Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>

Tim Chown <Tim.Chown@jisc.ac.uk> Mon, 15 April 2024 15:41 UTC

Return-Path: <Tim.Chown@jisc.ac.uk>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EFF8C14F6A4 for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 08:41:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jisc.ac.uk
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8h0i2neyVF9E for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 08:41:20 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on2100.outbound.protection.outlook.com [40.107.13.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FD8EC14F683 for <ipv6@ietf.org>; Mon, 15 Apr 2024 08:41:19 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SsyQQShSMRiETgq9grEIQ0z3uiQ703crlzvg7JNPZ0JxdOwoo0EkABorlF4KgNGvSgVZl7qZu8kUip1HIfEUn9uodwXBITWzkLkTSZHND/SBvbH9F1qtEk8Y63uzmqF/AlAjDFAJU1OK/nF94Kn9mEhec0mFqiQsf2JjTQCdqEb+R1RL4gAuM9v2vhmjd+HuW29YfolGcVIAWzAqwOx9paCptodqtXwLEtcRoYeSlArzqtzJom9bkYX8QayYid6KVz7gKRdyHvW8uZjPrvrTMdbHa9M66X9QOjrpBXrsT+lbDPGWxmRuMOEdHQ+lAeA1ba/ka+agMIyJNveJrUVMuw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8QaNbmldwD8DcYSsxE/v5qaYZ4tPEbX7oeHF5yrMXcI=; b=XlyVQEAIXjBizNKvazMKiEFbe0U3qL8G4YXLmRybn2Co2DEg/f296ScHUFVYwtlzpmiYGcdSU75HzVucxwz4tqv5mjK7Qh66c6Y7d2Uqv2xuPJE+gWzJ49oi2yrT3HgpoJq4JqRP+oLhrYAcwVxIFMlksx4QaYJeBKX4RSbfDb6JZJtYXe7fXxeapc1Y2dNJDNAX2IMx3/m0JA7SgcUZm/uok86OHTJR0isZBJcuu4iv6tXTP1XVDdWffi9fYD2OW/GnjZO9uAj+JrvhS3f7JPieHboIgGKaybsVWmn9lvAI8vnBdwVFeqTuWi8hcmMdguPTi99H4zCFo+fV9CrWAQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jisc.ac.uk; dmarc=pass action=none header.from=jisc.ac.uk; dkim=pass header.d=jisc.ac.uk; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jisc.ac.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8QaNbmldwD8DcYSsxE/v5qaYZ4tPEbX7oeHF5yrMXcI=; b=cl2t4N/emuxadpOGAnLsKzjZhHb9S3W5IoPOf8DykiLBDNLA443Q0Rcj6NhNkS/s4Jzwss55sIKrI0+1O1973oQQuWU7ECpBU7u5xEoMjTH4DjuOu9bUcWWSFIsIoszK1s0ZIMYh1xLdo5ksuigeiUdcO56wdlVsY8+wXG7M0qi3+AzWHUGMnNuE52oieTI2iOs7VwDZ4e+Elm36qpBqYW7cbuiv79JybGrxcW+lVOL3ikw4FnbUe0hX/bXeuD1lQKvkdHXkmRO97du+KltxMxuVggWvfMu6BnxSAWx0Lqhrze9hoA9CE9uTAm3N66gTglUIDyrLEHtQcQRCRjkrrQ==
Received: from DB9PR07MB7771.eurprd07.prod.outlook.com (2603:10a6:10:2a6::15) by DBAPR07MB6664.eurprd07.prod.outlook.com (2603:10a6:10:18e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7452.50; Mon, 15 Apr 2024 15:41:15 +0000
Received: from DB9PR07MB7771.eurprd07.prod.outlook.com ([fe80::c829:7d5c:70d:7f52]) by DB9PR07MB7771.eurprd07.prod.outlook.com ([fe80::c829:7d5c:70d:7f52%5]) with mapi id 15.20.7452.049; Mon, 15 Apr 2024 15:41:15 +0000
From: Tim Chown <Tim.Chown@jisc.ac.uk>
To: Mark Smith <markzzzsmith@gmail.com>
CC: Ted Lemon <mellon@fugue.com>, Bob Hinden <bob.hinden@gmail.com>, Lorenzo Colitti <lorenzo@google.com>, 6man WG <ipv6@ietf.org>
Thread-Topic: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
Thread-Index: AQHai1vuvROAgSMuiU6IjE2gG99mD7FhqjOAgADAMICABpZfAIAAUs+AgAADBICAABB1gIAAAruAgAAVeACAAACygA==
Date: Mon, 15 Apr 2024 15:41:15 +0000
Message-ID: <B0ED4A11-82CA-483E-9ECD-A0B39D157871@jisc.ac.uk>
