Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>

Mark Smith <markzzzsmith@gmail.com> Thu, 11 April 2024 01:07 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81AB5C14F6A6 for <ipv6@ietfa.amsl.com>; Wed, 10 Apr 2024 18:07:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.596
X-Spam-Level:
X-Spam-Status: No, score=-0.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.998, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xP3KR58BnmtC for <ipv6@ietfa.amsl.com>; Wed, 10 Apr 2024 18:07:52 -0700 (PDT)
Received: from mail-lf1-x129.google.com (mail-lf1-x129.google.com [IPv6:2a00:1450:4864:20::129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 859C2C14F694 for <ipv6@ietf.org>; Wed, 10 Apr 2024 18:07:52 -0700 (PDT)
Received: by mail-lf1-x129.google.com with SMTP id 2adb3069b0e04-516c403cc46so14072723e87.3 for <ipv6@ietf.org>; Wed, 10 Apr 2024 18:07:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1712797670; x=1713402470; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=+asrzquej1xSkP/g4SWOZ6uvlDUPWu3OFBhz6Yyn5VU=; b=W7rxFfUrrskcRNZGwHNg5gpvpLsVQRdKcAH9vNmeJw4MIZ1ey40EBRXcHpc4ikSKSe ivRXlQqSyUXr/91v6FQkaj5D26xwc1lnkTpuiQgzcFA9CX0wO3/yPTHjuAGnM3Pydexg uX7GrRw2xuFyqdkE1EMCjdfb9lXGtvaChsRig1CN6G46GTAiVzrdlFDawrlQ+MVv/gBq bB6F4ld+eM2Y4qzlVASIAo1sjr43L0YT5qLw3jlpoj9wnaclNqqsjBH42Li4ktMqEiQK pdcqjNGEMJT6NSvUuEQ0B9B9SnqvLivtokMLUc1dp22XYzsVY5bBjtpWzaL9TC7tpbog JRNg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712797670; x=1713402470; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=+asrzquej1xSkP/g4SWOZ6uvlDUPWu3OFBhz6Yyn5VU=; b=FcarUBqg4ufZSPkQKFc3/+J8RhFXCCkSRkZJgQZKlXBxjohpyHj3MLF00Ks+rEmS5m 5jTBEKNW/bMKsyZ0f3nU+skgwdR2c2skJyM6qafLEHEeoLlxcQRhmi5x/JWwA6ygqJZ2 EehTlY5LfhwWBWJftRddrmf4imZRKEcCU+8KOpFeyprALEtS1NcKFGTffOZxAl+FZ+dx uGmpb7eB/YKFTxEjlFJl1iH6bcqDz199OnBzFSmiIGi2iuBA99S/8t03liMHrCh6jWpf fkmEkAl1svzZLKmm8ZgwPiidFYJ/7W1iO/O8E7//TlwKw2vJrTH/YomT4hRqc7OV4Wxi 4bmQ==
X-Forwarded-Encrypted: i=1; AJvYcCUJCsGrW/x0Q5EKyGrBnBFPvQHkjTmnTI18uy1WCzFxqQnuNSjjVXpQIRxaT4QRFUL3LJwxiugCa9YZEG+v
X-Gm-Message-State: AOJu0YzAtkFLlJwggaRoJRmfrfYhRXdVfUb7wPuGwxSRejrf6tbk0D4W IX5839IpURkD4CV1H9i4YyyZ2F/+A4CRA+mtfMJDtkT/0IDm+Fhs8X9TSZFMVb393wSa77RY45a MAqGSkMgQE59Ql4eTkE/TM25rfCHTNA==
X-Google-Smtp-Source: AGHT+IFXsmWavuNaJLdialiua/m0Cm5+xLg7+JmnBjsUHa4+JGgVeOM5Z/f8B+LASLvdb+hZidTS9S1Mdqhs3rbvwCs=
X-Received: by 2002:ac2:46da:0:b0:513:c223:f0e4 with SMTP id p26-20020ac246da000000b00513c223f0e4mr3260776lfo.10.1712797669503; Wed, 10 Apr 2024 18:07:49 -0700 (PDT)
MIME-Version: 1.0
References: <6A5E5F35-B35F-4358-8EE1-3BD82329141E@jisc.ac.uk> <6FBC1B5A-BF28-4B05-B2B2-A60DA4707755@gmail.com> <CAJU8_nUX3VFcRtFUoCy+Uxn6UQYsB-wo+64PSufBWxW67Y64bw@mail.gmail.com>
In-Reply-To: <CAJU8_nUX3VFcRtFUoCy+Uxn6UQYsB-wo+64PSufBWxW67Y64bw@mail.gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Thu, 11 Apr 2024 11:07:22 +1000
Message-ID: <CAO42Z2zh89Fwfgz5OZPotUFnG2n2arAbCybjxZE1OhkO3BKBUA@mail.gmail.com>
To: Kyle Rose <krose=40krose.org@dmarc.ietf.org>
Cc: Bob Hinden <bob.hinden@gmail.com>, IPv6 List <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a9bc9e0615c7c816"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/bCYYcfdQkilhyhYsfeaq_94VcHI>
Subject: Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Apr 2024 01:07:56 -0000

