Re: [v6ops] ULA draft revision #2 Regarding isolated networks

Tim Chown <tjc@ecs.soton.ac.uk> Wed, 28 May 2014 09:51 UTC

Return-Path: <tjc@ecs.soton.ac.uk>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D33031A08A7 for <v6ops@ietfa.amsl.com>; Wed, 28 May 2014 02:51:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.871
X-Spam-Level:
X-Spam-Status: No, score=-3.871 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_I_LETTER=-2, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651, SPF_NEUTRAL=0.779] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fuY2LRBQHJqR for <v6ops@ietfa.amsl.com>; Wed, 28 May 2014 02:50:59 -0700 (PDT)
Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [IPv6:2001:630:d0:f102::25e]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2286B1A007D for <v6ops@ietf.org>; Wed, 28 May 2014 02:50:58 -0700 (PDT)
Received: from falcon.ecs.soton.ac.uk (localhost.ecs.soton.ac.uk [127.0.0.1]) by falcon.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id s4S9osdV021221; Wed, 28 May 2014 10:50:54 +0100
X-DKIM: Sendmail DKIM Filter v2.8.2 falcon.ecs.soton.ac.uk s4S9osdV021221
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=ecs.soton.ac.uk; s=201304; t=1401270654; bh=DwB5uSz1Dd9A/FnK8A8gRSTTS0o=; h=Mime-Version:Subject:From:In-Reply-To:Date:Cc:References:To; b=folAKDnlqUnrzeinh691suH6lfZmBzdMWy7o1ydgRT7w9JD3MqfZup5QE0pIywBuU nikvw+IwqKLwddAjIPGP/7ePVGGc+wciQL4vGAdVP+bW6lfVw+4RqGfQLsnmz0c2+Z W9SQnmk6vXW8BjLCjMDK0QNZMt0P9zqibvs7ro04=
Received: from gander.ecs.soton.ac.uk ([2001:630:d0:f102:250:56ff:fea0:401]) by falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [2001:630:d0:f102:250:56ff:fea0:68da]) envelope-from <tjc@ecs.soton.ac.uk> with ESMTP (valid=N/A) id q4RAos0546020208vY ret-id none; Wed, 28 May 2014 10:50:54 +0100
Received: from [IPv6:2001:630:d0:ed04:99c4:f52:b5cc:ec1e] ([IPv6:2001:630:d0:ed04:99c4:f52:b5cc:ec1e]) (authenticated bits=0) by gander.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id s4S9orqS001253 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 28 May 2014 10:50:54 +0100
Content-Type: multipart/alternative; boundary="Apple-Mail=_C29353C5-ABD0-464D-A4A5-14721AFC3A2B"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\))
From: Tim Chown <tjc@ecs.soton.ac.uk>
In-Reply-To: <m1WpYve-0000BIC@stereo.hq.phicoh.net>
Date: Wed, 28 May 2014 10:50:53 +0100
Message-ID: <EMEW3|ffdf4cc0b1b6ee5e7781050a15442300q4RAos03tjc|ecs.soton.ac.uk|FC2BD3AF-FDF3-47BC-8E3C-B9E50BFF90E5@ecs.soton.ac.uk>
References: <8AE0F17B87264D4CAC7DE0AA6C406F453D8B6B9A@nkgeml506-mbx.china.huawei.com> <m261ks7xww.wl%randy@psg.com> <53840070.90801@gmail.com> <m2y4xn7wep.wl%randy@psg.com> <53840723.8010606@gmail.com> <CAKD1Yr1O_poMR200sjU=ttRvGaeQRkC1ZfXC0Ok4uQxdq3K=NQ@mail.gmail.com> <m2mwe37tbn.wl%randy@psg.com> <CAKD1Yr2t3-vxuG=iDi4biBNFpJwuzuHgfpB74i_uydWWRV7qZg@mail.gmail.com> <8AE0F17B87264D4CAC7DE0AA6C406F453D8B6E02@nkgeml506-mbx.china.huawei.com> <m2fvjv7q4h.wl%randy@psg.com> <m1WpDcc-0000BMC@stereo.hq.phicoh.net> <43BB867C-7BCA-45F6-8ADC-A49B34D6C0DC@nominum.com> <m1WpHrp-0000BQC@stereo.hq.phicoh.net> <9DB71B37-999E-4F7F-A7DA-6B243574E818@nominum.com> <9255C827-9F28-4E4E-9A2E-A678ADFACDAF@steffann.nl> <53854E87.9020500@gmail.com> <m2d2ey4mx4.wl%randy@psg.com> <5385651B.7090604@gmail.com> <m1WpYve-0000BIC@stereo.hq.phicoh.net> <FC2BD3AF-FDF3-47BC-8E3C-B9E50BFF90E5@ecs.soton.ac.uk>
To: Philip Homburg <pch-v6ops-3a@u-1.phicoh.com>
X-Mailer: Apple Mail (2.1878.2)
X-smtpf-Report: sid=q4RAos054602020800; tid=q4RAos0546020208vY; client=relay,forged,no_ptr,ipv6; mail=; rcpt=; nrcpt=2:0; fails=0
X-ECS-MailScanner-Information: Please contact the ISP for more information
X-ECS-MailScanner-ID: s4S9osdV021221
X-ECS-MailScanner: Found to be clean
X-ECS-MailScanner-From: tjc@ecs.soton.ac.uk
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/LS_Ce-Cx1J86diXLigERAswl6ak
Cc: v6ops WG <v6ops@ietf.org>
Subject: Re: [v6ops] ULA draft revision #2 Regarding isolated networks
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 May 2014 09:51:02 -0000

On 28 May 2014, at 09:09, Philip Homburg <pch-v6ops-3a@u-1.phicoh.com> wrote:

> In your letter dated Wed, 28 May 2014 16:24:59 +1200 you wrote:
>> I understand the problem. Users are idiots, including us when we
>> act as users. I am not arguing that ULAs will prevent all operational
>> problems caused by private addressing. I am only arguing that there will
>> be private addressing and that ULAs will cause fewer problems than
>> RFC1918-for-IPv6 would.
> 
> Maybe we can keep a bit of context around what scenario we are talking about.
> 
> Say:
> 1) Small organisation, doesn't get PI space, has to renumber when moving to a different
>   ISP. The IPv4 solution is to use NAT. Maybe we can do better for IPv6. Probably
>   collisions of ULA space during a merger are not a big deal.
> 2) Bigger organisation, does have PI space and has a more or less homogenous network.
>   No real need for ULA.
> 3) Big organisation, wants to have a secret network that only communicates through
>   application layer gateways. Should be able to pick a proper ULA if they need one.
>   Otherwise, though luck. No real need for ULA. It may make source address selection
>   a bit easier, but that is only a small part of the puzzle.
> 
> I think the only interesting case is 1). Whether or not we make renumbering easy enough
> that they don't do NAT is an open question. A large part of that is in software
> configuration: is it possible to store the current prefix in such a way that software
> can easily pick it up.

And we spent two years batting that topic around in 6renum, for site/enterprise networks (not targeting homenets).

IPv6 network renumbering on the wire = reasonably straight forward (Fred’s work is now 10 years old)
The complexity is all the places addresses are embedded in interesting ways, in your sites and sites you speak to.

Three RFCs emerged, see http://datatracker.ietf.org/wg/6renum/

Tim