Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>

Mark Smith <markzzzsmith@gmail.com> Mon, 15 April 2024 15:50 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C0FC14F6B3 for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 08:50:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.595
X-Spam-Level:
X-Spam-Status: No, score=-0.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.998, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t4JeybakrIlB for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 08:50:01 -0700 (PDT)
Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com [IPv6:2a00:1450:4864:20::12b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD189C14F69E for <ipv6@ietf.org>; Mon, 15 Apr 2024 08:50:01 -0700 (PDT)
Received: by mail-lf1-x12b.google.com with SMTP id 2adb3069b0e04-516d0c004b1so4388546e87.2 for <ipv6@ietf.org>; Mon, 15 Apr 2024 08:50:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1713196200; x=1713801000; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=DSOcpzhBe8k5U0xCtkV2c4d5GjcLyVaJRzEEQdIqzbg=; b=cINczR7FuvUVWcXr1rbXsehIWJ9j5B9ACI0bRoZ15Lu9PesgZ4wFVx/UdprIEVOmMj ZtlhsTs7dvJBDtAWFpWU5VfzWPrTnCCS97ZoosmusZIMgRLxXJlTc5RMXLnlDCOswiiD jjlIKlGQU54Sx7DvOs0mh8jI6q6EKWlPFBD8wYj0CAgPMRd52ZoxWjgcmSkTFzFvlEo7 s1yxTmjRlysB4X+28RaOMZQanQUMqyaikGPfPBsWYPS7WJqUywqm5eyf/r5hj796Dpv6 c7Hymrd1+ReKMowH98OAQpFU6mIg1xbdU6LkRv6lGUdE45mcDsVzIAbSTnkzQu11Su5a x5hA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1713196200; x=1713801000; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=DSOcpzhBe8k5U0xCtkV2c4d5GjcLyVaJRzEEQdIqzbg=; b=idNsGYQ5RSTvtbRNnklS/gdnGG11dOinrvk1vxEidBYkI/cxziyPydu8f0UegyM1Yb cLHTbY1z61nQBrkqrS0fVpCcJHVLFK9j3ZlhUgu0d7ffWjz+PAmN7xIP4Xz2EQkgZolD iXAWCI47aVg0pyIywuAL3nTEEEw7h3nEWMeiwIsbpd+gOZnsKs6eB1mhAkOAvYzDKkUZ F0ZwQOa9kaULfnfLD65c3DFa7YUFTLrb5vydJwlzBRUg5BhrMG/a2N9WyPVk/BswjFZH F7kM4SmAU9EbpBsDOtyPt0vpoJBG0EyMd6ml8qEDn/Ae/VwQMumqJ12spb2JCEMNhrgF KwSA==
X-Forwarded-Encrypted: i=1; AJvYcCVkjytry+eS3lhyirL/b18gyvrCnLc4kEXMONFzFVzX+/RyoKAGpG2b8mTsiMKS9ODeg+JQUhRviTsrl3L4
X-Gm-Message-State: AOJu0YyJ4yQFa7gyblIxp9KdDNMeJAiGUaz/yjrUsLqRa43edyOKP9NR Xx+53R5FWW27tEIfqKzAFG5b8YlhAqxNgQNDbk2sGEYvcB3+mAvJGKjBvWJgMt+twUb+hZ9li4I DV/NplDyD6fl57SDImRveDBD+M+apdw==
X-Google-Smtp-Source: AGHT+IGWbvaQ4eSAWvv+asWjG3aREqT00TIf8RmJTFQ1i8q5iSXTlJ2j1zoTlxTeDbxGbTMm36oSMK/9gvEc4PW1zZc=
X-Received: by 2002:a05:6512:3e0e:b0:518:e06c:3358 with SMTP id i14-20020a0565123e0e00b00518e06c3358mr3980573lfv.14.1713196199646; Mon, 15 Apr 2024 08:49:59 -0700 (PDT)
MIME-Version: 1.0
References: <6A5E5F35-B35F-4358-8EE1-3BD82329141E@jisc.ac.uk> <6FBC1B5A-BF28-4B05-B2B2-A60DA4707755@gmail.com> <CAPt1N1m-Ye8vfOVnsPesFshLMV5QuVoxWqM=HVZiJ37zaBg6AA@mail.gmail.com> <CAKD1Yr1NTvFj0zB0=+nnUKck7TBtwHFz2XoFkD1smx4yCuZohQ@mail.gmail.com> <1EFB11CD-544F-4AD7-B414-6A626075975D@employees.org> <CAPt1N1kJFgu6FhFaVhhkPnEY2dofcLF2ZuKDBHJFF5UU6R+x2g@mail.gmail.com> <F301BC19-2D6D-42F5-9C94-0516A765B97C@jisc.ac.uk> <CAPt1N1k4FGbTVVk1QTw0-or0PxkhSPqGda8fHrJKb2t4shNGkw@mail.gmail.com> <CFFA3926-583D-4DA0-B981-3D58048DE894@jisc.ac.uk> <CAJU8_nXpC4ZmcbpuVoTxykf2KEO1zpdThA=VQKM8iXRjTAgHiQ@mail.gmail.com> <7D9EED40-E807-4E52-83C2-857B339D4F9C@jisc.ac.uk>
In-Reply-To: <7D9EED40-E807-4E52-83C2-857B339D4F9C@jisc.ac.uk>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Tue, 16 Apr 2024 01:49:48 +1000
Message-ID: <CAO42Z2ySDNAvpoWCmE8FfLU04Z2fjchco-EygoE82ADqL6wAHQ@mail.gmail.com>
To: Tim Chown <Tim.Chown=40jisc.ac.uk@dmarc.ietf.org>
Cc: Kyle Rose <krose=40krose.org@dmarc.ietf.org>, Bob Hinden <bob.hinden@gmail.com>, 6man WG <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000e9206506162492fe"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/iJzR4SgNrsJ_cqAeOpkOLke1Ryc>
Subject: Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2024 15:50:06 -0000

