Re: (ngtrans) draft-lefaucheur-bgp-tunnel-transition-00.txt

Ole Troan <ot@cisco.com> Wed, 17 July 2002 02:35 UTC

Received: from nwkea-mail-1.sun.com (nwkea-mail-1.sun.com [192.18.42.13]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA09257 for <ngtrans-archive@odin.ietf.org>; Tue, 16 Jul 2002 22:35:54 -0400 (EDT)
Received: from engmail4.Eng.Sun.COM ([129.144.134.6]) by nwkea-mail-1.sun.com (8.9.3+Sun/8.9.3) with ESMTP id TAA28547; Tue, 16 Jul 2002 19:32:25 -0700 (PDT)
Received: from sunroof.eng.sun.com (sunroof.Eng.Sun.COM [129.146.168.88]) by engmail4.Eng.Sun.COM (8.9.3+Sun/8.9.3/ENSMAIL,v2.1p1) with ESMTP id TAA22702; Tue, 16 Jul 2002 19:32:15 -0700 (PDT)
Received: from sunroof.eng.sun.com (localhost [127.0.0.1]) by sunroof.eng.sun.com (8.12.4/8.12.4) with ESMTP id g6H2VgoN000226 for <ngtrans-dist@sunroof.eng.sun.com>; Tue, 16 Jul 2002 19:31:42 -0700 (PDT)
Received: (from majordomo@localhost) by sunroof.eng.sun.com (8.12.4/8.12.4/Submit) id g6H2Vge9000225 for ngtrans-dist; Tue, 16 Jul 2002 19:31:42 -0700 (PDT)
X-Authentication-Warning: sunroof.eng.sun.com: majordomo set sender to owner-ngtrans@sunroof.eng.sun.com using -f
Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.12.4/8.12.4) with ESMTP id g6H2VdoN000217 for <ngtrans@sunroof.eng.sun.com>; Tue, 16 Jul 2002 19:31:39 -0700 (PDT)
Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail4.Eng.Sun.COM (8.9.3+Sun/8.9.3/ENSMAIL, v2.1p1) with ESMTP id TAA22527 for <ngtrans@sunroof.eng.sun.com>; Tue, 16 Jul 2002 19:31:41 -0700 (PDT)
Received: from cisco.com (mrwint.cisco.com [144.254.98.48]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id UAA14923 for <ngtrans@sunroof.eng.sun.com>; Tue, 16 Jul 2002 20:31:40 -0600 (MDT)
Received: (from otroan@localhost) by cisco.com (8.8.8/2.6/Cisco List Logging/8.8.8) id DAA16736; Wed, 17 Jul 2002 03:31:36 +0100 (BST)
X-Authentication-Warning: mrwint.cisco.com: otroan set sender to ot@cisco.com using -f
To: itojun@iijlab.net
Cc: ngtrans@sunroof.eng.sun.com
Subject: Re: (ngtrans) draft-lefaucheur-bgp-tunnel-transition-00.txt
References: <20020717021632.7F8C54B22@coconut.itojun.org>
From: Ole Troan <ot@cisco.com>
Date: Wed, 17 Jul 2002 03:31:35 +0100
In-Reply-To: <20020717021632.7F8C54B22@coconut.itojun.org> (itojun@iijlab.net's message of "Wed, 17 Jul 2002 11:16:32 +0900")
Message-ID: <7t5znwrqe48.fsf@mrwint.cisco.com>
Lines: 33
User-Agent: Gnus/5.090006 (Oort Gnus v0.06) Emacs/20.7 (sparc-sun-solaris2.8)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ngtrans@sunroof.eng.sun.com
Precedence: bulk
Reply-To: Ole Troan <ot@cisco.com>

> 	i don't understand why this transition technology is needed.
>
> 	to make use of this mechanism, we need to upgrade all of the EBGP
> 	routers in the cloud.  when doing so, we can setup normal RFC2893
> 	tunnels and do normal BGP4+ over IPv6 (over IPv6-over-IPv4 tunnel).
> 	we don't need a new automated mechanism.

I believe the motivation here is for the operator who do not want to
maintain a full mesh of configured tunnels in addition to the BGP
mesh. looking at the scenario 1, note that there is no magic. the
next-hop carried in BGP is one matching whatever automatic tunnelling
mechanism chosen. as far as I know all current BGP/IPv6
implementations already support this.

> 	another thing bothers me is the special use of IPv4 mapped address
> 	as indication of tunnel endpoint.  IPv4 mapped address already has
> 	overloaded with multiple meanings (RFC2553 API, SIIT, ...) and i
> 	really want to see these multiple semantics get removed, and make it
> 	be used only for RFC2553 only.  it causes a lot of security issues
> 	as outlined in my previous drafts.
> 	(i'm happy to say long good bye to IPv4 mapped address itself, but that
> 	is another question)
>
> 	we don't need more magic.

the scenario 1 offers a solution where you use IPv6 in IPv4 tunnelling
to create IPv6 connectivity. scenario 2 does not give IPv6
connectivity until your BGP sessions are up. this allows you to e.g
use this mechanism to encapsulate IPv6 packets in MPLS without an
additional IPv4 header or IPv6 IGP in the core.

cheers,
Ole