Re: [v6ops] comment on draft-liu-v6ops-ula-usage-analysis

[Mark Andrews <[e-mail]>]

In message <[e-mail]>
, George Michaelson writes:
> 
> I tend to SHOULD. you can do what you like, but the consequence of not
> doing a local delegation is information leakage. There is no compelling MUST

And if you have random address selection you along with random
prefix selection you have a 2^114 birthday paradox space.  I'll
assume the subnet are not random.

You have a 2^40 birthday paradox space of a getting sub optimal
address selection order.  i.e. you will try the ULA before GUA.

> On Tue, Nov 5, 2013 at 11:28 AM, Liubing (Leo) <[e-mail]>wrote:
> 
> > Hi, Jen
> >
> > I got your comments. I'll consider to revise accordingly. Many thanks
> >
> > Regards,
> > Bing
> >
> > ________________________________________
> > From: [e-mail] [[e-mail]] on behalf of Jen
> > Linkova [[e-mail]]
> > Sent: Tuesday, November 05, 2013 09:50
> > To: [e-mail]
> > Subject: [v6ops] comment on draft-liu-v6ops-ula-usage-analysis
> >
> > Section 4.2. says that
> > "
> >
> > So when using ULAs in a network, the administrators should clearly
> >    set the scope of the ULAs and configure ACLs on relevant border
> >    routers to block them out of the scope. And if internal DNS are
> >    enabled, the administrators might also need to use internal-only DNS
> >    names for ULAs.
> > "
> > I believe it should that that the administrator MUST configure egress
> > ACLs on borders routers and MUST ensure that their DNS servers do not
> > include ULAs in any responses to external clients.
> >
> >
> >
> >
> > --
> > SY, Jen Linkova aka Furry
> > _______________________________________________
> > v6ops mailing list
> > [e-mail]
> > https://www.ietf.org/mailman/listinfo/v6ops
> > _______________________________________________
> > v6ops mailing list
> > [e-mail]
> > https://www.ietf.org/mailman/listinfo/v6ops
> >
> 
> --047d7b33da0a02fb4e04ea730e22
> Content-Type: text/html; charset=ISO-8859-1
> Content-Transfer-Encoding: quoted-printable
> 
> <div dir=3D"ltr">I tend to SHOULD. you can do what you like, but the conseq=
> uence of not doing a local delegation is information leakage. There is no c=
> ompelling MUST</div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_=
> quote">
> On Tue, Nov 5, 2013 at 11:28 AM, Liubing (Leo) <span dir=3D"ltr">&lt;<a hre=
> f=3D"mailto:[e-mail]" target=3D"_blank">[e-mail]=
> m</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margi=
> n:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
> Hi, Jen<br>
> <br>
> I got your comments. I&#39;ll consider to revise accordingly. Many thanks<b=
> r>
> <br>
> Regards,<br>
> Bing<br>
> <br>
> ________________________________________<br>
> From: <a href=3D"mailto:[e-mail]">[e-mail]</a> =
> [<a href=3D"mailto:[e-mail]">[e-mail]</a>] on b=
> ehalf of Jen Linkova [<a href=3D"mailto:[e-mail]">[e-mail]=
> m</a>]<br>
> 
> Sent: Tuesday, November 05, 2013 09:50<br>
> To: <a href=3D"mailto:[e-mail]">[e-mail]</a><br>
> Subject: [v6ops] comment on draft-liu-v6ops-ula-usage-analysis<br>
> <div class=3D"HOEnZb"><div class=3D"h5"><br>
> Section 4.2. says that<br>
> &quot;<br>
> <br>
> So when using ULAs in a network, the administrators should clearly<br>
> =A0 =A0set the scope of the ULAs and configure ACLs on relevant border<br>
> =A0 =A0routers to block them out of the scope. And if internal DNS are<br>
> =A0 =A0enabled, the administrators might also need to use internal-only DNS=
> <br>
> =A0 =A0names for ULAs.<br>
> &quot;<br>
> I believe it should that that the administrator MUST configure egress<br>
> ACLs on borders routers and MUST ensure that their DNS servers do not<br>
> include ULAs in any responses to external clients.<br>
> <br>
> <br>
> <br>
> <br>
> --<br>
> SY, Jen Linkova aka Furry<br>
> _______________________________________________<br>
> v6ops mailing list<br>
> <a href=3D"mailto:[e-mail]">[e-mail]</a><br>
> <a href=3D"https://www.ietf.org/mailman/listinfo/v6ops" target=3D"_blank">h=
> ttps://www.ietf.org/mailman/listinfo/v6ops</a><br>
> _______________________________________________<br>
> v6ops mailing list<br>
> <a href=3D"mailto:[e-mail]">[e-mail]</a><br>
> <a href=3D"https://www.ietf.org/mailman/listinfo/v6ops" target=3D"_blank">h=
> ttps://www.ietf.org/mailman/listinfo/v6ops</a><br>
> </div></div></blockquote></div><br></div>
> 
> --047d7b33da0a02fb4e04ea730e22--
> 
> --===============5663455589702191862==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> _______________________________________________
> v6ops mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/v6ops
> 
> --===============5663455589702191862==--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: [phone]                 INTERNET: [e-mail]