Re: [v6ops] draft-palet-v6ops-transition-ipv4aas discussion

Richard Patterson <richard@helix.net.nz> Tue, 17 April 2018 19:20 UTC

Return-Path: <richard@helix.net.nz>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A800127909 for <v6ops@ietfa.amsl.com>; Tue, 17 Apr 2018 12:20:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.61
X-Spam-Level:
X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=helix-net-nz.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CuOxJdZTU6ij for <v6ops@ietfa.amsl.com>; Tue, 17 Apr 2018 12:20:49 -0700 (PDT)
Received: from mail-io0-x236.google.com (mail-io0-x236.google.com [IPv6:2607:f8b0:4001:c06::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE2C412025C for <v6ops@ietf.org>; Tue, 17 Apr 2018 12:20:47 -0700 (PDT)
Received: by mail-io0-x236.google.com with SMTP id d6so23748401iog.1 for <v6ops@ietf.org>; Tue, 17 Apr 2018 12:20:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=helix-net-nz.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=1NQldQceUYecjky6Vec0NJzNMmDM2ls/wGz5PhP0FXc=; b=PmvHQ2K1rMlOKVsGxB4fUoCBZoQOmym0LErLlFHSE9cCPfXuCOySIUt8tbzh+j3aTj s0lw21/qRBM/hTd1lKT3EO3frcivtxgyNMHBRuVkxVWTzusmpqa6PNALti393GzAGyZL j/Mbcxlyy6jmnQ7oaDyUcaJos2La6aVOmtJRJFWCbF5PFsMdnaYpwPJ3PZXglaNqrPsn BhZko3MyvgDNX24/guo4L7MDC7XoSDKH1e8kdH/Llm2zs1zp/fMUmVa0VLkZIfRWhreI PRLQzqZdurV4QXoXfmMYm750Xif5NS/QXaU0rcpMUJTE77UfaJlEpX53Cce4ppbcoQoX sWNw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=1NQldQceUYecjky6Vec0NJzNMmDM2ls/wGz5PhP0FXc=; b=JkDLmYYS8Znhyc8xWIK/YdVcYClF7verCsLVnSnGHGTtnZhA+5dgzyG676aUZ3We1s zLYfD8buB57dNTTi+BAGmvWvOLlTphPyEWNc2yLDWVvgQ9FkV6I3whoSIZNEW8gtC87m 5xj8+EnD5Neuiq+RoFpPE7mAg2vNmFHi6TlTnqfon2IBz4y+ljA11SG3ePI5lTpuvTN0 sE0rEB2EwGqeE9mZMbdMrLAXwW/hK8kxlSv2R+KryaJ12eAnIvwNP6vZRQsMRUJliQC0 sKZREHEaO+RXc4uIcGKtjfvImoK29mlBueC92G5rAN8V7T/n4i9njkj7ULJSr4Gj7aIc BdZw==
X-Gm-Message-State: ALQs6tAC2xVaTUFDqZtbHwKvz3f1zk2HyNnLWvPY4hbjCvWJHDAzl+hf zSI2o54G8DpiQrT5sK+UqxHJiXs8
X-Google-Smtp-Source: AIpwx49Myc+QfuWHj/OFgOHW17VIiZ44QYsd4uyvAuXcWJF69bT7V9ilkNDmH3/XU9U5U9lPXqTR1Q==
X-Received: by 10.107.173.137 with SMTP id m9mr3352244ioo.1.1523992846722; Tue, 17 Apr 2018 12:20:46 -0700 (PDT)
Received: from mail-io0-f182.google.com (mail-io0-f182.google.com. [209.85.223.182]) by smtp.gmail.com with ESMTPSA id x79sm7914847ioe.17.2018.04.17.12.20.45 for <v6ops@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 17 Apr 2018 12:20:45 -0700 (PDT)
Received: by mail-io0-f182.google.com with SMTP id c26so11111608iob.3 for <v6ops@ietf.org>; Tue, 17 Apr 2018 12:20:45 -0700 (PDT)
X-Received: by 10.107.204.1 with SMTP id c1mr3293682iog.304.1523992844933; Tue, 17 Apr 2018 12:20:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.47.137 with HTTP; Tue, 17 Apr 2018 12:20:24 -0700 (PDT)
In-Reply-To: <3A083AA8-41D3-4BF8-BE31-5071975B6F98@gmail.com>
References: <3A083AA8-41D3-4BF8-BE31-5071975B6F98@gmail.com>
From: Richard Patterson <richard@helix.net.nz>
Date: Tue, 17 Apr 2018 20:20:24 +0100
X-Gmail-Original-Message-ID: <CAHL_VyC1xUDDqZRz1r--u8nyuLaZRnsT0ZR7hzOw4HWUkgwPXg@mail.gmail.com>
Message-ID: <CAHL_VyC1xUDDqZRz1r--u8nyuLaZRnsT0ZR7hzOw4HWUkgwPXg@mail.gmail.com>
To: V6 Ops List <v6ops@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/lZDAPXgFmI2ZkmflY_Gh7Bph8yI>
Subject: Re: [v6ops] draft-palet-v6ops-transition-ipv4aas discussion
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Apr 2018 19:20:52 -0000

