Re: [v6ops] Vicious circle [ULA precedence [Thoughts about wider operational input]]

Jen Linkova <furry13@gmail.com> Sat, 30 April 2022 17:18 UTC

Return-Path: <furry13@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82D3FC15E6FD; Sat, 30 Apr 2022 10:18:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.848
X-Spam-Level:
X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QIWTWEiDP8XG; Sat, 30 Apr 2022 10:18:52 -0700 (PDT)
Received: from mail-ej1-x629.google.com (mail-ej1-x629.google.com [IPv6:2a00:1450:4864:20::629]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF4A5C15E6FA; Sat, 30 Apr 2022 10:18:51 -0700 (PDT)
Received: by mail-ej1-x629.google.com with SMTP id k23so20839794ejd.3; Sat, 30 Apr 2022 10:18:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=U7tGM8hCY54nk0ejtxnK8R5qZfW0EJiOYuENUpglt0o=; b=httfq4jy1UdQR0Ijdp15wc9IAisRdtQA34PfPRut/Nf83g1d136iEHI1LIAUVbWYi8 nlY2WnOyaHkWN+/rCABB/kaFW2NxcLJZnpq+a/3Y0FjE9u6PR6Ej0XH9dsnS6+IHKKIr eui9u9kxLXmrrHMC10kBE16TnC3iFf0WtvITJed6vb3HveOG/52Ff66Pzk3+9V8rEGqI StwL7Ft7F8Y4ErDcul5qzGDJl9GnLrSa076iPs9VEAqnl8F6WAEAYRStWbouFDIOqjhu k2iI+x3mh19F6cU9iWWR1KDnu/AdAr+DBbTEG7KNNPWH9PiMr7pjxdhB98PNQm13Fsmo JygA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=U7tGM8hCY54nk0ejtxnK8R5qZfW0EJiOYuENUpglt0o=; b=Bt6uH/uT41wfQzIx8+rxmNdFGCA0L7LfIATBzGkHEjsg4k+CXKgzEYlJAjLgNw9hNz 63T0r1DT5eZ+IzFsPDcmHD55Wrq4caB1JKWgz8tTDjKXTqVppRm9yu3jDYEvlYps1ixJ a+55b4rj8aTZsUfELQJShgItMKS+zGnVgZ0OVxylmKHFbRo1TIyzF8Athx++HQrSSeEZ UtdutrmyApxYMKbHZi9dNIgJnYR3P82KCsIOUPc4fHD2abTMA2IMSIreEDJvPjKCL8hN v1REIG8v6pbFwI3+ONScoAl9DAj49oO8H2iBD//QjsU4EazTPfGnsYMrGSXsiZLPV43p JfLQ==
X-Gm-Message-State: AOAM531Z9S4+UB0M3CGgsr/abn1p57x+AxEpcCKov04jYjkmiMwQwUd+ cpQk8edDiOMqt+6VZC0coGb3UTXt2DxKdBUe4PE=
X-Google-Smtp-Source: ABdhPJyt8SCYCOXyU1mZgzizW//QOce1R3tD/Ug8O9epXqK2YIZ2Lp/pZqVyt7RPO2AKQpQCqbP2uzwxGU4iTTsv5Qw=
X-Received: by 2002:a17:907:7ba6:b0:6f3:8f56:793b with SMTP id ne38-20020a1709077ba600b006f38f56793bmr4471427ejc.473.1651339129811; Sat, 30 Apr 2022 10:18:49 -0700 (PDT)
MIME-Version: 1.0
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de> <CAKD1Yr1v0Tkh+pWD-ts=PL3gZf7Qj6OHW6Cuvj8iGcSSMibjew@mail.gmail.com> <0afe25f5-52b7-a438-0696-cf8b0a83c2dc@gmail.com> <BN8PR07MB70760D9693580F5BDCB61DD995F89@BN8PR07MB7076.namprd07.prod.outlook.com> <CAKD1Yr3Z9wGQ+uiA2WcW00MrOiLyHs+bSoFjHVtrixCi2qp4DA@mail.gmail.com> <BN8PR07MB7076A6456CAB48EF428D6E8695F89@BN8PR07MB7076.namprd07.prod.outlook.com> <65d0d9ac-77fc-c200-09e3-0c3949ca1541@gmail.com> <CAN-Dau2FS99ewfgH8xk-jSJFCnO92CJV9ZC98DUE2UDR7V1Eww@mail.gmail.com> <CANMZLAYbpZBDA8uFnJqfWfWTQ4S9RN4a-DqWe36qzfAfDtXiQA@mail.gmail.com> <CAN-Dau0BjRR2_7xz38DpJsz0Y=Z_8bV5n-=Eh1QUVEDzqVxmaA@mail.gmail.com> <CAPt1N1=H=eAyRu0JcHnLpZEUizDZ4Kj0VwPu=0nM=Wn+y3Ho1w@mail.gmail.com> <CAM5+tA_4rtSkgEuRUFZ2LYr6i8a7vWeKODYieVARF3RbRvgRww@mail.gmail.com> <BN8PR07MB7076DE3E745CB916FB81879595FA9@BN8PR07MB7076.namprd07.prod.outlook.com> <ADAE42CE-448F-42F5-89BE-692F493E2DC8@consulintel.es> <CAM5+tA_ksJ+agY1tze1-zPHLsgYFgjEYtnuPs+ffZbnRqiHytw@mail.gmail.com> <BAD082DA-0958-4926-B3E5-4E4599A75078@consulintel.es> <BN8PR07MB7076564E50C0DAFBFAB950FD95FA9@BN8PR07MB7076.namprd07.prod.outlook.com> <CAPt1N1ncVkekecS=dBHSR3WtaEMruy55Udxy0WSMGTgbN24pKw@mail.gmail.com> <CAM5+tA8-Zqka-vZ9jRL3wn0dtfuJj0ECx_k9prwyS2ypisaPtw@mail.gmail.com> <FB031B76-7E88-4824-876F-D1A05F8D2215@thehobsons.co.uk> <CAFU7BAST-oNGpy4JvODDsf=8eS69hV8XCi8OgEHBkkoujRN3Rw@mail.gmail.com> <699f556a3eac41179a80d2cc8749a191@huawei.com>
In-Reply-To: <699f556a3eac41179a80d2cc8749a191@huawei.com>
From: Jen Linkova <furry13@gmail.com>
Date: Sat, 30 Apr 2022 19:18:37 +0200
Message-ID: <CAFU7BAS_+OwtDmfivExjsZWpiRBaemLULxPn6DzLZjXEBn7bzw@mail.gmail.com>
To: Xipengxiao <xipengxiao@huawei.com>
Cc: Kevin Myers <kevin.myers@iparchitechs.com>, 6man list <ipv6@ietf.org>, v6ops list <v6ops@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/WsxbTzxiB-MdyJoQnLVihex9j9Q>
Subject: Re: [v6ops] Vicious circle [ULA precedence [Thoughts about wider operational input]]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Apr 2022 17:18:52 -0000

