Re: [v6ops] Please review the No IPv4 draft

[Owen DeLong <[e-mail]>]

On Apr 16, 2014, at 9:59 PM, Mikael Abrahamsson <[e-mail]> wrote:

> On Wed, 16 Apr 2014, Owen DeLong wrote:
> 
>> 
>> On Apr 16, 2014, at 2:11 PM, Mikael Abrahamsson <[e-mail]> wrote:
>> 
>>> On Wed, 16 Apr 2014, Dale W. Carder wrote:
>>> 
>>>> So, I am not in favor of adding more hints that may or may not observed that result in additional complexity and create an even more diverse set of behavior that has to be managed.  This is why I think the only real solution that would work in practice is ethertype filtering.
>>> 
>>> That still doesn't solve the problem of the enterprise network being IPv6 only but publishes A and AAAA entries for internal resources on the internal DNS zone, because other networks they have are dual stack.
>> 
>> A host which doesn’t have a v4 route to reach a given A record should ignore said A record pretty harmlessly in favor of the AAAA record. A host that does otherwise is a broken host.
> 
> It has a default IPv4 route out to the mobile network.

Providing a mechanism for an IPv6 LAN to shut down the IPv4 mobile network on a device which is unlikely to be enterprise controlled is not a solution in the real world, but only an attack vector.

Sure, 5 years ago, you could make the case that corporate mobile devices might be under sufficient control that this could be an effective solution in many cases. Today, BYOD is becoming more and more the trend and the percentage of mobile devices under sufficient corporate control to make this feasible is small and shrinking rapidly.

Instead, it simply introduces a DoS vector for additional attacks on mobile devices in the wile, which is pretty much the last thing we need at this point.

So, to make Ted happy… I’ll put this into terms he will hopefully consider appropriate:


This won’t work because it introduces a significant new denial of service path to a fairly large fraction of non-afflicted hosts until such time as they turn off the solution leading to...

This won’t work because the solution will work on such a small fraction of the afflicted hosts as to be ineffective at best.

Owen