Re: RFC6724-bis?

Nick Buraglio <buraglio@es.net> Wed, 21 September 2022 08:02 UTC

Return-Path: <buraglio@es.net>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 030A0C1522A2 for <ipv6@ietfa.amsl.com>; Wed, 21 Sep 2022 01:02:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=es.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mJsWFcBrr-AH for <ipv6@ietfa.amsl.com>; Wed, 21 Sep 2022 01:02:14 -0700 (PDT)
Received: from mail-ed1-x52c.google.com (mail-ed1-x52c.google.com [IPv6:2a00:1450:4864:20::52c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BD19C14CE23 for <ipv6@ietf.org>; Wed, 21 Sep 2022 01:02:14 -0700 (PDT)
Received: by mail-ed1-x52c.google.com with SMTP id f20so7413660edf.6 for <ipv6@ietf.org>; Wed, 21 Sep 2022 01:02:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=es.net; s=esnet-google; h=content-transfer-encoding:cc:to:subject:message-id:date:from :reply-to:in-reply-to:references:mime-version:from:to:cc:subject :date; bh=buKHjLqBorLahXntffqApShauzBhckaplwt68u0fkuU=; b=I6+0d5HPe774+kjMAz9i3luvAVEZ/T9cCXuT1cQFhZUFZnwWxXL1jy5Vj/BKldMQ+L y5/pRDBCoBLCHHXjunJHTx+2usoVNVBKBMQiu582VuMuDg7FUCea1pAJcMjrhM09+cy1 ioj97lXiKwzqJY4j8UTuOXTYIj2CzQjzuZlAcdfW1kleOn1N9gYBn5RrhYJGylE4bbty oBdSnTSBO2937hdHYjD5MZH3t+gteEZW2lXqqSd1xcn8HNwo8JQpUDlmqEjJKDAnFhis /4jfzpqiKoU9Bh67+v2TETB6OHkmWUsP6KDYwlD9Lzrs41WWwrfNdyqHv8W99k/AGJhb ruUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :reply-to:in-reply-to:references:mime-version:x-gm-message-state :from:to:cc:subject:date; bh=buKHjLqBorLahXntffqApShauzBhckaplwt68u0fkuU=; b=54PU2QP3xTZotDwO/9U7JoVmNjAvTQpk5YoSNchDkm/72a+pg+vpwO6iU+JJly+lbi f4pkuHaQi55H5n4361N9qmq3H6u6cvpQdI9dmZXVQvJVOHTtBaGFQBXPrLHNIgxetcrU cY1LIMlh+TT4vWPwt9P+Ggk7ygOu844ZQlExgGDSG5YU028nTm5+dkzUaQs+MYm0SEjy N+eHB6/ad5erYlkVnHxzi1O/e9v9AKTGcUrLuFjWY2nYTDBc+DDLc1C+YU/57N2QGY53 9jfUU1eE+v7J03+m/0Pdu2MWx4MYE2ZBQ1e5UyOJTM2j3ErLVVy0uZ9DkYpohJEwhC9Q 9hsw==
X-Gm-Message-State: ACrzQf0QW5Kbl6Oh2K0g1cqe+7nLqVezvrRKuNwBPPFdJVxVvXE8YCNk ql7ZYA1AZb4ZtVXc77L8kLIogPpBZ3usBZwJT2MpafdmkWMCw8X8W2TRZ0JxhkylvNOPk1EZKhk Vb6y2rocHlHE5Jq+A4HeUsfGQ2XprJ8NPZLFVqYoZd4OknOhoneTJNOQjzNiagnRIbQa4t/yPJ6 NGK0fN9V01BA==
X-Google-Smtp-Source: AMsMyM7ZYgUgd5eqUYmpHy31pHK/Pnb27Cpl1TxfACpBnhg/37AGBc8gR6poTPSWccMUjJ9CvrBTRqn0VD3mZaY7nEw=
X-Received: by 2002:a05:6402:d6b:b0:44e:82bf:28e5 with SMTP id ec43-20020a0564020d6b00b0044e82bf28e5mr23332399edb.83.1663747332416; Wed, 21 Sep 2022 01:02:12 -0700 (PDT)
MIME-Version: 1.0
References: <66892DC8-6DA4-4DC8-85B0-E1E1647CD9F7@gmail.com>
In-Reply-To: <66892DC8-6DA4-4DC8-85B0-E1E1647CD9F7@gmail.com>
Reply-To: buraglio@es.net
From: Nick Buraglio <buraglio@es.net>
Date: Wed, 21 Sep 2022 10:02:01 +0200
Message-ID: <CAM5+tA9kttCKrZaoB7UzNdE6TU1qGNMaxDmWvFtRvpB4A8+WHA@mail.gmail.com>
Subject: Re: RFC6724-bis?
To: Tim Chown <tjc.ietf@gmail.com>
Cc: ipv6@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/fdfVYc4CWCqaUcoZzdw5V-bHTgU>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Sep 2022 08:02:19 -0000

The changes that I had proposed in my github repo are below, these are
just a starting point, I welcome any and all input.



