Re: [v6ops] AWS ipv6-only features

Owen DeLong <owen@delong.com> Tue, 30 November 2021 17:14 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC4773A1425 for <v6ops@ietfa.amsl.com>; Tue, 30 Nov 2021 09:14:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=delong.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UStx7Y8NSq7I for <v6ops@ietfa.amsl.com>; Tue, 30 Nov 2021 09:14:45 -0800 (PST)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id B7EBC3A0C50 for <v6ops@ietf.org>; Tue, 30 Nov 2021 09:14:45 -0800 (PST)
Received: from smtpclient.apple ([IPv6:2620:0:930:0:55bf:e147:f678:fe9e]) (authenticated bits=0) by owen.delong.com (8.16.1/8.15.2) with ESMTPSA id 1AUHEXcw1696569 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 30 Nov 2021 09:14:42 -0800
DKIM-Filter: OpenDKIM Filter v2.11.0 owen.delong.com 1AUHEXcw1696569
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=delong.com; s=mail; t=1638292483; bh=Mozxgeh/K0Z/26gq09UCLAEsHdYK8rAN1ywd3FEoDGY=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=CdXUrR6uGJRbOLKw9N4SG/93Lmp2qd5FBJiUs3Ltm/b8v3oI5UEk/Gd+L2ijyF44Q xzWXTUM4CC4Wfzspxk94C/UlBF7HmWx8dQsWIh1KSmAjkvutF5WcqiDGNwfvg5bWLH IzxVnqxmGzQn2y12ni/K3Yci40OrJEdbHrCtn/g8=
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <m1mrzjf-0000GqC@stereo.hq.phicoh.net>
Date: Tue, 30 Nov 2021 09:14:33 -0800
Cc: v6ops@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <C75C1488-6B27-4BE4-8B68-BFBF35748369@delong.com>
References: <CAD6AjGRAkpMDaAh31mVL=+Gcz5PHejUxxLazr4Xb=vVRHfaSpw@mail.gmail.com> <CAO42Z2z8u_DQMd9eNSQp_RhBinXk2KyH4pdbVLMEqOta-hoG1w@mail.gmail.com> <CADzU5g5odQ82FJ0TsdNxFB42OkgLZ+PWanLLrK1roLojAUS54A@mail.gmail.com> <CAO42Z2z+ZJ_pLwZmBjZ_HFsNXQ6jok-PMRTP23ZD2UMch61wtw@mail.gmail.com> <CAM5+tA9JhRWfZ2VLLQnT8Mg+Xng-+Rc-oQnX8Ma5DguL2uDO8w@mail.gmail.com> <C7A86994-311E-4D94-80AE-74A15D6D62B1@delong.com> <m1mrzjf-0000GqC@stereo.hq.phicoh.net>
To: Philip Homburg <pch-v6ops-11@u-1.phicoh.com>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (owen.delong.com [IPv6:2620:0:930:0:0:0:200:2]); Tue, 30 Nov 2021 09:14:43 -0800 (PST)
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/BrJnTz1tQiYVsG8PlKTOsOA8s_8>
Subject: Re: [v6ops] AWS ipv6-only features
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Nov 2021 17:14:51 -0000


> On Nov 30, 2021, at 01:47 , Philip Homburg <pch-v6ops-11@u-1.phicoh.com> wrote:
> 
>>   On Nov 29, 2021, at 10:33 , Nick Buraglio <[1]buraglio@es.net>
>>   wrote:
>> 
>>   "ULAs are preferred over GUAs, so when a host is presented with
>>   both a ULA and GUA as possible ways to reach a destination, the
>>   host will select the ULA. Once the ULA destination address is
>>   chosen, the host will then choose its ULA as a source address
>>   to reach the ULA destination. This preference of ULA addressing
>>   over GUA addressing is the mechanism that provides internal
>>   network connectivity independence from concurrent external
>>   Internet connectivity."
>> 
>>   Yep... The moral of the story is that GUA works as intended and
>>   ULA is a bit of a mess.
> 
> I'm a bit confused about this scenario.
> 
> Typically a hosts gets addresses from DNS. So this suggests that people
> create DNS RR sets that contains both GUAs and ULAs.
> 
> Is this common practice somewhere? Do people expect that something sensible
> will happen if you try that? Is it documented what should happen?

Probably more common in mDNS than DNS, but yes, something sensible SHOULD
happen as documented in the RFCs:

AAAA record sorting in getaddrinfo() or getnameinfo() should return the ULA records
before the GUA records in the linked list.

As a result, an application that sensibly iterates through the list in order (as is expected
behavior) should connect via GUA if possible (if not, it should rapidly receive an error
and move on to the next item in the list, so no extraordinary processing or coding
is required in the application).

Owen