Re: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis

JORDI PALET MARTINEZ <jordi.palet@consulintel.es> Wed, 16 August 2017 21:50 UTC

Return-Path: <prvs=1401d3a9dd=jordi.palet@consulintel.es>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3E9F13274E for <v6ops@ietfa.amsl.com>; Wed, 16 Aug 2017 14:50:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=consulintel.es; domainkeys=pass (1024-bit key) header.from=jordi.palet@consulintel.es header.d=consulintel.es
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hpocpi9kp_eM for <v6ops@ietfa.amsl.com>; Wed, 16 Aug 2017 14:50:11 -0700 (PDT)
Received: from mail.consulintel.es (mail.consulintel.es [217.126.185.215]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AA09132743 for <v6ops@ietf.org>; Wed, 16 Aug 2017 14:50:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=consulintel.es; s=MDaemon; t=1502920207; x=1503525007; q=dns/txt; h=DomainKey-Signature: Received:User-Agent:Date:Subject:From:To:Message-ID:Thread-Topic: References:In-Reply-To:Mime-version:Content-type: Content-transfer-encoding:Reply-To; bh=33E0xQ88UWIHwP7Iy8zv6ZDLG G/sL76E2xdAc1uduVo=; b=p6e9wEGglOU2/Y9o6tbYpC4RG0DY01h1FX0B4wXA8 RwVyNXO2T0Fjqn8LgI2IdM9cdd3VZDHnKBVs3YokQTy/ofdl5lpiVPHnxqSYEovh GtMYIr33/XDPdcvmBGKIin4VJKZLRLpbm9y/nr4L+AMK9xEslQ7lSGx3CghaVrB4 Go=
DomainKey-Signature: a=rsa-sha1; s=MDaemon; d=consulintel.es; c=simple; q=dns; h=from:message-id; b=FNyQke2lxRszd1tBB1gojuF1+fPnwtHFbrsl72u5Fp1RlrIbv82RLZutw8Ik JM9PVB9lkpdQng661X2XybTWdqyfRZHCEd17fYJ7JogOvbeAyvYweL2MD mZKga8Fo8yIGABTyBikX9QQSDpbZHlnnhIaqIAJIOtZ4byG+EY10pk=;
X-MDAV-Processed: mail.consulintel.es, Wed, 16 Aug 2017 23:50:07 +0200
X-Spam-Processed: mail.consulintel.es, Wed, 16 Aug 2017 23:50:06 +0200
Received: from [10.10.10.134] by mail.consulintel.es (MDaemon PRO v11.0.3) with ESMTP id md50005507540.msg for <v6ops@ietf.org>; Wed, 16 Aug 2017 23:50:05 +0200
X-MDOP-RefID: re=0.000,fgs=0 (_st=1 _vt=0 _iwf=0)
X-Authenticated-Sender: jordi.palet@consulintel.es
X-HashCash: 1:20:170816:md50005507540::J8qlRgMGkQCAnaAW:00004cA6
X-Return-Path: prvs=1401d3a9dd=jordi.palet@consulintel.es
X-Envelope-From: jordi.palet@consulintel.es
X-MDaemon-Deliver-To: v6ops@ietf.org
User-Agent: Microsoft-MacOutlook/f.25.0.170815
Date: Wed, 16 Aug 2017 23:50:03 +0200
From: JORDI PALET MARTINEZ <jordi.palet@consulintel.es>
To: "v6ops@ietf.org" <v6ops@ietf.org>
Message-ID: <37255BC1-F7CF-4F04-B081-9FA32631F185@consulintel.es>
Thread-Topic: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis
References: <A2F465E7-51A9-4353-80DB-262DB861F653@consulintel.es> <2D09D61DDFA73D4C884805CC7865E6114DBFF3F3@GAALPA1MSGUSRBF.ITServices.sbc.com> <937FEB7C-AC79-4E06-80EC-C8CBE91B3EF7@consulintel.es> <2D09D61DDFA73D4C884805CC7865E6114DBFF7BB@GAALPA1MSGUSRBF.ITServices.sbc.com>
In-Reply-To: <2D09D61DDFA73D4C884805CC7865E6114DBFF7BB@GAALPA1MSGUSRBF.ITServices.sbc.com>
Mime-version: 1.0
Content-type: text/plain; charset="UTF-8"
Content-transfer-encoding: quoted-printable
Reply-To: jordi.palet@consulintel.es
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/ixbT7rdKU5KMmUC7W17pz08I3ts>
Subject: Re: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Aug 2017 21:50:16 -0000

Below, in-line.

