Re: [IPv6] Adoption call for draft-bctb-6man-rfc6296-bis

Mark Smith <markzzzsmith@gmail.com> Mon, 18 March 2024 12:36 UTC

Return-Path: <markzzzsmith@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 887D8C151985 for <ipv6@ietfa.amsl.com>; Mon, 18 Mar 2024 05:36:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.603
X-Spam-Level:
X-Spam-Status: No, score=-6.603 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FROM_LOCAL_NOVOWEL=0.5, HK_RANDOM_ENVFROM=0.001, HK_RANDOM_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EzhBh8A_WIvU for <ipv6@ietfa.amsl.com>; Mon, 18 Mar 2024 05:36:44 -0700 (PDT)
Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6BF5C14CE30 for <ipv6@ietf.org>; Mon, 18 Mar 2024 05:36:42 -0700 (PDT)
Received: by mail-ed1-x533.google.com with SMTP id 4fb4d7f45d1cf-5688eaf1165so6343779a12.1 for <ipv6@ietf.org>; Mon, 18 Mar 2024 05:36:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710765400; x=1711370200; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=OlpychEsaIgU7S7t7FKbyOPpXTrxmWvmZTgCSgGsiZc=; b=CByG9KiDoXq4IuNyvX6iR5HqCxgnRfHpssFhS91bvZwyCY65iko6FUfT6YiEJDEHSY VxIQSM8Vupn8lz56soQu4LgeqDH1EiAjmDmPYhibN3GnLZKHNARhjtWplic57kFnX8DV iBeex7UmUTSr6Frj9aA5oTsMhdrYsRENw5kaA92TXQ0Dixoidqbn4kd2ZwMTeR4AU8sE qhaJK0s1PV3bRhFfLqgBmoggyoXmAiJm0SNCHclwmT3YkSwcEqf3fjrKZmrDXTDUr7Hl zAQpf1alXTqJJE7Flz8CYxvBsoH5LvQueo5cusSXoFbAzLFXMAgPiyq/oDNWnIoTgrpE BQRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710765400; x=1711370200; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=OlpychEsaIgU7S7t7FKbyOPpXTrxmWvmZTgCSgGsiZc=; b=cZdDXqF/5f79FTmrwh0Dbht64Ept+USsOQfumteIDB6StO7F6DLdjYup3iOox4Ypyx QfO/PsPdoPLHvp9NYe+bmASmwAMZ2tL65Gefu/yNBJrgWhGXkXqZuF0Z2+OKYvopqCnq pcQ6uoghasSK/tKGjRt5r/VBYiY6b+VqMMwcIPmtwy5NsXnAt35o+8M4jBnCB/NbfPTs jJ1XoYHMbAscrmhEDWIeymrHaxtcKBG9k9gV6RCzTV7T3uDIHCRAuESG20ZkC5I/d9Z3 5FYI3D9+m645YDIsIPHDg3zbXhmk417pTobjSfJIKYOsDID5L/F5/nTMXBsKedbuqJkD 8Opg==
X-Forwarded-Encrypted: i=1; AJvYcCWselLKulpAyQiImrmEvgkAfl+G/lWNcdSRuls9bFxnevcepURMzaqVtmAxYDQc6xUFnPHxSl9bjCnh4oDf
X-Gm-Message-State: AOJu0YxZ1lisHT0O1rwEIb1yG0g/fVbQ2NLlVnyi2y4KhpajUM2uff/W nE0fgfFeR0WOInqIhdLjLUeB7H4XUUtVIwCnMSFcMFqtZgBsbWC0yR1FaXnZEfYoHdgJ/dj1E6i ryZAgLo+JvXaQDr6HFzZzWAOZRyoiDLva
X-Google-Smtp-Source: AGHT+IEV7Hk4NmVMFFx4p41TFZtnjsZc6715z0lBUtKxC735w7Ie61QZuUgHNsx7BPHJRVmijgAQfffqJltazBirwuk=
X-Received: by 2002:a05:6402:2b94:b0:567:824:e36c with SMTP id fj20-20020a0564022b9400b005670824e36cmr8614575edb.14.1710765400325; Mon, 18 Mar 2024 05:36:40 -0700 (PDT)
MIME-Version: 1.0
References: <df333346-f108-3782-0ff5-4bd85d7b49ac@gmail.com> <015F13BE-32F7-4C8B-8C86-C9153FE9C9E9@employees.org> <CAPt1N1mr+YLQjHf6wKK__-K1-Rywtg0K03DpwZZRz6USHOKfhA@mail.gmail.com> <75254.1710741218@dyas> <CAPt1N1keJHigR0LTG_Q-3SNDccfq5VKOVXU3wTreFgYa8KMVew@mail.gmail.com> <CAKD1Yr1wVuNDwGHa_aRzz5HThV5mtJwy1Km7=GT912DzcwcXFQ@mail.gmail.com> <CAPt1N1nG8bNeLw1LW_0NK-XJC1J_mhN82xyTnTnM0JR=RWr4Zg@mail.gmail.com> <CAO42Z2yqmx40PCdUPacq_ULWunCHiV6RfcJSGjNUatv4SrjEcA@mail.gmail.com> <b1278d74-4971-b2d9-260e-adc3d3243e9c@gmail.com>
In-Reply-To: <b1278d74-4971-b2d9-260e-adc3d3243e9c@gmail.com>
From: Mark Smith <markzzzsmith@gmail.com>
Date: Mon, 18 Mar 2024 22:36:29 +1000
Message-ID: <CAO42Z2yW8xC=j0dApgXqmoAECVMr3N0ezorSYQD-mfcMSjs27A@mail.gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: Ted Lemon <mellon@fugue.com>, Michael Richardson <mcr+ietf@sandelman.ca>, IPv6 List <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fb09380613ee9bc3"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/ozhWxWq7Ep3uqixXhKxDQqV378I>
Subject: Re: [IPv6] Adoption call for draft-bctb-6man-rfc6296-bis
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Mar 2024 12:36:45 -0000

