Re: [v6ops] Please review the No IPv4 draft

Matthew Petach <mpetach@netflight.com> Mon, 21 April 2014 16:43 UTC

Return-Path: <mpetach@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9C961A0223 for <v6ops@ietfa.amsl.com>; Mon, 21 Apr 2014 09:43:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.277
X-Spam-Level:
X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y1RHsrc2R7wI for <v6ops@ietfa.amsl.com>; Mon, 21 Apr 2014 09:43:43 -0700 (PDT)
Received: from mail-vc0-x22f.google.com (mail-vc0-x22f.google.com [IPv6:2607:f8b0:400c:c03::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 174AE1A0181 for <v6ops@ietf.org>; Mon, 21 Apr 2014 09:43:30 -0700 (PDT)
Received: by mail-vc0-f175.google.com with SMTP id lh14so1226260vcb.20 for <v6ops@ietf.org>; Mon, 21 Apr 2014 09:43:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=GAd3yK9acjIRxpIZg8EwP0BJcaoSWa7CzWZlQlOMVxQ=; b=O6hlm6SljM2EZ3zlUZezUm3GLL+QJ+SMRaAbv5xJLkj7myarLFVEf6of1Jq1iae9p4 loFygbs/x+lA/Z5QlHxMEsokAujYnLmYAlgPW+z01i4PO7xTxyVNrsXHx6Vw9VFo2yhG E1X+qpYDFNu8UGOzuE2oMhsMenzFZ1CfOxGKNULZdX/Ge6TYgZvaDnZOhY0VgdG7Ieg8 U0k8AQw4B6BEyYL1Czlsr1/w1ZK7h/nSe3u16XuwPd3L+W1C34RbR1c33oX3oNVP7Yi0 FfMug0vEi3bIkO9tOa2wASIYbLDqzq+msBRko/uEFdcAX6GJW0F4sMRADqNBYZHeoxLr cqpA==
MIME-Version: 1.0
X-Received: by 10.52.6.162 with SMTP id c2mr26938972vda.6.1398098604841; Mon, 21 Apr 2014 09:43:24 -0700 (PDT)
Sender: mpetach@gmail.com
Received: by 10.220.173.193 with HTTP; Mon, 21 Apr 2014 09:43:24 -0700 (PDT)
In-Reply-To: <8E450CDC-FFC5-4649-89FE-387836C8E40B@nominum.com>
References: <534BF5A5.5010609@viagenie.ca> <20140415083615.GB43641@Space.Net> <534D3672.3060702@viagenie.ca> <3446106.k0lm12lQ8b@linne> <alpine.DEB.2.02.1404161034220.10236@uplift.swm.pp.se> <CAKD1Yr2D+ZMi-UctuvrMzyqoHqgBy5O26GODT=bRwq0PsvLgLw@mail.gmail.com> <alpine.DEB.2.02.1404161053110.10236@uplift.swm.pp.se> <20140416155714.GB64039@ricotta.doit.wisc.edu> <alpine.DEB.2.02.1404162310050.10236@uplift.swm.pp.se> <B21C1073-ABBE-44FE-964F-65AD7849CD31@delong.com> <alpine.DEB.2.02.1404170658440.10236@uplift.swm.pp.se> <4EABCE38-7CBA-4C95-84EE-686A2300F26E@delong.com> <8E450CDC-FFC5-4649-89FE-387836C8E40B@nominum.com>
Date: Mon, 21 Apr 2014 09:43:24 -0700
X-Google-Sender-Auth: jOK2P5lgoFLbeP7imP6M9pgUvXw
Message-ID: <CAEmG1=oNyotn6tcKyxUuLCW0of-MxVrvUB08jsygjo8kidgt0g@mail.gmail.com>
From: Matthew Petach <mpetach@netflight.com>
To: Ted Lemon <ted.lemon@nominum.com>
Content-Type: multipart/alternative; boundary="20cf30334739b3e1dd04f790328e"
Archived-At: http://mailarchive.ietf.org/arch/msg/v6ops/p6tTw_T7G59GXdqvLDZLxOw42EY
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>
Subject: Re: [v6ops] Please review the No IPv4 draft
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Apr 2014 16:43:48 -0000

On Thu, Apr 17, 2014 at 7:48 AM, Ted Lemon <ted.lemon@nominum.com> wrote:

> On Apr 17, 2014, at 6:56 AM, Owen DeLong <owen@delong.com> wrote:
> > Providing a mechanism for an IPv6 LAN to shut down the IPv4 mobile
> network on a device which is unlikely to be enterprise controlled is not a
> solution in the real world, but only an attack vector.
>
> We are in full agreement on this point.   It has to be up to the device
> what it does with whatever configuration information the network supplies,
> and *I would not expect a device to take advice from one network about how
> to operate on another.*   You could imagine exceptions to this, but I think
> all of them would be equally well addressed by individually updating each
> device, so there's no reason to have a protocol for doing it.
>

Ted, I just want to repeat your statement once more:

"I would not expect a device to take advice from one network about how to
operate on another."

I don't think I could sum up my objections to this draft any
more clearly than you just did.  I would not expect any device
of mine to take advice from an IPv6 network about how to
operate on an IPv4 network.  Even if those networks happen
to be sharing the same physical piece of wire, or same range of
RF spectrum, they are independent and orthogonal networks.

Now, one can take steps to bring those networks together,
such as creating tunnels, encapsulating one network within
the other; but under those circumstances, one should realize
the now-shared-fate scenario one has delved into.  But by
default, the two protocols were designed to be ships in the
night, and what is being proposed here clearly violates
that.

(looking at this from the other side, it would have been an
interesting proposal a few years back to have a DHCPv4
option to tell hosts to shut down all those pesky teredo,
6in4, and other pesky IPv6 tunnelling, translation, and
encapsulation technologies that the hosts might have
tried to use that caused extra unnecessary packets
to clog the networks.  I'd like to imagine the outcry
against such a "packet of IPv6 death" would have
been equally as loud as what you're seeing now.)

Matt