Regards,
Jordi
 

-----Mensaje original-----
De: "STARK, BARBARA H" <bs7652@att.com>
Responder a: <bs7652@att.com>
Fecha: miércoles, 16 de agosto de 2017, 23:33
Para: "jordi.palet@consulintel.es" <jordi.palet@consulintel.es>, "v6ops@ietf.org" <v6ops@ietf.org>
Asunto: RE: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis

    Inline...
    Barbara
    
    > draft-ietf-sunset4-gapanalysis-09, problems 1-5, refer to the case when IPv4
    > is no longer available.
    
    Yes: Not available (through any means) on the WAN. But still used on the LAN.

[Jordi] The goal of the document, if I read it correctly is to turn off IPv4 “completely” LAN and WAN.

    
    > So, if RFC7084 is an IPv6 only-CE (even if the CE can have an IPv4 stack), then
    > we have those problems when there is no IPv4 connectivity.
    
    Yes: We will have the described problems if there is no IPv4 available on the WAN (through any means).

    
    > If the IPv6-CE supports transition, then you never have those problems,
    > because the goal of the transition support is precisely to avoid them. It is not
    > a matter of IPv4 in the WAN. You can have IPv6-only WAN, but transition can
    > resolve that.
    > 
    > Or I’m missing anything in your opinion?
    
    Please correct me if I'm wrong, but I thought all the described mechanisms require a correlated capability in the WAN. Just because a CE router supports all of these doesn't mean any of them necessarily exist in the WAN, or that configuration of any of them via DHCPv6 is supported by the ISP (WAN may have capability but requires manual CE Router config which many end users won't know how to do). So I think support in the CE Router, by itself, is insufficient to ensure IPv4 WAN availability. Therefore, even if a CE Router supports all of these, it is still possible for there to be no IPv4 WAN connection. IMO, CE Router requirements that explicitly target IPv6-only operation would be a very logical place to include requirements for "what to do when there is no IPv4 in the WAN".

[Jordi] Not really, may depend on the transition mechanism. Let me give you one example. You can have an operator with a completely IPv6-ONLY network. The customer CE can have CLAT (or the OSs), and the NAT64 service and even the DNS64 service can be somewhere else, not necessarily in the operator network (may be a free service, actually there are already some), and it may be automatically configured by the operator even if doesn’t have IPv4 at all, pointing the CEs to the “NAT64 external” provider. Just consider this as the “reverse” situation to the actual IPv6-tunnel-brokers.
    
    > The problem here, in my opinion is that in the actual RFC7084 you “allow” the
    > support of IPv4, so is in that case when, if there is no transition support, the
    > problems 1-5 may be presented in the LANs.
    > 
    > So, one alternative is again considering my proposal of making an RFC7084
    > with is “really” only-IPv6 (removing ALL the IPv4 support in that document),
    > and then it make sense to have other documents with the transition support,
    > etc., and then finding the right one for resolving the problems above.
    
    Because of the existence of the CE Router IPv6 Ready certification program, the many references to RFC 7084 made by external orgs, etc. I continue to be opposed to changing it. That would almost certainly cause confusion, and is unnecessary. Requirements related to IPv6-only WAN connections (with or without the WAN supporting configuration or termination of an IPv4 tunneling mechanism) can all logically go in a single new doc.

[Jordi] I understand that …
    
    > Actually, some of the problems, in my opinion, can be resolved just in the OS,
    > but is not a matter here to discuss one by one. For example, problem 1,
    > some OS may believe there is only “Internet” if there is a DHCP server
    > responding, even if they have IPv6 connectivity, etc., but this can be sorted
    > out in the actual RFC7084 if there is IPv4 stack, and there is no transition
    > support and there is not IPv4 support, by making sure that the DHCPv4
    > server in the CE is not turned on in that case …
    
    That's a bad idea. I expect my home network to operate in the absence of any and all WAN IP connections. I refuse to buy (or sell or recommend) a CE router that does not continue to operate its DHCPv4 server in the absence of IPv4 WAN connectivity. Also, I disagree with putting any LAN-side IPv4 protocol requirements into a 7084bis. 

