Re: [v6ops] 464xlat case study (was reclassify 464XLAT as standard instead of info)

Mark Andrews <marka@isc.org> Thu, 28 September 2017 04:08 UTC

Return-Path: <marka@isc.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DCDA1352AE for <v6ops@ietfa.amsl.com>; Wed, 27 Sep 2017 21:08:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, PP_MIME_FAKE_ASCII_TEXT=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id etFKd-TzSQ-p for <v6ops@ietfa.amsl.com>; Wed, 27 Sep 2017 21:08:23 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDDDD1352AA for <v6ops@ietf.org>; Wed, 27 Sep 2017 21:08:23 -0700 (PDT)
Received: from zmx1.isc.org (zmx1.isc.org [149.20.0.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id CA2DB34B9E1; Thu, 28 Sep 2017 04:08:19 +0000 (UTC)
Received: from zmx1.isc.org (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTPS id ADFBE160081; Thu, 28 Sep 2017 04:08:19 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by zmx1.isc.org (Postfix) with ESMTP id 93938160082; Thu, 28 Sep 2017 04:08:19 +0000 (UTC)
Received: from zmx1.isc.org ([127.0.0.1]) by localhost (zmx1.isc.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id JdQ7tyKX7YEU; Thu, 28 Sep 2017 04:08:19 +0000 (UTC)
Received: from rock.dv.isc.org (c27-253-115-14.carlnfd2.nsw.optusnet.com.au [27.253.115.14]) by zmx1.isc.org (Postfix) with ESMTPSA id 17E1A160081; Thu, 28 Sep 2017 04:08:19 +0000 (UTC)
Received: from rock.dv.isc.org (localhost [IPv6:::1]) by rock.dv.isc.org (Postfix) with ESMTP id 17EA78867885; Thu, 28 Sep 2017 14:08:17 +1000 (AEST)
To: Ca By <cb.list6@gmail.com>
Cc: "Heatley, N, Nick, TQB R" <nick.heatley@bt.com>, IPv6 Ops WG <v6ops@ietf.org>, Ole Troan <otroan@employees.org>, james woodyatt <jhw@google.com>
From: Mark Andrews <marka@isc.org>
References: <LO1P123MB01168388285206BB7C26F029EA7A0@LO1P123MB0116.GBRP123.PROD.OUTLOOK.COM> <46045DAA-9096-43BA-A5FD-571232767726@google.com> <CAKD1Yr3vziaHfkR+hQ7QHXaz7QraKH2HLUVXUW63GpnOAj4JoQ@mail.gmail.com> <E72C3FBE-57A4-4058-B9E5-F7392C9E9101@google.com> <LO1P123MB0116805F9A18932E2D0694FEEA780@LO1P123MB0116.GBRP123.PROD.OUTLOOK.COM> <1496304E-54BE-47FA-A7F1-1AA6E163DAB1@employees.org> <CAD6AjGQdMFgv4727wHm41HmEyo2Z-PCabPHPSRSVwOi_rey7OQ@mail.gmail.com> <20170928002712.A92A2885F18B@rock.dv.isc.org> <CAD6AjGTOFbBxPvi4HzF-ddwE7uvGYywY_rTppriBum_EaPwfpw@mail.gmail.com>
In-reply-to: Your message of "Thu, 28 Sep 2017 01:56:44 +0000." <CAD6AjGTOFbBxPvi4HzF-ddwE7uvGYywY_rTppriBum_EaPwfpw@mail.gmail.com>
Date: Thu, 28 Sep 2017 14:08:17 +1000
Message-Id: <20170928040817.17EA78867885@rock.dv.isc.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/cKAQsui1eATcgwsrmvDTtaOXrlM>
Subject: Re: [v6ops] 464xlat case study (was reclassify 464XLAT as standard instead of info)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Sep 2017 04:08:25 -0000

In message <CAD6AjGTOFbBxPvi4HzF-ddwE7uvGYywY_rTppriBum_EaPwfpw@mail.gmail.com>
, Ca By writes:
> On Wed, Sep 27, 2017 at 5:28 PM Mark Andrews <marka@isc.org> wrote:
>
> >
> > In message <
> > CAD6AjGQdMFgv4727wHm41HmEyo2Z-PCabPHPSRSVwOi_rey7OQ@mail.gmail.com>, Ca
> > By writes:
> > >
> > > On Wed, Sep 27, 2017 at 3:43 PM Ole Troan <otroan@employees.org>
> wrote:
> > >
> > > > > A specific example: certain vpn clients, still in service, fail
> when
> > > > > tethered to a nat64/dns64 device. Typically, a customer is
> tethering
> > > > > their work machine to their personal handset. NAT64/DNS64 does not
> > > > > provide what the client needs and neither can the OS. Such client
> SW
> > > > > may be older but is still in service, they are not yet end of
> > support.
> > > > >
> > > > > Customers care if this breaks. So do I, this is doing harm. And
> no,
> > > > > they won't revert to their corp IT dept. They know this relates to
> > their
> > > > > provider.
> > > > > With 464xlat these usecases simply work.
> > > > > I have zero calls into customer services concerning devices with
> > > > > 464xlat.
> > > > >
> > > > > 464xlat is the reason why IPv6-only can work where the end OS is
> > > > > unknown. IPv6-only for the handset mass-market is the way to
> mitigate
> > > > > exhaustion.
> > > >
> > > > 464xlat is a mechanism to deliver IPv4 service across an IPv6
> > transport.
> > > > Yes, it mitigates exhaustion. - By sharing a single IPv4 address
> among
> > > > more and more end-users.
> > > > It's just like any other CGN, with the differences being that you
> need
> > > > CE support and you can disable IPv4 in the access network.
> > > >
> > > > MAP-E, MAP-T, DS-lite, Configured tunnels, L2 NAT... pretty much
> all do
> > > > the same.
> > > > The main difference is where session state is kept.
> > > >
> > > > 464XLAT or more commonly deployed 44464XLAT is the worst of any
> > > > combination. It keeps sessions state both at the CE/CLAT and the
> > > > BR/PLAT.
> > > > Building scalable stateful devices is hard and expensive. And in the
> > > > case of IPv4 sharing mechanisms unnecessary.
> > > >
> > > > Ole
> > >
> > >
> > > Ole, Mark, and James — always good to have the non-operator viewpoint.
> > > Insightful observations as always.
> > >
> > > Nick has offered the “hey we did 464xlat, it worked, no regrets” case
> > > study, also insightful.
> > >
> > > I am trying to stay out of this discussion about purity of one
> solution
> > vs
> > > the other.  I was happy to leave that discussion years ago and move on
> > > with
> > > real work.
> > >
> > > But i like helping people, so i can share some insight
> > >
> > > Slide 4 of a deck
> > >
> > >
> >
> https://www.ietf.org/proceedings/98/slides/slides-98-maprg-measuring-trend
> > > s-in-ipv6-support-tommy-pauly-00.pdf
> > >
> > > The blue area is not one of constant growth.  The lesson is that what
> > > James
> > > said does not fly with mobile subscribers that can change carriers.
> They
> > > want their “broken” apps. That said, i have it on good word that blue
> > blob
> > > is  thriving now that we added some additional control points to
> allows
> > > people to use “broken” apps.  Life is good.
> > >
> > > Another data point
> > >
> > > http://www.worldipv6launch.org/measurements/
> > >
> > > As of today in the top 25, Numbers 7, 11, 17, 18 (i think), and 20
> have
> > > deployed 464xlat.  Pretty good real world stats moving real v6 packets
> > for
> > > what Ole calls “the worst” and Mark calls “sexy”.
> >
> > I said other people think it is "sexy".  I'm with Ole, it is the worst
> > of the solutions.
>
>
> Ethernet is also the worst.
>
> Token ring is much more elegant than ethernet too.  And packet over sonet
> is much more industrial than ethernet.
>
> Yet the chaotic mess ethernet is ubiquitous.  Why?  Because people had a
> relatively good experience deploying it.

Last time I looked my using ethernet doesn't impact on your using
some other layer 2 technology.

DNS64/NAT64 impacts on those not using the technology.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org