Re: [v6ops] How can one check the presence of IPv4aaS technologies? -- Re: draft-vf-v6ops-ipv6-deployment

Alexandre Petrescu <alexandre.petrescu@gmail.com> Tue, 30 March 2021 13:26 UTC

Return-Path: <alexandre.petrescu@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A95913A1230 for <v6ops@ietfa.amsl.com>; Tue, 30 Mar 2021 06:26:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.668
X-Spam-Level:
X-Spam-Status: No, score=0.668 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FORGED_GMAIL_RCVD=1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, NML_ADSP_CUSTOM_MED=0.9, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TMU-bzMG33hE for <v6ops@ietfa.amsl.com>; Tue, 30 Mar 2021 06:26:08 -0700 (PDT)
Received: from sainfoin-smtp-out.extra.cea.fr (sainfoin-smtp-out.extra.cea.fr [132.167.192.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C84773A122D for <v6ops@ietf.org>; Tue, 30 Mar 2021 06:26:07 -0700 (PDT)
Received: from pisaure.intra.cea.fr (pisaure.intra.cea.fr [132.166.88.21]) by sainfoin-sys.extra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id 12UDPnQm016936; Tue, 30 Mar 2021 15:25:49 +0200
Received: from pisaure.intra.cea.fr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id B94E6205AD4; Tue, 30 Mar 2021 15:25:49 +0200 (CEST)
Received: from muguet2-smtp-out.intra.cea.fr (muguet2-smtp-out.intra.cea.fr [132.166.192.13]) by pisaure.intra.cea.fr (Postfix) with ESMTP id AB92920190C; Tue, 30 Mar 2021 15:25:49 +0200 (CEST)
Received: from [10.14.6.9] ([10.14.6.9]) by muguet2-sys.intra.cea.fr (8.14.7/8.14.7/CEAnet-Internet-out-4.0) with ESMTP id 12UDPn1d001388; Tue, 30 Mar 2021 15:25:49 +0200
To: "xiechf@chinatelecom.cn" <xiechf@chinatelecom.cn>, "v6ops@ietf.org" <v6ops@ietf.org>
References: <BL0PR05MB5316425C5650B5D2FE43DE4DAE6C9@BL0PR05MB5316.namprd05.prod.outlook.com> <CAB75xn7=swhtwqRuV6SoWoMO7jtCcPCc02XiVpAjE=VUx8CyaQ@mail.gmail.com> <6059897e.1c69fb81.ac270.d863SMTPIN_ADDED_BROKEN@mx.google.com> <749643a7-313f-4bd1-8bb8-7dc26d830070@gmail.com> <605aae8f.1c69fb81.8a8ed.04b7SMTPIN_ADDED_BROKEN@mx.google.com> <35c4cf4f-0128-dff6-27a3-4cc868539f7f@gmail.com> <9614BF99-431D-4046-9762-0F111AFBB27D@consulintel.es> <a498117e-4834-41f8-5c90-ad7734d07220@hit.bme.hu> <e770fec1-2189-f683-6c74-36e32541c53d@gmail.com> <abe65114-d9c9-10ee-2c78-449051acbb61@hit.bme.hu> <3c50c72b-b606-a6cf-3095-f08ad48eecf5@gmail.com> <2A0C2B40-2DA4-4941-A09F-5BD31EDA3301@consulintel.es> <2e64b426-3a0a-b5f8-0306-005e9f1023d0@gmail.com> <72754d29-8b57-66fa-2b3a-fc6680c339f2@hit.bme.hu> <69744eb4-2f2e-6876-eba7-c439c5c4db9d@gmail.com> <4b95e79a-6949-7f0f-1f38-518b8f30f778@hit.bme.hu> <ec649e0a-f43a-a453-0827-48b0c1785df7@gmail.com> <2021033021204134762217@chinatelecom.cn>
From: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Message-ID: <760a75d9-e9c9-d931-baf6-5d993ef6003d@gmail.com>
Date: Tue, 30 Mar 2021 15:25:48 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.9.0
MIME-Version: 1.0
In-Reply-To: <2021033021204134762217@chinatelecom.cn>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: fr
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/sl9exszD7L8HSiQbERgnu3RUVuM>
Subject: Re: [v6ops] How can one check the presence of IPv4aaS technologies? -- Re: draft-vf-v6ops-ipv6-deployment
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Mar 2021 13:26:13 -0000


Le 30/03/2021 à 15:20, xiechf@chinatelecom.cn a écrit :
> Although there is  the word of "Service" in this term, it does not
> mean this is a marketing term, my understanding is that it only
> defines the role of remaining IPv4 traffic in IPv6-only network.

