Re: [v6ops] Making RDNSS a MUST?

Brian E Carpenter <brian.e.carpenter@gmail.com> Sun, 02 April 2017 22:52 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F06E81293F3 for <v6ops@ietfa.amsl.com>; Sun, 2 Apr 2017 15:52:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z93bnFKzbdhq for <v6ops@ietfa.amsl.com>; Sun, 2 Apr 2017 15:52:21 -0700 (PDT)
Received: from mail-io0-x241.google.com (mail-io0-x241.google.com [IPv6:2607:f8b0:4001:c06::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8651127077 for <v6ops@ietf.org>; Sun, 2 Apr 2017 15:52:20 -0700 (PDT)
Received: by mail-io0-x241.google.com with SMTP id f84so10587176ioj.0 for <v6ops@ietf.org>; Sun, 02 Apr 2017 15:52:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=/j7rOZjKoeH2GHMRLdD0iLxX6eBYNpL8MsAFvJf+C6o=; b=sIc8nh29JluFe60WSpxHgDdeDoSnYcCRkHTYj6PL3KvYbqlXed1O93Lqs60Cq7J8KB fRcxCLuADWI2DSpVq/RJbDZqp2IexUNTjsBz6OEiik9XoXrpoZj6vj0q9JAHJGDeWNSv bXbaF1Nmwe7y7KIJXmkzNWbUvUik1C6JkVaLb2nclempE92YHqvcS/vduf6EMVHQdROg +bfQDtal7IoROnRgCJK3YqWF+fXxVUBR/pXSOI12Oi7JJqVk+l00SkMMB7z+g701ONYd XZYJsYJkbHYgvnfoajWkDJpi7f3xwOdO1/m1JyWWKKBU0iuj83c+y9o0kfAhiEefAPRZ tIVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=/j7rOZjKoeH2GHMRLdD0iLxX6eBYNpL8MsAFvJf+C6o=; b=uItXUhJpuGU2gF6VywczLKswL9fxZ1d76Jsw1z+xtO69bTaUYWEyG39EF26xY7RuCt 3W8WL520eIAzyMi8AF31ZuP6R7gslIwu4qPI6ZM7wpip344wHdhmpanz7YsCBqGY1END B36LA7I5QOLGwULMUQMGdPsvUEvx7fUdiMd6a9JGS7jn5SzeRn6MiLZM4kiRCj38lR6J syd8LJCK1qCv1lZ5nSDoYwXdmF0YAPc1czfBe1/vrM99RDnwlu7eB9nnv+Mv73lpZ/7N KeK/IzaRCyua349D8oyXpMbKULKUiFU9YMGoI1Rq01DkhljA7sXcKAPL42tmj8vQbLi2 qNlg==
X-Gm-Message-State: AFeK/H1XK9UornDNz6lrOyUhdBTC7nea+9KUhDIYcaCCocTDZGTLlmEkBZTAkq4caJa2aA==
X-Received: by 10.107.152.84 with SMTP id a81mr15228657ioe.207.1491173540031; Sun, 02 Apr 2017 15:52:20 -0700 (PDT)
Received: from [172.16.11.95] (50-76-68-137-static.hfc.comcastbusiness.net. [50.76.68.137]) by smtp.gmail.com with ESMTPSA id 141sm6819358ioe.47.2017.04.02.15.52.19 for <v6ops@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 02 Apr 2017 15:52:19 -0700 (PDT)
To: v6ops@ietf.org
References: <CAKD1Yr2FMvpgjSPv-1cdWQGTFzB8oRCvm=57MgOv=tH11awpOA@mail.gmail.com> <6778e48f-250e-30ca-6d57-a8d87c8f0dd6@dougbarton.us> <8ab82700-3590-4370-d15c-e41f6d6bb64f@gmail.com> <25600485-9133-28d4-25e8-b13373a0cffd@dougbarton.us>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <d6eede07-4e57-235d-f05f-cf962418f8ab@gmail.com>
Date: Mon, 03 Apr 2017 10:52:20 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <25600485-9133-28d4-25e8-b13373a0cffd@dougbarton.us>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/mTAwQ6wDEIHyVD0F34110g0Hbg4>
Subject: Re: [v6ops] Making RDNSS a MUST?
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 02 Apr 2017 22:52:23 -0000

Doug,

A few points, on three of your messages:

On 03/04/2017 08:02, Doug Barton wrote:
> On 04/01/2017 09:02 AM, Brian E Carpenter wrote:
>> I was actually arguing that making them both a MUST implement is "more"
>> valid because it increases that chance that an arbitrary host will work
>> on an arbitrary network.
> 
> No, it wouldn't, because "MUST support" is not the same as "MUST 
> provide." And people are going to continue configuring their network the 
> way they want to in any case.

