Re: [v6ops] [IPv6] draft-ietf-6man-rfc6724-update might break current ULA+IPv4 hostnames

Brian E Carpenter <brian.e.carpenter@gmail.com> Sun, 12 November 2023 20:47 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6DAFC15155B for <v6ops@ietfa.amsl.com>; Sun, 12 Nov 2023 12:47:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.197
X-Spam-Level:
X-Spam-Status: No, score=-2.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.091, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id leKVTWvnnWPn for <v6ops@ietfa.amsl.com>; Sun, 12 Nov 2023 12:47:29 -0800 (PST)
Received: from mail-oi1-x229.google.com (mail-oi1-x229.google.com [IPv6:2607:f8b0:4864:20::229]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19DD3C14CE51 for <v6ops@ietf.org>; Sun, 12 Nov 2023 12:47:28 -0800 (PST)
Received: by mail-oi1-x229.google.com with SMTP id 5614622812f47-3b3ec45d6e9so2395741b6e.0 for <v6ops@ietf.org>; Sun, 12 Nov 2023 12:47:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1699822048; x=1700426848; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=4an9jWbYQ3fIRu+SwaeHWj3lUA8BQG9tqnZTNy5aPu0=; b=NT9rfiwicgA6RZWwkEVbW5xgKpXnbSJXURd3JQGNbq3rtCAOp+pkyIn3nrsJdmeZIR zSvFdgE4Ar75yIRURlWEuJOStQnseV9kqpTnEcONLgQNI8GakQVls4ZuVwZdWFRgwvjA mtg9Ed3jOx54bVmBDLL7m3Tv7Vqa0qJvSHyiJBdd3pQDLlhfps+cxDNvsbxWiITW/99E ESI5VcXQbrzfDktCB6x0BpmEH+fOB1WDxjGaYI5wCb3cTeU4PoEc4DgtxxbqEf+sxndN 9vmT/l3751WhAot6wlH3fKzYgEDSxKXej9QCWteIQVZMA41vf8nvkAyXlo07Nam33ySa 5kYg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699822048; x=1700426848; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=4an9jWbYQ3fIRu+SwaeHWj3lUA8BQG9tqnZTNy5aPu0=; b=qoee0zfvio9v7pz7N+TFYnZcj71Q0VEEfGPvtJhnuLLyFXv4XlYe6jZ3RfZWwrF8fV W640qW/+WjVcWXRBY77Pudvl1qKJhQnduJB2WR3jx47A1/D71iZM/SExQWM8fiuoZQiz ENMluXbGFBcGnVNopy2dh5DA4SwsPTOfw4es3BFwyXwdU0NjJvs5qqrWnq0DnHZucECr U5Z0iZ6AxxzWOWg2yzlP/MPXJ//C47LtSmHd3S9zwomnTCXHC6vwc/co1L+W2DElIr9p 9k/rFNlBraICAgp/SD3yKtvJTxQZTBpIZC3aeRaSc5j5blhyI2lKJDDBbwolLBHq1CZL R7mQ==
X-Gm-Message-State: AOJu0YwfRhiskZg9nxWBPCes+JkJLdTFEdNgD5/X0b0hlJXF0VGjS0xm N9ucse/KGVjSkJUu0RTGy8E=
X-Google-Smtp-Source: AGHT+IEaeCDBjqkclD28TxkzehRdcLumHFmucalOz0W4MwQvLpW/hcdJedZsNOng7WRYutiyW3odnA==
X-Received: by 2002:a05:6808:19a2:b0:3b6:cbb6:36b8 with SMTP id bj34-20020a05680819a200b003b6cbb636b8mr7927391oib.34.1699822047898; Sun, 12 Nov 2023 12:47:27 -0800 (PST)
Received: from ?IPV6:2406:e003:110d:5301:8cb6:a2c:7461:4047? ([2406:e003:110d:5301:8cb6:a2c:7461:4047]) by smtp.gmail.com with ESMTPSA id 17-20020aa79251000000b0069346777241sm2867379pfp.97.2023.11.12.12.47.25 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 12 Nov 2023 12:47:27 -0800 (PST)
Message-ID: <4954727d-b95e-5225-6356-7670656f09f2@gmail.com>
Date: Mon, 13 Nov 2023 09:47:22 +1300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Content-Language: en-US
To: David Farmer <farmer@umn.edu>, Ole Trøan <otroan@employees.org>
Cc: IPv6 Ops WG <v6ops@ietf.org>
References: <CAO42Z2ypqtQT85iccM0N59885Zp+o+X-Lx34CjvaAf+JH9go3w@mail.gmail.com> <52796575-6400-4017-BA5C-4746B187B285@employees.org> <CAN-Dau2rfT8AmWzsLmHT0scB5vsLF4X3E+cprX8shwaxJAwM2w@mail.gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <CAN-Dau2rfT8AmWzsLmHT0scB5vsLF4X3E+cprX8shwaxJAwM2w@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/V2OSRdrNJYphtm1OQFFdFWQJ44s>
Subject: Re: [v6ops] [IPv6] draft-ietf-6man-rfc6724-update might break current ULA+IPv4 hostnames
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Nov 2023 20:47:32 -0000

