Re: [v6ops] The need for local-ipv4 socket transition solutions -- NAT64/DNS64 remains insufficient

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 24 March 2015 16:24 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FBDF1A88A9 for <v6ops@ietfa.amsl.com>; Tue, 24 Mar 2015 09:24:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZP86Fo4fx3b6 for <v6ops@ietfa.amsl.com>; Tue, 24 Mar 2015 09:24:25 -0700 (PDT)
Received: from mail-we0-x234.google.com (mail-we0-x234.google.com [IPv6:2a00:1450:400c:c03::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAABE1A6F3F for <v6ops@ietf.org>; Tue, 24 Mar 2015 09:24:24 -0700 (PDT)
Received: by wetk59 with SMTP id k59so167709673wet.3 for <v6ops@ietf.org>; Tue, 24 Mar 2015 09:24:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=mJDpzp6W2CCzM1jotJeldmc+XMClAbKNA8E7Pl7yS1k=; b=FLbOdRnSxE+IB0e57+dBZ6USK1ecW/oESFGFhTA52O4VbigmI5uSWhQU0aWvWX7hPv iMOYwtBK04Xa2bomGh78f2VWtT+FvCzRB1jaVs7FSmNGpGDiev8tYYr2s+jvH7vCSrXm lmv6Fd3e4RLH7PcKzhYQkfc504bHnu6w4XxAHSPWgOFfq5hRsqNW3dG2sd1UJGeQqC3g VW/QVgGLc2+lUggqtW8yEtYjV9N3mAhbNUXEPwi2yg7qQmk1A5Wa55kwoxn/P78NGe4J YfL6PXOIl7DXmkxqM5AgchN/OKtZryFWt2f1/8p4HIa8X9kaPrNFCFmxlHecDcZ6+cuv uQJA==
X-Received: by 10.180.218.73 with SMTP id pe9mr16342638wic.79.1427214263108; Tue, 24 Mar 2015 09:24:23 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:176:28cc:dc4c:9703:6781? ([2001:67c:370:176:28cc:dc4c:9703:6781]) by mx.google.com with ESMTPSA id ha10sm6745840wjc.37.2015.03.24.09.24.21 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 24 Mar 2015 09:24:22 -0700 (PDT)
Message-ID: <55118FBB.4080205@gmail.com>
Date: Wed, 25 Mar 2015 05:24:27 +1300
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Lorenzo Colitti <lorenzo@google.com>, James Woodyatt <jhw@nestlabs.com>
References: <CAD6AjGT-hG-uvRQvRosrZtfrf0Nb8ne9jy=tD9oh=5zNM42Xsg@mail.gmail.com> <alpine.DEB.2.02.1503200639340.20507@uplift.swm.pp.se> <20150320134204.32af9c67@echo.ms.redpill-linpro.com> <A0BB7AD89EA705449C486BDB5FDCBC7B28518DD8@OPE10MB06.tp.gk.corp.tepenet> <550F1F1F.3060703@cernet.edu.cn> <CAD6AjGSxk-Hrf_NBOjpV-jvraG+xSA4p1j-AO+FQFcVGzuf1Lg@mail.gmail.com> <CAKD1Yr3ywVy_00GYuw4Eq6cW_ZeL16bxpquaWWDMgSz44LagAg@mail.gmail.com> <CAD6AjGS-QMi+3oVGWDxnSMhEJH=VymwcF=PwKLdwFRxwHpp_-Q@mail.gmail.com> <CAKD1Yr3Fhnx3XaXouK57gupGOzodKGb0quhQxaf76NjWxSp3WA@mail.gmail.com> <CADhXe51MUB-czeCtpc63E0cHPpb_39Vv0o2Y57EVU2w_makP5Q@mail.gmail.com> <CAKD1Yr2vvYe+=s2CFsVHMer96UNO_deOc2Na2F9CrXr1jbAj6A@mail.gmail.com>
In-Reply-To: <CAKD1Yr2vvYe+=s2CFsVHMer96UNO_deOc2Na2F9CrXr1jbAj6A@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/pcFHCTsskDVznkZ2YpwXQ0YjhkE>
Cc: IPv6 Ops WG <v6ops@ietf.org>
Subject: Re: [v6ops] The need for local-ipv4 socket transition solutions -- NAT64/DNS64 remains insufficient
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Mar 2015 16:24:31 -0000

On 25/03/2015 04:26, Lorenzo Colitti wrote:
> On Tue, Mar 24, 2015 at 10:06 AM, James Woodyatt <jhw@nestlabs.com> wrote:
> 
>> as an endpoint software developer, if every host I want to deploy on has a
>> CLAT provided by the system, then I'd observe that my incentives to stop
>> writing IPv4-only software logic would evaporate for all practical purposes.
>>
> 
> I'm not sure that's true. We have four scenarios, in order of decreasing
> incentives (from 100% to 0%) to write IPv4-only code:
> 
>    1. IPv4-only device
>    2. Dual-stack device (native IPv6 and NAT44 or NAT444)
>    3. IPv6-only device with "compatibility quality" IPv4 (e.g., 464xlat).
>    4. IPv6-only device
> 
> Based on personal experience, I know that #3 provides less incentives to
> write IPv4-only code than #2. I've heard developers say multiple times,
> "Double NAT and 464xlat? (i.e., #3.) Man, that sounds pretty flaky, and
> high latency too. What do I need to do to fix my code to support IPv6?" 

I think this is important. The biggest problem that I see is how to incent
smaller content providers (smaller than Google and Facebook, I mean) that
it is in their own interest to support native IPv6. If they perceive IPv4
as becoming a second-class service for millions of users, that might push
them in the right direction. #3 is useful in that context.

   Brian

> In
> contrast, #2 is seen as, "well, we still have IPv4 right? So we can just
> continue to use it. You say IPv6 has no NAT? But we deal with NAT today,
> and it works fine..."
> 
> I think the real discussion here is whether going from #2 to #4 without
> passing through #3 is possible at all. If you believe that it's possible,
> then #2 makes sense. If you believe it's not possible, then the only thing
> that makes sense is to do #3 ASAP.
> 
> I don't believe that going from #2 to #4 is possible for the industry. It
> may be possible for a tightly-controlled, substantial subset of the
> industry (e.g., Apple) to do it, but if we did not have a substantial part
> of the industry doing #3 already, we'd likely get stuck.
> 
> #3 does provide strong advantages over #2 to operators; in some networks,
> #2 doesn't actually fix anything because the problem is private IPv4
> address exhaustion. For those networks, the only options are #1 or #3 -
> which is why those networks are doing 464xlat.
> 
> 
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>