[Jordi] and I agree with you here, was an example, not really my intend … But as you follow your own rationale, it is very clear that even if we have IPv6-only CEs, we need during many years to go, many IPv4 “functions” support, there are many devices in almost every home/office that will not be replaced in 3-5, maybe 10 years, so we need to offer the IPv4 transition support … to allow operators to go to “IPv6-only” WANs (or complete networks).
     
    > Of course, it can probably be done in one more document to “complement
    > RFC7084”.
    > 
    > Thinking twice, I could, as well, for maybe 1 or 2 of the problems, have some
    > text in the transition doc, but I don’t think all them can be resolved in that
    > doc.
    > 
    > So, to do it correctly I think RFC7084 needs to be updated (and maybe then
    > remove the transition stuff there, so all the transition goes to the transition
    > one).
    > 
    > I’m just thinking loud and trying to heard the WG.
    > 
    > Regards,
    > Jordi
    > 
    > 
    > -----Mensaje original-----
    > De: "STARK, BARBARA H" <bs7652@att.com>
    > Responder a: <bs7652@att.com>
    > Fecha: miércoles, 16 de agosto de 2017, 20:50
    > Para: "jordi.palet@consulintel.es" <jordi.palet@consulintel.es>,
    > "v6ops@ietf.org" <v6ops@ietf.org>
    > Asunto: RE: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis
    > 
    >     > However, if we don’t want to touch RFC7084, seems to me difficult that
    > we
    >     > can do it in a “transition” only document.
    > 
    >     <bhs> I disagree. I think it would actually be easier in a "transition" only
    > document. Such a document could easily have a requirement along the lines
    > of:
    >     If no WAN IPv4 connectivity is present (native or through one of the
    > technologies in this document), the CE Router MUST ...
    >     I'm not sure what it must do, though.
    >     I don't think the solution involves IPv6 signaling, and putting LAN-facing
    > IPv4 protocol requirements in RFC7084bis would be problematic. But it would
    > not be a problem in a "transition" doc. - Barbara</bhs>
    > 
    >     > So, do we want to re-consider this decision again?
    >     >
    >     > My plan, if time permits, is to update either one or the other document
    > next
    >     > week.
    >     >
    >     > Regarding 6&7, I actually provided text on that to the authors, and one of
    > my
    >     > comments was in the direction of RFC6555-bis can somehow sort out
    > those,
    >     > but the actual text is still based in RFC6555 until RFC6555-bis become an
    > RFC,
    >     > in order to avoid “holding” draft-ietf-sunset4-gapanalysis-09, so all
    > depends
    >     > on how fast we move with one or the other …
    >     >
    >     > Regards,
    >     > Jordi
    >     >
    >     >
    >     > -----Mensaje original-----
    >     > De: v6ops <v6ops-bounces@ietf.org> en nombre de Lee Howard
    >     > <lee@asgard.org> Responder a: <lee@asgard.org>
    >     > Fecha: miércoles, 16 de agosto de 2017, 18:28
    >     > Para: <v6ops@ietf.org>
    >     > Asunto: [v6ops] Sunset4 gap analysis: rfc6555bis, ipv6rtr-reqs, rfc7084-bis
    >     >
    >     >     Reading through draft-ietf-sunset4-gapanalysis-09 it seemed to me
    > that
    >     > several problems might be resolvable in documents we currently have
    > open:
    >     >
    >     >     Can problems 1-5 (indicating that IPv4 is unavailable, disabling IPv4 in
    > the
    >     > LAN) be addressed with recommendations in any, some, or all of:
    >     >     draft-ietf-v6ops-ipv6rtr-reqs-00 "Requirements for IPv6 Routers"
    >     >     draft-ietf-v6ops-rfc7084-bis-04  “Basic Requirements for IPv6 Customer
    >     > Edge Routers"
