Re: [v6ops] Heise.de article about IPv6 behaviour of 29 CPEs and reaction to prefix changes

Nick Buraglio <buraglio@es.net> Tue, 17 January 2023 18:39 UTC

Return-Path: <buraglio@es.net>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C038C15153B for <v6ops@ietfa.amsl.com>; Tue, 17 Jan 2023 10:39:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.084
X-Spam-Level:
X-Spam-Status: No, score=-2.084 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=es.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7NXL3bXLH9qc for <v6ops@ietfa.amsl.com>; Tue, 17 Jan 2023 10:39:17 -0800 (PST)
Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9AF9C151525 for <v6ops@ietf.org>; Tue, 17 Jan 2023 10:39:16 -0800 (PST)
Received: by mail-lf1-x133.google.com with SMTP id y25so48347201lfa.9 for <v6ops@ietf.org>; Tue, 17 Jan 2023 10:39:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=es.net; s=esnet-google; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=0YguYL2ljmGoJWbANZXQ+RW21YlHOQ5yGohaeVQYBZs=; b=LuH/wlpWUgKYo46vqECuJUyWgZUoG9s2vL727S3D4NYsG5q4dbvkQXn+TyooOlRZ3M t8vEykl8A70kO1vsWvYLbisVa374IFP0wcMPuSIcGY9GWdEMv061PqaFa/iU6HxiTnwJ Xf6QgiHQFlPYUHeZIpfG89B6VsG4APA2/uvHFZllrTOm8ApCpdaoficlk0DfsXU/CiMU C/+ugGdWL/vdO9SIrAzCYuVdqLIsvWNVSwsOPYn2yGJ2XSUBvWxuw4CYbtYhMLFqpl2t HmxPbPnFrbDeh6m3a++3RUk4t/Q96CqKdkT8NXNSc6SupRKdjk4X4OHC3zIQbWHFP6uL ytOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:reply-to:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=0YguYL2ljmGoJWbANZXQ+RW21YlHOQ5yGohaeVQYBZs=; b=OHXNIDdbRKHuhhQAIjaTVX0vR8a9+4lhrPaM/qxgmatcCnG2NevQjfvTmq6J/aWwIu d/RUIxzn+Fsqzf8LW6Xmppyqo2dc1xOCUnRH2GwU11ozmfuyNGIl0ubcXQ78h4P4p7PM qdMO/flkLaxjK2zfQ04AnBaNqBBVzyaJJg2hx1/bV1qFrkGRcZO8wCuF1uehIcbN0tZ5 tfCAGgtAVrg7Nu7sKLg8wJp2Rd4C1eNjjFsrctI5rMxhjaBU/jOGv7ahhCc9Fwkghqh6 vDs97CtDI+XaKezK314lP3cHfNsO0y0XqnTncRlUmA2AUwEpIBSdsgK5LFi1LKSa4hup gYzg==
X-Gm-Message-State: AFqh2koqE2h/DWGTnYsHkp8XcC0gFlZHIyhUki9cp5LmvJ5Qu4S5mdA0 kHVqmP8md7I6IutJceRENaVvnnBU4jjz66cHpjfwmpDozIIKKx+eO+XxxhZI4KpzChf/bBivEfw UQYqWUTHH9Vw4MXj2JVcd6YxN2m8pSh4EG1ejPpVOsYoN/z60BWpyvddKzwSSbh8APpDwiqm/Uq 17SwKRPD5w0QWj
X-Google-Smtp-Source: AMrXdXtCAimH3Hd3uSOpk2ptBOyIyO4vJRugt2q8iWn6ioE/jswCCAU+qqMWfT/lWMQdjXo/tEwBcWiEXLhkAnXNLbc=
X-Received: by 2002:a05:6512:2082:b0:4cb:bec:27e6 with SMTP id t2-20020a056512208200b004cb0bec27e6mr299447lfr.86.1673980754943; Tue, 17 Jan 2023 10:39:14 -0800 (PST)
MIME-Version: 1.0
References: <261c65a87cfd453db38af88995162c7d@huawei.com> <fabc3012-9a8d-6a1e-2fe9-065396a34307@gmail.com> <3691e428c81f48a981fb146a6bcd599a@huawei.com>
In-Reply-To: <3691e428c81f48a981fb146a6bcd599a@huawei.com>
Reply-To: buraglio@es.net
From: Nick Buraglio <buraglio@es.net>
Date: Tue, 17 Jan 2023 12:39:03 -0600
Message-ID: <CAM5+tA9nAoKkvBQb66JzsHX7yV0g7GwpoKVgXmYpVBmjTFso+A@mail.gmail.com>
To: Xipengxiao <xipengxiao=40huawei.com@dmarc.ietf.org>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, "v6ops@ietf.org" <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000042bd8405f27a0482"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/vvFPSj2pgXmZ4_zLdEiU57dJr3I>
Subject: Re: [v6ops] Heise.de article about IPv6 behaviour of 29 CPEs and reaction to prefix changes
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jan 2023 18:39:21 -0000

