Re: [v6ops] WGLC: draft-ietf-v6ops-unique-ipv6-prefix-per-host-02 - multiple prefixes per device

Mark Andrews <marka@isc.org> Mon, 20 March 2017 00:31 UTC

Return-Path: <marka@isc.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D04AF12702E for <v6ops@ietfa.amsl.com>; Sun, 19 Mar 2017 17:31:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level:
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a_ytNbieQfxA for <v6ops@ietfa.amsl.com>; Sun, 19 Mar 2017 17:31:19 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [199.6.1.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22C33129415 for <v6ops@ietf.org>; Sun, 19 Mar 2017 17:31:19 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.ams1.isc.org (Postfix) with ESMTPS id EE49424AE15; Mon, 20 Mar 2017 00:29:56 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id 87A10160045; Mon, 20 Mar 2017 00:29:56 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 72EDF1600A9; Mon, 20 Mar 2017 00:29:56 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id GG3GElpGz5Es; Mon, 20 Mar 2017 00:29:56 +0000 (UTC)
Received: from rock.dv.isc.org (50-193-53-102-static.hfc.comcastbusiness.net [50.193.53.102]) by zmx1.isc.org (Postfix) with ESMTPSA id 3E8C3160045; Mon, 20 Mar 2017 00:29:56 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id 75637670AB29; Mon, 20 Mar 2017 11:29:55 +1100 (EST)
To: Gert Doering <gert@space.net>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, v6ops@ietf.org
From: Mark Andrews <marka@isc.org>
References: <27AE6A05-C742-44BF-98E8-BFCEC72316F2@employees.org> <EF0F4950-F238-4001-BA74-D9440524BEFA@gmail.com> <634a6a12-4d82-da33-6d1d-baae2e5b2891@gmail.com> <13DA8077-91C1-4B3F-9D67-3727F546D202@employees.org> <13194a4f-aeda-63b0-0293-6bc738b068f2@gmail.com> <4D60B43B-24F9-4701-800E-13CF32CD4769@employees.org> <8fc7f3e7-7155-f184-c028-a9f6da7e97db@gmail.com> <20170316201413.GQ2367@Space.Net> <212f8258-a025-325e-badc-e7bdcc2bf5f7@gmail.com> <20170316232633.77ADD66F1D4A@rock.dv.isc.org> <20170317101306.GT2367@Space.Net>
In-reply-to: Your message of "Fri, 17 Mar 2017 11:13:06 +0100." <20170317101306.GT2367@Space.Net>
Date: Mon, 20 Mar 2017 11:29:55 +1100
Message-Id: <20170320002955.75637670AB29@rock.dv.isc.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/EGqHV0FazomhwNPBMGv_NjnVAps>
Subject: Re: [v6ops] WGLC: draft-ietf-v6ops-unique-ipv6-prefix-per-host-02 - multiple prefixes per device
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Mar 2017 00:31:21 -0000

In message <20170317101306.GT2367@Space.Net>, Gert Doering writes:
>
> Hi,
>
> On Fri, Mar 17, 2017 at 10:26:33AM +1100, Mark Andrews wrote:
> > >
> > > Yes, one always needs cautious allocation policies. But still... /64
> > > is not enough in the general case, with today's link-layer media
> > > and today's IPv6 stacks. (We can have the argument about tomorrow
> > > some other time. :-)
> >
> > And PD allows for a node to do multiple PD requests.  Each router
> > doesn't need a pool of prefixes to answer PD requests from.  It can
> > do a upstream request to full fill the downstream request on demand.
>
> Technically, it could.  Administratively, I'm going to believe that
> when I see it - like, in a big enterprise network, individual /64s
> being routed randomly across the place because a wifi hotspot needed
> another prefix to hand out.

Why not?  It's not like it actually is hard to do this.  What I am
seeing here is IPv4 think being applied to IPv6 features.  Handing
out prefixes is a completely different problem to handing out
individual addresses.  There is zero need to break down the prefix
pool into regions like you had to break down the IPv4 address space
into subnets.

> > A coffee shop is a site or part of a site.  That site should have
> > a /48 with 65536 /64 subnets to further allocate.  Hosts draw from
> > that pool.  Yes, that does mean that there are lots of intra site
> > routing entries for /64's rather than for shorter prefix lengths.
> > That however shouldn't matter because it is not a excessive number
> > for even the most inexpensive router to handle and they are summaried
> > as a /48 in the global routing table.  Even with a few of /48 pools
> > from different ISPs it still isn't excessive.
>
> A coffee shop has a /48 today (or a /56, given that the RIR policies
> where changed based on extrapolations that a /48 for each SoHo customer
> connection might not be sustainable).
>
> If we suggest that hosts should "get a /48", and there a a number of
> customers in that coffee shop, then a /48-per-site is not going to
> be enough.

A site may have a single host, but hosts, in general, aren't sites.
And who is suggesting that hosts get a /48 for this?  I'm not.

> But seriously: how many visitors of said coffee shop would need
> more than a /64?  Yes, I've heard about the laptop with the VMs running,
> in multiple hierarchical virtual networks, and such.  How many of those
> laptops exist?  100, 1000?  This is totally niche.

Today, not many.  Tomorrow who knows.  We do however have a
provisioning protocol that will work.

> Normal users want their browsing, e-mail and corporate VPN to work.
>
> Gert Doering
>         -- NetMaster
> --
> have you enabled IPv6 on something today...?
>
> SpaceNet AG                        Vorstand: Sebastian v. Bomhard
> Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A.
> Grundner-Culemann
> D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
> Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279
>

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org