Re: [v6ops] Report: Bar BoF on a 6to4 replacement

Jeroen Massar <jeroen@massar.ch> Wed, 03 December 2014 18:41 UTC

Return-Path: <jeroen@massar.ch>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42D4C1A9037 for <v6ops@ietfa.amsl.com>; Wed, 3 Dec 2014 10:41:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FZHJWLmsGnC0 for <v6ops@ietfa.amsl.com>; Wed, 3 Dec 2014 10:40:59 -0800 (PST)
Received: from bastion.ch.unfix.org (bastion.ch.unfix.org [46.20.246.101]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F7B81A8AD7 for <v6ops@ietf.org>; Wed, 3 Dec 2014 10:40:59 -0800 (PST)
Received: from yomi.ch.unfix.org (yomi.ch.unfix.org [IPv6:2001:1620:f42:42:ca2a:14ff:fe1f:2b7b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: jeroen) by bastion.ch.unfix.org (Postfix) with ESMTPSA id 78509100AB8BE; Wed, 3 Dec 2014 18:40:56 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=massar.ch; s=DKIM2009; t=1417632056; bh=IK82TXvhEaSqfNB1Lrzskc80PFseBTrxdd6fIwq2rlc=; h=Date:From:To:Subject:References:In-Reply-To; b=opVD2zK2R+M1W2Gb/WnCBDrOWBnIK5tdIAExK+P83zpJJFkYHo/2QhJwCVjtxSFWi mLu1U0pIYeNvAkJT39lAS8qQcZwKi3b3U8oy88GPyyYpMclU6KOY9cQY9AIIDStjVJ kYq2JTE3gGWsuPSqlmeBE0TWBo/CUVXBlBXKS88SeHtL34MEZm3GmEPpBNa3e5aU56 6soSx3hcOJDto6i2tVH4hV8Zbwmih+SmS6LSEzHjSW9hPorwSTJpZvpWqVn6Vh3peI 7T+djVo7Lvpt0GaZiKHvgpvWq99YQAmtGLRxXnJkZK+/hnMtGGNOiciuyRYo2QOUic kLEczBR4w8VPg==
Message-ID: <547F5935.40704@massar.ch>
Date: Wed, 03 Dec 2014 19:40:53 +0100
From: Jeroen Massar <jeroen@massar.ch>
Organization: Massar
MIME-Version: 1.0
To: Keith Moore <moore@network-heretics.com>, v6ops@ietf.org
References: <5454119C.3090601@network-heretics.com> <2134F8430051B64F815C691A62D9831832D75F09@XCH-BLV-504.nw.nos.boeing.com> <686FABB5-9A9E-4D0C-BD1A-19CA02A9C247@muada.com> <2134F8430051B64F815C691A62D9831832D76378@XCH-BLV-504.nw.nos.boeing.com> <AD4F3B9C-18D2-4B6F-867C-423368D6F489@muada.com> <546CE0E9.9080101@network-heretics.com> <AC050582-9EF2-44EA-8980-948D24A767FB@muada.com> <2134F8430051B64F815C691A62D9831832DA7B35@XCH-BLV-504.nw.nos.boeing.com> <B6001012-078C-4601-8686-72A0446F2CB8@muada.com> <547F0F4F.90107@massar.ch> <547F3218.4060101@network-heretics.com> <547F3710.50106@massar.ch> <547F3831.50408@network-heretics.com> <547F3B8A.3020805@massar.ch> <547F41E0.1090303@network-heretics.com> <547F4684.7010505@massar.ch> <547F5322.70804@network-heretics.com>
In-Reply-To: <547F5322.70804@network-heretics.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/5a_pnChwNFT9I9aYpdAOutWt7n8
Subject: Re: [v6ops] Report: Bar BoF on a 6to4 replacement
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Dec 2014 18:41:02 -0000

On 2014-12-03 19:14, Keith Moore wrote:
> I followed up to Jeroen in detail in private mail.

Why not keep it on list?

> Executive summary:  He seems to think there's no need for an
> easy-to-configure way to enable v6 connectivity for arbitrary hosts or
> consumer networks because those people who can't be bothered to install
> and configure SixXS just want to look at pictures of cats anyway.