Hi,

On Tue, 16 Apr 2024, 01:37 Tim Chown, <Tim.Chown=40jisc.ac.uk@dmarc.ietf.org>
wrote:

> Hi,
>
> On 15 Apr 2024, at 16:23, Kyle Rose <krose=40krose.org@dmarc.ietf.org>
> wrote:
>
> This:
>
> Well, if we agree to the MUST (with the usual caveat of any IETF ‘MUST’
>> for an implementor :) then we need to review the rest of the text, which
>> would include the default policy table, and the section David contributed.
>> I think you’re right, that proposed default table as is would have to
>> change.
>>
>
> is part of the reason I'm uneasy with a blanket MUST for known-local.
>
> I would be 100% fine with normative language that essentially says "IF
> (via some future proposed mechanism) you learn known-local prefixes and
> insert them into your policy table, THEN you may prefer v4/v4 to
> not-known-local ULA/ULA; but if you do not, then you must prefer ULA/ULA to
> v4/v4." My reasoning is that currently there is no specified mechanism for
> learning and managing known-local ULA prefixes; and it will be a long time
> before the long tail of stacks respond to yet-to-be-specified network
> signals for managing those prefixes; yet, in the absence of such an
> ecosystem I want ULA/ULA to take precedence over v4/v4, because under 6724
> they are currently mostly useless, and I want ULA to be useful now¹, not in
> some distant future.
>
>
> Well, it will take time for the default policy table to be changed on
> various platforms as well.
>
> If your policy table is configurable, and you can manage your network
> devices, then you can of course configure it today for the policy you want.
>
> We also now have two different protagonists for change here, with some
> overlap.  Those who want to see ULA-ULA elevated over IPv4-IPv4, but also
> those who want known-local ULAs to be used ahead of GUAs, which is
> something we didn’t originally include in even the WG-adopted -00, but it’s
> evolved over the last few weeks as quite a nice stretch goal from the
> document.
>

It's not really a stretch goal. It's this ID solving the two problems RFC
6723 created:

- Preferred IPv4 over IPv6 (ULA).

- Preferred GUA over the site-local replacement (ULA), when site-locals
were preferred over GUAs in RFC 3484.

which was justified by a rare configuration error of putting ULA in global
DNS.

RFC 6784 was optimised for a rare error case, not a common working case.

Regards,
Mark.


> Tim
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>