Re: [v6ops] I-D Action: draft-horley-v6ops-lab-00.txt

David Farmer <farmer@umn.edu> Wed, 16 June 2021 16:05 UTC

Return-Path: <farmer@umn.edu>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 098803A1DC8 for <v6ops@ietfa.amsl.com>; Wed, 16 Jun 2021 09:05:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umn.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UScb4PxhOsEO for <v6ops@ietfa.amsl.com>; Wed, 16 Jun 2021 09:05:36 -0700 (PDT)
Received: from mta-p6.oit.umn.edu (mta-p6.oit.umn.edu [134.84.196.206]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6375B3A1DC6 for <v6ops@ietf.org>; Wed, 16 Jun 2021 09:05:36 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1]) by mta-p6.oit.umn.edu (Postfix) with ESMTP id 4G4qlz4r7tz9vknJ for <v6ops@ietf.org>; Wed, 16 Jun 2021 16:05:35 +0000 (UTC)
X-Virus-Scanned: amavisd-new at umn.edu
Received: from mta-p6.oit.umn.edu ([127.0.0.1]) by localhost (mta-p6.oit.umn.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W7HbqnVZJq40 for <v6ops@ietf.org>; Wed, 16 Jun 2021 11:05:35 -0500 (CDT)
Received: from mail-ej1-f71.google.com (mail-ej1-f71.google.com [209.85.218.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mta-p6.oit.umn.edu (Postfix) with ESMTPS id 4G4qlz0jhVz9vknY for <v6ops@ietf.org>; Wed, 16 Jun 2021 11:05:34 -0500 (CDT)
DMARC-Filter: OpenDMARC Filter v1.3.2 mta-p6.oit.umn.edu 4G4qlz0jhVz9vknY
DKIM-Filter: OpenDKIM Filter v2.11.0 mta-p6.oit.umn.edu 4G4qlz0jhVz9vknY
Received: by mail-ej1-f71.google.com with SMTP id nd10-20020a170907628ab02903a324b229bfso1161881ejc.7 for <v6ops@ietf.org>; Wed, 16 Jun 2021 09:05:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umn.edu; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6dXaVCi4ym3ompyYoJqcu8eAy9j6LTfWJcLHxbqSsXw=; b=YT6vpxnAZsfF7cDB8Q0So+8Z0qlHDq+E/cfGLo0KOy8sMPOvOPdM29m0lL0kHxUbcF 2DnEusUcUk+Q2PS8980aJaT7lfBoTuAKRoDGC3ukPVd8leT7rv4pi/ik1/2vWjeQWULs z5FQkMlQFk/BeKKIoCU+dUWi4JcS/+r/KUeDrtdzoBBSJQhQ9EjVG2uyzOCRxEnB1id6 DeeUoB/t69hUeTPQeQS7LhMu/6QdJV9V0wc1hPRydDbrW0Gw2XB2Zfy2ROeLauR/EWSa r6Lebh63JVVcPIc4N3gXvVE8SQUhoi9DvSqoJ8ruS9pt0bVATfHu55h5oCoGN/uuBYyY /Cvg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6dXaVCi4ym3ompyYoJqcu8eAy9j6LTfWJcLHxbqSsXw=; b=oaz66FzTERsP2zRPVDVPkYzy8ktrnDpvcn8KBQr39JR7Kj+WbxnMyIke+PMIvwl+k3 duo29f3dLQ8QQ9ssqmH8HnoYTHY/0pJh6JG2dETHyLxI/twkKZnsi576KzxWgzQHJeQN ti0MxgDvzXFvuj71hcDBoalMqEJB+bFNP1mysZaLKvyw4y3U1L/rXnTvtjYCJrTgvi4S H2clog3+Q6NtwWAWuwUOi/Xh3Yrtszpq7FIuc0KgoqdSWY1WZWLXyIfHNSRcZb2OhPpi +OVSTG0wGo3MOub/hf6BVgUuda/zstUm8G1i51iEf/rSE1FAko1jU5HPBfXF6Ij1Eyau nVvA==
X-Gm-Message-State: AOAM533YFItxRPkUfLtG45rOYAKmWPsgN4CzyCUONI2LoBs4H5A/W6Ou bBF/fLCTrHRPxAWhp/55uzcH/aaV3EzVRkO1JpFK+D7U8msW9sYjthkblmg3aE3G5g5ZIvKEaS3 jxO3UkqgqGO4vQZ77WVGBP/mSjQ==
X-Received: by 2002:a05:6402:1a25:: with SMTP id be5mr390512edb.369.1623859533569; Wed, 16 Jun 2021 09:05:33 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJwJwrCT+szmvWGJAbkO34VXVJXFeT9uryd8TjHDFY78T64GvHUW+CF85FTJzOBsa3LgfhX+xosmWRy+/k3DjQ4=
X-Received: by 2002:a05:6402:1a25:: with SMTP id be5mr390465edb.369.1623859533232; Wed, 16 Jun 2021 09:05:33 -0700 (PDT)
MIME-Version: 1.0
References: <CAE=N4xfvMJw59qQE9gg24GcoK9XXOfjw-CXJ3DsKm3dU4Bk-Mw@mail.gmail.com> <CAN-Dau2ZGgdFZsDV7A8GPYXZBQMk0FSh697rNO2J-5h_K0Jz2A@mail.gmail.com> <CAE=N4xenXYomTVyTtpbVzw+2ftdYR7SUJdYjT1gArMna7PdTLw@mail.gmail.com> <20210615.161732.378898370.sthaug@nethelp.no> <6de41a90-21d7-281a-1980-d8d7bd8c5d54@gmail.com> <CAO42Z2xGKhk0zvVSKQ3ZsG7fz+vtP8ZC826AheVpHYHcBjtSzA@mail.gmail.com> <CAM5+tA_xKfHLK7-cYtO5XiJkLNnvdHXcP1k_yD-oG-Xi=izBwA@mail.gmail.com> <BN8PR07MB70762F583388D7AD0EE9EB29950F9@BN8PR07MB7076.namprd07.prod.outlook.com>
In-Reply-To: <BN8PR07MB70762F583388D7AD0EE9EB29950F9@BN8PR07MB7076.namprd07.prod.outlook.com>
From: David Farmer <farmer@umn.edu>
Date: Wed, 16 Jun 2021 11:05:21 -0500
Message-ID: <CAN-Dau2isFNLsLAnJojFk85pSmoVR_jCfvbPYQ7gx2k1Yr0cYg@mail.gmail.com>
To: Kevin Myers <kevin.myers@iparchitechs.com>
Cc: Mark Smith <markzzzsmith@gmail.com>, "buraglio@es.net" <buraglio@es.net>, v6ops list <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000a4ceee05c4e4422d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/bpRSveJ9hcJwpTn5ad5ZEWY1rHI>
Subject: Re: [v6ops] I-D Action: draft-horley-v6ops-lab-00.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Jun 2021 16:05:44 -0000