Clearly that is what you interpreting from what I am trying to get out
of you. But that is not what I have stated at all and is actually gross
misrepresentation.

First of all, I do not limit to SixXS (which is just an implementation
to solve a particilar set of problem with a specific demographic
audience), let alone to Tunnel Brokers for finding a solution for the
problem.


One of the major problems with your mails is that the demographic that
you want is completely unclear. As you say "most people", the only
answer can be "folks using HTTP" (thus watching cats, facebook, gmail
and the like). These folks do not even care about SMTP as their email is
a website and they do not know better.

Those people really do not care about IPv4/IPv6 etc as for them "The
Internet" (as they know it) just works fine, even if they are behind
fifty layers of NATs or heck are getting native IPv6-only already.


Hence, please define your demographic and then define the problem they
are having and where they are having that problem.

As only then will we be able to determine where the problems are and
then go for a solution to solve that problem.


> I disagree, and think that large numbers of ordinary users benefit from
> availability of applications other than the web, which run better over
> v6 than with ad hoc mechanisms for NAT traversal.

Like you I love and want that people can use the FULL Internet even
though most people will never know the full possibilities that it offers.

Hence, why I have been deploying IPv6 for so long already: to get people
to be able to deploy things. (of course I wanted to do that myself too,
just happened to end up doing it for others too ;)

But the people who specifically need these kind of setups either read
magazines like the paper editions of www.heise.de/ct/ and
www.heise.de/ix/ or PC Magazin etc who have been covering IPv6 for years
already; or those people google/yahoo/bing and find a solution to their
problem, typically not even a IPv6 tunnel or other form of connectivity
but things like getting a VPS, TeamViewer, Hamachi or a form of a
peer-to-peer network (and then I mean bittorrent not true p2p which is
what one gets with unfirewalled IPv6).

Any other demographic simply does not care about IP.

If you have examples of situations of people who do care about having
proper connectivity to the Internet, then please name them and let us
define them and then see what kind of problems these people have.



> I also think that the
> widespread support of anycast 6to4 in hosts and consumer routers was
> evidence of at least a perception of a need for easy v6 connectivity
> over v4.

Yes, there was this. But we learned that Anycast 6to4 causes problems
that we cannot solve as there are too many layers of operation involved.

Also, since 6to4 came out there have been better solutions that solve
that problem much better. Remember that when 6to4 was developed the only
NAT that existed was the one in the computer of the user, not in the
network of the ISP. There where no mobile networks either and most folks
had dial-up.



> Since anycast 6to4 has been demonstrated to not work well and
> 6to4 with an explicitly configured router still has other problems, I
> want to define a different mechanism that works better but still has
> 6to4's ease of configuration.

But why define something if you cannot even define who will be using it
let alone the problems they currently have?

I'll ask again:
 Which exact gap are you trying to solve that existing methods do not
 solve? And of course, please do specify the demographic.


> I am however happy if all we need for
> that mechanism is a way that networks can advertise, and hosts and
> consumer routers can discover, available mechanisms for tunneling v6
> over v4, and if the hosts/routers can be configured to use a fallback
> tunnel service if no other means is available.

6rd uses DHCP for 'advertising', this works great on the local media to
which an ISP has access.

Anything else will require somebody to run a service where possibly
millions of people can get coordinated access to that service.
That system will not happen as that has the same problem as 6to4
anycast: other entities are paying for that service.



Note that the 'advertising' of tunnel brokers happens in printed media /
blogs and maybe strangely more importantly in the devices that people buy.

Signup reasons that I see regularly when going through the SixXS signup
queue prove this:
 "My Sophos UTM pointed out to this"
 "UnityMedia helpdesk sent me here"
 "My ZyXEL supports SixXS"
 "I saw AICCU support in OpenWRT"
 "I installed the aiccu package"
etc

(Oh, fun side-note: SixXS is just a hobby project that takes too much
time.... hence no real advertising in any way)


> The advertising
> mechanism should be able to advertise 6rd, AYIYA, and anything else that
> works well.

Any such "advertising" mechanism would require central coordination,
such a mechanism does not exist on the Internet and cannot be
distributed easily around the Internet in a scalable method.

Somebody has to run it, there is no way to make something run unattended
and unmanaged and without it costing anybody anything.

Greets,
 Jeroen