Re: [v6ops] IPv6 link-local and URLs @ IETF119

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 19 March 2024 01:35 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C74A3C151095 for <v6ops@ietfa.amsl.com>; Mon, 18 Mar 2024 18:35:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.199
X-Spam-Level:
X-Spam-Status: No, score=-7.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.091, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3xKAk3Po8Re5 for <v6ops@ietfa.amsl.com>; Mon, 18 Mar 2024 18:35:42 -0700 (PDT)
Received: from mail-pf1-x435.google.com (mail-pf1-x435.google.com [IPv6:2607:f8b0:4864:20::435]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A274C14F69C for <v6ops@ietf.org>; Mon, 18 Mar 2024 18:35:42 -0700 (PDT)
Received: by mail-pf1-x435.google.com with SMTP id d2e1a72fcca58-6e6b22af648so4329760b3a.0 for <v6ops@ietf.org>; Mon, 18 Mar 2024 18:35:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710812141; x=1711416941; darn=ietf.org; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=wCPwYNIuVSzZbQQmv6DsuLIrqh7Kx8cX3HkzZ1Ag/Ps=; b=VPFmPu9Se/Ap/l4kEw6xsmHbzW0ZaRhk0OpMRLHXpE0bMM6lJdHHDpYrVaOwQ8LTA9 Z5h9yBZmndVlHVXXhpxEPjJkKUmLN5RvNrTCEUaSHFCgjL/6KtdAM1Ylj6gI9Ra5Klxn 3IhJA3sEH4MhHmWoCkwjzfOfNzqE8TJswDpPW6aN/NdLS4LImlWFmtyJev3UR+pFlOSl +xeR4JADmjoSLS5lR1DT/FEB/PGz/I+clbEI7x06+S3NiSTvRuGNUx8rzrv85svDa+Y8 bpvN6XM57NGdSI4veKYW3r9HTPYGNOyfNLxhxyhDkkKeww98XG3NfPGq5++14/uBeble iz0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710812141; x=1711416941; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=wCPwYNIuVSzZbQQmv6DsuLIrqh7Kx8cX3HkzZ1Ag/Ps=; b=geEh+9ZGditcxe9wmjWSkji0FJlR7y09/3VrzVOgOqawo9+dl9cxPr3Gzm23NhIvlF k/a9SJ7Y9qIh1MM1sQd9O50NFXAIU6gVHe05bUHO2d/8VIQQ8UoytSh8fGufNBKGRt3b 3x8wJAlxQaH9ZN6M//qeT+xOBbg3wflL8Qo2S7arTYxvq+ipr0YfwXv6l3zzGMcbd6Uc d5HUSLwuRSidtdSEMX4xZzGJ/zFjWYZGPd1wQgd5Sv/mv6F5SOIbYScXuR5Z3jrp5MQH GbWKC0KN9NfN6vqQJuQd7T55P0c/Qgd749VgsOrqlp3FT7Ea1TdtTX+gVeiwn7y0aTxE bYbg==
X-Forwarded-Encrypted: i=1; AJvYcCUNBMgTROHh3UQRo9qjz5TgIhR9ogYRdwJlzCkm5fu/rZHWvVNESdKoCtqTnVi43qTqcsbPduCNSygwEmLVTw==
X-Gm-Message-State: AOJu0YwL/CRhGRbpQUP8OtAxaSMnMzU9wdjLynHFvnSVo+6OUQ5tFZYk Y9VOsQzelMlYo8DYLyQ7lhSPLGpC6/IIFtO5BhKhn6rNvwyQqI6e
X-Google-Smtp-Source: AGHT+IGcj49Sy7tW9YL2pz9AxsTsCrJWiqcWXDiPHDUDzm/CIAHr60UdkGS3PW3vSBkgS5MXQ5XEtw==
X-Received: by 2002:a05:6a20:2d11:b0:1a3:6644:df05 with SMTP id g17-20020a056a202d1100b001a36644df05mr1975714pzl.16.1710812140913; Mon, 18 Mar 2024 18:35:40 -0700 (PDT)
Received: from ?IPV6:2404:4400:541d:a600:44b7:2c2e:2bc6:8707? ([2404:4400:541d:a600:44b7:2c2e:2bc6:8707]) by smtp.gmail.com with ESMTPSA id j6-20020a63b606000000b005dc4b562f6csm6770582pgf.3.2024.03.18.18.35.38 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 18 Mar 2024 18:35:40 -0700 (PDT)
Message-ID: <197eef76-ee44-9697-67f2-685aa7649284@gmail.com>
Date: Tue, 19 Mar 2024 14:35:36 +1300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Content-Language: en-US
To: Karsten Walther <karsten.walther@perinet.io>, Toerless Eckert <tte@cs.fau.de>, "v6ops@ietf.org" <v6ops@ietf.org>
Cc: "dschinazi.ietf@gmail.com" <dschinazi.ietf@gmail.com>, "superuser@gmail.com" <superuser@gmail.com>
References: <ZfjN-XGXZ599sxK3@faui48e.informatik.uni-erlangen.de> <AM0PR02MB577718E04E4FEDA36E2B66FB882D2@AM0PR02MB5777.eurprd02.prod.outlook.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <AM0PR02MB577718E04E4FEDA36E2B66FB882D2@AM0PR02MB5777.eurprd02.prod.outlook.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/VYTYZltp0TgBsKKZmmQfXhZC_wk>
Subject: Re: [v6ops] IPv6 link-local and URLs @ IETF119
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Mar 2024 01:35:42 -0000