On Mon, 18 Mar 2024, 18:42 Brian E Carpenter, <brian.e.carpenter@gmail.com>
wrote:

> On 18-Mar-24 21:35, Mark Smith wrote:
> > On Mon, 18 Mar 2024 at 18:03, Ted Lemon <mellon@fugue.com> wrote:
> >>
> >> Right. In fact I think we recommend that for the home router use case
> already. Sorry, I was really trying to figure out a reason why we’d want
> this, but internal ULA handles the “no renumbering” concern, so that’s not
> a reason.
> >>
> >
> > ULAs won't solve the renumbering problem after
> > draft-ietf-6man-rfc6724-update (and doesn't  with RFC 6724).
> >
> > Once GUAs are preferred over ULAs by default, then GUAs will
> > automatically be used when ULAs are available to reach a host, if they
> > share a single DNS/mDNS name.
> >
> > A host could have 2 distinct DNS names, one for the ULA address, and
> > one for the GUA address, however that makes the first step of
> > Destination Address selection an unstated and unfriendly one, each and
> > every time - a human takes the first DA selection step, deciding which
> > DNS name they use for the host.
> >
> > Happy Eyeballs v3 won't solve this problem either, it uses
> > RFC6724(-update) sort order to choose which IPv6 addresses to attempt
> > to connect to first, so GUA will be chosen first (and of course Happy
> > Eyeballs doesn't get supplied with or chooses between 2 DNS names for
> > the same node.)
>
> HE v3 can still be changed. See the discussion a few months ago about
> get_addr_pairs() for example.
>
> https://github.com/becarpenter/getapr/blob/main/ProofOfConcept.md


I don't think it needs to be charged. It's primary purpose is to deal with
reachability problems in the presence of a DNS entry with multiple IPv6
and/or IPv4 addresses.

Why not let HE deal with the rarely unreachable ULAs if somebody
erroneously puts them in global DNS, or when a ULA much be unreachable for
some other reason.

RFC 6724 got 2 things wrong:

- put ULAs below IPv4

- put ULAs below GUAs

RFC6724-update only fixes one of those problems.

ULAs are the replacement for site-locals, just without the ambiguity of
site-locals.

Site-locals were preferred over GUAs, due to the scope comparison. ULAs,
being the direct replacement for site-locals, should also be preferred over
GUAs (not via a scope check, however the outcome should be the same).

I think anybody who takes the position that the first IPv6 DA returned by
getaddrinfo() must work, which is implied by GUAs being preferred over
ULAs, is really saying the following:

- IPv6 hosts should only ever have a single address, because having
multiple addresses implies that multiple addresses are needed because there
may be reachability problems to act if those addresses.

- getaddrinfo() only needs to return a single IPv6 address for any and all
DNS look ups, making DA/SA selection much simpler.

- Happy Eyeballs only needs to attempt to connect to a single IPv6 address
and a single IPv4 address, also making HE simpler.

- Multipath transport layer protocols have no value since there would only
be a single IPv6 address to connect to on a host.

Regards,
Mark.


>
>      Brian
>
> >
> > Regards,
> > Mark.
> >
> >> Op ma 18 mrt 2024 om 16:37 schreef Lorenzo Colitti <lorenzo@google.com>
> >>>
> >>> On Mon, Mar 18, 2024 at 4:09 PM Ted Lemon <mellon@fugue.com> wrote:
> >>>>
> >>>> On Mon, Mar 18, 2024 at 3:53 PM Michael Richardson <
> mcr+ietf@sandelman.ca> wrote:
> >>>>>
> >>>>> I agree.
> >>>>> We had 6RENUM WG sometime ago.
> >>>>> (It's confusing that "RENUM" BOF has no link to 6RENUM in the
> datatracker)
> >>>>
> >>>>
> >>>> I think we were a bit naive when we did that work. I think if we want
> renumbering to be usable, we actually need to account for all the
> configuration data that contains IPv6 addresses, and I don't think we did
> that. Dynamically regenerating the entire distributed configuration
> database whenever our prefix changes is very difficult to get right. We
> need a solution that's on the same level of difficulty as RA, not a giant
> distributed database problem.
> >>>
> >>>
> >>> A better solution to this problem is to run both ULA and global space.
> Internal resources and networks can use ULAs and will never need to be
> renumbered. Client-facing links can additionally have global addresses
> configured. Those do need to be renumbered when changing ISPs, but no
> databases need to be updated.
> >>
> >> --------------------------------------------------------------------
> >> IETF IPv6 working group mailing list
> >> ipv6@ietf.org
> >> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> >> --------------------------------------------------------------------
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> > --------------------------------------------------------------------
>