Re: [v6ops] draft-moreiras-v6ops-rfc3849bis-00

Owen DeLong <owen@delong.com> Mon, 12 August 2013 23:00 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C64B711E80ED for <v6ops@ietfa.amsl.com>; Mon, 12 Aug 2013 16:00:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.433
X-Spam-Level:
X-Spam-Status: No, score=-2.433 tagged_above=-999 required=5 tests=[AWL=0.166, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0IZ-kA2tawwM for <v6ops@ietfa.amsl.com>; Mon, 12 Aug 2013 16:00:39 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 66AD911E80E0 for <v6ops@ietf.org>; Mon, 12 Aug 2013 16:00:39 -0700 (PDT)
Received: from [10.255.251.216] (kiwi.he.net [216.218.252.66]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.1) with ESMTP id r7CMxPL0020609 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Mon, 12 Aug 2013 15:59:25 -0700
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com r7CMxPL0020609
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1376348366; bh=VJYxIOZdrExGvfTROr2mWQH+308=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=cZ1Rb1BT+ypz2H9B7r6rcblf8T7uuVfb0HwJnhZ6WjdG8HL4VDRWLXTCKP1PBNeXw oa9iCTho0UlOpYNLJCpbc4zzRs3GDTEuVhOQjRfHY3ixZ0P9OZdTIB0O86yNummOBG 4BARclrtzB73eIVrBh0LV5a6qecSAmL+t/a3xWIA=
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <20130812220439.1295538453A1@drugs.dv.isc.org>
Date: Mon, 12 Aug 2013 15:59:36 -0700
Content-Transfer-Encoding: 7bit
Message-Id: <D183237A-C4CD-4B28-A599-1A3458E0D127@delong.com>
References: <5207D42F.2030302@nic.br> <5207E319.6070601@nic.br> <B66D2D0C-DE6D-49CC-A87A-7C65B5360DB4@delong.com> <52082128.5090503@nic.br> <20130812002740.34191383D34B@drugs.dv.isc.org> <8C0CB3D0-1D03-4A2D-BEF5-166A8BFB9B94@delong.com> <20130812220439.1295538453A1@drugs.dv.isc.org>
To: Mark Andrews <marka@isc.org>
X-Mailer: Apple Mail (2.1508)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [192.159.10.2]); Mon, 12 Aug 2013 15:59:26 -0700 (PDT)
Cc: Alejandro Acosta <aacosta@rocketmail.com>, v6ops@ietf.org
Subject: Re: [v6ops] draft-moreiras-v6ops-rfc3849bis-00
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Aug 2013 23:00:40 -0000

>> I disagree. See my previous message. It has helped in IPv4 and I see
>> no reason it would not help in IPv6.
> 
> Sorry Owen, you need to apply IPv6 think, in particular ULA think
> to the problem space which is different to both IPv4 think and
> general IPv6 think.

Stating that without specifics is useless.

>> It may not do much to prevent mistakes, but it makes them much easier
>> to identify and resolve.
> 
> Copying a documentation prefix is NOT a error.

If you use it in a real world network, yes, it is.

> And I'm sure you will see routes leaked for fc00::/7 as well.  Those
> leaks do not in general cause problem for anyone but the leakers
> themselves.  The fact that people leak has nothing to do with
> documentation prefixes.

It is proof that people do harmful things where the harm is easier to
identify and mitigate if they are constrained to obviously visible and
different from normal numbers.

>>> All a documentation prefix will do is have one potentially toxic
>>> prefix compared to a handful of potentially toxic prefixes.  There
>>> are 1099511627776 prefixes in fd00::/8.  Even if there were thousands
>>> of documentation prefixes the odds of you hitting one when generating
>>> your own prefix are astronomically small.  Additionally the more
>>> prefixes that are used in documentation the less toxic a particular
>>> prefix will be.
>> 
>> No, it will also help to constrain such errors to an easily identifiable
>> single
>> prefix which will make the errors easier to identify and correct. This
>> is, IMHO,
>> a worth while goal in the real world where operators actually run networks
>> and have to deal with less than ideally trained predecessors and
>> colleagues.
> 
> So a site has already choosen a ULA prefix that happens to match
> the soon to be documention prefix.  They have done NOTHING wrong.
> It is causing NO operational problem.  By creating a documentation
> prefix and telling them it is a poision prefix you have just forced
> them to renumber the moment they attempt to connect to anyone.

If we choose the doc prefix from fc00::/8 and not from fd00::/8, then, that
is not true. Since there is currently no accepted valid use for fc00::/8,
and that space is intended to be globally coordinated if it is ever released,
using it to create the doc prefix seems an entirely logical choice to me.

> You are trying to solve a non existent problem.  All you are doing
> is saving the occasional site that was too stupid to pick a prefix
> for themselves and copied one from some documentation from renumbering
> when they connected to another site that was equally stupid and
> copied from the same documention examples when ULA doesn't say you
> won't have to renumber when you connect and exchange ULA routes.

The problem exists, whether you accept that or not. Constraining the
problem is useful to some and harmful to none.

Unless you can show harm caused by allocating a prefix from fc00::/8
for documentation purposes, then I don't see the point of your continued
argument.

Owen