Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)

Fernando Gont <fgont@si6networks.com> Thu, 07 January 2021 06:11 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F27523A091C; Wed, 6 Jan 2021 22:11:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.161
X-Spam-Level:
X-Spam-Status: No, score=-2.161 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.262, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sF3jNnFGP0Fc; Wed, 6 Jan 2021 22:11:03 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10A413A08B7; Wed, 6 Jan 2021 22:11:02 -0800 (PST)
Received: from [10.0.0.129] (unknown [186.19.8.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id 08B94280899; Thu, 7 Jan 2021 06:10:58 +0000 (UTC)
To: Michael Richardson <mcr+ietf@sandelman.ca>, IPv6 Operations <v6ops@ietf.org>, 6MAN <6man@ietf.org>
References: <160989494094.6024.7402128068704112703@ietfa.amsl.com> <6fe3a45e-de65-9f88-808d-ea7e2abdcd16@si6networks.com> <CAO42Z2wR-3vbHi-NrBBMmCTNDq5fgqvSmBUbYK7P+63QTNfxkg@mail.gmail.com> <CAKD1Yr014PzVJj9Y6O=PBGc_QSVtur-0wMpaNkFA0dqr8FHGuA@mail.gmail.com> <44e7ac61-523a-d35e-9024-7e6df81e4226@gmail.com> <be92f523-eeaa-8ed4-afdf-4a537f53748c@si6networks.com> <7b3809f0-2db4-bcff-b669-66911ee9c087@gmail.com> <8345b02d-4c26-d5d8-7d85-1e85f3b15642@si6networks.com> <27939.1609996939@localhost>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <9ce92832-e698-a66a-58b3-28e6ab5e00d1@si6networks.com>
Date: Thu, 7 Jan 2021 03:03:36 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <27939.1609996939@localhost>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/ftQGmLGz25xi-lUEAv05PO3n6eM>
Subject: Re: [v6ops] Scope of Unique Local IPv6 Unicast Addresses (Fwd: New Version Notification for draft-gont-6man-ipv6-ula-scope-00.txt)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Jan 2021 06:11:06 -0000

On 7/1/21 02:22, Michael Richardson wrote:
> 
> Fernando Gont <fgont@si6networks.com> wrote:
>      > But this is where we go back to the original question:
>      > * RFC4007 says that global scope addresses are globally unique.
> 
>      > * RFC4193 aims to reduce the collision fo a number of ULA prefixes when
>      > grouped together, but certainly does *not* result in globally-unique
>      > prefixes. Still, RFC4193 claims that ULAs globals.
> 
>      > So from the pov of RFC4193, ULAs are globals. From the pov of RFC4007, they
>      > are not.
> 
>      > Which of the two (RFC4007 vs RFC4193) takes precedence?
> 
> It really doesn't matter, because Global has many terms.

It does. RFC 4193 claims that they have global scope.

Global scope does have a meaning.




> ULAs are globally unique (ideally), but are not globally routable.

THey can't be globally routable, because they can't be globally unique.



> Their lack of routability is not an architectural consideration, but a
> bureaucratic RIR-based concern.  They don't get RPSL, RPKI, whois or reverse DNS.
> 
> {Whether you are convinced of the statistics of ULA-R being unique or not,
> does not change the goal that they be unique}

But this is a key thing:
10-1000 nets with no ULAs -> low probability of colission != global scope!



> RFC4007 defines a Global Scope. (Not Global Routing)
> ULAs have Global Scope, and I see nothing in RFC4007 that contradicts that.

  [RFC4007] defines the scope of an address as:

       "[the] topological span within which the address may be used as a
       unique identifier for an interface or set of interfaces"

    And defines the "global scope" to be used for:

       "uniquely identifying interfaces anywhere in the Internet"


You have 40 bits for the "global ID" -- how many networks before 
collisions?  And, at the global level, do you expet to be above or 
bellow that number of networks? If above, you won't have unique 
prefixes, and hence, per the definition of RFC4007, you don't hable 
global scope.



> Unless, you live in IPv4 land, and think that everything that isn't RFC1918
> must be routable. And I'm sure that you don't think that way.

They *can't* be globally routeable, because they are not globally unique.

Similarly, even if you removed bogon filters etc, you cannot use 
10.0.0.0/8 globally because they mean different things for each of us. 
-- they are not global scope.

ULAs are just bigger (and yes, have a recommended algorithm for 
generating prefixes) such that if you grab a few ULA prefixes together, 
it's unlikely that there will be collisions.

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492