Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Erik Auerswald <auerswald@fg-networking.de> Mon, 25 April 2022 08:56 UTC

Return-Path: <auerswald@fg-networking.de>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF6533A1325; Mon, 25 Apr 2022 01:56:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.904
X-Spam-Level:
X-Spam-Status: No, score=-1.904 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OEM6IS1D3WAa; Mon, 25 Apr 2022 01:56:30 -0700 (PDT)
Received: from mailgw1.uni-kl.de (mailgw1.uni-kl.de [IPv6:2001:638:208:120::220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D057D3A1319; Mon, 25 Apr 2022 01:56:29 -0700 (PDT)
Received: from mail.fg-networking.de (mail.fg-networking.de [IPv6:2001:638:208:cd01::23]) by mailgw1.uni-kl.de (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id 23P8uPko045746 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 25 Apr 2022 10:56:25 +0200
Received: from login.fg-networking.de (login.fg-networking.de [IPv6:2001:638:208:cd01::41]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.fg-networking.de (Postfix) with ESMTPS id 528562009B; Mon, 25 Apr 2022 10:56:22 +0200 (CEST)
Received: by login.fg-networking.de (Postfix, from userid 11002) id 46DEC155; Mon, 25 Apr 2022 10:56:22 +0200 (CEST)
Date: Mon, 25 Apr 2022 10:56:22 +0200
From: Erik Auerswald <auerswald@fg-networking.de>
To: Brian Carpenter <brian.e.carpenter@gmail.com>
Cc: v6ops list <v6ops@ietf.org>, 6man list <ipv6@ietf.org>
Message-ID: <20220425085622.GC67548@fg-networking.de>
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de> <3bad47a019754cc5a97a33f46da94179@huawei.com> <20220425074816.GA67548@fg-networking.de> <CANMZLAYTN9n3ScGHnSU65ZPCn239TLxOi1K+hnZJYuTifjRD7g@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CANMZLAYTN9n3ScGHnSU65ZPCn239TLxOi1K+hnZJYuTifjRD7g@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/NDFrewsNBgA8WSVdodF_6e7oX_Y>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Apr 2022 08:56:35 -0000

Hi Brian,

On Mon, Apr 25, 2022 at 08:17:45PM +1200, Brian Carpenter wrote:
> On Mon, 25 Apr 2022, 19:49 Erik Auerswald, <auerswald@fg-networking.de>
> wrote:
> > ....
> >
> > Using different first hop gateways for GUA and ULA is another
> > problem.  It would be nice if hosts would (optionally) not consider
> > a gateway announcing a ULA prefix as default gateway, but only for
> > ULA reachability.
> 
> I think RFC8028 solves that.

Thanks!

The solution from RFC 8028 is fine when using ULA for local connectivity
and GUA for global connectivity, even with different first hop gateways
for GUA and ULA.

I think RFC 8028 section 3.2 paragraph 2 means that if there is only one
first hop gateway announcing ULA prefixes, GUA reachability would still
be assumed, and the first hop gateway used as default gateway.

It does not prevent the host from attempting to reach a GUA destination
using a ULA source address if the only first hop gateway only announces
ULA prefixes.  This is also fine, because RFC 6724 specifies to prefer
IPv4 over ULA, allowing fall-back to IPv4 for global connectivity, if
available.  (All this does not matter without any global connectivity).

To be explicit: If we could have configured the first hop routers in a
way that both announced a ULA prefix on-link and prevented the hosts
from using the router as default gateway, but still for ULA
connectivity, that would have been a possible workaround for lack of RFC
6724 support in the hosts back then.  The RFC 6724 solution would have
worked, too.

Kind regards,
Erik
-- 
Dipl.-Inform. Erik Auerswald
Gesellschaft für Fundamental Generic Networking mbH
Geschäftsführung: Volker Bauer, Jörg Mayer
Gerichtsstand: Amtsgericht Kaiserslautern - HRB: 3630