Re: [v6ops] [SUSPECTED SPAM] Google Alert - IPv6

Dave O'Reilly <rfc@daveor.com> Sun, 29 October 2017 16:48 UTC

Return-Path: <rfc@daveor.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F16C613EF48 for <v6ops@ietfa.amsl.com>; Sun, 29 Oct 2017 09:48:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=daveor.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AvrMlXiID-Gw for <v6ops@ietfa.amsl.com>; Sun, 29 Oct 2017 09:47:58 -0700 (PDT)
Received: from vps.ftrsolutions.com (vps.ftrsolutions.com [5.77.39.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 141ED13F57C for <v6ops@ietf.org>; Sun, 29 Oct 2017 09:47:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=daveor.com; s=default; h=To:References:Message-Id:Content-Transfer-Encoding:Cc:Date: In-Reply-To:From:Subject:Mime-Version:Content-Type:Sender:Reply-To:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe :List-Post:List-Owner:List-Archive; bh=5oNrm//rqWDxw3XsPbqRA9x+XV4P+UaMB3AOTxh4ib0=; b=tNUt5bt2gg0UM9OKuvZt6U5YP5 PmtT5QRbJxhhgMYOJJ9YBLe/6VwoCWV+JkOBaaMWIslXxk6aCFarif9teDOKzEUc9ZkxirRj2BxE4 CSJaetP2oCwI9vmhthK2tmAcTfmTN+kMocaVIdbwDNXk9liWtRCjJ+wsRGcX94O2Bvqw=;
Received: from 86-44-56-31-dynamic.agg7.bsn.cld-dbn.eircom.net ([86.44.56.31]:55173 helo=[192.168.1.25]) by vps.ftrsolutions.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.89) (envelope-from <rfc@daveor.com>) id 1e8qkc-0002Tc-O2; Sun, 29 Oct 2017 16:47:54 +0000
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: Dave O'Reilly <rfc@daveor.com>
In-Reply-To: <22C655A9-AE02-4885-98B5-7515C49E7F2B@employees.org>
Date: Sun, 29 Oct 2017 16:47:54 +0000
Cc: Lee Howard <Lee@asgard.org>, Warren Kumari <warren@kumari.net>, "v6ops@ietf.org" <v6ops@ietf.org>, Tore Anderson <tore@fud.no>
Content-Transfer-Encoding: quoted-printable
Message-Id: <5A0CE280-27D6-4DAC-A903-ACD1567FCB9B@daveor.com>
References: <f403045ef57ac52962055bd88b84@google.com> <20395E98-DA55-447F-BEFE-CB581A88BB78@gmail.com> <alpine.DEB.2.20.1710190655260.31961@uplift.swm.pp.se> <20171019083506.6627a166@echo.ms.redpill-linpro.com> <alpine.DEB.2.20.1710190856530.31961@uplift.swm.pp.se> <787AE7BB302AE849A7480A190F8B93300A056EB5@OPEXCLILMA3.corporate.adroot.infra.ftgroup> <CAHw9_iLWAMexrfXwsdB8duGa5ueJMofqVRqNck6DeOzA=KChqA@mail.gmail.com> <C4E37677-A2FB-49F8-B362-C29B28DFD570@daveor.com> <D618D79F.8AA1A%lee@asgard.org> <22C655A9-AE02-4885-98B5-7515C49E7F2B@employees.org>
To: Ole Troan <otroan@employees.org>
X-Mailer: Apple Mail (2.3124)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.ftrsolutions.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - daveor.com
X-Get-Message-Sender-Via: vps.ftrsolutions.com: authenticated_id: dave@daveor.com
X-Authenticated-Sender: vps.ftrsolutions.com: dave@daveor.com
X-Source:
X-Source-Args:
X-Source-Dir:
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/iNlRQaRlaY_D3wxE8bbbP9efqqQ>
Subject: Re: [v6ops] [SUSPECTED SPAM] Google Alert - IPv6
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Oct 2017 16:48:01 -0000

> On 28 Oct 2017, at 03:21, Ole Troan <otroan@employees.org> wrote:
> 
>>> It is clear that if the number of subscribers that can be simultaneously
>>> behind a CGNAT is limited, the deployment of IPv6 increases, and the IPv6
>>> adoption in Belgium bears that out.
>> 
>> Yes, and I think you’re right, but the Belgian interpretation that address
>> sharing must not exceed 16:1 may not be generalizable. That is: Belgium is
>> one country, and we don’t know if their rule would work everywhere.
> 
> We are digressing from the draft in question, but since I'm sitting somewhere over Oregon at the moment I have ample time.
> It is not at all clear that the number of subscribers behind a CGN is "limited".
> 
> I'd certainly would have liked to see some research on this.

Some links I found (hardly research, but links anyway!):

https://www.intgovforum.org/multilingual/content/igf-2017-ws-214-how-can-we-limit-the-negative-impact-of-carrier-grade-nat-technologies-and
http://www.ipv6conference.ch/wp-content/uploads/2015/06/T04a-Vyncke-ch-council-iPv6-in-Belgium-June-2015.pdf

> If you are clever and use endpoint dependent connections where you can. You can stretch address sharing very very far.
> Since you can reuse source ports for multiple connections, assuming the destination port is largely constant at 443, the number of connections for a single port is bounded by the distribution of destinations on the Internet.
> 
> You will burn one source port for each concurrent connection to the _same_ destination address.
> 
> The bitter truth is that we can make IPv4 'scale' forever. ;-(
> 

Exactly the problem and this means the business case needs to be there for moving to IPv6. The upshot of this appears to be that, at least for the foreseeable future, CGNAT is going to be with us.

daveor