Re: [v6ops] Turning on IPv6 Routers

"Ackermann, Michael" <MAckermann@bcbsm.com> Thu, 03 August 2017 13:25 UTC

Return-Path: <mackermann@bcbsm.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 786CF12702E for <v6ops@ietfa.amsl.com>; Thu, 3 Aug 2017 06:25:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.092
X-Spam-Level:
X-Spam-Status: No, score=-4.092 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=bcbsm.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e0pknzU42dYa for <v6ops@ietfa.amsl.com>; Thu, 3 Aug 2017 06:25:28 -0700 (PDT)
Received: from mx.z120.zixworks.com (bcbsm.zixworks.com [199.30.235.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C8F4126C23 for <v6ops@ietf.org>; Thu, 3 Aug 2017 06:25:26 -0700 (PDT)
Received: from 127.0.0.1 (ZixVPM [127.0.0.1]) by Outbound.z120.zixworks.com (Proprietary) with SMTP id C713DC0D9D for <v6ops@ietf.org>; Thu, 3 Aug 2017 08:07:42 -0500 (CDT)
Received: from imsva1.bcbsm.com (unknown [12.107.172.80]) by mx.z120.zixworks.com (Proprietary) with SMTP id 6AEDEC0D9A; Thu, 3 Aug 2017 08:07:41 -0500 (CDT)
Received: from imsva1.bcbsm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 2F95692079; Thu, 3 Aug 2017 09:07:41 -0400 (EDT)
Received: from imsva1.bcbsm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id EE1F692057; Thu, 3 Aug 2017 09:07:40 -0400 (EDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (unknown [207.46.163.87]) by imsva1.bcbsm.com (Postfix) with ESMTPS; Thu, 3 Aug 2017 09:07:40 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bcbsm.onmicrosoft.com; s=selector1-bcbsm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=heBMdqaES+qxgi0D//ObzbVYAXhO2rtjypRdPNOAh9A=; b=mHcBX2IkQ4PtIONp8D8rehcQ8gXOIPOw9BcFkowPQQwmBmm2REmQID3TN86d1q/GE3mrO26v9QdaUScbBpoWVwc9ymx5D++kga1H9oRGpmaFAumiuxOQlSlt8vg6oC6ihx4Rhff+qos5bqgu0Bw3wq44mXc2l3cZMjaMKgcBmxM=
Received: from CY4PR14MB1368.namprd14.prod.outlook.com (10.172.158.148) by CY4PR14MB1366.namprd14.prod.outlook.com (10.172.158.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1304.22; Thu, 3 Aug 2017 13:07:39 +0000
Received: from CY4PR14MB1368.namprd14.prod.outlook.com ([10.172.158.148]) by CY4PR14MB1368.namprd14.prod.outlook.com ([10.172.158.148]) with mapi id 15.01.1304.023; Thu, 3 Aug 2017 13:07:39 +0000
From: "Ackermann, Michael" <MAckermann@bcbsm.com>
To: Lee Howard <lee@asgard.org>, Nick Hilliard <nick@foobar.org>, Fred Baker <fredbaker.ietf@gmail.com>
CC: IPv6 Ops WG <v6ops@ietf.org>, 6man WG <ipv6@ietf.org>, "draft-ietf-6man-rfc6434-bis@ietf.org" <draft-ietf-6man-rfc6434-bis@ietf.org>
Thread-Topic: [v6ops] Turning on IPv6 Routers
Thread-Index: AQHTAWxnLK4tXfb/J0eDXgJbGwTvdaJypCaAgAALLVA=
Date: Thu, 03 Aug 2017 13:07:39 +0000
Message-ID: <CY4PR14MB136895B8F3AA3B4860AB96A0D7B10@CY4PR14MB1368.namprd14.prod.outlook.com>
References: <28757A47-53D8-459E-B76D-D5D5DE3D5897@gmail.com> <5970CB51.3090806@foobar.org> <D5A88B60.7F356%lee@asgard.org>
In-Reply-To: <D5A88B60.7F356%lee@asgard.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=MAckermann@bcbsm.com;
x-originating-ip: [165.225.39.61]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY4PR14MB1366; 20:RpApsfpfHToiR1aCMO32LTkRPXJqlgSnRvww6b1effWKiBwmai5qAYncYefn6RECvGbQeW/lCduBgZJr5kTYeyXVfRxclT5Sf81PN/stwKEQcrcYdeWRumhHB8SQbMAa9K2Dtq3bf22bQrJ7m0KdUHqjD5yFh3zWy8diLRiMjTI=
x-ms-office365-filtering-correlation-id: c4d62c0e-c021-4711-ce97-08d4da709e99
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:CY4PR14MB1366;
x-ms-traffictypediagnostic: CY4PR14MB1366:
x-exchange-antispam-report-test: UriScan:(192374486261705);
x-microsoft-antispam-prvs: <CY4PR14MB1366C676BA9C984FD53B983CD7B10@CY4PR14MB1366.namprd14.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123555025)(20161123558100)(20161123560025)(20161123562025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY4PR14MB1366; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY4PR14MB1366;
x-forefront-prvs: 03883BD916
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(39450400003)(39410400002)(39830400002)(39400400002)(24454002)(189002)(377454003)(13464003)(199003)(4326008)(80792005)(25786009)(8676002)(101416001)(33656002)(478600001)(77096006)(189998001)(6436002)(229853002)(72206003)(86362001)(305945005)(97736004)(7736002)(2900100001)(6506006)(966005)(55016002)(38730400002)(6246003)(2950100002)(6116002)(102836003)(53546010)(3846002)(66066001)(106356001)(7696004)(2906002)(5660300001)(3660700001)(3280700002)(39060400002)(9686003)(74316002)(105586002)(6306002)(68736007)(53936002)(14454004)(54906002)(50986999)(8936002)(54356999)(99286003)(81156014)(81166006)(76176999); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR14MB1366; H:CY4PR14MB1368.namprd14.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: bcbsm.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: bcbsm.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Aug 2017 13:07:39.6013 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 6f56d3fa-5682-4261-b169-bc0d615da17c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR14MB1366
X-TM-AS-GCONF: 00
X-VPM-HOST: vmvpm02.z120.zixworks.com
X-VPM-GROUP-ID: 4f985c0c-8936-4bd8-bf23-0e377d80b178
X-VPM-MSG-ID: 29ef2b8a-3667-4d63-a000-8af4c7b39130
X-VPM-ENC-REGIME: Plaintext
X-VPM-IS-HYBRID: 0
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/nXyrqpt60bzsWev7gZeCtWwUVGk>
Subject: Re: [v6ops] Turning on IPv6 Routers
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Aug 2017 13:25:29 -0000

