Re: [v6ops] Fwd: New Version Notification for draft-collink-v6ops-ent64pd-01.txt

[Martin Huněk <[e-mail]>]

Hi Brian,

Dne pondělí 19. prosince 2022 21:59:12 CET, Brian E Carpenter napsal(a):
> On 19-Dec-22 23:30, Martin Huněk wrote:
> 
> > Furthermore, this address has to be predictable for an ISP/netadmin, so it is possible to make an AAAA record for it
> 
> Er, no, the creation of such an AAAA record should be automated (subject to some kind of authorization).

I would certainly not want arbitrary (BYOD) connected devices to be allowed to manipulate DNS records in my domain by the DDNS. There are security reasons for that. If I know the DUID of the device providing some service to the Internet users and the IID where the device listens is known, I can make static prefix delegation, and then I can make an AAAA record for it. Without it, I can run only IPv4 services there.

Is there some existing solution for it other than that? Open, not vendor specific.
> 
> An IID cannot be zero, since that value is reserved (https://www.iana.org/assignments/ipv6-interface-ids/ipv6-interface-ids.xhtml). There are reasonable arguments why it should be pseudo-random, even for a server.

Sorry, I've missed that zero is not allowed.

Anyway, network administrator predictable IID would be a huge help in providing IPv6 services from it (without resolving it by static configuration). I see no such arguments if the prefix doesn't leave a single device and when this predictable IID is used only when it is configured with a service that needs to be reachable from outside.

By the way, in this case, the admin predictable IID source is even the DUID, and that is not predictable for the rest of the Internet.
> 
>     Brian
> _______________________________________________
> v6ops mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/v6ops
>