Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)

Mark Andrews <marka@isc.org> Fri, 08 January 2021 02:53 UTC

Return-Path: <marka@isc.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C557A3A00D9; Thu, 7 Jan 2021 18:53:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level:
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ljDQzJ3VYttH; Thu, 7 Jan 2021 18:53:12 -0800 (PST)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57F273A00D2; Thu, 7 Jan 2021 18:53:12 -0800 (PST)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id 36E8E3AB0CD; Fri, 8 Jan 2021 02:53:12 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 2AA7A160051; Fri, 8 Jan 2021 02:53:12 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 195C2160056; Fri, 8 Jan 2021 02:53:12 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id zXQYhH1frFFX; Fri, 8 Jan 2021 02:53:12 +0000 (UTC)
Received: from [172.30.42.68] (n114-75-149-106.bla4.nsw.optusnet.com.au [114.75.149.106]) by zmx1.isc.org (Postfix) with ESMTPSA id 4A5C5160051; Fri, 8 Jan 2021 02:53:11 +0000 (UTC)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.7\))
Subject: Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)
From: Mark Andrews <marka@isc.org>
In-Reply-To: <E3625337-3A59-4F0A-9EEE-EC8F6B39C965@isc.org>
Date: Fri, 8 Jan 2021 13:53:08 +1100
Cc: IPv6 Operations <v6ops@ietf.org>, IPv6 List <ipv6@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <1A24DB0F-4173-4A3E-A706-B295BCCDDD5A@isc.org>
References: <78D0D84C-53DB-4661-BA43-CFEB1F377BB4@isc.org> <AD20A505-14C4-4E8D-B28C-F237ECE55227@fugue.com> <37D4E745-95A0-4B57-8FC7-D9DF0882FECF@isc.org> <5017FC11-7C58-4F56-AFAA-3D6BF5A2555C@fugue.com> <E3625337-3A59-4F0A-9EEE-EC8F6B39C965@isc.org>
To: Ted Lemon <mellon@fugue.com>
X-Mailer: Apple Mail (2.3445.9.7)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/deO-u7sopn17mIKwgHET1XNOD2g>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jan 2021 02:53:14 -0000


> On 8 Jan 2021, at 13:48, Mark Andrews <marka@isc.org> wrote:
> 
> 
> 
>> On 8 Jan 2021, at 13:04, Ted Lemon <mellon@fugue.com> wrote:
>> 
>> On Jan 7, 2021, at 9:02 PM, Mark Andrews <marka@isc.org> wrote:
>>> The example names I used where using the individuals suffix (id.au) but the idea is to leverage the existing global DNS to provide uniqueness. 
>> 
>> That works pretty well for ULAs, but not for LLAs. For LLAs you need to identify the link, and that’s just not a simple thing to do, as I explained earlier.
> 
> Actually you haven’t explained.  You have stated.  You said it was hard.  Hard is not intractable.
> 
> If you are willing for a link to have multiple names just have reach router generate its own random 160 bit base32 encoded label for each interface, append the well know suffix and advertise it.  You will get multiple SA records for the same interface if there are multiple routers but that should not be a issue.  With 160 random bits the need to do collision detection is really non-existent.  We’ve resolved this for NSEC3 and DNS changes 15 years ago.  This will scale into millions of router interfaces.
> 
> If you want to have a single link name then we need to define a protocol for the routers on the link to select one of the names.  This may end up being technology linked.  Router with smallest L-L address wins would be one solution to this.
> 
> Yes, I really do expect every machine to update its own addresses in the DNS.  We do know how to do that securely with SIG(0).

For those playing along at home we are talking about link names like

	RBS4LI8FAPU7LSBL3TLC14T2A7L7DB66.home.arpa.

they aren’t pretty buy they work.

> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742              INTERNET: marka@isc.org
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org