If it is an IPv6-only network then there is no remaining IPv4 traffic -
   neither on 'bare metal', nor encapsulated in IPv6.

But, I am open if there is another term (other than 'IPv6-only') that
designates a computer or a network where IPv4 is completely absent.

Alex


  Considering IPv4
> traffic will not vanish in short term, so IPv4aaS will stay long and
> be a major feature of IPv6-only network.
> 
> Chongfeng
> 
> 
> ------------------------------------------------------------------------
>
> 
xiechf@chinatelecom.cn
> 
> *From:* Alexandre Petrescu <mailto:alexandre.petrescu@gmail.com> 
> *Date:* 2021-03-29 22:06 *To:* v6ops <mailto:v6ops@ietf.org> 
> *Subject:* Re: [v6ops] How can one check the presence of IPv4aaS 
> technologies? -- Re: draft-vf-v6ops-ipv6-deployment I think we should
> first say what one means by 'IPv4aaS'. I think this term is very
> loosely defined technically. It might be a very good marketing term,
> and an excellent overall goal for developments of features on
> roadmaps. But I have some ideas about how to check what you ask. Le
> 29/03/2021 à 10:40, Lencse Gábor a écrit :
>> 
>> 24/03/2021 17:22 keltezéssel, Alexandre Petrescu írta:
>> 
>> [...]
>> 
>>> Up to now, looking through the configuration interface of my
> freebox at
>>> home I could not see the options that you mention (464XLAT,
>>> DSLITE, MAP-E, MAP-T, lw4o6).  One might say that they are there
> invisible, but
>>> I doubt that, I need a proof of it.  How can I check for
> presence of
>>> options 464XLAT, DSLITE, MAP-E, MAP-T or lw4o6?
>>> 
>> 
>> I can imagine two situations:
>> 
>> 1. The user can configure in the CPE, which IPv4aaS technology is
> to be
>> used. (Or at least it is displayed for the user without the
> opportunity
>> to change the settings.)
>> 
>> This is the trivial case.
>> 
>> 2. Even though one of the above mentioned IPv4aaS technologies is
> used,
>> the CPE hides it from the user.
>> 
>> Of course, all five IPv4aaS technologies try to imitate the
> situation of
>> carrier grade NAT for IPv4. The question is, whether the user can
> point
>> out the fact the an IPv4aaS technology is used, and possibly also 
>> determine its kind.
>> 
>> Now, again, we may distinguish two cases: - If the user can observe
>> the traffic on the outside (WAN)
> interface of
>> the CPE (e.g. using tcpdump, tshark, etc.), then it is quite easy. 
>> - If the user cannot do that, then it is really interesting.
>> 
>> Can anyone recommend a suitable method for the second case?
> One could check tables of IP addresses of DNS64 resolvers offered by 
> some operators to their respective users (but not to others).  Such
> a table is available for all operators in France, at regulator.  On
> page 57 of the pdf at this URL one can see such a table 
> https://en.arcep.fr/uploads/tx_gspublication/report-state-internet_2020-edition_250620-ENG.pdf
>
> 
If a provider provides a DNS64 resolver it is highly likely that end
> users might benefit from some features of the concept 'IPv4aaS'.
>> Do you know such properties of the user side behavior (e.g.
>> traffic pattern) of any of the 464XLAT, DSLITE, MAP-E, MAP-T or
>> lw4o6 technologies that could indicate their presence?
> That is an excellent question.  I think it is possible to write a 
> packet analyzer that looks at the interface of the end user and
> depending on the contents of the packets to determine a pattern
> telling whether or not 464XLAT is used. From these two things (tables
> of DNS64 resolvers, and packet analyzers), it might be possible to
> build web sites that not only reply to the question "what is my IP
> address" but also tell whether "IPv4aaS" is used or not. Also, right
> now a "what is my IP addreess" website replies my with my IP address,
> but can also tell whether I am behind a NAT or not. A similar logic
> could be used to tell whether I am behind a another sort of address
> translation. Alex
>> 
>> Gábor
>> 
>> _______________________________________________ v6ops mailing list 
>> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops
> _______________________________________________ v6ops mailing list 
> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops
>