Here is what came to my mind:

Informational draft detailing a working deployment with suggestions per
scenario. When speaking with folks implementing IPv6, what most seem to
want is a recipe due to the somewhat overwhelming set of knobs and levers.
Flexibility, by design, breeds a potentially complex set of options. What
they overwhelmingly want to see is a best practice - or at the very least a
known working methodology for:

   - I want to dual stack, what do I need to do?
      - Here is a working recipe for deployment of a dual stack network
      - Here are the features required to accomplish this
   - Where should I use ULA?
      - Here is an example of a successful ULA deployment
      - Here is a link to the operational considerations draft for using
      ULA (may help further the draft through the process as well)
      - Here are examples of a supportable deployment for using GUA in a
      similar manner to ULA
   - What if I want to deploy my network as IPv6-only?
      - Here are examples of successful and supportable IPv6-only
      deployments
         - Here are the features required to deploy these scenarios.
      - etc...

Some of this may exist, I don't know for sure. I know a lot of this exists
in the wild in various documentation, forums, blog posts, and email
threads. Having the IETF produce such text provides something more
"official" that can be referenced by vendors, management, architects, etc..
Regardless, and without commenting on whether this is the correct avenue or
not, having a draft of a set of drafts that give these examples will go a
*very* long way. If it is caveated in such a way that states "this is one
way, it may not be the only way" may alleviate at least some of the lack of
consensus that will inevitably arise.

I have written some of a draft on ULA use cases (as well as some updates to
RRC6724) written that need revisiting. Of course, if there is no consensus,
then it's just another exercise.

----
nb

ᐧ

----
nb


On Tue, Jan 17, 2023 at 11:05 AM Xipengxiao <xipengxiao=
40huawei.com@dmarc.ietf.org> wrote:

