Re: [v6ops] Fwd: New Version Notification for draft-linkova-v6ops-ipmaclimi-00.txt

Jen Linkova <furry13@gmail.com> Tue, 08 November 2022 12:39 UTC

Return-Path: <furry13@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 062E2C14CF08 for <v6ops@ietfa.amsl.com>; Tue, 8 Nov 2022 04:39:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.855
X-Spam-Level:
X-Spam-Status: No, score=-1.855 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V9nVQEbvO9k5 for <v6ops@ietfa.amsl.com>; Tue, 8 Nov 2022 04:39:45 -0800 (PST)
Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30A8EC1524AF for <v6ops@ietf.org>; Tue, 8 Nov 2022 04:39:44 -0800 (PST)
Received: by mail-lf1-x133.google.com with SMTP id j16so21002527lfe.12 for <v6ops@ietf.org>; Tue, 08 Nov 2022 04:39:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=J864uSuZo92hq72wq2JwTRgnzaJeRuYM9tjY2twKtXU=; b=Mj8nbjTfT+qjsryKQ+n9xvZ215fCQNC9eWe3Pcu2sq82IzXW+G+KTIjIK1NBvFryoZ JJ1JjT3J8rRTDxZkP/9rrfYvxQdmYlshSPUkYk60/zt2+Q/Ryi2R0kF2kcy1/IPgxXVe A52Agta/iIFRmXxNNbQxd+t2dTQuofiLobFJKQtA9YLYFHIwz+WQX/+fCVjdVNUKaKj5 77EDiB/xws1pBugbbRB0UrMUXgTtn5mJqsVyxNEVYkdE12+0oyp41QVDYmSBMsaQ2Oid zVT6a2wgfcg3kia6rRQ9sommspCdvP6gVjm8G2M59jASIuGlSkL7YeaoOFNGtfD/uSnO 8u7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=J864uSuZo92hq72wq2JwTRgnzaJeRuYM9tjY2twKtXU=; b=drjo+vN6aeYEpWGDzwRp+3RgVRbW+Ct4F2o1ak9QTkA+/NHXAElwV9Bz/Lyf2ooaya pWGpmZ0sWnoiXD84Qnx+ylyKyuW6oN9sTHN+5yzM0oN3Ap63Px56iaP0fNXDo1qI9b3f 44KfGbQspcM3azhwJ+dqVA6J2QsVYOfCtxICf8uHz9JKpP/Wp4pa5WK8I8kTpozxWbse Am2G+5eDkE9wXrvgHKY7NCxuhaY9xl9c/VnqLWgm/b1Y2DfQ/N+sQOvjE3TMiBvpBeBf 9Q8UPsULFhsNhNO3WQSUUmQzXRXxB9ELP4lhelLU/cbrzUuRd+GI34nL72t6Umv85yHq /8Gg==
X-Gm-Message-State: ACrzQf2w1Lwyte3/pDbA7GSGPPLlxvPdYKwlbQ7jb0dhoEJiM8jzjLh9 aRJwbeF57OqkTkPZQidD4rXHCRV2CE0Kk2TNNhcNgPjWavY=
X-Google-Smtp-Source: AMsMyM4GMWY3cla/INmzWGx4YHl03TL2w/1pfuZTv0yCYfaxZOF1aefnW40vaJkrpqtToqJ7qwRUlo0qu0QR/rZTH9I=
X-Received: by 2002:a19:2d59:0:b0:4af:e57c:74e0 with SMTP id t25-20020a192d59000000b004afe57c74e0mr18683516lft.172.1667911182326; Tue, 08 Nov 2022 04:39:42 -0800 (PST)
MIME-Version: 1.0
References: <CAFU7BAQV5eeO3EKWXyTYDnsnAUhLCi-j-b7tkAJ5K79+-qSN9g@mail.gmail.com> <9AC65596-7EFC-4543-B303-7B39329F1076@employees.org> <c13e5d81-6dcf-133c-e82f-da5657c8247e@bogus.com>
In-Reply-To: <c13e5d81-6dcf-133c-e82f-da5657c8247e@bogus.com>
From: Jen Linkova <furry13@gmail.com>
Date: Tue, 08 Nov 2022 23:39:30 +1100
Message-ID: <CAFU7BAREv7buOZySUTKS=01oPyQx5ZBMuwHfLURuwTSvqDaSnA@mail.gmail.com>
To: Joel Jaeggli <joelja@bogus.com>
Cc: Ole Troan <otroan=40employees.org@dmarc.ietf.org>, V6 Ops List <v6ops@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/YvUBHghxGHcmbUao6nO_ZM-0oN8>
Subject: Re: [v6ops] Fwd: New Version Notification for draft-linkova-v6ops-ipmaclimi-00.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2022 12:39:46 -0000

