Re: [IPv6] Suggestion for multi homed clients without NAT/NPT

Klaus Frank <klaus.frank@posteo.de> Wed, 18 January 2023 20:29 UTC

Return-Path: <klaus.frank@posteo.de>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11078C1522AD for <ipv6@ietfa.amsl.com>; Wed, 18 Jan 2023 12:29:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.397
X-Spam-Level:
X-Spam-Status: No, score=-4.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nq-H0mZD6uK3 for <ipv6@ietfa.amsl.com>; Wed, 18 Jan 2023 12:29:22 -0800 (PST)
Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FA1FC1522B9 for <ipv6@ietf.org>; Wed, 18 Jan 2023 12:29:21 -0800 (PST)
Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id DD7D6240497 for <ipv6@ietf.org>; Wed, 18 Jan 2023 21:29:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1674073759; bh=+a7dDrLLAfuv+tqzE9GaZZjJskdYQx9xLAMAiuLpZt8=; h=Date:Subject:To:Cc:From:From; b=WvSdFwbjjFPmWHOLQEmIiVyZ61Dw0ghyJOf3pzfxJnaO8WcvIrSlDkM1kBVUaIC0+ /npJ1B1calV3V/MpvBlQ0vlsXPNkrWVJIDd79CLtxlkdV+0jrFa6OpUjlx8SL5htQe Wpln5wfjWCkSmk707Frc5lgsd2RjryKo4KoAAw2wIGzdn6cv8arRmDmiTpfcKbitrJ c35bjBSD/Qf1jwTRLngEJqufkjzsjIenFm9Xu/5wsko6WZ/8qwOIHNc1bqoZtRGvAo tZnGI6jDplIjnen4NgfWpCTwQnp3vbgYuJLhGTnSxTFw+gIofMY+b4Ns2g3ZTnNUmG FUPEQMlN85xoA==
Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Nxy671P5hz6tn7; Wed, 18 Jan 2023 21:29:19 +0100 (CET)
Message-ID: <d20942e7-4ad0-5fb6-0b71-1b27d916f245@posteo.de>
Date: Wed, 18 Jan 2023 20:29:18 +0000
MIME-Version: 1.0
Content-Language: de-DE, en-US
To: "Philipp S. Tiesel" <philipp@tiesel.net>, Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, "ipv6@ietf.org" <ipv6@ietf.org>
References: <b3742e2b-6472-9eb4-bee2-507fa8cdf4c6@posteo.de> <7db68981c1b1414da9ef213ace220d66@huawei.com> <9a40eeb5-df46-9c05-2cb4-08b77db66a98@gmail.com> <5417f9c042874dd185e4cf0cde3ff10e@huawei.com> <23904.1672757923@localhost> <9817b8fa1bdc46f1b2aee9297d37ac23@huawei.com> <AE93D0BA-D6DB-42A2-A522-9508F2D67886@tiesel.net>
From: Klaus Frank <klaus.frank@posteo.de>
In-Reply-To: <AE93D0BA-D6DB-42A2-A522-9508F2D67886@tiesel.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms040606020805010103090208"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/UXnntknoC7JXH5Nbf4f04kMLSUg>
Subject: Re: [IPv6] Suggestion for multi homed clients without NAT/NPT
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jan 2023 20:29:27 -0000

On 05.01.2023 14:20, Philipp S. Tiesel wrote:
> Hi.
>
>
>> On 4. Jan 2023, at 11:17, Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org> wrote:
>>
>> Hi Michael,
>> Opposite.
>> The solution is not needed for a server. The server typically uses bind() then RFC 8028 fixed the problem (for the bind() use case it proposes "choose next-hop only among routers that advertise the respective PIO").
>> The solution is needed for clients because clients typically use getaddrinfo() which is broken in MHMP (in full compliance with RFC 6724).
> I am convinced RFC 8028 would also be a great start for clients with multiple default routes, e.g., enabling stuff like multi-path TCP to work correctly, but it will not be sufficient for meaningful multi-homing / source address selection.
>
> In addition, to avoiding problems with CDNs, it is also  required to separately keep track of DNS on a per-router/PvD basis and only use the matching source addresses for new connections, so RDNSS should also be treated analog to the source address in RFC 8028.

I think we can neglect DNS, there are enough people running their own 
resolvers (or use a random public one) and it doesn't cause a loss of 
connectivity. Also even if complex, someone is able to fix it with 
little resources right now without additional standards (at least for 
the active-passive fallback scenario). Have two internal dns resolvers 
(the one on the CPE) and one that is advertised with higher priority 
that just forwards queries to these without caching (caching would be 
done by the ones in the CPE).

This way even if kinda hacky one could have a DNS server for each 
uplink. However most would just deploy an internal recursive resolver or 
just have both CPEs advertise their DNS servers and use both without 
worrying about the suboptimal choices for some CDNs.

> Having tried to manage traffic from within getaddrinfo() I can only recommend to abandon that idea.
> A lengthly write-up why can be found here in Section 6 of this expired draft: https://datatracker.ietf.org/doc/html/draft-tiesel-taps-socketintents-bsdsockets-02
>
> The only way forward I see is something like TAPS and Appel’s implementation is already pretty close what it would needs to make use of multi-homing here. They just need a litte more aggressive/opportunistic happy eyeball candidate selection.
>
> AVE!
>     Philipp
>
>
> AVE!
>     Philipp S. Tiesel
>
> --
> Philipp S. Tiesel
> https://philipp.tiesel.net/
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------