    >     >     Or other drafts under discussion in v6ops now?
    >     >     Or do we need new IPv6 signalling (RA?) that IPv4 is unavailable? That
    >     > would have to go to 6man. Or did we do this, and I’ve forgotten in my old
    >     > age?
    >     >
    >     >
    >     >
    >     >     Are problems 6 & 7 (Happy Eyeballs and getaddrinfo()) addressed with
    >     > draft-ietf-v6ops-rfc6555bis-03,  "Happy Eyeballs Version 2: Better
    >     > Connectivity Using Concurrency”?
    >     >     Can problem 10 be addressed in rfc6555-bis?
    >     >
    >     >     Thanks,
    >     >
    >     >     Lee
    >     >
    >     >     _______________________________________________
    >     >     v6ops mailing list
    >     >     v6ops@ietf.org
    >     >     https://urldefense.proofpoint.com/v2/url?u=https-
    >     > 3A__www.ietf.org_mailman_listinfo_v6ops&d=DwIGaQ&c=LFYZ-
    >     > o9_HUMeMTSQicvjIg&r=LoGzhC-
    >     > 8sc8SY8Tq4vrfog&m=uzccVE3XgWpcpFGMQ9qjF-IGi6Zg7wpOm1T1oN-
    >     > RUZs&s=dAnqF0IWAIbz3_wvZSm5SBJqvGGRswIj4npGtJaP-7M&e=
    >     >
    >     >
    >     >
    >     >
    >     > **********************************************
    >     > IPv4 is over
    >     > Are you ready for the new Internet ?
    >     > https://urldefense.proofpoint.com/v2/url?u=http-
    >     > 3A__www.consulintel.es&d=DwIGaQ&c=LFYZ-
    >     > o9_HUMeMTSQicvjIg&r=LoGzhC-
    >     > 8sc8SY8Tq4vrfog&m=uzccVE3XgWpcpFGMQ9qjF-IGi6Zg7wpOm1T1oN-
    >     > RUZs&s=NHx1lFPeZQ13ZFQKRHpvNfx1vTbjumaqKvbhuzNebE0&e=
    >     > The IPv6 Company
    >     >
    >     > This electronic message contains information which may be privileged or
    >     > confidential. The information is intended to be for the use of the
    > individual(s)
    >     > named above. If you are not the intended recipient be aware that any
    >     > disclosure, copying, distribution or use of the contents of this
    > information,
    >     > including attached files, is prohibited.
    >     >
    >     >
    >     >
    >     > _______________________________________________
    >     > v6ops mailing list
    >     > v6ops@ietf.org
    >     > https://urldefense.proofpoint.com/v2/url?u=https-
    >     > 3A__www.ietf.org_mailman_listinfo_v6ops&d=DwIGaQ&c=LFYZ-
    >     > o9_HUMeMTSQicvjIg&r=LoGzhC-
    >     > 8sc8SY8Tq4vrfog&m=uzccVE3XgWpcpFGMQ9qjF-IGi6Zg7wpOm1T1oN-
    >     > RUZs&s=dAnqF0IWAIbz3_wvZSm5SBJqvGGRswIj4npGtJaP-7M&e=
    > 
    > 
    > 
    > 
    > **********************************************
    > IPv4 is over
    > Are you ready for the new Internet ?
    > https://urldefense.proofpoint.com/v2/url?u=http-
    > 3A__www.consulintel.es&d=DwIGaQ&c=LFYZ-
    > o9_HUMeMTSQicvjIg&r=LoGzhC-8sc8SY8Tq4vrfog&m=bdfjY-
    > 4BpvpG5rxUtW6ljW7uXcTb06J-
    > waydCKsh30c&s=uAShtvyY8FqLcj3q82uMjYZXWG67_bRkjQ7A3VqeO88&e=
    > The IPv6 Company
    > 
    > This electronic message contains information which may be privileged or
    > confidential. The information is intended to be for the use of the individual(s)
    > named above. If you are not the intended recipient be aware that any
    > disclosure, copying, distribution or use of the contents of this information,
    > including attached files, is prohibited.
    > 
    > 
    > 
    > _______________________________________________
    > v6ops mailing list
    > v6ops@ietf.org
    > https://urldefense.proofpoint.com/v2/url?u=https-
    > 3A__www.ietf.org_mailman_listinfo_v6ops&d=DwIGaQ&c=LFYZ-
    > o9_HUMeMTSQicvjIg&r=LoGzhC-8sc8SY8Tq4vrfog&m=bdfjY-
    > 4BpvpG5rxUtW6ljW7uXcTb06J-waydCKsh30c&s=Rj7C-
    > J_Wmz8I2SWoTJnH0aiik1kCnCbRRUltG69GHRk&e=
    



**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.consulintel.es
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.