.net> <ce07ade8-5105-055f-4798-f4ef20a2393c@si6networks.com> <CAN-Dau02MYCrKx2BgyuYJeHBdoz6SHCnp+-byM+LMM8af0S+rA@mail.gmail.com> <40e99171-6dda-29e3-6152-da5ca5219ed9@foobar.org> <CAN-Dau0ALqfAA-Dz56oHAfOtY7E2obx5E7TgoeH357Mckp3t9g@mail.gmail.com> <093ba8e2-6f0a-4c91-9df1-cda33fffea97@foobar.org> <CAN-Dau3kVqb+ZEHB7iPGeRuq1Mu8UHR3FEZv8SgmiqZexaFhuA@mail.gmail.com> <12db9629-f92a-e12a-5ff1-7db2c5d2137e@foobar.org> <F6F0C9DC-545E-4FE5-BB4C-55BB29022E84@steffann.nl> <CAO42Z2yUDi3FHOZsLrHqwLsEWkB1X9FREa8m6dU6ecOr=SsX4g@mail.gmail.com> <E51102E7-D4F0-4469-8888-5072F624EE06@steffann.nl> <CAN-Dau1S57wQ+3+m+m5grMe5N2SdfFqhELteSYfkmAC85_8H3w@mail.gmail.com>
From: Nick Hilliard <nick@foobar.org>
Message-ID: <8523a960-d551-1c24-d756-10c1840289de@foobar.org>
Date: Tue, 28 May 2019 15:22:53 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 PostboxApp/6.1.18
MIME-Version: 1.0
In-Reply-To: <CAN-Dau1S57wQ+3+m+m5grMe5N2SdfFqhELteSYfkmAC85_8H3w@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-GB
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/SYEE4vMvDdAHjebkj9ok-9LWyrI>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 May 2019 14:22:59 -0000

David Farmer wrote on 28/05/2019 13:53:
> Personally, my issue is IPv4 LL, in particular, service 
> advertisement/discovery traffic using IPv4 LL. This service 
> advertisement/discovery traffic can be sizable and is already 
> problematic for many WiFi networks so the elimination of such traffic 
> that is by definition futile is an unqualified win in such situations.

quantifying this, if you are able to use ethertype ACLs, all the host 
will see is its own mdns transmits.  These are typically small scale (< 
1pps measured over longer timescales); they would be coalesced with 
other transmits on wifi devices, and the transmit mechanism for these 
multicast frames would be wifi unicast to the AP, i.e. cheap.  There 
would be no transmits from AP to host.

If RFC2563 were used to block ipv4 LL autoconfig, then LL traffic would 
in theory disappear and all you'd be left with would be the occasional 
DHCP request.

I.e. in both cases, background ipv4 chatter would drop to operationally 
insignificant levels.

In respect of unqualified wins, there ain't no such thing as a free 
lunch.  Each option has its costs and will be a balance between 
complexity, protocol purity, efficiency, security, ease of 
implementation, scope of application and many other things.

Operationally, dropping 95%+ of ipv4 background chatter would be a great 
win.  This is trivial with ethertype ACLs, and my suspicion is that 
widescale implementation of RFC2563 would give comparable results.  The 
remaining chatter is not very important in the scale of things.

> Also, the testing that I did shows that most newer clients no longer 
> support RFC2563. I'd be happy to be wrong on this and I'm not 100% sure 
> my test was valid, but even if I'm wrong this shows that making RFC2563 
> work as desired isn't trivial.

that may well be the case, but the protocol exists.  It's difficult to 
justify a new protocol when an existing standard which does 95%+ of what 
the new one proposes hasn't been widely implemented.

Nick