Re: [v6ops] Supporting IPv6-only Networks with NAT64 and DNS64 section of draft-ietf-v6ops-rfc6555bis-01

David Schinazi <dschinazi@apple.com> Wed, 28 June 2017 23:10 UTC

Return-Path: <dschinazi@apple.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CCA8129B45 for <v6ops@ietfa.amsl.com>; Wed, 28 Jun 2017 16:10:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.302
X-Spam-Level:
X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hadTjqIOUtpI for <v6ops@ietfa.amsl.com>; Wed, 28 Jun 2017 16:10:47 -0700 (PDT)
Received: from mail-in2.apple.com (mail-out2.apple.com [17.151.62.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6F7A124C27 for <v6ops@ietf.org>; Wed, 28 Jun 2017 16:10:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1498691447; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=2xeu5J6rE2JFTWE83zIfqI/u4oAB+AjwPc1Z4G786Z4=; b=mtsCeMpWdd7aCP1CosnKtwfaF3ZNrRbX69hD5jt6/ZenSchruB3aNNpwxeEdaA30 QZz/Yt4uNodli29Zw/1zgmtgl66doCYMv0nOyeN9TTyOqMkb1r2v6QOlxLdGBAB5 BwMRZZeBBUdw+QxLlvhkVhsW1uw+WjY49ZACBuk+s7weVd89medqdrRPCgO6NASH S76XQCSKpQrQoiPHjbZNeJ/rvXpIp+m7AWG41NSGnuufKxop++0xO6HYTQxMI7p9 ikKdL0uf1WsYV4Kx8bCo+A6XuQ5eUHoAdU60qB30+NRsQ2/syX7oQhYb7fmw6jtv oOiv1lh9VNiv0qZHgTqyRA==;
Received: from relay8.apple.com (relay8.apple.com [17.128.113.102]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in2.apple.com (Apple Secure Mail Relay) with SMTP id 18.5E.07214.77734595; Wed, 28 Jun 2017 16:10:47 -0700 (PDT)
X-AuditID: 11973e11-7d2f59c000001c2e-01-595437773286
Received: from jimbu (jimbu.apple.com [17.151.62.37]) by relay8.apple.com (Apple SCV relay) with SMTP id 2B.57.05704.77734595; Wed, 28 Jun 2017 16:10:47 -0700 (PDT)
MIME-version: 1.0
Content-type: multipart/alternative; boundary="Boundary_(ID_nlYOuHNE9aH5074Sng38Yg)"
Received: from da0602a-dhcp207.apple.com (da0602a-dhcp207.apple.com [17.226.23.207]) by jimbu.apple.com (Oracle Communications Messaging Server 8.0.1.2.20170210 64bit (built Feb 10 2017)) with ESMTPSA id <0OSA00HWX5PZN760@jimbu.apple.com>; Wed, 28 Jun 2017 16:10:47 -0700 (PDT)
Sender: dschinazi@apple.com
From: David Schinazi <dschinazi@apple.com>
Message-id: <86E168AC-48C3-4F18-A823-BFD45BF75156@apple.com>
Date: Wed, 28 Jun 2017 16:10:46 -0700
In-reply-to: <222564725.789104.1498690743587@mail.yahoo.com>
Cc: IPv6 Ops WG <v6ops@ietf.org>
To: "stephan.lagerholm@yahoo.com" <stephan.lagerholm@yahoo.com>
