Re: [v6ops] ULA & Basic Requirements for IPv6 Customer Edge Routers

Fred Baker <fred@cisco.com> Thu, 09 December 2010 01:57 UTC

Return-Path: <fred@cisco.com>
X-Original-To: v6ops@core3.amsl.com
Delivered-To: v6ops@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9310C3A686C for <v6ops@core3.amsl.com>; Wed, 8 Dec 2010 17:57:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.474
X-Spam-Level:
X-Spam-Status: No, score=-110.474 tagged_above=-999 required=5 tests=[AWL=0.125, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jg1s7aD3bWWV for <v6ops@core3.amsl.com>; Wed, 8 Dec 2010 17:57:39 -0800 (PST)
Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 6C1DB3A67FD for <v6ops@ietf.org>; Wed, 8 Dec 2010 17:57:39 -0800 (PST)
Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AvsEAHvG/0yrR7Ht/2dsb2JhbACjZ3ilNpsphUkEhGKGD4MU
X-IronPort-AV: E=Sophos;i="4.59,318,1288569600"; d="scan'208";a="389144713"
Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-1.cisco.com with ESMTP; 09 Dec 2010 01:59:07 +0000
Received: from stealth-10-32-244-221.cisco.com (stealth-10-32-244-221.cisco.com [10.32.244.221]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id oB91x2Gn010930; Thu, 9 Dec 2010 01:59:06 GMT
Received: from [127.0.0.1] by stealth-10-32-244-221.cisco.com (PGP Universal service); Wed, 08 Dec 2010 17:59:06 -0800
X-PGP-Universal: processed; by stealth-10-32-244-221.cisco.com on Wed, 08 Dec 2010 17:59:06 -0800
Mime-Version: 1.0 (Apple Message framework v1082)
From: Fred Baker <fred@cisco.com>
In-Reply-To: <534318.33753.qm@web111401.mail.gq1.yahoo.com>
Date: Wed, 08 Dec 2010 17:58:52 -0800
Message-Id: <91D72A04-2A71-4E66-A075-014783248025@cisco.com>
References: <264F5B75-00EF-4495-8D3A-6EB5D653FA06@cisco.com> <F97A9E0D-0378-41CA-A19E-076583D6D611@apple.com> <1C2ABAB3-940A-4304-B9F6-A1E88F4B97B3@employees.org> <7F032EA4-D73A-4439-B800-409925A61FB7@apple.com> <0115ED43-B501-4144-9026-75F0644F53AB@employees.org> <0296F434-F4A0-434F-B1BF-3A7CA64DDA0F@apple.com> <86A1A07E-E0B4-4A10-BDE8-9A974C1E1338@employees.org> <91C51249-90E6-4757-908F-3A86BF4172AF@apple.com> <014D7AE3-B220-4C90-80AD-81D19893B9FC@cisco.com> <637C01E2-0937-4CD0-A77B-ADCCE122760B@apple.com> <18D99302-FAB0-47BB-9586-CF28484E7871@cisco.com> <06BE92DD-EBD0-43F5-8DCA-95E4402F692B@apple.com> <534318.33753.qm@web111401.mail.gq1.yahoo.com>
To: Behcet Sarikaya <sarikaya@ieee.org>
X-Mailer: Apple Mail (2.1082)
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Cc: IPv6 Operations <v6ops@ietf.org>
Subject: Re: [v6ops] ULA & Basic Requirements for IPv6 Customer Edge Routers
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Dec 2010 01:57:40 -0000

Well, since the draft has expired...

On Dec 8, 2010, at 4:36 PM, Behcet Sarikaya wrote:

> 
> 
>> 
>> I believe these  recommendations are good for the "basic requirements" document 
>> under  >discussion.  When adequate solutions to the problems described in  
>> I-D.ietf-6man-addr-select-sol are commonly deployed and readily available,  
>> *then*-- and only then-- should IETF >consider revising these recommendations to  
>> allow for use of ULA prefixes when no globally > routable prefix is  available.  
>> 
> 
> 
> I could not find anything related to ULAs, site-local and the like in
> http://tools.ietf.org/id/draft-ietf-6man-addr-select-sol-03.txt.
> ?
> Which section or document are you referring to?

I think the key paragraph from RFC 3483 would be:

   The algorithms use several criteria in making their decisions.  The
   combined effect is to prefer destination/source address pairs for
   which the two addresses are of equal scope or type, prefer smaller
   scopes over larger scopes for the destination address, prefer non-
   deprecated source addresses, avoid the use of transitional addresses
   when native addresses are available, and all else being equal prefer
   address pairs having the longest possible common prefix.  For source
   address selection, public addresses [3] are preferred over temporary
   addresses.  In mobile situations [8], home addresses are preferred
   over care-of addresses.  If an address is simultaneously a home
   address and a care-of address (indicating the mobile node is "at
   home" for that address), then the home/care-of address is preferred
   over addresses that are solely a home address or solely a care-of
   address.

If I have several prefixes (and therefore several addressees) and/or my peer does, then I take the cross-product of the sets. For each address pair, the first N bits, for some value of N >= 0, are the same. I count how many bits there are in the common prefix.

For example: if I have addresses

       FD00:1234:5678:9ABC:whatever/128
       2001:0DB8:5678:9ABC:whatever/128
and    2002:1234:5678:9ABC:whatever/128

and my peer has addresses

       FD00:1234:5670::whatever/128
and    2001:0DB8:0678::whatever/128

my ULA and his match in the first 44 bits, my 2001:: address matches his in the first 33 bits, and in all other cases the match is pretty short, on the order of 0..16 bits. The matching algorithm suggests that I try ULA to ULA, as that is the longest match, and if that fails, try 2001:0DB8:5678:9ABC:whatever to 2001:0DB8:0678:9ABC:whatever. What the tables would try to dissuade me from is various forms of translation such as 6to4 etc if I can avoid it.

Where knowing about a ULA could be of value is in funny situations. Imagine if you will that I have two LANs within a ULA and therefore within my own network, but they differ in bit 48 (the most significant bit of the subnet field), and I also have a /56 prefix from my provider. Regardless of how I number the subnets within the /56, the global address prefix will match in at least the first 56 bits, but the ULA will match in only the first 48. So I will try the global address first. There is a line of reasoning that says I should try the ULA instead; if my administration buys into that line of reasoning, it's going to have to play with my RFC 3484 tables to over-ride the longest-match rule.