Hi Kyle,

On Thu, 11 Apr 2024, 02:11 Kyle Rose, <krose=40krose.org@dmarc.ietf.org>
wrote:

> I am still in favor of advancing this document to publication. Preferably
> ASAP.
>
> I am not in favor of hardening the language for inserting known-local
> prefixes into the policy table to "MUST". The need for this is not
> universal:
>
>  * At my sites I am fine with preferring GUA->GUA over ULA->ULA, in large
> part because I don't have any names that map to both types of address.
>

If I understand correctly, you're using different internal/ULA or
external/GUA DNS names for the same node?

In that case you're making the first step of destination address selection
between ULA or GUA one performed by human at DNS name choice time, meaning
that the sending host would never have to then make a choice between
preferring ULA over GUA DA (or vice versa) after the DNS resolution is
performed, because the sending host never would receive a DNS result that
includes both a local ULA and GUA AAAA RR.

So how would a MUST prefer local ULA over GUA would have any negative or
any effect at all in your scenario?


>  * I regard seeing or attempting to use unreachable ULA (e.g., discovered
> in global DNS or found in other configuration) as a configuration error
> that should be resolved by fixing the source of the unreachable addresses.
>
> I would actually be in favor of *softening* the normative language to
> "MAY", or to add an opt-in mechanism via "SHOULD, if configured to do so,
> enable ..." as the need for policy table updates is entirely a function
> of how a particular network is administered. I have no need for that
> functionality, and would rather not deal with the complexity it might
> introduce when all I really want out of this entire effort is preferring
> ULA->ULA over IPv4->IPv4.
>

We could have solved the IPv4 over ULA problem with different and exclusive
IPv6 ULA, GUA and IPv4 DNS names for the same node that humans select too,
however that's of course not practical for non-technical users who don't
understand what IPv4, IPv6, ULAs and GUAs are.

Non-technical users are really who we're trying to provide
automatic/default address selection to, so they can use a single DNS name
for a node that eventually connects via one or more (e.g. MP-QUIC) of the
reachable multiple addresses a node has regardless of if those addresses
are any combination of IPv4, ULA or GUA (or LLA with mDNS).

Regards,
Mark.


