Re: [v6ops] ULA draft revision #2 Regarding isolated networks

Owen DeLong <owen@delong.com> Wed, 28 May 2014 15:35 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 400901A03DE for <v6ops@ietfa.amsl.com>; Wed, 28 May 2014 08:35:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.641
X-Spam-Level:
X-Spam-Status: No, score=-1.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, LOTS_OF_MONEY=0.001, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q9NdEd3H4JiB for <v6ops@ietfa.amsl.com>; Wed, 28 May 2014 08:35:16 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id 452E31A0366 for <v6ops@ietf.org>; Wed, 28 May 2014 08:35:16 -0700 (PDT)
Received: from [IPv6:2620::930:0:225:ff:fe44:af17] ([IPv6:2620:0:930:0:225:ff:fe44:af17]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.2) with ESMTP id s4SFTDo8009533 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Wed, 28 May 2014 08:29:14 -0700
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com s4SFTDo8009533
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1401290954; bh=OUXDhGQhZJyygo4UB5mOahCK8io=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=aJo3UOboJRIps7kl5nvA0tN+tlZt6h643Bg90+F8X92N4xDDHPVG4rkVF0UYVPPS3 okRH7JeszXHeBbr0zw2lAYrCcCXiDbbAE5xk2bCQ9Lopp7nLTQHc0BBhRlG3Z2cGhN 6FRzImAceS3mJQjqS2M1G5e+YNPyiBYx1xhuIs98=
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <5385AA97.1050207@fud.no>
Date: Wed, 28 May 2014 08:32:36 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <6740CB67-2CE3-4F41-A513-971C3307975D@delong.com>
References: <8AE0F17B87264D4CAC7DE0AA6C406F453D8B6B9A@nkgeml506-mbx.china.huawei.com> <m261ks7xww.wl%randy@psg.com> <53840070.90801@gmail.com> <m2y4xn7wep.wl%randy@psg.com> <53840723.8010606@gmail.com> <CAKD1Yr1O_poMR200sjU=ttRvGaeQRkC1ZfXC0Ok4uQxdq3K=NQ@mail.gmail.com> <m2mwe37tbn.wl%randy@psg.com> <CAKD1Yr2t3-vxuG=iDi4biBNFpJwuzuHgfpB74i_uydWWRV7qZg@mail.gmail.com> <8AE0F17B87264D4CAC7DE0AA6C406F453D8B6E02@nkgeml506-mbx.china.huawei.com> <m2fvjv7q4h.wl%randy@psg.com> <m1WpDcc-0000BMC@stereo.hq.phicoh.net> <43BB867C-7BCA-45F6-8ADC-A49B34D6C0DC@nominum.com> <5384937A.90409@foobar.org> <m2iooq4oqi.wl%randy@psg.com> <5385762E.5020901@dougbarton.us> <5385AA97.1050207@fud.no>
To: Tore Anderson <tore@fud.no>
X-Mailer: Apple Mail (2.1874)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [IPv6:2620:0:930::200:2]); Wed, 28 May 2014 08:29:14 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/QNPycYODU1xyFw3NQvO1KyYdTAA
Cc: V6 Ops List <v6ops@ietf.org>
Subject: Re: [v6ops] ULA draft revision #2 Regarding isolated networks
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 May 2014 15:35:18 -0000

On May 28, 2014, at 2:21 AM, Tore Anderson <tore@fud.no> wrote:

> * Doug Barton
> 
>> We have a substantial number of medium-sized enterprises which share the 
>> following characteristics:
>> 
>> 1. They are large enough to have some internal resources that need 
>> addressing (printers, file servers, maybe a web site or two)
>> 
>> 2. They are small enough that PI space and their own ASN are not practical
> 
> You don’t need an ASN to use PI space.

Except possibly in the APNIC region due to previously discussed very high fees,
I’m not sure why you think PI space is not practical for small organizations. I’ve
set up multi homed connections for a number of small businesses, including even
some one-man operations with gross revenues under US $250,000 annually.

> 
>> 3. Some of them want to have multiple service providers, either for 
>> failover or traffic shaping
>> 

Which makes an ASN and a PI prefix the easiest tactic possible.
(Even easier than NAT, really.)

>> 4. They don't want to have to renumber all of their internal resources 
>> when they change providers
>> 
>> What's your solution for them?
> 
> We have a few customers in the same situation. So we obtained a PI
> prefix for them, which costs next to nothing in the RIPE region at
> least, and advertise the prefix on their behalf (and in the cases where
> there's a second upstream, the second upstream does the same). Works
> perfectly well, and is much less complex than anything solution
> involving ULA, NAT, multiple prefixes on the hosts, or whatever. The
> customer just gets a bunch of addresses he can use in perpetuity.

Exactly, but it does have the drawback of black holing traffic in certain
failure modes. If you really want to avoid an ASN (not sure why), it is
possible to do this using a private ASN that is stripped off by the
upstream provider(s), but using a real ASN is much simpler.

Owen