Your understanding of statistics and probability seems to be a bit different
from mine. What we have out there is, in practice, a random mixture of hosts
of all ages connected to a random mixture of better or worse managed networks
using routers of all ages. All I'm saying is that the more implementers are
chivvied in the direction of implementing both solutions, the more
interoperability we will get, statistically, over the next decades. That is
true precisely *because* operators will configure their networks the way
they want to, not the way some RFC says.

On 03/04/2017 08:05, Doug Barton wrote:> On 03/31/2017 12:18 AM, Simon Hobson wrote:
>> Doug Barton <dougb@dougbarton.us> wrote:
>>
>>> People who like it can implement it, people who don't, shouldn't
>>> have to.
>>
>> But that is the whole problem ! As referenced some time ago, in the
>> real world there is a problem where there are two ways of providing
>> the information, and two ways of getting it. If router only does A
>> and device only does B then device doesn't get DNS info; similarly if
>> router only does B and device only does A then device doesn't get DNS
>> info; in either case the problem is that you've connected a device to
>> an IPv6 network and "it doesn't work".
> 
> Yes. That was the completely predictable result of the introduction of 
> new options to SLAAC beyond RA, and the core objection made by those of 
> us who have been opposing additional such options for over a decade.
> 
> I've snipped the rest of your message because we all know how we got 
> here. We have created this mess by allowing the anti-DHCP crowd to run 
> the asylum. We need to stop letting that happen.

That is grossly unfair. My recollection is that RDNSS was added not as
an anti-DHCP provocation, but because we have always had a target "market"
for IPv6 that we referred to in the early days as the "dentist's office
scenario" where people with zero skill could plug stuff together and
it would work. Given SLAAC, the only missing link for that sceanrio was
DNS server configuration, and that is why RDNSS was specified. And it
works.
On 03/04/2017 08:52, Doug Barton wrote:
> On 03/31/2017 05:28 AM, Brian E Carpenter wrote:
>> Doug,
>> On 31/03/2017 16:17, Doug Barton wrote:
>>> On 3/29/2017 4:08 PM, Lorenzo Colitti wrote:
>>>> Given the discussion today on draft-gont-v6ops-host-configuration and
>>>> draft-ali-ipv6rtr-reqs , I'm wondering if we might find consensus to say
>>>> that host and router implementations MUST implement RDNSS.
>>>
>>> No.
>>>
>>> People who like it can implement it, people who don't, shouldn't have to.
>>
>> The word "implement" is hopelessly ambiguous.
> 
> No, it's a term of art, that I chose with great care. Completely aside 
> from my long experience in the IETF, my term as GM of the IANA (which 
> partially overlapped your term as IETF chair), and my 17+ years as a 
> FreeBSD developer; frankly I'm a little bit insulted that you didn't 
> assume that I was using it both correctly, and intentionally. OTOH I 
> can't expect everyone to keep everyone's resumes in mind all the time, 
> so I forgive you. :)

My observation is that the word "implement" is ambiguous. I have often
heard or seen it used such that it was impossible to know whether
it meant "write the code" or "switch it on."

>> As far as a vendor or open source developer is concerned, the suggestion
>> is that they MUST include code for both methods. I'd be a bit more precise
>> and add that they MUST both be enabled by default in hosts, and at least one
>> MUST be enabled by default in routers, and they MUST be individually configurable
>> on or off in all nodes.
> 
> This is a terrible idea, for all of the reasons that I have expressed 
> already today. Most importantly for the reason that the IETF should not 
> be pushing the cost of its own inability to get its act together onto 
> vendors.

We've specified doing the same thing in two different ways. What we haven't
done, evidently, is describe the scenarios in which the two solutions are
more, or less, appropriate. That's a gap.

    Brian