> A standard means for changing this configuration setting (e.g., via RA)
> could then be specified later.
>
> Kyle
>
>
> On Wed, Apr 10, 2024 at 11:29 AM Bob Hinden <bob.hinden@gmail.com> wrote:
>
>> Given the number of changes since the first w.g. last call, the chairs,
>> in consultation with the authors, are staring a second 6MAN working group
>> last call for this document.
>>
>> This email starts a second two week 6MAN Working Group Last Call on
>> advancing "Preference for IPv6 ULAs over IPv4 addresses in RFC6724" document
>>
>>     https://datatracker.ietf.org/doc/draft-ietf-6man-rfc6724-update/
>>
>>  as a Standards Track document.
>>
>> A summary of changes since the -06 version is below.   A good diff to
>> review is:
>>
>>
>> https://author-tools.ietf.org/iddiff?url1=draft-ietf-6man-rfc6724-update-08&url2=draft-ietf-6man-rfc6724-update-06&difftype=--html
>>
>> [New draft on left due to line length problem with old draft]
>>
>> Substantive comments and statements of support for publishing this
>> document should be directed to the ipv6@ietf.org mailing list. Editorial
>> suggestions can be sent to the authors.  This last call will end on 24
>> April 2024 23:59 UTC.
>>
>> Also, one issue the authors would like feedback on is if the requirement
>> is a SHOULD or MUST for inserting known-local ULA prefixes into their
>> policy table with a precedence above both GUAs and IPv4, while leaving all
>> other general ULAs at a lower precedence.  It is a SHOULD in the -08 draft,
>> but there has been support for a MUST in the discussion.
>>
>> Bob, Jen, Ole
>> 6MAN chairs
>>
>>
>> Begin forwarded message:
>>
>> *From: *Tim Chown <Tim.Chown=40jisc.ac.uk@dmarc.ietf.org>
>> *Subject: **Re: [IPv6] I-D Action: draft-ietf-6man-rfc6724-update-08.txt*
>> *Date: *April 9, 2024 at 7:47:57 AM PDT
>> *To: *IPv6 List <ipv6@ietf.org>
>>
>> Hi,
>>
>> Actually it works better I notice with 08 on the left and 06 on the
>> right, as -06 has the broken formatting, so please check the diff from -06
>> to the current -08 using:
>>
>>
>> https://author-tools.ietf.org/iddiff?url1=draft-ietf-6man-rfc6724-update-08&url2=draft-ietf-6man-rfc6724-update-06&difftype=--html
>>
>> The changes are largely around making the MAY insert local entries into a
>> SHOULD insert known-locals, with a little more text on how we’d determine
>> those.
>>
>> Tim
>>
>> On 9 Apr 2024, at 15:13, Nick Buraglio <buraglio@forwardingplane.net>
>> wrote:
>>
>> We have published -08 of the rfc6724 update, this fixes some
>> formatting and other typographical oversights
>> The following sections address comments from the lis (difft from -06
>> to -08 is the most useful comparison):
>>
>> https://author-tools.ietf.org/iddiff?url1=draft-ietf-6man-rfc6724-update-06&url2=draft-ietf-6man-rfc6724-update-08&difftype=--html
>>
>>
>> Brief overview of the changes from -06:
>>
>> Section 2:
>> Add terminology section and define known-local
>>
>> Section 3:
>> Add section on elevating
>> upgrades the requirement in RFC 6724 for nodes to insert a higher
>> precedence entry in the policy table for observed ULA prefixes that
>> are known to be local, referred to in this document as "known-local"
>> ULAs, from a MAYto a SHOULD.
>>
>> Section 4:
>> Changes the 6to4 prefix deprecation to match Teredo, adds further
>> clarity and reference to RFC6724 section 10.7
>>
>> Section 5:
>> Add text to upgrade the requirement to automatically insert
>> known-local ULAs into a node's policy table from a MAY to a SHOULD.
>>
>> Section 5.3
>> Further define insertion and removal parameters and requirements for
>> known-local ULA prefixes into table and associated values and label
>>
>> Section 7.2:
>> Further clarify GUA-GUA preferred over ULA-ULA details
>>
>> Section 7.3:
>> Further clarify ULA-ULA preferred over IPv4-IPv4 details
>>
>> Section 8:
>> Housekeeping and formatting changes
>>
>> Section 9.2:
>> Describe the new known-local interaction and how it addresses issues
>> with ULAs in global DNS
>>
>>
>>
>> Further copy edit and housekeeping.
>>
>> Thanks!
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>