Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Bob Hinden <bob.hinden@gmail.com> Fri, 25 March 2022 15:08 UTC

Return-Path: <bob.hinden@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7E2D3A1508 for <v6ops@ietfa.amsl.com>; Fri, 25 Mar 2022 08:08:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHg0gOWYHUNU for <v6ops@ietfa.amsl.com>; Fri, 25 Mar 2022 08:08:40 -0700 (PDT)
Received: from mail-oi1-x22b.google.com (mail-oi1-x22b.google.com [IPv6:2607:f8b0:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E5BD3A1504 for <v6ops@ietf.org>; Fri, 25 Mar 2022 08:08:40 -0700 (PDT)
Received: by mail-oi1-x22b.google.com with SMTP id o64so8430772oib.7 for <v6ops@ietf.org>; Fri, 25 Mar 2022 08:08:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=y0mI3h35Z/khkt2K9FeyKsvLmTZTBMEXkkLAcQYc+xA=; b=TaJ7QpcKJ0Fp0DFD7QJ7l2NBraH9oAlXYRoPLFOES89myuWhUhAqsYaJWuqZTirWwd tSx1aOuM6mv9o9s9PkCZE/O+aaxJGM80iWqrDjZkx0/iUReA/mLOsYUQhM4ZwOeWjWiE 8Mfr3qK56G1QhuCGakprAjo6yHGB+YPI4gawFCr9gcdaZ58ns9GbHkkau83W8MfKXTMs m7567XlRawxX1V9S8SiOXH4m/BTgCM2T4El5ci2VvsnS1Rw2l0bT6SErQqBxSZwQGEse eO7wWiquTNBxqAEQBRdd88snSdW0XLxP5w7Nbo3Q5tIp1CahyxOqt2NTZy5Kjtqhw0xE enEw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=y0mI3h35Z/khkt2K9FeyKsvLmTZTBMEXkkLAcQYc+xA=; b=l9doSpmKPfOqROIdXOf2KpBRe8Xw/3ttxtHGYPCk39sE2Uk4INlxCMcYwFt2CBm4/6 U0t+wvYCMw/LdOJcgxpVnerrNcc6mhjEoyMLhNjZIY833Z9issfF36vVXij4/RWrp7hx fiAwjQR1PRgu0JSzQmFxu5kn/VCsWDKKeEYHFEJ58PvcVsouj5Yr2bZPdb+zn/T5l7XZ yv5UXR0T3UKY2jhAd6sjytxYEpFMyPZlhmURgL4VroyyacbCaWQ3xLjKPWCWVyhPh4i2 /AnqnfqSMNysO58P75rdUSs2QQwoTrPkFEM7npj2pwGOKksQJkzaXy1zpsIiYutBYtx7 It6A==
X-Gm-Message-State: AOAM533of6uUaDFdjzNLvSOHlTtUYoVy6lKU0kkf6L97xQoHQh8Adz3t GeQ1P3AHEz+tx+QLuD4+hvJFhOzxkus=
X-Google-Smtp-Source: ABdhPJyObJ5qPb9tSad9jQPjsg5J/udxPPHgbhjJBYHCRwNlAtSbLW1JCshNtbfrpl7HeqkLR368gA==
X-Received: by 2002:a05:6808:ec2:b0:2f7:34db:691e with SMTP id q2-20020a0568080ec200b002f734db691emr758513oiv.252.1648220919262; Fri, 25 Mar 2022 08:08:39 -0700 (PDT)
Received: from smtpclient.apple ([2600:1700:4383:c05f:44c2:7456:2663:f664]) by smtp.gmail.com with ESMTPSA id z3-20020a056830290300b005b2316db9c9sm2600355otu.30.2022.03.25.08.08.38 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Mar 2022 08:08:38 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_5791265C-D5C9-4827-93E3-6F64BF133DA7"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 15.0 \(3693.60.0.1.1\))
From: Bob Hinden <bob.hinden@gmail.com>
In-Reply-To: <fc66c61b-2a11-c289-52fa-a89dc841a3aa@gmail.com>
Date: Fri, 25 Mar 2022 08:08:36 -0700
Cc: Bob Hinden <bob.hinden@gmail.com>, v6ops@ietf.org
Message-Id: <0BEF1AB2-543C-4760-B3A9-34846B307CD2@gmail.com>
References: <52661a3d-75dc-111a-3f23-09b10d7cb8d4@gmail.com> <A72CDDDB-CDCE-4EAF-B95E-997C764DB2C4@gmail.com> <9175dc32-45c1-e948-c20a-3bcc958b77b9@gmail.com> <YjmJQMNgnJoSInUw@Space.Net> <fd17a91f-68dc-92b5-0544-51aefa1b7f08@gmail.com> <CAM5+tA-Wq5O4pjQ++VZQi-FTKZGMRAW-LFc6O5dPOyox4QZDEw@mail.gmail.com> <YjpA4IH/eI5im8DT@Space.Net> <CAM5+tA-foEATL9uihwD=zoTZ1EvHiwc5k_xKf=GRNYD51REQYQ@mail.gmail.com> <Yjq2Gr2cQjFuQ8ie@Space.Net> <m1nXLes-0000J8C@stereo.hq.phicoh.net> <fc66c61b-2a11-c289-52fa-a89dc841a3aa@gmail.com>
To: Brian Carpenter <brian.e.carpenter@gmail.com>
X-Mailer: Apple Mail (2.3693.60.0.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/1RXZPnlSKGiFQkQuVEgmMpkz8do>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Mar 2022 15:08:45 -0000