References: <6A5E5F35-B35F-4358-8EE1-3BD82329141E@jisc.ac.uk> <6FBC1B5A-BF28-4B05-B2B2-A60DA4707755@gmail.com> <CAPt1N1m-Ye8vfOVnsPesFshLMV5QuVoxWqM=HVZiJ37zaBg6AA@mail.gmail.com> <CAKD1Yr1NTvFj0zB0=+nnUKck7TBtwHFz2XoFkD1smx4yCuZohQ@mail.gmail.com> <1EFB11CD-544F-4AD7-B414-6A626075975D@employees.org> <CAPt1N1kJFgu6FhFaVhhkPnEY2dofcLF2ZuKDBHJFF5UU6R+x2g@mail.gmail.com> <F301BC19-2D6D-42F5-9C94-0516A765B97C@jisc.ac.uk> <CAPt1N1k4FGbTVVk1QTw0-or0PxkhSPqGda8fHrJKb2t4shNGkw@mail.gmail.com> <CFFA3926-583D-4DA0-B981-3D58048DE894@jisc.ac.uk> <CAO42Z2zFtd1xJm_un34Srkz6NV0i3Zvk3dFN=s=BPaHPa2OhFg@mail.gmail.com>
In-Reply-To: <CAO42Z2zFtd1xJm_un34Srkz6NV0i3Zvk3dFN=s=BPaHPa2OhFg@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3774.500.171.1.1)
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=jisc.ac.uk;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DB9PR07MB7771:EE_|DBAPR07MB6664:EE_
x-ms-office365-filtering-correlation-id: 09cf22ab-a757-4166-e5b6-08dc5d627c98
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: w7LkO8EMWlJ0+XKYTn0cP+DPFHLKiR++S2o4okBSojjFEif3C5UQ6oj+yiJi/WggNa2KEHRqZzOnmA/rs+YSiyTvRUIFYbHc984KPaMyHFAbrFPFWLYs5AJPB7ZNWnF7Byh2T7tDIvHAZQHJEMX6VdqMM1rPu3gGcPXpoJ4gKnPsizmlB3hPvL40yDJ2F1CDL3VvlQkDvlfYUJwLuAxV1o/q7UD1Slpx1O9pjrNbW1/ZY7+3TPA/TirfAGPhvMwrIc6vF5aUJwiuyBo2JAJB5dS6nmfKOhaea4lylRdEu9RlVzYAr0zDRFwZya8pgm7/ZBdf8jNc3TNAvirBCAa/QrC2p2+lBKc3bU9O8cNLPkpZSSWUdeXl8m12enSQD5dVvGyNMqpT4wcFgGUwD1+9v0NMwQliSuy0y6m02ZJhTCWycSPX57ID2sHhNGnKTVZnfXkWF0CK5xop6FXpkaIcZPcuLKLJ2ZD84y1vEeE6oJHsRQ0+0BihdzVRnloh3pZoAKrqWcgXRyjxJFwsrgy3jXJzAYwVVv+z5cadpYGn9aTosnsZAymD7Mac1Z0n15o/ILxTy3JWcLbS9CojPRCS6ZQKTxvnLhYEVEQdA2kstreRTrAhGzXXKKQxU+m5OeN5oCnDp//7YoVhU/IrsHcjXK6f9B9iGe8FSc4H4gWt9ZR9A5Z/9PabtEPl1lPIgxNwfoCUQgSibOoNu+id6xl0IevAjZxMkNIWKRJJdfraZNl+SfoaZL9dHkbdzvRO72rAy1uOg31kkSWCj4VJYWB/VNfQHd+XY3kK5xq2Yiu9ZaKE3ZaYga9aiSbQU1KUPsKYYhM0bIW0zQeFMDW8337FXEEzjj0pMLeK+kGcSP+b+JaacsuQkQDYhcmVRQ3Hx4qJeNPRGixZcDSjQn0cVw8GYbGgJQdu2r/aGGRciEFGqv8fc60O9VNPknSagjjIIqm2wPoM1NaoTPyELmlznvbsAdUwAS/EbnTQdrZIKGmsRmZfcJTNM+8UH6cn36HnzHuf/eOQL+4Fz7COXDGIbJTFhhHuRRigModufRCf3QkpNCZQ1J1hkoueus+XmqMhvWK3FXwxTZ5Xrcsdft2pkpZFPOQQYydkwCnqYr5i7jsxOGjp4GDoN+SnRLnPuymR4JNtfDmudKOHRA6GpprAl9sMmO7GyqlA7RvUfH6kMM5HlT4B+f+o5MELIl/FDSnWXL3aL4lxGnPx7Z5Ohb7CpHq30oFN4umnIXQTzosGcWUSJNWv2695YCPYXZQcVHjiQc8ri/UD7SweygWpSRopZTMOOYE2QSILhvqr/8DTzGrnib7zgzgOkLVOTmHDzx2Kn1gXK3ofl/H1DVs+OfZiUfW3fQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9PR07MB7771.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(376005)(366007)(1800799015)(38070700009); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_B0ED4A1182CA483E9ECDA0B39D157871jiscacuk_"
MIME-Version: 1.0
X-OriginatorOrg: jisc.ac.uk
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB9PR07MB7771.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 09cf22ab-a757-4166-e5b6-08dc5d627c98
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2024 15:41:15.8105 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 48f9394d-8a14-4d27-82a6-f35f12361205
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: OXroPoZaStM0DPuXuJs7kqqYmFScvtK9lLeR/V6/CLJP/sy/OLn8WmPWxvJzL1+L9fEEA/46rEVpf+vkhjv7Bg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR07MB6664
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/aiNbt8i1RWJAYg9Bukb-nx-T9zE>
Subject: Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2024 15:41:24 -0000