On 13-Nov-23 08:48, David Farmer wrote:
> Ole,
> 
> On Sun, Nov 12, 2023 at 8:37 AM Ole Trøan <otroan=40employees.org@dmarc.ietf.org <mailto:40employees.org@dmarc.ietf.org>> wrote:
> 
>     Matk,
> 
>      > On 12 Nov 2023, at 12:19, Mark Smith <markzzzsmith@gmail.com <mailto:markzzzsmith@gmail.com>> wrote:
>      >
>      > Normally, Host A's ULA address should have a path through the local
>      > network to Host B's ULA address and vice versa, so Host A and B's ULA
>      > addresses should be preferred over Host A and Host B's GUA addresses.
> 
>     Come to think about it. Wouldn’t RFC6724 also fail in the MPMH case?
> 
> 
> Yes, it will fail in some cases but succeed in others.

That's because the model is fundamentally broken - I mean the model of
picking a set of destination addresses without considering source addresses.
We *cannot* fix all cases without changing that model - to a large
extent Happy Eyeballs is an ambulance at the bottom of the cliff.

If we want to fix this problem properly, let's just advance rfc6724-update
ASAP as a mitigation, and then tackle the fundamental problem caused by
getaddrinfo().

     Brian
  
> 
>     Source host A with GUA1+GUA2 (from ISPA AND ISPB)
>     And destination host B with GUA3.
> 
>     6724 will return the source address with the longest matching prefix to GUA3. So only one of these:
> 
>     {GUA1, GUA3}
>     {GUA2, GUA3}
> 
>     The SA determines exit path, so depending on which ISP is down. Communication will fail.
>     Redundancy is the whole point of multi-homing…
> 
> 
> If there is a soft failure of the provider of the selected SA, there will be a failure. If there is a hard enough failure to cause the withdrawal of one of the RAs, then redundancy will work.
> 
>     The other case I am concerned about is the one where within a single network multiple routers make up their own ULA and use that to assign addresses to directly connected hosts but do not participate in routing. We then have multiple disjointed ULA domains within the network. With RFC7078 and SNAC routers I am not sure if we can avoid that. This would possibly have been cleaner with site-locals.
> 
> 
> In many cases you refer to, the disjoint ULA domains are likely to be ULA-only domains. If there are ULA-only domains, there will only be ULA destinations to try, and they will be reachable or not. When we mix ULA, GUA, and IPv4, things get really complicated. ULA-only domains should be relatively straightforward.
> Thanks
> 
> -- 
> ===============================================
> David Farmer Email:farmer@umn.edu <mailto:Email%3Afarmer@umn.edu>
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops