Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>

Ted Lemon <mellon@fugue.com> Mon, 15 April 2024 19:20 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47CB0C151076 for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 12:20:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 58D2J386vVDe for <ipv6@ietfa.amsl.com>; Mon, 15 Apr 2024 12:20:46 -0700 (PDT)
Received: from mail-yb1-xb34.google.com (mail-yb1-xb34.google.com [IPv6:2607:f8b0:4864:20::b34]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB0F4C151073 for <ipv6@ietf.org>; Mon, 15 Apr 2024 12:20:46 -0700 (PDT)
Received: by mail-yb1-xb34.google.com with SMTP id 3f1490d57ef6-dcd9e34430cso3983336276.1 for <ipv6@ietf.org>; Mon, 15 Apr 2024 12:20:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20230601.gappssmtp.com; s=20230601; t=1713208845; x=1713813645; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Gts5D3uKW4eGw7j2mog08Cc0nQKMTESQTzdI/EEuFq0=; b=M5KWjpHnCFavz1iUDhkvSR0by1qHiVef3JFfPYlPmQVFhsycwS7dzfOV9z69ffaqK1 xUgeZ9qXyXHuVqwj8IR/cDc3CKShxQrKkV6bNTTxSb7iLQYQr7W/vWAUOrU3r4PUDe0c JpUCCNHv7x4N6ONB0OwWd9VSSQLsB+3fOXOuHXpxYwNCe8yir+qL7xAinMWagctrLxdo HqEa5q+xSeXcqXHYr30f3JIOGxkZ2pnUOxNXpm3G7S2hUPLFHZoHDBnnQkSkoA+72tTK ZwvsT+tXeXh3yhRGxorfIxuvM6fUk1kbmfgHEhDIwvybCFfNpCrud70RF87K2DT4TCTl Hxlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1713208845; x=1713813645; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Gts5D3uKW4eGw7j2mog08Cc0nQKMTESQTzdI/EEuFq0=; b=jawDgYY10Q076KTLgNyd80Ht/yOSMc14b8gyQQEWMtL7/h5c1hvH6D9wY2WL/x3OjL GjTLKjKh7Yxt5Wx/Uq1wruC6q6bDMVZHmPLP18/q4fdLvnCmRCrJxFkBn3uSvLcZOvHB AegaLsSU4s/aDxOGYAN6JEimvZ43EPKVym54nuz9PTbg4qUGaeZfPaD6X181+ABFZw5E BjEI9+zfBEMDgxS2ZslBaKgwq3Jg3/RYtEFMlYhOjH47l5hswRNHUYnld+9AQfDMRugF l6r9zoxsutmtZWDi06o+bxwJRAuo+IIWQXC8cOIQjeZ3VUR11pzZiKKNj6qfDIRFTwlW Y1pA==
X-Forwarded-Encrypted: i=1; AJvYcCXQ7XD4DKoD5aN23nc/7IYbYSnao1+SmJrkZCZb6P1lAmyYH728K8VvxkTg0Ym5cSK87nMcXFqMl47s1/6I
X-Gm-Message-State: AOJu0YxITzZjLeYGxImuL0q1nM1JU6WFFXFEeBj1+X4pTqlBtdELksPS bfM2akpKjtWjqJcfzgOMawAH6QIgCIGR8nRfX/4aL+zR/KOif7kV/kTYt/h0tVzi9UhtYUgakzF t0s8SF5AdpCy2K+8avIWDNzvbt8igUJzwwFvhfF32nWRBd6E8
X-Google-Smtp-Source: AGHT+IHX/qh49tmHaHaVIDsqbfpNB8LXmPBCgYt/Y3Hv587QuA141cxOJSx1G2nCwn2YKqSCc6lYtI9Otd1EuJtKDqg=
X-Received: by 2002:a25:8801:0:b0:dcc:bc92:6704 with SMTP id c1-20020a258801000000b00dccbc926704mr9311884ybl.18.1713208845427; Mon, 15 Apr 2024 12:20:45 -0700 (PDT)
MIME-Version: 1.0
References: <6A5E5F35-B35F-4358-8EE1-3BD82329141E@jisc.ac.uk> <6FBC1B5A-BF28-4B05-B2B2-A60DA4707755@gmail.com> <CAPt1N1m-Ye8vfOVnsPesFshLMV5QuVoxWqM=HVZiJ37zaBg6AA@mail.gmail.com> <CAKD1Yr1NTvFj0zB0=+nnUKck7TBtwHFz2XoFkD1smx4yCuZohQ@mail.gmail.com> <1EFB11CD-544F-4AD7-B414-6A626075975D@employees.org> <CAPt1N1kJFgu6FhFaVhhkPnEY2dofcLF2ZuKDBHJFF5UU6R+x2g@mail.gmail.com> <CAN-Dau3XniXsT83GTN9L9y56aT2kAQYx8YJFkT=kiG4rZnf=HQ@mail.gmail.com>
In-Reply-To: <CAN-Dau3XniXsT83GTN9L9y56aT2kAQYx8YJFkT=kiG4rZnf=HQ@mail.gmail.com>
From: Ted Lemon <mellon@fugue.com>
Date: Mon, 15 Apr 2024 15:20:09 -0400
Message-ID: <CAPt1N1kXFOyBAiDFKUKyqQPdeK3qBS3Cu-Q0B_eSh_u7hW_KMQ@mail.gmail.com>
To: David Farmer <farmer@umn.edu>
Cc: Ole Troan <otroan@employees.org>, 6man WG <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>, Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a8815a061627847c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/t75niPO8jOawreYiQY6ZaAkNoiY>
Subject: Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2024 19:20:49 -0000

David, the issue is, can we actually implement known-ULA for all cases.
It's not clear that we can, so then the question is, what cases we can't
address do we care about, and what should we do about it. I don't think
you've answered that question.

