Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 26 April 2022 04:17 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CC5CC3A762C; Mon, 25 Apr 2022 21:17:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.052
X-Spam-Level:
X-Spam-Status: No, score=-2.052 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.857, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MCdSeyKerWxl; Mon, 25 Apr 2022 21:16:59 -0700 (PDT)
Received: from mail-pf1-x42e.google.com (mail-pf1-x42e.google.com [IPv6:2607:f8b0:4864:20::42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3ECDC3A761E; Mon, 25 Apr 2022 21:16:59 -0700 (PDT)
Received: by mail-pf1-x42e.google.com with SMTP id bo5so16814574pfb.4; Mon, 25 Apr 2022 21:16:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=jYHdb5ZAC8+ws/4FSY2afpkHW00uKqU2VARvzpqhYCI=; b=NUbIxl0hT+Hn6QwtCUbXCgN883KN/4N3QTJF4uqxBstWxxNuunRGCs9ab3Xi+MT48y 4WLopcj0KBnsA+sRfHG/pOUYuyG1UDxfa4smokXdl3dkl0U2nr6JUAjDGsAC6wfS3qTd s70BPI6YONKwT1FcDf2Q4nAQn57d4ZnZv/KhhuJaNMxnbSmxL0fKYz+vPt8C+KPY3k29 cVilg5jL2REMbmMvs4DosZLDzIHOlIaHwVm1zPds5fePXqNTd+7S6WMhrqaoUaLf+BM9 TvnTpNor2O9nmxMuBXg8RUN9YGmPUA/6OYH6ffpM0HcPq7yylvaENIbls6yn28woX1oi yKAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=jYHdb5ZAC8+ws/4FSY2afpkHW00uKqU2VARvzpqhYCI=; b=YTsUFYCuRN9qz6AD+1ZVKJqwoXFg7KJPATCvuAF/o4wwVuh0bEYFVO+AvUa6Qs0wd0 PYygeAjnTpEhSL9VjrO/dipq3F9ItOYqeikMwrrKi4v1LZuWd/giUeeY8wDJYHHLKJWD 1F3G/yeJzlgq9quHgB0NxDQLnnk24NjHoI0NgkFzG+sdkG3ZJtX7XKY+aIYPregykQB8 oIcbLOT38zXcdYFlSVU7XPDNg/xy4MoFkBIr22Xq9AARlKvFh/NdiWCXBgg7cMpPjblX SHY0grmAWBLtpzAG9fWDDA4Fq3tG+KfmpEeYhefUdA7WqER9V9AHWmjhBc8ak8BDR2i7 M9YQ==
X-Gm-Message-State: AOAM531EH26nLgRCcDiGbtSMBvfkGzGB10B1y1wB0/aeo1X4cfrwGyZY ntlc/6F6VxDrXhPgjV+LqECgh20KkZjbcw==
X-Google-Smtp-Source: ABdhPJyyO3uIXDkEKy2X3CW+cmmBkjAyVCxPHsk9TGZ3kKynCc30taiLtNmewMqgYc5CT/1HxHAcOw==
X-Received: by 2002:a63:441f:0:b0:3ab:6ae4:fc32 with SMTP id r31-20020a63441f000000b003ab6ae4fc32mr4377472pga.261.1650946618903; Mon, 25 Apr 2022 21:16:58 -0700 (PDT)
Received: from ?IPv6:2406:e003:1005:b501:80b2:5c79:2266:e431? ([2406:e003:1005:b501:80b2:5c79:2266:e431]) by smtp.gmail.com with ESMTPSA id f19-20020a056a00229300b004fb157f136asm13491545pfe.153.2022.04.25.21.16.55 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 25 Apr 2022 21:16:58 -0700 (PDT)
To: Ted Lemon <mellon@fugue.com>, Mark Smith <markzzzsmith@gmail.com>
Cc: 6man list <ipv6@ietf.org>, Erik Auerswald <auerswald@fg-networking.de>, v6ops list <v6ops@ietf.org>
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de> <CAKD1Yr1v0Tkh+pWD-ts=PL3gZf7Qj6OHW6Cuvj8iGcSSMibjew@mail.gmail.com> <20220425100310.GF67548@fg-networking.de> <CAPt1N1=XedJ7tY9pKDS3LvDMak6iPsK9fA=oF7Z0KkmGcA6-_A@mail.gmail.com> <CAO42Z2ydhe3hVOqSaN814hYh3oF3yG_du+gRkg6yD5haCqDnLQ@mail.gmail.com> <CAPt1N1=YdnZ_N+47v4A_EM70TobSt1sw5tcmBfQJEP5Y1zCwMg@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Message-ID: <2471b549-648e-501a-10f0-08c1454000bc@gmail.com>
Date: Tue, 26 Apr 2022 16:16:54 +1200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.10.0
MIME-Version: 1.0
In-Reply-To: <CAPt1N1=YdnZ_N+47v4A_EM70TobSt1sw5tcmBfQJEP5Y1zCwMg@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/9vkzLGakgR365ovG71GTwTX61fA>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Apr 2022 04:17:03 -0000

