Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Vasilenko Eduard <vasilenko.eduard@huawei.com> Mon, 25 April 2022 10:26 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44CFD3A1623; Mon, 25 Apr 2022 03:26:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sjzzKH1AIxax; Mon, 25 Apr 2022 03:26:24 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70B833A15AA; Mon, 25 Apr 2022 03:26:24 -0700 (PDT)
Received: from fraeml741-chm.china.huawei.com (unknown [172.18.147.207]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Kn1KY4FNzz67xsC; Mon, 25 Apr 2022 18:22:25 +0800 (CST)
Received: from mscpeml100001.china.huawei.com (7.188.26.227) by fraeml741-chm.china.huawei.com (10.206.15.222) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Mon, 25 Apr 2022 12:26:21 +0200
Received: from mscpeml500001.china.huawei.com (7.188.26.142) by mscpeml100001.china.huawei.com (7.188.26.227) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Mon, 25 Apr 2022 13:26:21 +0300
Received: from mscpeml500001.china.huawei.com ([7.188.26.142]) by mscpeml500001.china.huawei.com ([7.188.26.142]) with mapi id 15.01.2375.024; Mon, 25 Apr 2022 13:26:21 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: Erik Auerswald <auerswald@fg-networking.de>
CC: Nick Buraglio <buraglio@es.net>, v6ops list <v6ops@ietf.org>, 6man list <ipv6@ietf.org>
Thread-Topic: [v6ops] ULA precedence [Thoughts about wider operational input]
Thread-Index: AQHYP7p8DxM4kB1RcEyXrx0Fjrd/n6zQoAkAgADaDHCAKqI+gIADMyqAgABbM+CAAJU1AIAAM/jw///hYwCAAEVz4IAAAjOA
Date: Mon, 25 Apr 2022 10:26:21 +0000
Message-ID: <e78a2df8b40f426dad03cf4638cbbc24@huawei.com>
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de> <3bad47a019754cc5a97a33f46da94179@huawei.com> <20220425074816.GA67548@fg-networking.de> <f020b86565e7412e99dc9e1898db3141@huawei.com> <20220425090442.GD67548@fg-networking.de>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.81.198.161]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/G7F00puuF8Pnd9omEyf4hsNgcvk>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Apr 2022 10:26:31 -0000

Hi Erik,
> [EV] Why?
> I do not understand the advantage to populate more prefixes into the 
> host If the site would have many ULA prefixes.

This is required to prefer locally used ULA over IPv4 and possibly
IPv6 GUA, but prefer IPv6 GUA and IPv4 over non-local ULA.
Non-local ULA prefixes are generally not reachable.

[EV] We are talking about complicated things here - I need to think more.
But looks like the statement above is not right.
Because there is no danger that Non-local ULA would be chosen as the source - it was not announced in any PIO on the local link.
Hence, I do not understand what problem you are solving by separate /48 prefixes.
The current FC/7 should be just prioritized - it is enough.
Of course in conjunction with Label=13 check
and the assumption that all routers announce the same PIOs.

Eduard
-----Original Message-----
From: Erik Auerswald [mailto:auerswald@fg-networking.de]
Sent: Monday, April 25, 2022 12:05 PM
To: Vasilenko Eduard <vasilenko.eduard@huawei.com>
Cc: Nick Buraglio <buraglio@es.net>; v6ops list <v6ops@ietf.org>; 6man list <ipv6@ietf.org>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Hi Eduard,

On Mon, Apr 25, 2022 at 07:57:05AM +0000, Vasilenko Eduard wrote:
> Hi Erik,
> See below
> Eduard

I have added the quoting level you omitted to help differentiate who wrote what, and trimmed the message below.

> -----Original Message-----
> From: Erik Auerswald [mailto:auerswald@fg-networking.de]
> Sent: Monday, April 25, 2022 10:48 AM
> > On Sun, Apr 24, 2022 at 08:12:29PM +0000, Vasilenko Eduard wrote:
> > > [...]
> > > 2. Attach a special Label (redundant action because FC/7 already 
> > > has unique Label=13)
> >
> > The different label to differentiate between locally used ULA
> > prefix(es) and the remaining ULA space is intentional.
> 
> [EV] Why?
> I do not understand the advantage to populate more prefixes into the 
> host If the site would have many ULA prefixes.

This is required to prefer locally used ULA over IPv4 and possibly
IPv6 GUA, but prefer IPv6 GUA and IPv4 over non-local ULA.
Non-local ULA prefixes are generally not reachable.

In a special situation, where ULA is used as a replacement of GUA, say a large private network, or a NAT66 setup, ULA should be treated just as GUA, as was done before RFC 6724.  This can be achieved with RFC 6724 compliant systems by changing the fc00::/7 policy table entry to use identical preference and label as the ::/0 entry.
This expresses the local policy to treat ULA identical to GUA, just as private IPv4 space is treated identical to public IPv6 space for address selection.

> > > Imagine the situation where only one router on the link announces 
> > > ULA PIO, but the other one - GUA PIO.  (Routers are not in sync 
> > > for announcements).

It seems that RFC 8028 as mentioned by Brian would provide a solution for this.

> > Using different first hop gateways for GUA and ULA is another 
> > problem.  It would be nice if hosts would (optionally) not consider 
> > a gateway announcing a ULA prefix as default gateway, but only for 
> > ULA reachability.
> 
> [EV] Nope. It is better to revert the logic: decide about the
>      source address first (needed anyway for MHMP) only then to
>      decide about the next-hop.

If a router announcing only a ULA prefix would not be considered as a default router, the host could detect that GUA is not reachable, and fall back to IPv4.  I think this is a different use case from what you have in mind.

Kind regards,
Erik
--
Dipl.-Inform. Erik Auerswald
Gesellschaft für Fundamental Generic Networking mbH
Geschäftsführung: Volker Bauer, Jörg Mayer
Gerichtsstand: Amtsgericht Kaiserslautern - HRB: 3630