Just a quick 2 cents from the Enterprise perspective. 

Unfortunately (IMHO),  most Enterprises expressly and purposely turn IPv6 off in routers.     As mentioned,  the business case(s) are still not obvious and it is thus seen only as excessive traffic and potential problems.  

Please don't shoot the messenger.  

Thanks

Mike



-----Original Message-----
From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Lee Howard
Sent: Thursday, August 3, 2017 8:25 AM
To: Nick Hilliard <nick@foobar.org>; Fred Baker <fredbaker.ietf@gmail.com>
Cc: IPv6 Ops WG <v6ops@ietf.org>; 6man WG <ipv6@ietf.org>; draft-ietf-6man-rfc6434-bis@ietf.org
Subject: Re: [v6ops] Turning on IPv6 Routers



On 7/20/17, 5:25 PM, "v6ops on behalf of Nick Hilliard"
<v6ops-bounces@ietf.org on behalf of nick@foobar.org> wrote:

>Fred Baker wrote:
>> "If IPv4 router operation is enabled by default, enable IPv6 router 
>> operation by default."
>
>this is undoubtedly well-intentioned, and the idealist bit in me 
>sympathises with the principal.  However with my enable hat on, a 
>recommendation like this isn't going to fix any problem associated with
>ipv6 adoption.

I completely disagree, but it’s dependent on where the router exists.
For a home gateway router, “IPv6 on by default” would increase the number of people using IPv6, although I have no way to estimate the impact.

For an enterprise edge router, “IPv6 on by default” might accidentally get
IPv6 deployed. There’s potential risk if “IPv6 firewall on by default”
isn’t also enabled, but this is mentioned in the Security Considerations section.

In data centers and core networks, there isn’t a strong case either way, because those configurations should be tightly managed, and accidentally enabling IPv6 is unlikely to leak anywhere else.

>
>The problems with ipv6 adoption revolve entirely around cost/benefit.

Well, yes, but not always in the way I think you mean it.
Tens of millions of people use IPv6 daily without ever having done a cost-benefit analysis.

>Pressing problems still include things that should have been resolved 
>years ago, e.g. vendors charging extra for ipv6 support (today's
>bugbear: provisioning system vendors, please note that charging extra 
>for basic ipv6 functionality is destructive in the long term and 
>corrosive for your customer relationships)

Yeah, that’s a bad vendor relationship, and a vendor doing that must be pretty confident that their customer otherwise loves their product and isn’t tempted to find an alternative vendor.

>
>As a separate issue, from an operational point of view, implicit 
>enabling of functionality in one area when it's explicitly enabled in 
>another is something that needs to be handled carefully because 
>otherwise you can end up violating the principal of least astonishment.

Anyone astonished by IPv6 working needs to be astonished.

Lee


>
>Nick
>
>_______________________________________________
>v6ops mailing list
>v6ops@ietf.org
>https://www.ietf.org/mailman/listinfo/v6ops
>


--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------


The information contained in this communication is highly confidential and is intended solely for the use of the individual(s) to whom this communication is directed. If you are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or distribution of this information is prohibited. Please notify the sender, by electronic mail or telephone, of any unintended receipt and delete the original message without making any copies.
 
 Blue Cross Blue Shield of Michigan and Blue Care Network of Michigan are nonprofit corporations and independent licensees of the Blue Cross and Blue Shield Association.