On 15 Apr 2024, at 16:38, Mark Smith <markzzzsmith@gmail.com> wrote:

On Tue, 16 Apr 2024, 00:22 Tim Chown, <Tim.Chown=40jisc.ac.uk@dmarc.ietf.org<mailto:40jisc.ac.uk@dmarc.ietf.org>> wrote:
Hi,

On 15 Apr 2024, at 15:11, Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>> wrote:

I think we're possibly having different interpretations about what adopting the MUST language would mean. I'm assuming that it means that we do not change the priority of ULA other than known-local ULA.

Well, if we agree to the MUST (with the usual caveat of any IETF ‘MUST’ for an implementor :) then we need to review the rest of the text, which would include the default policy table, and the section David contributed.  I think you’re right, that proposed default table as is would have to change.

Thanks for holding my feet to the fire on this—I'd completely glossed over the fact that if we /just/ change the SHOULD to a MUST, we haven't done that.

It’s the SHOULD that’s fuzzy. I’d personally lean towards doing the same, i.e. making the default the “safe” one, keeping general ULA-ULA below IPv4-IPv4 (despite saying we shouldn’t design for misconfigurations), but I may not be speaking for all authors (we’ve not discussed it yet).

Preferring IPv4 over ULA is preferring IPv4 over IPv6.

Aren't we supposed to be phasing out IPv4 as soon as possible by preferring IPv6?

My personal take on the “compromise” we’re heading towards is that we are, but only for ULAs that are known to be local, but for those cases we’re also preferring them ahead of GUAs.

But the authors will put whatever consensus arises from the WG into the document :)

Tim

Tim

On Mon, Apr 15, 2024 at 9:13 AM Tim Chown <Tim.Chown@jisc.ac.uk<mailto:Tim.Chown@jisc.ac.uk>> wrote:
On 15 Apr 2024, at 14:02, Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>> wrote:

What should says is the the behavior is not optional—we don’t think there is a good reason for an implementation not to do the behavior.  Which is true here.

It’s also true, as you say, that not all prefixes will be identifiable as local in all cases.  In these cases, we will get the old behavior, which works well enough.

That’s not true, hence my other email just now about (new vs old) default behaviour…

Tim

Op ma 15 apr 2024 om 04:06 schreef Ole Troan <otroan@employees.org<mailto:otroan@employees.org>>


> On 11 Apr 2024, at 05:30, Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org<mailto:40google.com@dmarc.ietf.org>> wrote:
>
> On Thu, Apr 11, 2024 at 1:04 AM Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>> wrote:
> I continue to think that section 3,  "Operational Issues Regarding Preference for IPv4 addresses over ULAs," should make the new proposed ULA behavior mandatory rather than optional. I don't see a downside to making it mandatory. Hosts will come into compliance when they can; older implementations will not implement this new behavior, but I don't see any point in perpetuating that.
>
> Absolutely agree. This document should not proceed without that MUST. Preferring non-local ULA over IPv4 is incorrect because IPv4 implies global reachability, and ULA does not offer global reachability. So publishing this document without the MUST is harmful: an implementation that does not implement the SHOULD will cause regressions and break use cases that work today.

A host should not make those assumptions.
A RFC1918 IPv4 address may or may not have global reachability.
A ULA may (or may not) have global reachability.

In essence SA/DA combination can be assumed to provide reachability. It has to be probed.
The _only_ thing SAS/DAS selection should be used for is ordering of the candidate list.

> Also, MUST allows us to make ULA more useful than it is today. It is *desirable* to be able to publish non-local ULAs and have hosts know what is local and what is not. As a simple example: once all hosts implement the MUST, it will be safe to publish local ULAs in the global DNS, because hosts won't try to use them unless they are local.

That’s likely a simplification. As they are certainly going to be networks where there will not be possible to signal all ULA prefixes to every host.
The IETF conviction that as long as we make something a MUST then every implementor will implement it is flawed. The only thing it does is to water out the value of the MUST. Any MUST/SHOULD debate motivated by this (as opposed to a real interoperability breaking issue) is bike-shedding.

O.
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org<mailto:ipv6@ietf.org>
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------


--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org<mailto:ipv6@ietf.org>
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------