On Thu, Apr 28, 2022 at 11:37 PM Xipengxiao <xipengxiao@huawei.com> wrote:
> Thank you for bringing this useful piece of information to light.  I hope more people see it:
>
> > PCR DSS 4.0 (published in March 2022) does not mandate NAT for IPv6. The text has been updated.
>
> That said, I very much agree with Kevin Meyer: "If you want more Enterprises participating in the IETF discussions and improving IPv6 uptake, start thinking about meeting them where they are. And to be crystal clear - NAT is where they are and where they will be for quite a while".

They use NAT (and DHCP ;)) - because it's the way IPv4 works. IPv6 is
a different protocol.

> My point is, given PCI DSS 4.0 (what Jen wrote as PCR DSS 4.0),

sorry, fat fingers ;)

>we should tell enterprises they no longer need NAT. But if some enterprises still insist, respect their decision.

Indeed we shall respect their decision - they can keep using IPv4.

>It's more important to get enterprises to use IPv6 ASAP, than to insist that they use the "right" IPv6 solution.

I'm not sure I fully agree. If you don't use the technology the right
way (and most likely do not benefit from it) - why bother migrating?
To get back to square one - with all old problems and potentially new
ones - after all those time and efforts spent?

Personally I'd rather focus on solving problems we (those who have
migrated) are having, or problems which block those who want to
migrate from completing the migration.

> -----Original Message-----
> From: v6ops <v6ops-bounces@ietf.org> On Behalf Of Jen Linkova
> Sent: Thursday, April 28, 2022 12:53 PM
> To: Simon <linux@thehobsons.co.uk>
> Cc: 6man list <ipv6@ietf.org>; v6ops list <v6ops@ietf.org>
> Subject: Re: [v6ops] Vicious circle [ULA precedence [Thoughts about wider operational input]]
>
> On Thu, Apr 28, 2022 at 11:15 AM Simon <linux@thehobsons.co.uk> wrote:
> > The IPv6 community needs to engage with this other regulatory community to get them to bring their standard into the 21st century.
> >
> > As long as the PCI standard effectively mandates IPv4 & NAPT then it’s going to be an uphill struggle.
>
> See my email I sent yesterday. PCR DSS 4.0 (published in March 2022) does not mandate NAT for IPv6. The text has been updated.
>
> --
> SY, Jen Linkova aka Furry
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops



-- 
SY, Jen Linkova aka Furry