References: <149670589074.3841.10812713591494006570@ietfa.amsl.com> <C22244D7-ABF6-430B-8155-8D4C1C1382DF@apple.com> <FA0D06E7-47F9-4029-81D4-2D96BFDD5576@consulintel.es> <65F3C8F4-6533-4C15-83F9-64AFC0EFFA79@apple.com> <4AC6726C-142E-48E5-95CF-2C3AD3331441@consulintel.es> <738488839.469942.1498664001646@mail.yahoo.com> <B6F787DF-E3FA-4C79-A6DC-5D17EBDCCBD5@apple.com> <546799735.505039.1498665245952@mail.yahoo.com> <A15C4444-B457-40B8-BCC0-3C40A4F1E3AA@apple.com> <222564725.789104.1498690743587@mail.yahoo.com>
X-Mailer: Apple Mail (2.3273)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrKLMWRmVeSWpSXmKPExsUi2FCYpltuHhJp8P+KusX8pR9ZLE4f28vs wOSxZMlPJo9Zsw4zBTBFcdmkpOZklqUW6dslcGV0HlzOWvBxAmPFwnmmDYx3Ghi7GDk5JARM JNZt2MPWxcjFISSwhkliybVTTDCJWadbmSESyxglzj7pYgdJ8AoISvyYfI8FxGYWCJP4NuMW C0TRXCaJri9zwRLCAtISXRfusnYxcnCwCWhJHFhjBNFrIzHnxR9WiJJsiSe3eplBbBYBVYm7 i+6xgdicIDXzJjJBzFeQaHvXDnapiIC9xIl19xghdk1lkfg1YQUbxKWyErdmXwK7VEJgDpvE yW0/mScwCs1CcuwsJMdC2FoS3x+1AtkcQLa8xMHzshBhTYln9z6xQ9jaEk/eXWBdwMi2ilEo NzEzRzczz0gvsaAgJ1UvOT93EyMoHqbbCe5gPL7K6hCjAAejEg/vilXBkUKsiWXFlbmHGKU5 WJTEeb9rhUQKCaQnlqRmp6YWpBbFF5XmpBYfYmTi4JRqYLy7q/mNcYrUdelyoYypLv0TnrAZ FlpuTrL6197edf3bId19R19Pn5RY8m2izsvPxy/vs/p0YYPbsycPriRHP84ol134IkKn6Uad za8XPDX/i4Tnssw+lm1mpHL9ANc+rVOWC3cLbG9Oe+ps19t5/+ck0cYW3hOtzAfl9ixbq7GV cdrJm9uucz9XYinOSDTUYi4qTgQAdIiyP2gCAAA=
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrBLMWRmVeSWpSXmKPExsUiON1OVbfcPCTS4MY0ZYv5Sz+yWJw+tpfZ gcljyZKfTB6zZh1mCmCK4rJJSc3JLEst0rdL4MroPLicteDjBMaKhfNMGxjvNDB2MXJySAiY SMw63crcxcjFISSwjFHi7JMudpAEr4CgxI/J91hAbGaBMIlvM26xQBTNZZLo+jIXLCEsIC3R deEuaxcjBwebgJbEgTVGEL02EnNe/GGFKMmWeHKrlxnEZhFQlbi76B4biM0JUjNvIhPEfAWJ tnftYAeJCNhLnFh3jxFi11QWiV8TVrBBXCorcWv2JeYJjPyzkNw3C8l9ELaWxPdHrUA2B5At L3HwvCxEWFPi2b1P7BC2tsSTdxdYFzCyrWIUKErNSay00EssKMhJ1UvOz93ECArfhsK0HYxN y60OMQpwMCrx8K5YFRwpxJpYVlyZe4hRgoNZSYS34ixQiDclsbIqtSg/vqg0J7X4EKM0B4uS OO+K20ApgfTEktTs1NSC1CKYLBMHp1QDI+OtnhPZKYF5V3fMtVrfz8MmVrSTlTXxVItlRLOL xc1HP/4c4pWYJrjIL7zSxfOHl2CP/eR/HbyN2c+/8ym2dViJrjfUPW/q9TwrKyw9yFPjZLek munPG4k7uwR8JfhiS5lXvOm8LDsn77j7t3V6acpLd63b2JS0yfyxX8S0jMT4ovYgJQ4lluKM REMt5qLiRADTS+twWwIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/q3MMPsIe9oYS4wSsO5T65wZowhA>
Subject: Re: [v6ops] Supporting IPv6-only Networks with NAT64 and DNS64 section of draft-ietf-v6ops-rfc6555bis-01
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jun 2017 23:10:50 -0000

Absolutely, the text in RFC 6147 did not consider the scenarios described here.
I'll mark this document as updating RFC 6147 to reflect that.

