Re: [v6ops] Incremental Deployment of IPv6-only Wi-Fi for IETF Meetings

Lee Howard <lee@asgard.org> Mon, 17 July 2017 18:55 UTC

Return-Path: <lee@asgard.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96EDD12EC01 for <v6ops@ietfa.amsl.com>; Mon, 17 Jul 2017 11:55:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.371
X-Spam-Level:
X-Spam-Status: No, score=-2.371 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_FUTURE_03_06=3.027, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iBf4w16pQtjQ for <v6ops@ietfa.amsl.com>; Mon, 17 Jul 2017 11:55:08 -0700 (PDT)
Received: from atl4mhob12.registeredsite.com (atl4mhob12.registeredsite.com [209.17.115.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02B2A127B57 for <v6ops@ietf.org>; Mon, 17 Jul 2017 11:55:07 -0700 (PDT)
Received: from mailpod.hostingplatform.com ([10.30.71.211]) by atl4mhob12.registeredsite.com (8.14.4/8.14.4) with ESMTP id v6HIt4EN012266 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <v6ops@ietf.org>; Mon, 17 Jul 2017 14:55:05 -0400
Received: (qmail 15974 invoked by uid 0); 17 Jul 2017 18:55:04 -0000
X-TCPREMOTEIP: 88.208.89.131
X-Authenticated-UID: lee@asgard.org
Received: from unknown (HELO ?172.20.3.204?) (lee@asgard.org@88.208.89.131) by 0 with ESMTPA; 17 Jul 2017 18:55:04 -0000
User-Agent: Microsoft-MacOutlook/14.7.2.170228
Date: Mon, 17 Jul 2017 20:54:56 -0400
From: Lee Howard <lee@asgard.org>
To: jordi.palet@consulintel.es, IPv6 Ops WG <v6ops@ietf.org>
CC: Randy Bush <randy@psg.com>, Russ Housley <housley@vigilsec.com>, Suresh Krishnan <suresh.krishnan@gmail.com>, Alissa Cooper <alissa@cooperw.in>, Jim Martin <jim@daedelus.com>
Message-ID: <D592D17A.7E500%lee@asgard.org>
Thread-Topic: [v6ops] Incremental Deployment of IPv6-only Wi-Fi for IETF Meetings
References: <7643C1DC-76A3-4652-9BB1-D0D42801F37E@consulintel.es> <CAEqgTWYOe=jWp=zVZNLx6DjKjNpPTYaq2jmjryudrGZHKZNq6g@mail.gmail.com> <A5D0385C-F755-4B44-86D8-6E618E77193F@consulintel.es> <CAPt1N1kroh2cPkTr8HRfNjLTdG0hkC1oQsUZdhQzQA5tA9-xug@mail.gmail.com> <9AF791E9-1E12-425E-93A4-2913E2D18CBA@consulintel.es> <CAPt1N1kU4cpVCsp7W3XNAZupYqjTWVH+BNp9bwtznnWD_uP2oQ@mail.gmail.com> <CAEqgTWZzZW0wKggDXjY=-aMfDxzd5-GoRqju1829XwY3aHQuYg@mail.gmail.com> <0FAF1E05-DA4B-47BF-95F7-7EFCD1BED9B0@cable.comcast.com> <42188852-BBEB-4D75-967F-4BED79BBBCAE@consulintel.es> <CAFU7BARahTfH_Uy_t22EthGuFMJ=q-N1zxismNAVkHWWJA-Obw@mail.gmail.com> <CBA23B1B-C5A3-413C-B399-93F537C99015@consulintel.es> <CAFU7BARz_u92NweYkTizT2=q420sBRh11m9bqWO9+aexCi3ANA@mail.gmail.com> <2A639918-C6AC-44B8-8D66-5293EE13A7BD@consulintel.es> <CAFU7BASrxoroJVHwxFpwwBxCUC62_VZXsUGgfDOj6y+KVWk6tw@mail.gmail.com> <CAPt1N1n1dVY-WB6Q6jNUf5=a7K57B4GFR4iDXMYc-6UFR9edNg@mail.gmail.com> <9CDFFE8B-DBEC-4059-8E93-44AEC304E31A@consulintel.es> <45A7CDF3-9832-4944-9D77-95E17EAEDB47@apple.com> <CCD6AC47-F4DD-4405-816D-D9221B0A816B@consulintel.es>
In-Reply-To: <CCD6AC47-F4DD-4405-816D-D9221B0A816B@consulintel.es>
Mime-version: 1.0
Content-type: text/plain; charset="UTF-8"
Content-transfer-encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Jbo3nxBeU9Vri5gll4Ky9_0TfPY>
Subject: Re: [v6ops] Incremental Deployment of IPv6-only Wi-Fi for IETF Meetings
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Jul 2017 18:55:10 -0000


On 7/17/17, 10:27 AM, "v6ops on behalf of JORDI PALET MARTINEZ"
<v6ops-bounces@ietf.org on behalf of jordi.palet@consulintel.es> wrote:

>
>4) The result is the same, but people don’t need to spend time. We
>configure the Jool so it reports EVERY usage, so we can then process that
>file to detect WHAT was using the CLAT.

Your proposal is to log the 5-tuple of every connection (using the CLAT)
on the IETF network?
Any privacy concerns?

>5) The result is the same as the suggested experiment, but NOT breaking
>anything, not asking the participants to report anything, but having
>BETTER collection of data about what will be broken if the CLAT is not
>there (anything that goes into the CLAT).

I’m not sure that logging the 5-tuple (if that’s what you mean to log)
gives you that information.
For instance, if Outlook for Mac isn’t working, and we don’t know why,
then you may not see anything; the DNS lookup may happen over IPv6, and
OfM barfs without ever sending a packet. At most you’ll see a packet to an
SMTP/POP/IMAP port, but it won’t tell you whether it was the client or the
server that failed.
I’m not sure how to know of VPN failures where the DNS goes through the
VPN. 

>
>
>Real world networks (end-users and corporate which are not related to
>IETF), will not (in 3-5 years), be willing to replace all the apps and
>devices that fail with just NAT64. They need a CLAT or similar support in
>their LANs.

I don’t know how many corporate apps/devices fail with IPv6 + NAT64. Maybe
some legacy business systems, but that’s not the case for all, and won’t
be in 3-5 years. Even if it is, it may well make more sense for an
enterprise to use IPv6 on client networks, and surround legacy systems
with NAT64.

No, I don’t expect 90% of users will be doing IPv6-only in their homes or
corporate LANs in 3 years, but I wouldn’t be surprised if it’s 10-20%.

Lee