Brian,

> On Mar 24, 2022, at 1:04 PM, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> 
> (Trying, far too late, to change the Subject to be the actual subject...)
> 
> I wasn't paying enough attention when RFC6724 was done. I think it's even
> more wrong each time I look at it. For example, it has the consequence that
> if a pair of hosts have both RFC1918 and ULA addresses, the default for
> communication between them is RFC1918. D'Oh. If two hosts have ULAs in the
> same /64, they will nevertheless try IPv4 first. D'Oh. And the default table
> in RFC6724 is sticky in practice, even if configurable in theory.
> 
> I think this needs serious work (in 6MAN most likely).

Without any hats on, I agree.   Suggest you start a thread on the IPv6 list with some proposed changes and/or write a draft.

Bob


> 
> Regards
>   Brian Carpenter
> 
> On 25-Mar-22 00:29, Philip Homburg wrote:
>>> (Dual-stack cannot be the answer anyway - it will have all the issues
>>> of IPv4, plus the added complications of dual-stack.  Services need to
>>> be dual-stack, but for all the rest, single-stack IPv6 needs to be
>>> the end goal - see facebook etc)
>> Obviously, on an IPv6-only system, there is no IPv4, so the relative
>> priority of ULA compared to IPv4 does not matter.
>> I'm curious what IPv4aaS we want to deploy. I consider NAT64 a complete
>> disaster (even if the form of 464xlat). Given how the internet works,
>> we will probably end up with NAT64 everywhere until the end of times.
>>> This is not what I had in mind.  If "we" decide that ULA is a good
>>> way forward, IETF can update RFCs, and vendors will eventually
>>> update their base OS.  It might take 5 years, but so will everything
>>> else in Big Enterprise land.
>> The problem with ULA is that we have lots of installations where hosts with
>> a ULA address don't have access to the IPv6 internet. Often, CPEs announce
>> a ULA when the CPE doesn't have an IPv6 uplink.
>> In contrast, where RFC 1918 was meant for local IPv4 communication, it is
>> now on a very large scale the primary method for a host to reach the IPv4
>> internet.
>> So to avoid the situation where we say that ULA is local and then use it
>> to connect to the IPv6 internet, we should just allocate a new space. And
>> explicitly give it the property to connect to the IPv6 internet through
>> through some sort of address translation.
>> There is also a nice tie-in with PI. Obviously, putting millions of PI
>> prefixes in BGP does not scale.
>> On the other hand, there is no such limit if the PI space is used behind NAT.
>> _______________________________________________
>> v6ops mailing list
>> v6ops@ietf.org
>> https://www.ietf.org/mailman/listinfo/v6ops
>> .
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops