Re: [v6ops] Please review the No IPv4 draft

Owen DeLong <owen@delong.com> Tue, 22 April 2014 20:03 UTC

Return-Path: <owen@delong.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1FDC1A00E5 for <v6ops@ietfa.amsl.com>; Tue, 22 Apr 2014 13:03:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.263
X-Spam-Level:
X-Spam-Status: No, score=-1.263 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ur4Oi5qYSGk1 for <v6ops@ietfa.amsl.com>; Tue, 22 Apr 2014 13:03:34 -0700 (PDT)
Received: from owen.delong.com (owen.delong.com [IPv6:2620:0:930::200:2]) by ietfa.amsl.com (Postfix) with ESMTP id E5DA21A006E for <v6ops@ietf.org>; Tue, 22 Apr 2014 13:03:33 -0700 (PDT)
Received: from [IPv6:2620::930:0:225:ff:fe44:af17] ([IPv6:2620:0:930:0:225:ff:fe44:af17]) (authenticated bits=0) by owen.delong.com (8.14.2/8.14.2) with ESMTP id s3MK0UXf019173 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Tue, 22 Apr 2014 13:00:32 -0700
X-DKIM: Sendmail DKIM Filter v2.8.3 owen.delong.com s3MK0UXf019173
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=delong.com; s=mail; t=1398196834; bh=2XZ9FVa5PWPVOeHZRPCMKP3pMFY=; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc: Content-Transfer-Encoding:Message-Id:References:To; b=WyVjCbYYY2IjlPJGyFBOGE8t1y4yYKwfqNqvcmrmvyK9W7M+EPnH5ogS3zx+DprBW xvuDk7awYkjSUt/dr6t4B5gavnTtwBrp98phKwHVYdbkzTvbsYGB2VULqhebGwP+kl vD1VsJBLO/BWzanf/Ap5z1vkreyfU8z0RrNML0nk=
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
From: Owen DeLong <owen@delong.com>
In-Reply-To: <53566D59.7000202@viagenie.ca>
Date: Tue, 22 Apr 2014 13:04:19 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <C7236B71-4401-4D59-8E56-23E3BA54591A@delong.com>
References: <534BF5A5.5010609@viagenie.ca> <20140415083615.GB43641@Space.Net> <534D3672.3060702@viagenie.ca> <3446106.k0lm12lQ8b@linne> <alpine.DEB.2.02.1404161034220.10236@uplift.swm.pp.se> <CAKD1Yr2D+ZMi-UctuvrMzyqoHqgBy5O26GODT=bRwq0PsvLgLw@mail.gmail.com> <alpine.DEB.2.02.1404161053110.10236@uplift.swm.pp.se> <20140416155714.GB64039@ricotta.doit.wisc.edu> <alpine.DEB.2.02.1404162310050.10236@uplift.swm.pp.se> <B21C1073-ABBE-44FE-964F-65AD7849CD31@delong.com> <alpine.DEB.2.02.1404170658440.10236@uplift.swm.pp.se> <4EABCE38-7CBA-4C95-84EE-686A2300F26E@delong.com> <8E450CDC-FFC5-4649-89FE-387836C8E40B@nominum.com> <CAEmG1=oNyotn6tcKyxUuLCW0of-MxVrvUB08jsygjo8kidgt0g@mail.gmail.com> <CF7BDD91.1911D%wesley.george@twcable.com> <53566D59.7000202@viagenie.ca>
To: Simon Perreault <simon.perreault@viagenie.ca>
X-Mailer: Apple Mail (2.1874)
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0rc1 (owen.delong.com [IPv6:2620:0:930::200:2]); Tue, 22 Apr 2014 13:00:34 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/aw1Puf7zco719P1-_spTf31Ra0Q
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>
Subject: Re: [v6ops] Please review the No IPv4 draft
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Apr 2014 20:03:39 -0000

On Apr 22, 2014, at 6:23 AM, Simon Perreault <simon.perreault@viagenie.ca> wrote:

> Le 2014-04-22 09:00, George, Wes a écrit :
>> WG] I think that there’s a need for clarification here. A lot of this
>> discussion has focused almost exclusively on the full-on disabling of
>> IPv4. Part of what the draft discusses is that there are differing
>> things that can be signaled to the local devices from the network based
>> on the bit set in the proposed option. There is an option that simply
>> signals “there is no IPv4 support on this network” and makes attendant
>> recommendations that the device decide on its own what to do for any
>> local IPv4 traffic on the LAN, including doing nothing, configuring 169
>> addresses, etc. but that it should disable IPv4 on the upstream
>> interface facing the network that provided the signal (I.e. Stop
>> forwarding IPv4 traffic and stop sending DHCPv4). 
>> I’m willing to go with consensus (if exist) that the more aggressive
>> option of something like a full-on IPv4 killswitch that affects more
>> than one interface and affects the local network is a bridge too far,
>> both for security reasons (It’ll be hard to secure to a level that
>> exploits aren’t likely) and because it gets into a question about
>> autonomy and span of control. But I think it’s worth highlighting that
>> there are also less aggressive options discussed in the draft, and I’d
>> like to have some sense that those are mostly on the right track, and
>> your statement is so broad that I wanted to get clarification on what
>> you think of this.
> 
> Right.
> 
> To be very explicit, one of the "less aggressive" options on the table
> is to specify a "there is no IPv4 on this network" signal while saying
> nothing about how a host should react to this signal. Each
> implementation could use that hint however it sees fit.

Because IPv6 deployment has been helped so much in the past by ambiguous standards which allow wildly different implementations from vendor to vendor.

If we’re going to specify a signal, we should specify what the host should do with that signal.

Owen