Re: [v6ops] updating RFC8026 to support 464XLAT in draft-ietf-v6ops-transition-ipv4aas

Lorenzo Colitti <lorenzo@google.com> Wed, 13 June 2018 02:45 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CE36130DCC for <v6ops@ietfa.amsl.com>; Tue, 12 Jun 2018 19:45:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.21
X-Spam-Level:
X-Spam-Status: No, score=-18.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nuTNSxvlJQ5C for <v6ops@ietfa.amsl.com>; Tue, 12 Jun 2018 19:45:06 -0700 (PDT)
Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0244B126F72 for <v6ops@ietf.org>; Tue, 12 Jun 2018 19:45:05 -0700 (PDT)
Received: by mail-wm0-x232.google.com with SMTP id r15-v6so2038820wmc.1 for <v6ops@ietf.org>; Tue, 12 Jun 2018 19:45:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FX7Fr0VGwGKz4f8SfoHngM0/2TVigP4Xmv6bWcVIjF0=; b=urTJKHH/RJa4sbUjtnaIZbw2vgmMG5pD9Egxlp4DwPXIOFgMbkkN12IO/O2ywt8xZU 25R6YhhjCtYSqfI/XvQVBKlfECkNBc3GqHFrPHX3cjrdIeRbX11FTgn6wZ0yvd9zuRLt 6mVrhTNjc8TmvYKaTgsmCuK01SWcmqH1fZ2hkg7oAxIiCSfQbdYfSxyfQLsVNZDqRkZT zJROt869jaromas4tq6vwQUkcsHo/l6v/eccNPdmkiqotoB9XU/xuBbDMAqbmEfoy774 4IWwzvxszwTp5mtnD65p0UqhHTbNqedKt3Htg5ctwfNPVmRcbHHPfEVTFwtcou7iyy+L TLaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FX7Fr0VGwGKz4f8SfoHngM0/2TVigP4Xmv6bWcVIjF0=; b=ApJfMwI5eCZfKPhdBMiFJ648AjtXvzehM8M778k7IunMxLKvvETuBAfSPz3skMESrI AA8vxBmBLQWfPe9JqJ7oilF2fn6FTpJ0OcAFdcvafoSDT1ap8RiBFwG6DVhX00KhGXev aOzzjqPVq4I7jDIV1lfY5P0CQhQfIYyNpTonUxcpbh3d3jnZPuKXOsAIJNsLSkqNw7TQ 9S1IQhYV09kewc0LrJ2KPKaQH43tLFFpf5OcS2l5QQxNcIh27wSDHOgJ2Kvn7fuLIlyE hHIQFSPkjzworuyJ0gcsJnnw3n1ro+CM/pRUOchpgJmnOU8V0Q+o1bP9rYwY2zl7R82j eR4Q==
X-Gm-Message-State: APt69E0aHbEfkSKIjF2Ynuupw4px2wLogRqS6TOja+/oDU/8Q0rstfqA S0GDVHK+c5GDiZiIkxrTWvMP6xDirlsiXfc3r5aqx3zp
X-Google-Smtp-Source: ADUXVKIktysJ7NWulXIH173qeOfrlCoLamQjtoPQNwuTM3+W9zr3+PIN7DRUze0nyH7Jx1UfboyrXckPwaFzMcslJlI=
X-Received: by 2002:a1c:8312:: with SMTP id f18-v6mr2219572wmd.127.1528857903264; Tue, 12 Jun 2018 19:45:03 -0700 (PDT)
MIME-Version: 1.0
References: <FEACFE5A-F2E6-4533-8602-C05F8A1FB59A@consulintel.es> <28C9E7B4-1D2F-4C65-A121-90E9AFB470AD@gmail.com> <CAHL_VyDc1iF7T4k3J1uQvDYUpxaRg7_eOqK6poV_cZ-NAFAEDQ@mail.gmail.com> <7B87AAA7-E5C5-498E-A41E-8927BC554F29@consulintel.es> <CAKD1Yr2HpJFvW3=CQQV6HVr6tOGSW=Kj5mpO-rLLrEEuPZ4vmg@mail.gmail.com> <966D347E-0A4F-4F51-90AB-03D178EF4CEB@consulintel.es> <CAKD1Yr3uSr-KJCOhTJvaf1xh4g7hOqwzxZSv7TNH5fB5Z1VigQ@mail.gmail.com> <C48F6BAD-84CE-4121-B862-218004A417D3@consulintel.es> <CAKD1Yr1_NeLyAmdAJitd=jUKeY0kW8qxV_9FWGCbNf1__ppecw@mail.gmail.com> <018DD24B-DD2F-4B31-A939-328173891F3E@consulintel.es>
In-Reply-To: <018DD24B-DD2F-4B31-A939-328173891F3E@consulintel.es>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Wed, 13 Jun 2018 11:44:51 +0900
Message-ID: <CAKD1Yr1ohmb9BUV+KO2Ff+LJ1+pNwQ+-UJ6t7MmwY6PV3MLhyA@mail.gmail.com>
To: jordi.palet=40consulintel.es@dmarc.ietf.org
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003cebd1056e7cf8f0"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/jwAaIYeLrArnVGyI8kHexfQERhs>
Subject: Re: [v6ops] updating RFC8026 to support 464XLAT in draft-ietf-v6ops-transition-ipv4aas
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jun 2018 02:45:17 -0000

On Tue, Jun 12, 2018 at 7:40 PM JORDI PALET MARTINEZ <jordi.palet=
40consulintel.es@dmarc.ietf.org> wrote:

> You don’t need RFC7050 neither DNS64, you can use PCP (RFC7225) to tell
> the CLAT the NAT64 prefix. It also provides additional advantages to the
> operator to control many related aspects (see section 3 of RFC7225).
>
>
>
> 1.       If the operator wants to enable 464xlat: they should hand out a
> DNS64 to the CPE.
>
> 2.       If the operator wants to disable 464xlat: they should NOT hand
> out a DNS64 to the CPE.
>
> This doesn’t work, because the operator may be using RFC7225 instead of
> RFC7050. You need to try both in that case, and you aren’t providing a
> “priority” to a possible list of mechanisms, which is what RFC8026 does.
>

But it's the same problem again: what's the use case for this DHCPv6
option? An operator that's using RFC7225 has an easy way to tell the CPE
not to do 464xlat: don't hand out the prefix64 to those CPEs. So this is
already possible today.


> 3.       If the operator uses 464xlat, they should not allow the user to
> change the DNS server.
>
>
>
>
>
> Let’s be realistic. You can’t “force” the customer to avoid changing the
> DNS …
>

On an operator-managed CPE, you can. On a user-managed CPE, you can't. But
on such a CPE you probably shouldn't be disabling 464xlat. If the user
wants to use it, it's their CPE, right?