Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Vasilenko Eduard <vasilenko.eduard@huawei.com> Mon, 25 April 2022 10:16 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7DA23A1711; Mon, 25 Apr 2022 03:16:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.909
X-Spam-Level:
X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fg-OJHzzWD2D; Mon, 25 Apr 2022 03:15:57 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28C9D3A16F3; Mon, 25 Apr 2022 03:15:57 -0700 (PDT)
Received: from fraeml708-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Kn176124cz67xvP; Mon, 25 Apr 2022 18:13:22 +0800 (CST)
Received: from mscpeml500001.china.huawei.com (7.188.26.142) by fraeml708-chm.china.huawei.com (10.206.15.36) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Mon, 25 Apr 2022 12:15:51 +0200
Received: from mscpeml500001.china.huawei.com (7.188.26.142) by mscpeml500001.china.huawei.com (7.188.26.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Mon, 25 Apr 2022 13:15:51 +0300
Received: from mscpeml500001.china.huawei.com ([7.188.26.142]) by mscpeml500001.china.huawei.com ([7.188.26.142]) with mapi id 15.01.2375.024; Mon, 25 Apr 2022 13:15:51 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: Erik Auerswald <auerswald@fg-networking.de>
CC: Nick Buraglio <buraglio@es.net>, v6ops list <v6ops@ietf.org>, 6man list <ipv6@ietf.org>
Thread-Topic: [v6ops] ULA precedence [Thoughts about wider operational input]
Thread-Index: AQHYP7p8DxM4kB1RcEyXrx0Fjrd/n6zQoAkAgADaDHCAKqI+gIADMyqAgABbM+CAAJU1AIAAM/jw///hYwCAAEVz4A==
Date: Mon, 25 Apr 2022 10:15:50 +0000
Message-ID: <3ac37e89f9b243beaeeec409bd2bb54a@huawei.com>
References: <CAM5+tA8WvjvWirxqE6kQ9LQAG0NcpWyCLGVooB=G7gZ9ETb2zQ@mail.gmail.com> <20220424172743.GA218999@fg-networking.de> <3bad47a019754cc5a97a33f46da94179@huawei.com> <20220425074816.GA67548@fg-networking.de> <f020b86565e7412e99dc9e1898db3141@huawei.com> <20220425090442.GD67548@fg-networking.de>
In-Reply-To: <20220425090442.GD67548@fg-networking.de>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.81.198.161]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/o8yckNA7-iBBZYtPdUrJq8k9Im4>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Apr 2022 10:16:16 -0000

> > Using different first hop gateways for GUA and ULA is another 
> > problem.  It would be nice if hosts would (optionally) not consider 
> > a gateway announcing a ULA prefix as default gateway, but only for 
> > ULA reachability.
> 
> [EV] Nope. It is better to revert the logic: decide about the
>      source address first (needed anyway for MHMP) only then to
>      decide about the next-hop.

If a router announcing only a ULA prefix would not be considered as a default router, the host could detect that GUA is not reachable, and fall back to IPv4.  I think this is a different use case from what you have in mind.

EV: Yes, I am not satisfied with fall back to IPv4 if there is a possibility for IPv6 communication.
If the host would choose the source address first then it would be still possible to choose next-hop router,
Not the other way around.

-----Original Message-----
From: Erik Auerswald [mailto:auerswald@fg-networking.de] 
Sent: Monday, April 25, 2022 12:05 PM
To: Vasilenko Eduard <vasilenko.eduard@huawei.com>
Cc: Nick Buraglio <buraglio@es.net>; v6ops list <v6ops@ietf.org>; 6man list <ipv6@ietf.org>
Subject: Re: [v6ops] ULA precedence [Thoughts about wider operational input]

Hi Eduard,

On Mon, Apr 25, 2022 at 07:57:05AM +0000, Vasilenko Eduard wrote:
> Hi Erik,
> See below
> Eduard

I have added the quoting level you omitted to help differentiate who wrote what, and trimmed the message below.

> -----Original Message-----
> From: Erik Auerswald [mailto:auerswald@fg-networking.de]
> Sent: Monday, April 25, 2022 10:48 AM
> > On Sun, Apr 24, 2022 at 08:12:29PM +0000, Vasilenko Eduard wrote:
> > > [...]
> > > 2. Attach a special Label (redundant action because FC/7 already 
> > > has unique Label=13)
> >
> > The different label to differentiate between locally used ULA
> > prefix(es) and the remaining ULA space is intentional.
> 
> [EV] Why?
> I do not understand the advantage to populate more prefixes into the 
> host If the site would have many ULA prefixes.

This is required to prefer locally used ULA over IPv4 and possibly
IPv6 GUA, but prefer IPv6 GUA and IPv4 over non-local ULA.
Non-local ULA prefixes are generally not reachable.

In a special situation, where ULA is used as a replacement of GUA, say a large private network, or a NAT66 setup, ULA should be treated just as GUA, as was done before RFC 6724.  This can be achieved with RFC 6724 compliant systems by changing the fc00::/7 policy table entry to use identical preference and label as the ::/0 entry.
This expresses the local policy to treat ULA identical to GUA, just as private IPv4 space is treated identical to public IPv6 space for address selection.

> > > Imagine the situation where only one router on the link announces 
> > > ULA PIO, but the other one - GUA PIO.  (Routers are not in sync 
> > > for announcements).

It seems that RFC 8028 as mentioned by Brian would provide a solution for this.

> > Using different first hop gateways for GUA and ULA is another 
> > problem.  It would be nice if hosts would (optionally) not consider 
> > a gateway announcing a ULA prefix as default gateway, but only for 
> > ULA reachability.
> 
> [EV] Nope. It is better to revert the logic: decide about the
>      source address first (needed anyway for MHMP) only then to
>      decide about the next-hop.

If a router announcing only a ULA prefix would not be considered as a default router, the host could detect that GUA is not reachable, and fall back to IPv4.  I think this is a different use case from what you have in mind.

Kind regards,
Erik
--
Dipl.-Inform. Erik Auerswald
Gesellschaft für Fundamental Generic Networking mbH
Geschäftsführung: Volker Bauer, Jörg Mayer
Gerichtsstand: Amtsgericht Kaiserslautern - HRB: 3630