@@ -12,7 +12,7 @@ ISSN: 2070-1721
       A. Matsumoto


     Default Address Selection for Internet Protocol Version 6 (IPv6)
-
+                ietf-draft-buraglio-rfc6724-update.txt
 Abstract

    This document describes two algorithms, one for source address
@@ -347,14 +347,14 @@ RFC 6724           Default Address Selection for
IPv6     September 2012
       fec0::/10              1    11
       3ffe::/16              1    12
       fec0::/10              1    11
       3ffe::/16              1    12

-   An implementation MAY automatically add additional site-specific rows
+   An implementation MUST automatically add additional site-specific rows
    to the default table based on its configured addresses, such as for
    Unique Local Addresses (ULAs) [RFC4193] and 6to4 [RFC3056] addresses,
    for instance (see Sections 10.6 and 10.7 for examples).  Any such
    rows automatically added by the implementation as a result of address
    acquisition MUST NOT override a row for the same prefix configured
    via other means.  That is, rows can be added but never updated
-   automatically.  An implementation SHOULD provide a means (the
+   automatically.  An implementation MUST provide a means (the
    Automatic Row Additions flag) for an administrator to disable
    automatic row additions.

@@ -363,7 +363,15 @@ RFC 6724           Default Address Selection for
IPv6     September 2012
    addresses, 6to4 source addresses with 6to4 destination addresses,
    etc.  Another effect of the default policy table is to prefer
    communication using IPv6 addresses to communication using IPv4
-   addresses, if matching source addresses are available.
+   addresses, if matching source addresses are available.
+
+   This behavior is required for proper functioning of ULA addressing,
+   thus preserving the preference of IPv6 over legacy IPv4 in dual stacked
+   environments as detailed in draft-v6ops-ula. Additionally, requiring
+   local site-specific addressing entry into all nodes preference list
+   further scopes the network communication to local and remote per the
+   respective addressing blocks and creates a more consistent operational
+   model and user experience.

    Policy table entries for address prefixes that are not of global
    scope MAY be qualified with an optional zone index.  If so, a prefix
@@ -1541,7 +1549,7 @@ RFC 6724           Default Address Selection for
IPv6     September 2012
                    C., and M. Azinger, "IANA-Reserved IPv4 Prefix for
                    Shared Address Space", BCP 153, RFC 6598, April 2012.

-
+



@@ -1775,6 +1783,9 @@ Authors' Addresses


----
nb

On Tue, Sep 20, 2022 at 6:06 PM Tim Chown <tjc.ietf@gmail.com> wrote:
>
> Hi,
>
> As an author of RFC6724 I’ve had the discussions about a possible update of RFC6724 brought to my attention.
>
> An example thread over on v6ops is https://mailarchive.ietf.org/arch/msg/v6ops/W6HjHc11JX364soq3t3gFMHSawE/, but there are others.
>
> Nick Buraglio has documented the problem in draft-ietf-v6ops-ula-00.  The short of it is that RFC1918 IPv4 addresses may be preferred to IPv6 ULAs in certain circumstances, which I would agree is not desired behaviour.
>
> There are a few ways we might look to address this.  There is a proposal from Nick (not yet published outside a git repo) to address it by changing wording in section 2.1, with a couple of MAYs becoming MUSTs, and adding an extra explaining paragraph.  This basically firms up the requirement to follow 6.10 on adding an extra precedence line for local ULA prefix(es).
>
> Now, that may or may not be the preferred solution of the WG, but I think there’s a few questions to consider:
>
> 1. Is there agreement we should address the problem?  I’d assume so because Nick's problem draft was adopted by v6ops.
>
> 2. If so, is 6man the place to do it?  I think it has to be.  RFC6724 was born here.
>
> 3. How do we determine the best solution to the problem?  I suspect there are nuances in play that will make a one size fit all ’simple’ fix tricky, but I look forward to the discussion.  Nick has one proposal that counts to a couple of word changes and an extra paragraph, which I’d encourage him to share here, but there are other approaches proposed on v6ops.  I think either way, it will require some update to or for RFC6724.
>
> 4. Does this work warrant a full -bis or would a separate RFC that updates 6724 be better?  A separate Updating draft might better highlight the issue to implementors.  But then RFC6724 is now ten years old, and RFC3484 which it replaced was nine years before that.
>
> 5. If we choose to open up a full -bis, are there any other worms in this can?  I have a feeling also here I know the likely answer….
>
> Anyway, over to the WG… thoughts?
>
> Tim