Re: [v6ops] Operational Consensus on deployment

Owen DeLong <owen@delong.com> Tue, 05 August 2014 15:00 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF5BE1B2864 for <v6ops@ietfa.amsl.com>; Tue, 5 Aug 2014 08:00:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.992
X-Spam-Level:
X-Spam-Status: No, score=-0.992 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 78QVFzQD6VCd for <v6ops@ietfa.amsl.com>; Tue, 5 Aug 2014 08:00:12 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id A576F1B27F6 for <v6ops@ietf.org>; Tue, 5 Aug 2014 08:00:12 -0700 (PDT)
Received: from [10.0.0.11] (ip72-199-16-177.sd.sd.cox.net [72.199.16.177]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.2) with ESMTP id s75Ev8DY004832 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Tue, 5 Aug 2014 07:57:09 -0700
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com s75Ev8DY004832
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1407250630; bh=vVgo202Bmbsx+V46IMpPJKD5AUU=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=pRIBAdmoqtJt8fsINkyo5My2vbLBrOXeYCRUwB5PzvhZkSkcDsjyMKARS2wpVjxe6 XdAMkBnRVzaX+WvCi6swPvYi24xrkL6oXLIrLNuDM0orwh0b3tprZQ3IONt9DvFLE8 Bv53Inn81ubk9MiQcxqhAlh+XPjs+ZBZIJz5nVAc=
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <53E06AC9.9010908@fud.no>
Date: Tue, 05 Aug 2014 07:57:04 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <4F7D76F6-BD81-453B-94DC-A3C3DFF68505@delong.com>
References: <256EAE0B-5C11-42C7-BCA1-CEC7EE6713A7@cisco.com> <53DFD634.4020304@fud.no> <DE860EBC-171E-46E7-A3B6-5E8B79A453CC@cisco.com> <53DFEC6C.3010707@gmail.com> <CAD6AjGRUWxT5XiNxMi_S5VgYtGMLb_FVHXN-ZfGpcY=geix15g@mail.gmail.com> <53E06AC9.9010908@fud.no>
To: Tore Anderson <tore@fud.no>
X-Mailer: Apple Mail (2.1878.6)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [192.159.10.2]); Tue, 05 Aug 2014 07:57:10 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/SUBBK2iaYFN8o6lfb_IuS78C9Jg
Cc: IPv6 Ops WG <v6ops@ietf.org>
Subject: Re: [v6ops] Operational Consensus on deployment
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Aug 2014 15:00:18 -0000

> The thing is, if you've built your infrastructure on IPv4, removing it
> is going to be a royal pain in the arse. Even if all the IPv4 users have
> left the public internet, if your application server speaks to your
> database server over IPv4, and the database server speaks to the iSCSI
> array over IPv4, and so on and so on, then you're simply not in a
> position to easily shut IPv4 off.

Yes and no…

Upgrading your application to be protocol agnostic about its connection
to the database server shouldn’t be very difficult these days.

Once that’s done, getting your database server to speak dual stack also
shouldn’t be very hard (you’ve been talking to your database vendor about
this for at least a couple of years now, right?).

Surely your iSCSI clients and servers are also on their way to being protocol
agnostic since you’ve been having those discussions with the appropriate vendors
as well, right?

Seems to me that your database server should speak to the iSCSI array
via configured hostname(s) and that if the client and server are dual-stack
capable, then adding IPv6 addresses to interfaces and AAAA records to
DNS should be about all that is required for the communication to move
relatively seamlessly from IPv4 to IPv6.

Likewise with your client <-> database communication.

Once that’s done, it shouldn’t be too hard to remove the A records, wait for
IPv4 to stop carrying traffic (or pick a maintenance window), and drop the
IPv4 addresses from the interfaces (with appropriate regard for quiescence
and/or restart of the various services/clients).

All of this should be achievable with 5 or fewer maintenance windows (2 or
fewer if your software is up to snuff).

Owen