On 26-Apr-22 13:02, Ted Lemon wrote:
> I hate to contradict, but no it doesn’t. It means that such networks require explicit configuration. 

I'm not sure exactly how to parse that, but if you're implying that networks that might sometime change to a new ISP and are not big enough to pay 
for their own PI prefix need explicit configuration, then Mark is correct. SME or SOHO networks by the millions should be the main beneficiaries 
of invariant internal addressing, and that means the factory default should prefer ULA->ULA even if GUA->GUA is available.

    Brian

> If we don’t think that’s going to work, maybe we should 
do something about it. That said , Ole mentioned that this is intended to 
fix a broken network anyway, and it’s probably better to fix that 
in a different way (draft coming at some point).
> 
> On Mon, Apr 25, 2022 at 18:43 Mark Smith <markzzzsmith@gmail.com <mailto:markzzzsmith@gmail.com>> wrote:
> 
> 
> 
>     On Mon, 25 Apr 2022, 21:45 Ted Lemon, <mellon@fugue.com <mailto:mellon@fugue.com>> wrote:
> 
>         On Apr 25, 2022, at 06:03, Erik Auerswald <auerswald@fg-networking.de <mailto:auerswald@fg-networking.de>> wrote:
> 
>             And all that would probably not preclude constructing a different
>             scenario where choosing GUA over ULA as source address would break
>             connectivity.
> 
> 
>         The question is not what possible scenarios are there, but what 
scenarios do we want to address with default behavior versus what scenarios can we only address with managed behavior. So e.g. not using longest-match for ULAs with different global identifiers sounds like a good default behavior, but obviously will break in some scenarios; in these scenarios, clearly we need support for configuring source address selection (which we already know how to do). Preferring GUA source address over ULA makes sense by default, I think, even though it is not always going to be the 
right thing to do.
> 
> 
> 
>     Defeats a significant purpose of ULAs.
> 
>     RFC4193:
> 
>     4.2 <https://datatracker.ietf.org/doc/html/rfc4193#section-4.2>. Renumbering and Site Merging
> 
>         The use of Local IPv6 addresses in a site results in making
>         communication that uses these addresses independent of renumbering a
>         site's provider-based global addresses.
> 
> 
> 
>             Thus I would rather suggest to consider if making tracking which
>             gateways advertised which prefixes mandatory would be a better
>             approach.
> 
> 
>         That's nice, and again would probably produce better default behavior. But I suspect it doesn't solve as many problems as you're hoping it will. E.g. what happens if the link you're connected to is one hop away from the link to which both of your upstream providers are connected? Now you have one router advertising everything, so this doesn't help.
>         --------------------------------------------------------------------
>         IETF IPv6 working group mailing list
>         ipv6@ietf.org <mailto:ipv6@ietf.org>
>         Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 <https://www.ietf.org/mailman/listinfo/ipv6>
>         --------------------------------------------------------------------
> 
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>