Hi Fred, et al.

Speaking as an Operator who is currently validating MAP-T as a
solution, I'm in favour of making sure it itself is included in future
versions of this draft.

There are multiple vendors offering MAP-T Border Relays, and we've
been testing both OpenWRT-based CPEs as well as a custom CPE based on
the Broadcom BCM63138 SoC.
The Broadcom reference SDK comes with the CERNET kernel module and
userland tool, and supports hardware acceleration of MAP-T translated
flows with Broadcom's Runner fastpath.

I was also quite impressed with OpenWRT's implementation; aside from
initially needing internet connectivity to install the map-t module
after a fresh install, no further configuration is required to have
the CPE dynamically configure itself with MAP-T, given the appropriate
DHCPv6 options.  Kudos to the OpenWRT/LEDE devs on their support.

Re: the draft's §5.3.4.  It's succinct enough, whilst still directing
implementors to the relevant RFCs, however I'm still mulling over the
NAT44 and iptables/netfilter concerns that I raised in softwires a few
months back.[1]   The address-sharing mode's algorithm for port
allocations, isn't easily implementable with the current
iptables/netfilter behaviour.  OpenWRT's approach creates rule
shadowing and port ranges that never get utilised.

-Richard


[1] https://www.ietf.org/mail-archive/web/softwires/current/msg06832.html

On 15 April 2018 at 06:00, Fred Baker <fredbaker.ietf@gmail.com> wrote:
> At IETF 101, Jordi Palet Martinez presented draft-palet-v6ops-transition-ipv4aas. The draft is at https://tools.ietf.org/html/draft-palet-v6ops-transition-ipv4aas, and his presentation deck is at https://datatracker.ietf.org/meeting/101/materials/slides-101-v6ops-transition-requirements-for-ipv6-ce-routers-to-support-ipv4-as-a-service-00.
>
> I would like to invite discussion.
>
> In particular, this draft derives from draft-ietf-v6ops-rfc7084-bis, and the chairs wonder if it should be reposted as the next version of draft-ietf-v6ops-rfc7084-bis. That should happen if an only if the working group thinks it should be published as an RFC (now or at some point) adding considerations for implementors of RFC 7084 and also implementing transition services.
>
> A key comment at IETF 101 was that there remain far too many transition mechanisms listed. It would be helpful, if you hold that opinion, if you could give that advice, identify the mechanism or mechanisms you think should be listed, and indicate the reasoning behind your viewpoint. For example, if you think MAP-T should be listed, it would be helpful to know what operators are implementing MAP-T and are looking for CE Routers that support it. The same comment applies to any such mechanism or service.
>
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>