Re: Confirmation to advance: draft-ietf-6man-ipv6only-flag-05

Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com> Tue, 14 May 2019 22:00 UTC

Return-Path: <pch-b9D3CB0F5@u-1.phicoh.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA1961200E6 for <ipv6@ietfa.amsl.com>; Tue, 14 May 2019 15:00:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v9NV2Fj_8Pu0 for <ipv6@ietfa.amsl.com>; Tue, 14 May 2019 15:00:13 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9B3712003F for <ipv6@ietf.org>; Tue, 14 May 2019 15:00:11 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384) (Smail #157) id m1hQfSy-0000LTC; Wed, 15 May 2019 00:00:08 +0200
Message-Id: <m1hQfSy-0000LTC@stereo.hq.phicoh.net>
To: ipv6@ietf.org
Subject: Re: Confirmation to advance: draft-ietf-6man-ipv6only-flag-05
From: Philip Homburg <pch-ipv6-ietf-6@u-1.phicoh.com>
Sender: pch-b9D3CB0F5@u-1.phicoh.com
References: <F8BFFCAD-E58E-4736-8A1C-56579B6F6032@employees.org> <a2465e81-a17f-ab48-efda-20fe12a70077@foobar.org> <30239E0C-C444-4A7E-8342-AEE47BF8A2BB@employees.org> <20190505200449.GB7546@vurt.meerval.net> <80073906-c3c0-1f22-9e7f-c2b349063936@gmail.com> <CAO42Z2xzVW3m0mN7jEn8SYyYCYhrufVnkfp3rBjJcijBkvucNQ@mail.gmail.com> <CACWOCC-35yVYXSRR0sRL-MBMHyOFZtJx9E9h14G8qqVh5T7qGA@mail.gmail.com> <232c1a43-0fd9-4eae-737b-260a3906f72a@gmail.com> <663F6C0B-7B8A-4088-B9C0-B2867B0C3EB8@gmail.com> <CAN-Dau3VJN7qNHAW-yStMrDRCa4vsDs2ObkAxswnYbcHde2t_w@mail.gmail.com> <m1hPqHO-0000J8C@stereo.hq.phicoh.net> <CAN-Dau3R=4JbcbK7tWkJKYzVjq7DvAAEjVsbCLbZdYYO8OJ0YA@mail.gmail.com> <m1hQ7Dm-0000M3C@stereo.hq.phicoh.net> <CAN-Dau040j6U+1CCn0QJiVMy2nVShHqqSFdCkM-FbMAH-2wjRA@mail.gmail.com> <m1hQCYr-0000KBC@stereo.hq.phicoh.net> <CAN-Dau3Lcv3qTBVtig36RfbQKuGpoqdTLfrM=eWfYxCCQRy5Sw@mail.gmail.com>
In-reply-to: Your message of "Mon, 13 May 2019 12:44:12 -0500 ." <CAN-Dau3Lcv3qTBVtig36RfbQKuGpoqdTLfrM=eWfYxCCQRy5Sw@mail.gmail.com>
Date: Wed, 15 May 2019 00:00:04 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/XDEraC4F9jbNCDfeOYxLHElVlyI>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 May 2019 22:00:16 -0000

>The very first sentence of RFC 4213 Section 2 says, "The most
>straightforward way for IPv6 nodes to remain compatible with IPv4-only
>nodes is by providing a complete IPv4 implementation." You are basically
>suggesting that RFC3927 isn't needed. Which seems to be part of a complete
>IPv4 implementation, at least as far as I can tell.

I assume you notice the informal language that is used there. 

I'm saying that in the context of IPv6 connectivity, RFC 3927 is not needed
unless explicitly enabled by the user.

So the only change is that in the context of IPv6 it would be off by default.

>Yes, we can update it, but we need consensus to do so and doing it the way
>you suggest will break or at least make things that work less reliably than
>they do today, so I'm not sure we'll get consensus for what you suggest.

Indeed that's a good question. It is not clear if anything new is actually
needed. For networks, filtering type 0x800 is good enough. Mobile devices
with limited battery power can probably come up with something on their own.

>The point is RFC3927 is automatic, most of the time you don't even know you
>are using it.  But the easy example of what you break would be printing to
>a local IPv4-Only printer. If the dual-stack host doesn't receive a global
>unicast IPv4 address and it doesn't configure an IPv4 Link-Local address it
>won't be able to print to the local IPv4-Only printer. This kind of thing
>would be rather common in the home network environment, and RFC3927 is
>important when there are issues with the Internet gateway.

This kind of thing could become common in the future, or not.

Today, a mobile host without IPv4 connectivity is dead in the water. IPv4aaS
on LANs is very rare. 

Today, just about every network has a DHCPv4 server.

Like I said before, if there is evidence, that there are lots of production
networks today that combine IPv6 with RFC 3927 (and mobile devices), then yes
my heuristic will not work.

If this is about future networks, then requiring a network to explictly 
support legacy devices by running a DHCPv4 server is a small price to pay.

It would be weird to ask all operators of networks without IPv4 to set a
special flag, for all host to check that flag only to support the
few networks that want to put legacy printers in an IPv6-only network and
don't want to run a DHCPv4 server.

>Then you are saying that it is ok for local access at unmanaged sites to an
>IPv4-Only device can be broken when there is an issue with the local
>gateway.

Yes, that is perfectly fine. In unmanaged sites, when stuff breaks it is
broken. If today, in an unmanaged site, the DHCPv4 server breaks, then you
may have access to the printer but you lost access to the internet. Guess
what most people care about.

There is no expectation that stuff keeps working when routers or servers 
are down. We know about link local, but we are the only ones. For 
everybody else, IPv4 link local is the weird stuff that happens when
DHCP is down.

>Those edge cases you think are so obscure, happen every day in the home
>environments when the provider gateway goes away, and there are IPv4-Only
>devices.

Today, when the CPE is up, you get a DHCPv4 lease. Whether there is an
internet connection or not. If the CPE is off, most likely your wifi
network is down. So we are talking edge cases. The CPE needs to be off and
there needs to be a separate network that is up and connects both the
mobile devices and the printer.

It is not reasonable to require all routers on LANs and all hosts to support
a special flag, just to deal with these kinds of edge cases in a legacy
protocol.