Re: the race to the bottom problem

Alexandre PETRESCU <alexandre.petrescu@cea.fr> Sat, 07 November 2020 12:10 UTC

Return-Path: <alexandre.petrescu@cea.fr>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B22EE3A0BDB; Sat, 7 Nov 2020 04:10:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level:
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BJuBzd6VqrO0; Sat, 7 Nov 2020 04:10:51 -0800 (PST)
Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 742BA3A05D0; Sat, 7 Nov 2020 04:10:49 -0800 (PST)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id 0A7CAggr032713; Sat, 7 Nov 2020 13:10:42 +0100
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 5DAFE201829; Sat, 7 Nov 2020 13:10:42 +0100 (CET)
Received: from muguet1-smtp-out.intra.cea.fr (muguet1-smtp-out.intra.cea.fr [132.166.192.12]) by pisaure.intra.cea.fr (Postfix) with ESMTP id 4368E2016A7; Sat, 7 Nov 2020 13:10:42 +0100 (CET)
Received: from [10.11.240.63] ([10.11.240.63]) by muguet1-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id 0A7CAf0m031402; Sat, 7 Nov 2020 13:10:41 +0100
Subject: Re: the race to the bottom problem
To: Lorenzo Colitti <lorenzo@google.com>, Mark Smith <markzzzsmith@gmail.com>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, 6man WG <ipv6@ietf.org>, draft-mishra-6man-variable-slaac@ietf.org, "Mudric, Dusan" <dmudric=40ciena.com@dmarc.ietf.org>
References: <160409741426.1448.16934303750885888002@ietfa.amsl.com> <3c1c3ab5-5726-b141-e7ed-618984bbbdb1@gmail.com> <CABNhwV1zoZpZNjb54rEys4+49H3vpebZW2g9JbO1_58eR+WnQg@mail.gmail.com> <CABNhwV3L7kz=cWu8s3X=djVf4MCwewzbEgx09TWaKzCULCjYUQ@mail.gmail.com> <9A9CE8E7-3552-4FD8-A50E-1BDCA2CB813F@employees.org> <CABNhwV0LxM7EuKo2wNtVacjewsVqdhrmSiVBmB_EL-mqJYdU3A@mail.gmail.com> <CD9F9F09-2CBC-4A72-99C0-4A9A470357ED@employees.org> <9e787ed0-a221-e413-e030-ac2553dffc8e@gmail.com> <a21c9447-730b-e2c0-81f6-46deda57f507@gmail.com> <f4635fa9-45ca-f7ec-40a2-41764e1ca74f@si6networks.com> <905bcc26-a223-53d0-6675-c35579b9a8be@gmail.com> <AAE75F7F-F8DF-4B7F-9C50-3D6C91544997@ciena.com> <2b59b2de-3597-8d35-374d-75e9b10d4d83@gmail.com> <CAO42Z2zUvDE2ZSCnZa_525Hj7OthhEoDGZcd0D9xxZVW3D8aeg@mail.gmail.com> <CAKD1Yr1yiXR43mL45KbsZkKY7_YVhWFzW82LL6qed6mVPBjxaw@mail.gmail.com>
From: Alexandre PETRESCU <alexandre.petrescu@cea.fr>
Organization: CEA
Message-ID: <8b0201d4-49e1-077a-5f97-aebd24172427@cea.fr>
Date: Sat, 07 Nov 2020 13:10:40 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.4.0
MIME-Version: 1.0
In-Reply-To: <CAKD1Yr1yiXR43mL45KbsZkKY7_YVhWFzW82LL6qed6mVPBjxaw@mail.gmail.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="------------ms010808010200030108050708"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/YI5aqZDScG7b-Dpt7vpjfhwDUso>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Nov 2020 12:10:53 -0000


--
Alexandre Petrescu
alexandre.petrescu@cea.fr, tél 0169089223

Le 07/11/2020 à 08:31, Lorenzo Colitti a écrit :
> On Sat, 7 Nov 2020, 08:17 Mark Smith, <markzzzsmith@gmail.com 
> <mailto:markzzzsmith@gmail.com>> wrote:
> 
> The current bottom is a single /64.
> 
> Any provider who is only giving out a single /64 to customers who 
> might or will need more than one /64 has already raced to the
> current bottom.
> 
> A "deeper bottom" or longer default allowed prefix length will just 
> facilitate further racing to the deeper bottom. It won't encourage 
> giving out more than one /64 for those who might need them; it'll do
>  the opposite.
> 
> 
> Exactly.
> 
> The fixed 64 bit boundary prevents this by defining the bottom in
> the *only* way that actually matters: by ensuring that if a network
> goes below the bottom, many hosts just won't work.

I think that might be a speculation explaining the past.

> If it were possible to hand out less than a single /64 and have 
> things work acceptably for their customers, then someone, somewhere, 
> would be doing it already.
> 
> If we change the standards to make this technically possible but ask 
> operators not to do it, some will just do it anyway. After all - if 
> it works for them, why would they do otherwise?

A Variable SLAAC would not request operators to do something else than
they do already do today - allocate a /64 to end users.

This Variable SLAAC would allow _some_ operator and non-operator people
to not use IPv6 NAT, or 1subnet-restricted 64share or IPv6-in-IPv4 VPN
single points of failure and audio quality reducers.

> Because an RFC they maybe haven't even read says they shouldn't?

I think operators should all read RFC7934 which is a BCP and whose title
is "Host Address Availability Recommendations".

That BCP recommends "that networks provide general-purpose end hosts
with multiple global IPv6 addresses".

Do you think a single /64 represents multiple IPv6 addresses?

> The logical consequence is that we end up at /128. This is 
> particularly risky because any operator with lots of experience with 
> IPv4 will find "one /128 per host" obvious, expected and natural.
> One device has one IP address, right? And once get to that point,
> we'll need to bring back NAT in order to extend further. That would
> pretty much make the entire transition to IPv6 pointless. We might as
> well have stayed with IPv4.

I tend to agree, although not entirely.

> 
> Personally I think that once there's more industry experience and 
> IPv6 is widely deployed in all network types (say, once we reach 80% 
> of the internet, and many networks are IPv6-only), we might be able 
> to safely move the bottom, once. But it's much too early for that.

Might be too early - care to explain why?

Or maybe a bit late you meant?

Late, because IPv6 hotspots and similar moving IPv6 networks, all
plugged onto 4G, are already there.  Smartphone tethering uses 64share
some mobile WiFi access points use IPv6-in-IPv4 VPNs or, worse, IPv6
NATs.  I agree it is not 80% of IP deployments, but it goes in that
direction.

Alex