Re: Confirmation to advance: draft-ietf-6man-ipv6only-flag-05

[Gyan Mishra <[e-mail]>]

Phil

My take initially on this was not supporting due to some of the reasons mentioned.

I really think this IPv6 only flag is futuristic and understand it takes time for OS vendors to implement the flag which is the reason stated to introduce now versus waiting to hit a tipping point towards IPv6 only.

I am glad that we added the option to disable the flag and only enable when ready and on managed networks as I agree on unmanaged this flag really does not apply.

We should make the default for the flag disabled for all OS’s and at the administrator or operators guidance to enable as necessary which completely makes sense and does help eliminate a lot of the issues brought up in this thread and in essence  “defers” the option for future use cases on managed networks only.  

Doing so we get the best of both worlds eliminating issues and security vulnerablities as well as other cons of this flag introducing now and allows the OS vendors to have a long enough lead time to introduce the flag for when managed networks maybe ready to use in the foreseeable future.

In the security section of this draft if we can we add some recommendations for first hop security to protect IPv6 only networks using any DHCPv6 stateful or stateless scenario combinations using security features such as IPv6 snooping, IPv6 source guard to deny traffic from unknown sources and RA guard to only allow RA to be sent from the trusted L2 uplinks to the FHRP routers on the subnet.
Sent from my iPhone

> On May 7, 2019, at 2:33 PM, Bjoern A. Zeeb <[e-mail]> wrote:
> 
>> On 7 May 2019, at 18:21, Philip Homburg wrote:
>> 
>> But nobody is doing any work on what IPv4 should look like in the future.
> 
> You mean inside the IETF given sunset4 was concluded without conclusion?
> 
> 
> What does SNA, Frame Relay, FDDI, Token Ring, … ok bad examples … what does IPX/SPX, Appletalk, VINES IP, XNS, NetBIOS, .. look like today?  Should we assume IPv4 will have a different fate?
> 
> /bz
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> [e-mail]
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------