> We've been around that particular point a few times over the years. It
> seems relatively straight forward to implement prefix per host without
> much in the way of coordination with the host, for example if you also
> have layer-2 isolation per host you can delegate a prefix to it and
> install the whole prefix with the host as the l2 nexthop. this gives you
> one route per host  which is manageable and allows for arbitrary usage
> within the the delegated prefix /64 /60 /56 whatever. you can go still
> further on a switch and construct an exact match table at said prefix
> size and now /64 routes (for example) are host routes.

Yes, that's a very good long-terms solution which requires changing
the way operators design the networks.
Actually the purpose of this draft is to slightly increase the
probability of a random device to work correctly on a random
conference/enterprise WiFi.
I do not need this draft to fix *my* network problem - I'll make sure
all devices in my network have reasonable limits configured from now
on.
My concern is that a random network engineer deploys a guest WiFi
network (just a vlan, with peer2peer isolation probably) and random
people join that network with their devices - that setup has
reasonable default settings.

> I have implemented something similar with host coordination where source
> address selection on a host is done  from a prefix (/48) bound to the
> the loopback on the host with the practical consequence that hosts use
> low numbers of millions of ipv6 addresses per day with no more overhead
> from the vantage point of the switch than using 1

That's very interesting, thanks Joel. I might come back to you with
more questions.
I assume you are talking about controlled environments, right?

> >> On 8 Nov 2022, at 02:25, Jen Linkova <furry13@gmail.com> wrote:
> >>
> >> Hello,
> >>
> >> As I've come across some rather nasty failure scenarios, affecting
> >> both IPv6-only and dual-stack deployments, I think it might be useful
> >> to re-emphasize RFC7934 and provide some recommendations to vendors.
> >>
> >> This is a rather raw -00, the text is very brief and unpolished, it
> >> will be definitely expanded and improved, should the group agree that
> >> this is a problem worth solving.
> >>
> >> Feedback/comments are appreciated indeed!
> >> Thanks!
> >>
> >> ---------- Forwarded message ---------
> >> From: <internet-drafts@ietf.org>
> >> Date: Tue, Nov 8, 2022 at 12:15 PM
> >> Subject: New Version Notification for draft-linkova-v6ops-ipmaclimi-00.txt
> >> To: Jen Linkova <furry13@gmail.com>
> >>
> >>
> >>
> >> A new version of I-D, draft-linkova-v6ops-ipmaclimi-00.txt
> >> has been successfully submitted by Jen Linkova and posted to the
> >> IETF repository.
> >>
> >> Name:           draft-linkova-v6ops-ipmaclimi
> >> Revision:       00
> >> Title:          Minimizing Damage of Limiting Number of IPv6 Addresses per Host
> >> Document date:  2022-11-07
> >> Group:          Individual Submission
> >> Pages:          5
> >> URL:
> >> https://www.ietf.org/archive/id/draft-linkova-v6ops-ipmaclimi-00.txt
> >> Status:         https://datatracker.ietf.org/doc/draft-linkova-v6ops-ipmaclimi/
> >> Html:
> >> https://www.ietf.org/archive/id/draft-linkova-v6ops-ipmaclimi-00.html
> >> Htmlized:
> >> https://datatracker.ietf.org/doc/html/draft-linkova-v6ops-ipmaclimi
> >>
> >>
> >> Abstract:
> >>    This document provides recommendations to network infrastructure
> >>    vendors on how to deal with multiple IPv6 addresses per host.
> >>
> >>
> >>
> >>
> >> The IETF Secretariat
> >>
> >>
> >>
> >>
> >> --
> >> SY, Jen Linkova aka Furry
> >>
> >> _______________________________________________
> >> v6ops mailing list
> >> v6ops@ietf.org
> >> https://www.ietf.org/mailman/listinfo/v6ops
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
> >



-- 
SY, Jen Linkova aka Furry