On 19-Mar-24 13:25, Karsten Walther wrote:
> Dear v6ops,
> 
> I like that there is a discussion running on the zone name, since this is a constant pain for us in the last years with our IoT devices (virtual ones aka containers as well as physical IoT devices.
> 
> So my take on this:
> 
> For me a zone name shall never be part of an URL, because it is an information, which is valid on a certain machine only, while an URL should be usable by any machine in a network. In my understanding it defines a location and not how a certain program can reach it.

That is in fact the model in RFC6874, which no browser supports, by saying that the zone ID should be removed before the URL goes out on the wire.

> However, I can understand that a certain user may wants to select a local interface to use e.g. for troubleshooting, thus I would leave it to the application how to specify (command line option, UI setting) the interface to use.

When the application is a browser, the browser community has explicitly refused to do this, either as defined in RFC6874 or in draft-ietf-6man-rfc6874bis.

If the application is ping, that works today. For apps in general, that is exactly what draft-carpenter-6man-zone-ui describes (and what I implemented as a proof of concept at https://github.com/becarpenter/misc/tree/main/zelect ).

> 
> According the use in API programmin like restconf, I discourage the use of zone name, since such configuration is meant to be used somewhere in the network. 

Yes, but my understanding is that sometimes interfaces need to be specified for remote management, so they are defined in relevant YANG modules (using a numeric index, not a name).

> Again in APIs no URLs which are valid only on a certain machine should be used. I think it is possible today start applications in virtual environments, which have the specific network interface as default interface. 

The default zone, as described in RFC4007, is optional and not supported on Linux.

> This would only require, that virtualization host don’t act as routers.
> 
> To have a scoping namespace, which is unambigious across machines would require some sort of registry, which of course contradicts to the .local approach, which means “all next to me”.

More precisely, it means "all next to me on a particular interface". mDNS is quite explicit about that.

Regards
     Brian

> 
> Regards
> 
> Karsten
> 
> *Von: *Toerless Eckert <tte@cs.fau.de>
> *Datum: *Dienstag, 19. März 2024 um 09:27
> *An: *v6ops@ietf.org <v6ops@ietf.org>
> *Cc: *brian.e.carpenter@gmail.com <brian.e.carpenter@gmail.com>, dschinazi.ietf@gmail.com <dschinazi.ietf@gmail.com>, superuser@gmail.com <superuser@gmail.com>
> *Betreff: *IPv6 link-local and URLs @ IETF119
> 
> Dear v6ops
> 
> You may want to think going to http(bis) WG this week for the slot on
> draft-schinazi-httpbis-link-local-uri-bcp. In it, he argues that rfc6874 should be
> retired/made-historic, because it was never implemented in browsers.
> 
> For those who've been absent to the discussion:
>    rfc6874 says URLs can represent IPv6 link-local addresses as [<ipv6addr>:<zone-name>]
>      and David Drafts lays out why this is difficult for browsers
>    rfc6874bis was held up (indefinitely) by Murray (ART AD) on the prmise that the
>      browser vendors decided to not implement it rfc6874 nor bis.
>    draft-carpenter-6man-zone-ui from Brian Carpenter was receiving various criticisms in 6MAN,
>      leading to David to write his draft. Where he primarily promotes to use .local mDNS
>      instead of IPv6 link local addresses
> 
> My take on this:
> 
> 1. The only poor souls who should ever have to use IPv6 link-local addresses in a browser
>     field are IPv6 Network Opertors (aka: here, this group), when interacting in a browser
>     with a router (e.g.:web interface off a browser) and entering URLs. Everybody else
>     should use names (including .local), so it is certainly a minority use-case, but
>     i would hope an important minority use-case. Without network admins being able to
>     troubleshoot even if/where DNS is not working, we can not provide running IPv6 networks.
> 
> 2. I find Murray's DISCUSS on rfc6874bis not convincing, because scoped IPv6 link-local
>     addresses in URLs are not only needed for browsers, but for any type of API in programming
>     languages that use URI, such as restconf or the like. Besides, i do not see why we as
>     the IETF should constrict what we deem to be necessary by the implementation problems
>     of effectively very few browser cores in the industry, neglecting the broader use
>     of URLs. The argument alone that the IETF should not be able to demand what's needed
>     for an IPv6 network archtiecture because some application land work is hard is just
>     what has continued to slow down adoption of anything IPv6 for now 2 decades.
> 
> 3. That being said, i would love to see Davids draft progress to help eliminate the
>     non-working of .local addresses in Browsers today (aka: create standadrd/demand for
>     mDNS in browsers to work), because they actually do have a good
>     amount of actual really cool IoT use-cases (not v6ops). I just don't want the work to call
>     for retiring rfc6874. I just want it for rfc6874 to become only necessary where no other
>     option helps.
> 
> Cheers
>      Toerless
>