Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Lorenzo Colitti <lorenzo@google.com> Mon, 25 April 2022 00:16 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 293AA3A1C31 for <v6ops@ietfa.amsl.com>; Sun, 24 Apr 2022 17:16:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.606
X-Spam-Level:
X-Spam-Status: No, score=-17.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01smfg0D7JLW for <v6ops@ietfa.amsl.com>; Sun, 24 Apr 2022 17:16:28 -0700 (PDT)
Received: from mail-vs1-xe35.google.com (mail-vs1-xe35.google.com [IPv6:2607:f8b0:4864:20::e35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DE683A1C2E for <v6ops@ietf.org>; Sun, 24 Apr 2022 17:16:27 -0700 (PDT)
Received: by mail-vs1-xe35.google.com with SMTP id j2so2099737vsp.5 for <v6ops@ietf.org>; Sun, 24 Apr 2022 17:16:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=GnnhIKkT96B807IKwMQXfYLTtGCZQ6lhseFSt41Dn4E=; b=IBdV64GDrYAdjZyO/C0uJQdPIStFohsH3WnA7oM+BVWQuDbVp0OFqVF9i6KwCZ9xUG GiwX7KkakT/15qj/Ek1psls4C8YCIOoPY8Xr8tbVQhFKNrR+Jv2t5IcBHwNdyuEh6ayD gQBvxqGbFNqrzH5Ya0VJK08Ua37TSgEY6ywqVE5MjBZNaMc6mI8acxjDKk1Gu1nOsUEc f26zTKsYFI9xRCVSxOioQUrHAR50WTPzaukztMim6XugIIVjZDMDQpo1KxM8genhzHbT S5UdnUR9N+R+coB3AtTTCxJOvSkFDzFWO09TV0zP3vWhW94biNLIqf0CrBxHToiM6EEE 9tHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=GnnhIKkT96B807IKwMQXfYLTtGCZQ6lhseFSt41Dn4E=; b=AoCqdYF2t5RbwVnxYeZnsi40CoAAzVIJO2kENzvAUZ0l8cuo01KaarpPmhRaqoyaf5 OSQFA7XOEG8tEedhSXq6hUt+fpAGBqM7AQ6NXNtViK84Sfxw/NZncCOJdDVQJ6ZcuT3R cpGrv7j8k3RQWRJHdCjGVz0VhVlo/qfHAc+INi8473E5ODJojDAU1eOR0ICu9Nl92i6h JXtH3YwJ/ytJfseL2sR2v83R91hAPG79F+BwTj7VarJ2woBIrYdjXPuDf3tAbMMUu2mK GV00z3GFRfAF1xnpdlhPY2F4yGVIO2omTm1W1oy6/uQn3GteVZ3riF9hLd1RjogABysO WWFQ==
X-Gm-Message-State: AOAM533JNec+TtusOZ3zaoAF1ZETTBb6LNvXReJIy/W5zHq939D75V8K byciU0OCItMj9Ju+UkN9anAYYXGR/V6kSdx6LmyNDBxWa9pItw==
X-Google-Smtp-Source: ABdhPJwz9M1HPUG8utPaVqbpnOEkM4439GUGiPqZKbGHmQKLgR4GFD039PimFnjajCiisFSMDDrywrde5JmfHuFUwtE=
X-Received: by 2002:a05:6102:3a48:b0:32c:c8d9:cea6 with SMTP id c8-20020a0561023a4800b0032cc8d9cea6mr779977vsu.41.1650845786444; Sun, 24 Apr 2022 17:16:26 -0700 (PDT)
MIME-Version: 1.0
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de>
In-Reply-To: <20220424172743.GA218999@fg-networking.de>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Mon, 25 Apr 2022 09:16:14 +0900
Message-ID: <CAKD1Yr1v0Tkh+pWD-ts=PL3gZf7Qj6OHW6Cuvj8iGcSSMibjew@mail.gmail.com>
To: Erik Auerswald <auerswald@fg-networking.de>, Ted Lemon <elemon@apple.com>
Cc: Nick Buraglio <buraglio@es.net>, v6ops list <v6ops@ietf.org>, 6man list <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ae845b05dd6f7c62"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/Q4knLXjdDK4Gf5FnnBm_F46tfrc>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Apr 2022 00:16:33 -0000

On Mon, Apr 25, 2022 at 2:28 AM Erik Auerswald <auerswald@fg-networking.de>
wrote:

>  "Since ULAs are defined to have a /48 site prefix, an implementation
>   might choose to add such a row automatically on a machine with
>   a ULA."
>
> The result is that only the local ULA prefix, i.e., exactly the
> local IPv6 addresses, are preferred over IPv4 (and IPv6 GUA).
> This should be exactly what is needed to use ULA addresses inside
> an organization, or for a lab.
> [...]
> Implementing the non-normative suggestion from Section 10.6 of RFC
> 6724 would in all likelihood result in making ULA usable for local
> tests and even first steps in deploying IPv6.  ULA addresses would
> only be used locally.  Existing IPv4 based Internet access would not
> be impaired by adding IPv6 ULA.
>

That does seem like it might make ULA more useful, yes.

Additionally, maybe we could clarify that the longest-prefix match rule
does not apply to ULAs outside the same /48? I think that would fix the
issue observed by +Ted Lemon <elemon@apple.com> in home networks:
https://datatracker.ietf.org/meeting/113/materials/slides-113-6man-source-address-selection-for-foreign-ulas-00
.


> In order to keep IPv6 deployment similar to IPv4, IPv6 NAT could be
> considered.  To make this work as intended, the address selection
> policy table could be adjusted to contain the local ULA prefix
> with precedence greater or equal to GUA and the same label as GUA.
>

This seems like it would encourage the use of IPv6 NAT. I think there is
reasonably strong consensus within the IETF that that is not the right way
to go, because it pushes problems on to application developers. This adds
costs for NAT traversal software development and maintenance, and requires
devices to implement NAT keepalives, increasing battery usage.