Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>

Ted Lemon <mellon@fugue.com> Wed, 10 April 2024 21:45 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E78BC14F60D for <ipv6@ietfa.amsl.com>; Wed, 10 Apr 2024 14:45:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jVO_aiPWtgTI for <ipv6@ietfa.amsl.com>; Wed, 10 Apr 2024 14:45:50 -0700 (PDT)
Received: from mail-qv1-xf33.google.com (mail-qv1-xf33.google.com [IPv6:2607:f8b0:4864:20::f33]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AE53C14F5FA for <ipv6@ietf.org>; Wed, 10 Apr 2024 14:45:50 -0700 (PDT)
Received: by mail-qv1-xf33.google.com with SMTP id 6a1803df08f44-69b0f08a877so21842096d6.0 for <ipv6@ietf.org>; Wed, 10 Apr 2024 14:45:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20230601.gappssmtp.com; s=20230601; t=1712785549; x=1713390349; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=qgDzUKM3rxFc1C+AwVsOxQCLZ6kkLvg7zha/ZrzxGgk=; b=BzF88iufHF/GldbJrnpWY47aBif5SM8wqTLS4A1tE1szY1M8uEVlyoIGM8sXks41kM DOExR95e9W2JOoEL8Hirp+FWUm/FqslsN/lTssr521EmK+VbYzch8NOd0cf8HzmlyKPl uH4Z5JNc8F1D5py42JF0k7YAxRoZxVueSCH4VI8xo9nY7FXYVt10eHxcz5f7TnfnbHvL eDeEpAftS26P1XCgiNe8Ernr5gFmh7z30Km7vQYLVfI+5dG/Jveb6ETg1uL70C/RaUsc +KXA381AMLEAOMVuxFQanTDgItjmNdc+8B46OwAXCeQOS1H1DIDKomemm70iFUW56zFZ yFDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712785549; x=1713390349; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=qgDzUKM3rxFc1C+AwVsOxQCLZ6kkLvg7zha/ZrzxGgk=; b=QESvoJhOOOjYt411G9+n9byybtHHJp0MM2wgNJylYacdeABic2Ic4G4KM4pFsUwUUK 3EVlrDvuLD+ymq20rGD1iSOOoeK5Iin2QCEaTDgcSn8WeINzFKt6t0ZxLw27haTqCqQE VZDAwG3+eRosfmICBFGL4+SczZe00k154TdOyc7LK+NUOjibN+sAl/Se74EcryIIeVTX 70p42FNfS0coc1O3DHB4WivMPFzZ/23r4iKMLnMvOGHXV+7TNCvbEPD6vChpnMA4P5pX gqsAJHMW1lyCynTUooheNl0P24n9GRPTlUp6VFQKOr7deozKob0jFnBtLFA0F0Y9JTE+ blGQ==
X-Forwarded-Encrypted: i=1; AJvYcCXX3zs3zNHxFWfxwzyViBjbSZPGbpItBGY5Px1zkWTntHHRZ8nn/dzbK/mFfX8rcVOsjoOUEKWBdj/VYefq
X-Gm-Message-State: AOJu0YxbPGfsrUWjKd9CxPdPwlgUZ4ltt43g7E6J/39g2+3a0d4olnh2 Kp2UYoByy+hNLEObU/qOsTdt0LkFrc/Go52djdRD6JLvxD56DTw0LCjLW9+spM/LN8uh5v2yd+7 lbB1gat0pPzLgitr7MNgUQJIjjCaEgiLp0OVNNA==
X-Google-Smtp-Source: AGHT+IFtjpIbiMNboKm6z9Unkv0rSWisRYsGsLVt6ZSz7keL4GKs313J0/ueCS9bNy/M/SKkA12ZodCGmMhH8/V28yE=
X-Received: by 2002:a05:6214:2627:b0:699:26b2:31b3 with SMTP id gv7-20020a056214262700b0069926b231b3mr4441810qvb.12.1712785548962; Wed, 10 Apr 2024 14:45:48 -0700 (PDT)
MIME-Version: 1.0
References: <6A5E5F35-B35F-4358-8EE1-3BD82329141E@jisc.ac.uk> <6FBC1B5A-BF28-4B05-B2B2-A60DA4707755@gmail.com> <CAJU8_nUX3VFcRtFUoCy+Uxn6UQYsB-wo+64PSufBWxW67Y64bw@mail.gmail.com>
In-Reply-To: <CAJU8_nUX3VFcRtFUoCy+Uxn6UQYsB-wo+64PSufBWxW67Y64bw@mail.gmail.com>
From: Ted Lemon <mellon@fugue.com>
Date: Wed, 10 Apr 2024 17:45:12 -0400
Message-ID: <CAPt1N1nDUh=p5x8Kp_fkEYRf9ZktaRo73Hzc40qVQ11X-B-GYw@mail.gmail.com>
To: Kyle Rose <krose=40krose.org@dmarc.ietf.org>
Cc: Bob Hinden <bob.hinden@gmail.com>, IPv6 List <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000391d8d0615c4f6bc"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/tmYwUffP2VjiLgg7vijGoefXxg0>
Subject: Re: [IPv6] Second Working Group Last Call for <draft-ietf-6man-rfc6724-update>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Apr 2024 21:45:52 -0000

On Wed, Apr 10, 2024 at 12:11 PM Kyle Rose <krose=40krose.org@dmarc.ietf.org>
wrote:

>  * At my sites I am fine with preferring GUA->GUA over ULA->ULA, in large
> part because I don't have any names that map to both types of address.
>

It seems to be the case that your setup would work just fine with the new
required behavior, if we required it, no?

 * I regard seeing or attempting to use unreachable ULA (e.g., discovered
> in global DNS or found in other configuration) as a configuration error
> that should be resolved by fixing the source of the unreachable addresses.
>

This is true. I think we should take that text out of the document.
However, it's not a reason to not want to prefer ULAs over GUAs.

The reason to prefer known ULA<->known ULA over GUA<->GUA is that it
enables sites to reliably number internally with a ULA and for that ULA to
then be used for internal communication in preference to GUAs, which may be
renumbered arbitrarily as ISP contracts change or at the whim of the ISP,
for that matter. This is a serious usability issue both for homes and for
enterprise sites, as was discussed earlier when we were debating the NPT66
draft.

So I'm curious whether your objection is because you don't care about the
ULA-in-the-DNS case (I don't either!) or whether you knew about the
benefits of enabling local ULAs to be preferred over GUAs and consider
these to be not compelling enough for us to write the document in such a
way that we might one day soon be able to rely on hosts we care about
behaving this way. Or do you think we should just always prefer ULAs over
GUAs (sounds like no)?

I think it makes sense that you wouldn't care about this feature—I can't
imagine it being useful for an ISP—but do you really care so much about
/not/ requiring this that you'd take this capability away from sites that
would benefit (greatly, IMHO) from it?