So why not use PI assignment GUA for the LAB, DEV, and QA environments?  If
it’s a question of RIR policies, I’ll happily propose policy amendments
allowing it.  However, those seem like justified requirements and I see
nothing in RIR policy to disallow LAB, DEV, and QA needs in resource
requests.

On Wed, Jun 16, 2021 at 10:55 Kevin Myers <kevin.myers@iparchitechs.com>
wrote:

> As someone who spends time consulting in both service provider and large
> enterprise networks, I would also argue that the issues with ULA for
> infrastructure modeling/labbing at the host level are going to be far more
> impactful in large enterprises. Not only because of increased focus on
> large scale hosts/servers/apps vs. service provider - but also, GUA and ULA
> may both exist (or are planned) and reconfiguring lab hosts/systems isn't
> practical or desirable due to inconsistent results for host preference.
>
> Most large enterprises I've worked for strive to build lab, dev and qa
> environments that reflect prod as accurately as possible and this is a
> fairly straightforward way to avoid disparity between prod and non-prod.
>
> Enterprise networking is an area that we desperately need increased IPv6
> adoption.  IMO, we should be making it easier to model a global enterprise
> that will likely have more than a /32 of GUA in order to avoid the pitfalls
> of ULA de-preferenced behavior or squatting on other IPv6 space.
>
> Kevin Myers
>
> -----Original Message-----
> From: v6ops <v6ops-bounces@ietf.org> On Behalf Of Nick Buraglio
> Sent: Tuesday, June 15, 2021 6:36 PM
> To: Mark Smith <markzzzsmith@gmail.com>
> Cc: v6ops list <v6ops@ietf.org>
> Subject: Re: [v6ops] I-D Action: draft-horley-v6ops-lab-00.txt
>
> Mark,
>
> Here is an example of correct behavior that I see literally every day.
>
> buraglio@netmon:~$ host gw-starlink.lab.buragl.io
> gw-starlink.lab.buragl.io has address 10.255.255.3
> gw-starlink.lab.buragl.io has IPv6 address fd68:1e02:dc1a:ffff::3
>
> buraglio@netmon:~$ ssh -vvv gw-starlink.lab.buragl.io
> OpenSSH_8.2p1 Ubuntu-4ubuntu0.2, OpenSSL 1.1.1f 31 Mar 2020
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf
> matched no files
> debug1: /etc/ssh/ssh_config line 21: Applying options for *
> debug2: resolving "gw-starlink.lab.buragl.io" port 22
> debug2: ssh_connect_direct
> debug1: Connecting to gw-starlink.lab.buragl.io [10.255.255.3] port 22.
>
> As expected, this breaks comprehensive dual stack testing using DNS (as
> one should) when compared to any real world behavior of GUA space.
> with the 0200::/7 block configured:
>
> buraglio@netmon:~$ host !$
> host gw-starlink.lab.buragl.io
> gw-starlink.lab.buragl.io has address 10.255.255.3
> gw-starlink.lab.buragl.io has IPv6 address 200:1e02:dc1a:ffff::3
>
> ssh -vvv gw-starlink.lab.buragl.io
> OpenSSH_8.2p1 Ubuntu-4ubuntu0.2, OpenSSL 1.1.1f  31 Mar 2020
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf
> matched no files
> debug1: /etc/ssh/ssh_config line 21: Applying options for *
> debug2: resolving "gw-starlink.lab.buragl.io" port 2
> debug2: ssh_connect_direct
> debug1: Connecting to gw-starlink.lab.buragl.io [200:1e02:dc1a:ffff::3]
> port 22.
> debug1: Connection established.
>
>
> nb
>
> ----
> Nick Buraglio
>
>
> On Tue, Jun 15, 2021 at 4:39 PM Mark Smith <markzzzsmith@gmail.com> wrote:
> >
> >
> >
> > On Wed, 16 Jun 2021, 07:00 Brian E Carpenter, <
> brian.e.carpenter@gmail.com> wrote:
> >>
> >> On 16-Jun-21 02:17, sthaug@nethelp.no wrote:
> >> >>> Maybe recommending the Global ID for L=0 be taken from the
> >> >>> corresponding
> >> >>> 40 bits of the network's GUA Prefix.
> >> >>>
> >> >>> Just a thought.
> >> >>
> >> >> Understood, and a reasonable suggestion, however it still doesn’t
> >> >> address that ULA space precedence, effectively makes it useless
> >> >> for dual-stack
> >> lab
> >> >> scenarios. Even for IPv6 only it doesn’t work unless you take all
> >> >> the effort to turn off APIPA.
> >> >
> >> > Some of us use ULA for lab networks with no apparent problems.
> >>
> >> But if your test case wants the internal test addresses to have
> >> exactly the same behavior in address selection as external GUAs, the
> >> default precedence for ULAs is an issue. I think that's Ed's point.
> >
> >
> > We're all guessing until Ed explains in more detail what his issue is.
> >
> > Posting a copy of the IPv6 default address selection table without
> explanation doesn't do that. We need example test scenarios to see why
> there would be issues.
> >
> > It seems Ed thinks IPv4 is preferred more often in a dual stack network
> than it is, but I'm guessing.
> >
> > Regards,
> > Mark.
> >
> >
> >
> >
> >>
> >>    Brian
> >>
> >> _______________________________________________
> >> v6ops mailing list
> >> v6ops@ietf.org
> >> https://www.ietf.org/mailman/listinfo/v6ops
> >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>
-- 
===============================================
David Farmer               Email:farmer@umn.edu
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================