Regarding "the old behavior is okay," we are always going to have a long
tail of legacy devices. The question is, for which of these devices is
their current behavior bad enough that we need to do something about it,
and if we need to do something about it, what can we do given that they
aren't updating their stacks?

On Mon, Apr 15, 2024 at 2:50 PM David Farmer <farmer@umn.edu> wrote:

> You say, "In these cases, we will get the old behavior, which works well
> enough."
>
> However, RFC6724 is not implemented universally or entirely. Therefore,
> the current behavior, or the old behavior compared to this update, is a mix
> of RFC3484, RFC6724, and a hybrid of the two in gai.conf.
>
> Moreover, you and others might feel RFC6724's behavior is good enough, but
> at least many of those instigating this draft think preferring IPv4-IPv4 or
> ULA-ULA is incorrect behavior and contrary to the intent of preferring IPv6
> to IPv4.
>
> It would be best for all IPv6 implementations to implement known-local
> ULAs. The normative language best suited to accomplishing that is
> debatable; I'm fine with SHOULD or MUST, with a slight preference for MUST.
>
> Nevertheless, any implementation that does not implement known-local ULAs
> should raise the ULA label's preference above that of the IPv4 label. Give
> that at least most implementations that use gai.conf already do that that
> is not inconsistent with the current behavior works good enough.
>
> Thanks
>
> On Mon, Apr 15, 2024 at 8:02 AM Ted Lemon <mellon@fugue.com> wrote:
>
>> What should says is the the behavior is not optional—we don’t think there
>> is a good reason for an implementation not to do the behavior.  Which is
>> true here.
>>
>> It’s also true, as you say, that not all prefixes will be identifiable as
>> local in all cases.  In these cases, we will get the old behavior, which
>> works well enough.
>>
>> Op ma 15 apr 2024 om 04:06 schreef Ole Troan <otroan@employees.org>
>>
>>>
>>>
>>> > On 11 Apr 2024, at 05:30, Lorenzo Colitti <lorenzo=
>>> 40google.com@dmarc.ietf.org> wrote:
>>> >
>>> > On Thu, Apr 11, 2024 at 1:04 AM Ted Lemon <mellon@fugue.com> wrote:
>>> > I continue to think that section 3,  "Operational Issues Regarding
>>> Preference for IPv4 addresses over ULAs," should make the new proposed ULA
>>> behavior mandatory rather than optional. I don't see a downside to making
>>> it mandatory. Hosts will come into compliance when they can; older
>>> implementations will not implement this new behavior, but I don't see any
>>> point in perpetuating that.
>>> >
>>> > Absolutely agree. This document should not proceed without that MUST.
>>> Preferring non-local ULA over IPv4 is incorrect because IPv4 implies global
>>> reachability, and ULA does not offer global reachability. So publishing
>>> this document without the MUST is harmful: an implementation that does not
>>> implement the SHOULD will cause regressions and break use cases that work
>>> today.
>>>
>>> A host should not make those assumptions.
>>> A RFC1918 IPv4 address may or may not have global reachability.
>>> A ULA may (or may not) have global reachability.
>>>
>>> In essence SA/DA combination can be assumed to provide reachability. It
>>> has to be probed.
>>> The _only_ thing SAS/DAS selection should be used for is ordering of the
>>> candidate list.
>>>
>>> > Also, MUST allows us to make ULA more useful than it is today. It is
>>> *desirable* to be able to publish non-local ULAs and have hosts know what
>>> is local and what is not. As a simple example: once all hosts implement the
>>> MUST, it will be safe to publish local ULAs in the global DNS, because
>>> hosts won't try to use them unless they are local.
>>>
>>> That’s likely a simplification. As they are certainly going to be
>>> networks where there will not be possible to signal all ULA prefixes to
>>> every host.
>>> The IETF conviction that as long as we make something a MUST then every
>>> implementor will implement it is flawed. The only thing it does is to water
>>> out the value of the MUST. Any MUST/SHOULD debate motivated by this (as
>>> opposed to a real interoperability breaking issue) is bike-shedding.
>>>
>>> O.
>>>
>> --------------------------------------------------------------------
>> IETF IPv6 working group mailing list
>> ipv6@ietf.org
>> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
>> --------------------------------------------------------------------
>>
>
>
> --
> ===============================================
> David Farmer               Email:farmer@umn.edu
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
>