David Schinazi


> On Jun 28, 2017, at 15:59, stephan.lagerholm@yahoo.com wrote:
> 
> Fair enough, the Dual stack example is not applicable in this section. I'm hung up that the draft says that it requires changes on in client devices because it contradicts RFC 6174 section 2 that says that current IPv6 nodes can use this mechanism without requiring any modifications. 
> 
> 
> The first option is to locate the DNS64 function in authoritative
>    servers for a zone.  In this case, the authoritative server provides
>    synthetic AAAA RRs for an IPv4-only host in its zone.  This is one
>    type of DNS64 server.
>    Another option is to locate the DNS64 function in recursive name
>    servers serving end hosts.  In this case, when an IPv6-only host
>    queries the name server for AAAA RRs for an IPv4-only host, the name
>    server can perform the synthesis of AAAA RRs and pass them back to
>    the IPv6-only initiator.  The main advantage of this mode is that
>    current IPv6 nodes can use this mechanism without requiring any
>    modification.
> 
> 
> From: David Schinazi <dschinazi@apple.com>
> To: "stephan.lagerholm@yahoo.com" <stephan.lagerholm@yahoo.com> 
> Cc: IPv6 Ops WG <v6ops@ietf.org>
> Sent: Wednesday, June 28, 2017 3:00 PM
> Subject: Re: Supporting IPv6-only Networks with NAT64 and DNS64 section of draft-ietf-v6ops-rfc6555bis-01
> 
> This section is titled "Supporting IPv6-only Networks with NAT64 and DNS64", dual-stack is out of scope of this section.
> 
> Am I missing something?
> 
> Thanks,
> David Schinazi
> 
> 
>> On Jun 28, 2017, at 08:54, stephan.lagerholm@yahoo.com <mailto:stephan.lagerholm@yahoo.com> wrote:
>> 
>> Hi David,
>> 
>> Yes I have. 464XLAT or anything else is not required to be able to run DNS64/NAT64. You can run DNS64/NAT64 in combination with Dual Stack if you want to. 
>> 
>> /S
>> 
>> 
>> From: David Schinazi <dschinazi@apple.com <mailto:dschinazi@apple.com>>
>> To: "stephan.lagerholm@yahoo.com <mailto:stephan.lagerholm@yahoo.com>" <stephan.lagerholm@yahoo.com <mailto:stephan.lagerholm@yahoo.com>> 
>> Cc: IPv6 Ops WG <v6ops@ietf.org <mailto:v6ops@ietf.org>>
>> Sent: Wednesday, June 28, 2017 8:37 AM
>> Subject: Re: Supporting IPv6-only Networks with NAT64 and DNS64 section of draft-ietf-v6ops-rfc6555bis-01
>> 
>> Hi Stephan,
>> 
>> Have you read the rest of that section that details the changes required on client devices?
>> 
>> Thanks,
>> David Schinazi
>> 
>> 
>> On Jun 28, 2017, at 08:33, "stephan.lagerholm@yahoo.com <mailto:stephan.lagerholm@yahoo.com>" <stephan.lagerholm@yahoo.com <mailto:stephan.lagerholm@yahoo.com>> wrote:
>> 
>>> Hi David,
>>> 
>>> Thanks for adding the Supporting IPv6-only Networks with NAT64 and DNS64 section, I find it useful. However I don't think the below sentence from this section is accurate. I can't think of any changes that are needed on a client device to run NAT64/DNS64. 
>>> 
>>> While many IPv6 transition protocols have been standardized and
>>>    deployed, most are transparent to client devices.  The combined use
>>>    of NAT64 [RFC6146] and DNS64 [RFC6147] is a popular solution that is
>>>    being deployed and requires changes in client devices.
>>> 
>>> Thanks, Stephan
>>> 
>>> 
>> 
>> 
> 
> 
>