Re: [v6ops] I-D Action: draft-colitti-v6ops-host-addr-availability-01.txt

Ted Lemon <ted.lemon@nominum.com> Tue, 28 July 2015 16:28 UTC

Return-Path: <Ted.Lemon@nominum.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87D011ACDD4 for <v6ops@ietfa.amsl.com>; Tue, 28 Jul 2015 09:28:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VEIB8uRxPb8j for <v6ops@ietfa.amsl.com>; Tue, 28 Jul 2015 09:28:22 -0700 (PDT)
Received: from sjc1-mx02-inside.nominum.com (sjc1-mx02-inside.nominum.com [64.89.234.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCC141ACDD0 for <v6ops@ietf.org>; Tue, 28 Jul 2015 09:28:22 -0700 (PDT)
Received: from webmail.nominum.com (cas-04.win.nominum.com [64.89.235.67]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by sjc1-mx02-inside.nominum.com (Postfix) with ESMTPS id C6801DA0072; Tue, 28 Jul 2015 16:28:22 +0000 (UTC)
Received: from [10.0.20.178] (71.233.41.235) by CAS-04.WIN.NOMINUM.COM (192.168.1.101) with Microsoft SMTP Server (TLS) id 14.3.224.2; Tue, 28 Jul 2015 09:28:16 -0700
Content-Type: multipart/alternative; boundary="Apple-Mail=_F19C56D1-9F1F-4A05-9BDC-7C28EEE7E55C"
MIME-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
From: Ted Lemon <ted.lemon@nominum.com>
In-Reply-To: <CAKD1Yr3pHBRk+BTOJOOSC=c6M4FNaumGEKwHvFW=ThED7M744g@mail.gmail.com>
Date: Tue, 28 Jul 2015 12:28:14 -0400
Message-ID: <4AB2ED61-23CF-40D5-B2A6-F1F4064EC0C6@nominum.com>
References: <20150723130715.12113.47480.idtracker@ietfa.amsl.com> <55B1ED14.6030501@gmail.com> <m1ZIZ4w-0000CbC@stereo.hq.phicoh.net> <CAKD1Yr2z6T86gmQMPZwbgFB4mdt7=xWNuei5jaQg=vpG7-zLVg@mail.gmail.com> <m1ZJdjZ-0000CcC@stereo.hq.phicoh.net> <20150727091241.GL84167@Space.Net> <m1ZJfOr-0000CgC@stereo.hq.phicoh.net> <C9C3FBC4-44F3-45D2-B8C4-3725396E5D40@nominum.com> <CAPi140Mx96dBgeaCkrsDD+-J85OZDo5Di+gHTBiaGDzYK2us4w@mail.gmail.com> <20150728115944.GZ84167@Space.Net> <CAPi140PKh64L=nr96pv3dn7FO_Y9pW162YzBT8kZHSMsedGYtQ@mail.gmail.com> <BE811683-3BBA-40F0-B047-282DA7E774AA@nominum.com> <CAKD1Yr3pHBRk+BTOJOOSC=c6M4FNaumGEKwHvFW=ThED7M744g@mail.gmail.com>
To: Lorenzo Colitti <lorenzo@google.com>
X-Mailer: Apple Mail (2.2102)
X-Originating-IP: [71.233.41.235]
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/rF0abWjkt0W6768qi82NcSDkyFI>
Cc: IPv6 Operations <v6ops@ietf.org>
Subject: Re: [v6ops] I-D Action: draft-colitti-v6ops-host-addr-availability-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jul 2015 16:28:24 -0000

On Jul 28, 2015, at 11:56 AM, Lorenzo Colitti <lorenzo@google.com> wrote:
> One goal of this document is to ensure that even on networks don't run SLAAC, then we as an industry don't end up with substantial deployments of networks that provide too few addresses. That will over time pressure devices to implement NAT66, and that would be suboptimal for everybody.
> 
> Privacy is only one of the many use cases in the draft. Another pretty clear example is running VMs in your laptop. What are you going to do if the network doesn't run SLAAC but provides you with exactly 1 IA_NA and you want to run a VM? (Other than NAT66, I mean...)

Okay, that helps put it in context.  I don’t think you should tout privacy as an advantage of this proposal, because I don’t think this proposal really helps with privacy, but I agree that it addresses the use case you’re describing.

I think getting vendors to implement this using PD might be challenging, but there are good reasons to do it that way.   However, I don’t think you need to delegate a /64.   Do you buy my theory about just using a /120 to aggregate a bunch of addresses, or no?   I realize of course that you’d also like it if we delegated /48s instead of /56s, and I don’t really disagree with that, but I think if you advance this proposal it’s going to be a hard sell to require the delegation of a /64 per host, and I don’t think it adds any value other than creating upstream pressure to delegate narrower prefixes.