Re: RFC3484 destination address selection rule 2 is buggy

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 20 March 2008 00:00 UTC

Return-Path: <ipv6-bounces@ietf.org>
X-Original-To: ietfarch-ipv6-archive@core3.amsl.com
Delivered-To: ietfarch-ipv6-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4BA1F3A6D2E; Wed, 19 Mar 2008 17:00:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.621
X-Spam-Level:
X-Spam-Status: No, score=-100.621 tagged_above=-999 required=5 tests=[AWL=-0.184, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jBjmf8EfcX8M; Wed, 19 Mar 2008 17:00:28 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E879F28C1A9; Wed, 19 Mar 2008 16:59:58 -0700 (PDT)
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BE843A69E7 for <ipv6@core3.amsl.com>; Wed, 19 Mar 2008 16:59:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TMgvWVJai4Is for <ipv6@core3.amsl.com>; Wed, 19 Mar 2008 16:59:55 -0700 (PDT)
Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.224]) by core3.amsl.com (Postfix) with ESMTP id BDAB73A6F4E for <ipv6@ietf.org>; Wed, 19 Mar 2008 16:59:00 -0700 (PDT)
Received: by wr-out-0506.google.com with SMTP id 50so664199wra.13 for <ipv6@ietf.org>; Wed, 19 Mar 2008 16:56:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:organization:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; bh=v/lR+OBOVUk5d2aGXjVYKFa2lJbkNSYsNX3J7i/IQi4=; b=VIFL8feRnHUBSFkUklksjSa4A52h+EVXUq6RZRwLX1JrR8UVK7wzE/SqRtqxD4kvKOP9l0JRPqq4TsEopSouuPW2xRZNved7j69TJvT+ZiGK6FYUHIevpXThdNf3z2wYHR32eHH5TPWV8tbGZnIsllJhTGL6NwuuNtIIprc/VeI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=message-id:date:from:organization:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=lCNBU2KhplHiNcxEhRnJY5OWZsbYMST4p/Ehs4sw0wbdBAUPcxAW98V8IMqdoraZIAAOH7slHP4gF/IdmLO/BoYB8dW+jSho90LHU5e3Nh74i9DhhiFrAQbZQOWSgtzP0gOHAIBmocHx5ILgaGr4bzUVgEIZ2pr1dxKWlDS9Q9k=
Received: by 10.114.36.1 with SMTP id j1mr2388035waj.119.1205971002533; Wed, 19 Mar 2008 16:56:42 -0700 (PDT)
Received: from ?130.216.38.124? ( [130.216.38.124]) by mx.google.com with ESMTPS id y11sm1284732pod.9.2008.03.19.16.56.40 (version=SSLv3 cipher=RC4-MD5); Wed, 19 Mar 2008 16:56:41 -0700 (PDT)
Message-ID: <47E1A837.7030108@gmail.com>
Date: Thu, 20 Mar 2008 12:56:39 +1300
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: Fred Baker <fred@cisco.com>
Subject: Re: RFC3484 destination address selection rule 2 is buggy
References: <477387.44567.qm@web45515.mail.sp1.yahoo.com> <429D4E65-2D89-4C04-A606-7C25481FD42D@cisco.com>
In-Reply-To: <429D4E65-2D89-4C04-A606-7C25481FD42D@cisco.com>
Cc: Iljitsch van Beijnum <iljitsch@muada.com>, ipv6@ietf.org, Pekka Savola <pekkas@netcore.fi>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ipv6-bounces@ietf.org
Errors-To: ipv6-bounces@ietf.org

Fred,

On 2008-03-19 01:33, Fred Baker wrote:
> On Mar 18, 2008, at 5:10 AM, Gabi Nakibly wrote:
...

> Similarly, there is no sense using a ULA source address unless the  
> destination is in the same ULA. If the destination is a global  
> address it might or might not be able to reply, but the sender can't  
> tell.

No, that isn't the case in at least two instances I can think of

1. An enterprise network whih for historical reasons is running
more than one ULA prefix - I would expect them to be fully
routed (and longest match would work).

2. An enterprise which is running a VPN with a business partner,
and is routing the ULA across that VPN.

So...

> 
> Hence, in sender address choice:
>    - use a link-local source address if and only if the destination  
> is a link-local address

Clearly.

>    - use a ULA source address if and only if the destination is a ULA  
> in the same prefix

I think that is broken. There's a reason ULAs are defined as global
addresses.

    Brian

>    - otherwise, use a global address
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
> 
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------