Re: I-D Action: draft-smith-6man-in-flight-eh-insertion-harmful-00.txt

Brian E Carpenter <brian.e.carpenter@gmail.com> Mon, 14 October 2019 00:19 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6744E12006B for <ipv6@ietfa.amsl.com>; Sun, 13 Oct 2019 17:19:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2olJIpfOT0ya for <ipv6@ietfa.amsl.com>; Sun, 13 Oct 2019 17:19:50 -0700 (PDT)
Received: from mail-pg1-x52c.google.com (mail-pg1-x52c.google.com [IPv6:2607:f8b0:4864:20::52c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8C9F12006A for <ipv6@ietf.org>; Sun, 13 Oct 2019 17:19:50 -0700 (PDT)
Received: by mail-pg1-x52c.google.com with SMTP id e13so825268pga.7 for <ipv6@ietf.org>; Sun, 13 Oct 2019 17:19:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=12eikomLjnBNPXGAu3c7dqTzugwXvWVRmuB/wyAu5KQ=; b=KvxsfbG93YWyKtexSuHV2n1ugBFLVmuA6tlFWhNBt7KEqLBtdtnIV4QdPlkrT6yhr7 03w8pG1TZ22XUAfGce+CQh7z5Gy/gGzXNDwoPlQ76xDYPta/z28f+qukoNt49bE+F0iI Bk9P2xUXOS9n5HVquXjlxQAsLYFR6KEPClzaK8BY5Saea8lv91/r9ISoFDAoi2U5KVer KkJRXz4L/gGDu1yovd0oU6A//QZeIvMUGHhHFk4nqteY3ALb3hfkK4RyuJnwADdRqEAM wDkcrw4cOmh4HpzvF3UPvz+Ki3Neg0mehNRToGtesrKoM7sWOABka77xyu2AdcgIUin8 jFNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=12eikomLjnBNPXGAu3c7dqTzugwXvWVRmuB/wyAu5KQ=; b=e0Vfj4oRKo/gRlJnNDoS6wExtBTJVY9lHEUypyLnLt4oWGOoPfVZj/w2mC4KjFsGXW c9Ja3yxHuUqNzV46lCFVJ+8t/kQOjEF1uwXpKWPcIj2HRNmVty6pktMYLnK3lp/IebN6 8VJ2F3pasttSicgro71qU4LdH1WxgZtJObjDFLu/vf308IZEUJTmkbQ56eRwmb0YsYAS qwZvpJMs2lTDawjzvw67Gpj7RqGSIWSGds4zS/STTp6uX6By6/NgY7YeEVvB+tVFPZee cqTrn9OKYfHJ5j5XUQmPdyluf0Q0HQifu+xIi7dt+TjUZvSMhT3B4mG+TfrKcH5oFfyQ /LdQ==
X-Gm-Message-State: APjAAAUNVuYDQ4QFubP6EqHTnRrhe0QKe5HJqz/7n0V0TAvN5Vgnrp2i ngnRfeFAP0UfupF2qkq9s3MOoIfU
X-Google-Smtp-Source: APXvYqxFpHblk6hmz6ncsebAZ/19m5hfvM4SVOKVJZPcbhRkgDCf55o+le1d6zwFL3Pg6ST1wwJb7g==
X-Received: by 2002:a17:90a:2710:: with SMTP id o16mr32267246pje.98.1571012389568; Sun, 13 Oct 2019 17:19:49 -0700 (PDT)
Received: from [192.168.178.30] (233.148.69.111.dynamic.snap.net.nz. [111.69.148.233]) by smtp.gmail.com with ESMTPSA id h6sm19726702pfg.123.2019.10.13.17.19.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 13 Oct 2019 17:19:48 -0700 (PDT)
Subject: Re: I-D Action: draft-smith-6man-in-flight-eh-insertion-harmful-00.txt
To: Mark Smith <markzzzsmith@gmail.com>, Nick Hilliard <nick@foobar.org>
Cc: 6man <ipv6@ietf.org>
References: <157059901123.30422.11220423219059958820@ietfa.amsl.com> <362b80f7-fedc-7227-2931-0006e6b81812@gmail.com> <f2548b48-2d8d-01f0-f05c-0027a5cdeb91@foobar.org> <57b3a7bd-3dc3-d8be-0ac4-7218abdd94d8@gmail.com> <51fdb3bc-3155-c0c8-a34b-f68868885a24@foobar.org> <CAO42Z2yq_9-fSixu8f8ut3uVm00MFGcf6gFPjn725D+_tk2LXw@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <f634d33a-78c6-a678-f343-adc1b46859ef@gmail.com>
Date: Mon, 14 Oct 2019 13:19:47 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0
MIME-Version: 1.0
In-Reply-To: <CAO42Z2yq_9-fSixu8f8ut3uVm00MFGcf6gFPjn725D+_tk2LXw@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/dPzUC_AiayXxq8A86pM-kZOmOyA>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Oct 2019 00:19:53 -0000

One comment at the end:

On 14-Oct-19 11:48, Mark Smith wrote:
> On Sun, 13 Oct 2019 at 21:25, Nick Hilliard <nick@foobar.org> wrote:
>>
>> Brian E Carpenter wrote on 13/10/2019 01:36:
>>> The packet is too dumb to know anything ;-). My question is how each
>>> node it traverses knows. Indeed, Mark's draft describes a scenario
>>> where the controlled domain argument breaks, because the exit node
>>> might not know that the packet had suffered EH insertion. The
>>> draft-voyer- scenario is not like that, because the affected IPv6
>>> headers are created locally and identifiable as such.
>>
>> the world isn't nearly this pigeonholed though.  The edge around this
>> "controlled domain" that you're implicitly suggesting is sharply-defined
>> is in reality more of a blurry smear.  Think tunnels, leaks, back-doors,
>> "SD-WAN" (whatever that means), policy routing, routed VPNs, etc.
>>
>> If the ietf wants to define a new ipv6-like protocol which is not
>> guaranteed to be interoperable with 8200, there's still space in
>> www.iana.org/assignments/version-numbers to accommodate this :-)
>>
> 
> This is one of the fundamental observations.
> 
>  The trouble is calling this sort of closed/limited domain variant
> that doesn't obey RFC 8200 "IPv6".
> 
> Protocols are more than just packet structures and reserved values,
> they also specify field value rules, interpretations and permitted and
> non-permitted behaviours. All of these latter properties are relied on
> and expected by other implementations.
> 
> I think there are parallels with how human languages work.
> 
> For example, If I define the word "dog" (noun) to mean "wash" (verb)
> within the domain of my house, can I still claim English is being
> spoken in my house? The spelling and pronunciation of "dog" is the
> same, but the meaning of "dog" and where it can be used in sentences
> is different.
> 
> So it isn't English being spoken in my house anymore, even though it
> resembles it, and there is quite a lot of commonality. English
> dictionaries can't be reliably used for any word definitions in my
> house once just one word is redefined. The more words I redefine the
> less applicable the conventional English dictionary is in my house,
> even though the word spellings and soundings continue to be the same.
> 
> This could be solved by calling it "Mark's English" or "Mark's Version
> Of English", which clearly states it is different to conventional
> English dictionary English. There needs to be a "Mark's English"
> dictionary.
> 
> So as Nick said, if the IETF want to have non-interoperable versions
> or variants of "IPv6", then they need different version numbers
> somewhere or somehow - either minor e.g. 6.1, 6.2, or major e.g.
> IPv10.

Be careful what you wish for. It would be easy enough to define a
(probably hop-by-hop) option for this:
      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
      |   110xxxxx    |   00000001    | IPv6 version  |
      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

    Brian