IETF Logo Mail Archive

Re: [OPSEC] [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 06 December 2018 22:05 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EF11131220; Thu, 6 Dec 2018 14:05:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LtpNKxZbWp36; Thu, 6 Dec 2018 14:05:43 -0800 (PST)
Received: from mail-pf1-x429.google.com (mail-pf1-x429.google.com [IPv6:2607:f8b0:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9B1F13120B; Thu, 6 Dec 2018 14:05:42 -0800 (PST)
Received: by mail-pf1-x429.google.com with SMTP id y126so846692pfb.4; Thu, 06 Dec 2018 14:05:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=bWH7oLCA3fLfF/0czKfDEN8kgeqd7lLXgYjdGXLk1DM=; b=uu3rpHf3M7UrtNGeecFEI8CHmE5/cL+BcPXOAP0GgqAZxkIirltEyu7hoI9q0fgbQU RPr8RmMiXayDV9MFW4iLeR/mitlUYPOf5fqUUC926Z4MlBi2y0c3YozH1iHYlbsdJ/HF 2dYvKaNux6fky1EIndZzJRNQ3kX1mFm4vVpkFpKQX1gB1tQ/qisJzDi2ESwzP8BRd3bE F1T3qsJ08WMWMEjtaRZVC8egSyuyxZypHyzdOtKmvlxTv7habdXqrG2WdRvIB8aDw16m /inUEU+cYahAyW6Q70Ibavasr+oG1RqpHYXJrLF6GVqVImAGcHvKpXs/7BLcuexxjeoZ okcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=bWH7oLCA3fLfF/0czKfDEN8kgeqd7lLXgYjdGXLk1DM=; b=r/aR8oQEjQdD98q05qYqRJextUcrvMjxW/l/0gCuqhUlMN8QqGGdJKx5cni4wirEJV BBATNLn8kSfscskjclPVwnj5amPRGF4EKvVvsFxQc907vuvtT6eCeH4W58xWeWCAkZTM YUiGcuz3y3yVHh0bcI86qxYiQOobUXFE6jsprFV1aSUVmXG2xUg9M3yVhEK2rZo8R0mE lT9SskjxzkH2tMPOVsyBnkzUoP8SyyLIZbGOJB/4aympGtBUdk6iZTpPEDqrrhPh6D0u cMhNo/iq+BL7jmRBVV//1+lnaif75h9nfUbGTckjbfjzJiJRTFusrn10+MOChM6CwkQ3 n99w==
X-Gm-Message-State: AA+aEWYmxPB9D0kQ7+tcmMN1P0QkkUK3FbzBEDHnlAcey5R34AM+v2Xf QkpN4fZ0ECvArfJctovcSa8Rd8RWK1E=
X-Google-Smtp-Source: AFSGD/XNjhunlLGeDzDFrZz3MTgqOK+hYMDWt4w55oeJnZEWTx+0wNWM4R0n60ICloHFskFfA6TVkg==
X-Received: by 2002:a65:4b82:: with SMTP id t2mr24521321pgq.189.1544133941640; Thu, 06 Dec 2018 14:05:41 -0800 (PST)
Received: from [192.168.178.30] ([118.148.76.40]) by smtp.gmail.com with ESMTPSA id d11sm1327354pgi.25.2018.12.06.14.05.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 06 Dec 2018 14:05:40 -0800 (PST)
To: Gert Doering <gert@space.net>
Cc: Christian Huitema <huitema@huitema.net>, Ole Troan <otroan@employees.org>, tsv-art <tsv-art@ietf.org>, OPSEC <opsec@ietf.org>, IETF-Discussion Discussion <ietf@ietf.org>, draft-ietf-opsec-ipv6-eh-filtering.all@ietf.org
References: <F17C4944-09EC-4AAC-84A0-B660E36AAE89@strayalpha.com> <20181205133821.GL1543@Space.Net> <B6280E0C-6B20-43C1-BB34-170FB06F1EF7@strayalpha.com> <20181205135723.GN1543@Space.Net> <54C715AE-8931-4FA9-AA01-2311EB0055F0@employees.org> <20181205164558.GQ1543@Space.Net> <CCFEFC5B-53AE-4079-B64A-A72A71274FAD@employees.org> <20181205180855.GR1543@Space.Net> <6b9dac4f-4d57-7778-bbbe-78ebe399962f@huitema.net> <b7225a00-4e36-2659-ecf9-354a7fb32a9b@gmail.com> <20181206091314.GC1543@Space.Net>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <a31ce8c4-745e-695e-b076-9a0801091c7b@gmail.com>
Date: Fri, 07 Dec 2018 11:05:35 +1300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.3.2
MIME-Version: 1.0
In-Reply-To: <20181206091314.GC1543@Space.Net>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/00IWrUeNPeHl97IHFgS7N6Xh9tU>
Subject: Re: [OPSEC] [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Dec 2018 22:05:50 -0000

Gert,

On 2018-12-06 22:13, Gert Doering wrote:
> Hi,
> 
> On Thu, Dec 06, 2018 at 01:48:29PM +1300, Brian E Carpenter wrote:
>> And I don't think that is an oversight. The *definition* of "router"
>> for IPv6 is "a node that forwards IPv6 packets not explicitly addressed
>> to itself." No mention of filtering, classification, admission control,...
> 
> This definition of a router is nice, but such a device will not be 
> useful in today's Internet.

Are you saying that *every* router in a carrier network needs to
perform filtering? I would have thought that this would be done
where necessary, but intentionally avoided elsewhere, to reduce
energy consumption and improve throughput. Anyway...

> What do you want this draft to be?  Theoretically beautiful, or useful
> for people operating outside a closed and well-controlled network?

I wasn't actually thinking about this draft; I was just trying to make
the (obvious) point that IPv6 was designed a certain way and that is
what the IPv6 standards track documents deal with. This draft is directed
at the operational community and I fully agree with you that it needs
to match operational reality as much as possible. (My issues with the
draft were fixed before it moved to IETF Last Call.)

   Brian

v2.23.0 | Report a Bug | By Email