> Hi Brian and folks,  Please see comments in line.
>
>
>
> -----Original Message-----
> From: v6ops <v6ops-bounces@ietf.org> On Behalf Of Brian E Carpenter
> Sent: Monday, January 16, 2023 9:06 PM
> To: v6ops@ietf.org
> Subject: Re: [v6ops] Heise.de article about IPv6 behaviour of 29 CPEs and
> reaction to prefix changes
>
>
>
> On 17-Jan-23 07:08, Xipengxiao wrote:
>
> > Hi folks,
>
> >
>
> > I am moving the discussion to v6ops as I think the problems are more
> operational than technical.
>
> >
>
> > In short, the Heise article reported that existing IPv6 CPEs have
> various problems and IPv6 may not work in many scenarios.  Then the good
> question is, what can the IETF do about them?  From my first look, there
> are so many different problems that it’s hard to see what to fix.  But
> maybe the experts here have better ideas.
>
> >
>
> > Personally, I think the root cause is IPv6 has too many options (e.g.
> GUA vs ULA vs now obsoleted SLA, SLAAC vs DHCP, 10+ transition solutions).
>
>
>
> As I commented on 6man, I believe that is not quite right. It's the real
> world that has too many options, and IP6 has flexibility.
>
>
>
> XiPeng:  we can say “It's the real world that has too many options”, but
> we can only change ourselves.  This is why I propose we limit the options
> we offer to the world.
>
>
>
> > This makes it difficult for vendors to implement/fine tune their IPv6
> solutions, and difficult for common people to learn and deploy.  I advocate
> that IETF should provide clear recommendation,
>
>
>
> Yes, it's our job to provide guidelines and recommendations, but doing
> that is not easy and hard to reach even rough consensus. For example:
>
>
>
> > e.g. only use GUA
>
>
>
> That's unacceptable. A good BCP on how and when to use ULAs is very
> necessary.
>
>
>
> XiPeng: we had a debate whether enterprises need ULA in a side meeting in
> London IETF.  Ted, Jen, Lorenzo, Jordi, Mike, Nalini, Nick all
> participated.  The rough consensus was GUA works just fine.  So, I am not
> saying that ULA has no value, I am saying that between ULA’s value and
> reducing choices, I advocate the latter.
>
>
>
> But I agree that “providing guidelines and recommendations” is the way to
> go, but that’s “hard to reach even rough consensus”. To overcome that, I
> would like to propose a principle here “keep reducing IPv6 options until it
> fails”.  If we can agree on a principle (or a few), maybe we can reach some
> rough consensus.
>
>
>
> > , only use 464XLAT/MAP-T
>
>
>
> Possibly. But I am sure there are cases where that is a bad idea.
>
>
>
> XiPeng: I agree, but think of the principle I mentioned above – will the
> solution fail?  Eduard Vasilenko said in another thread that mobile enjoys
> good IPv6 deployment because there are fewer choices: only Dual-Stack or
> 464XLAT.  I think that’s a good point.  Fixed has many more choices.  Then
> we have the CPE problems reported by Heise.
>
>
>
> > and avoid Dual-Stack as much as possible, etc.
>
>
>
> That's also unacceptable. There are *many* scenarios where dual stack on
> the wire works extremely well.
>
>
>
> XiPeng: I agree Dual-Stack can “works extremely well”, but in some
> scenarios, IPv4 takes over completely and IPv6 is not used at all (due to
> its various problems, e.g. ULA less preferred than IPv4, CPE problems).  In
> other words, IPv4 is masking IPv6 problems and gives the IPv6 deployers a
> false sense of accomplishment.  This is why I think if a company is serious
> about IPv6, it should avoid Dual-Stack as much as possible.
>
>
>
> > Some experts may dismiss this recommendation as overly simplifying but I
> think it’s practical at this stage: most people only wants a working
> solution not necessarily the best one. Therefore we should unite the
> industry behind a few options and fine tune them.
>
>
>
> It is over-simplifying and that's why it doesn't work: the real world has
> become too complicated. We *do* need clear BCPs but my guess is that we
> probably need ~10 of them rather than ~1.
>
>
>
> XiPeng: I trust that despite the difference, we see each other’s point –
> we all want to simplify and give clear recommendations but the question is
> how.  So can we first discuss and agree on a (few) principle?  I offer this
> as a starting point: “keep reducing IPv6 options until it fails”.
>
>
>
> Thanks.  XiPeng
>
>
>
> > I also want to take this opportunity to say that many existing IPv6
> adoption stats are user/session% which can look good according to
> APNIC/Google.  This may give us a false sense of accomplishment, because an
> operator with 100% IPv6 capable users may actually produce 0% IPv6 traffic.
> I think IPv6 traffic% is a better indicator of real IPv6 adoption status.
> But IPv6 traffic% is hard to find.  Up to this point, we only find that
> Akamai reported 16% traffic for Oct 2022, FB reports 15% for 2019, and
> AMS-IX reports 4.1% for Jun 2022 (source:
> https://labs.ripe.net/author/wilhelm/ipv6-10-years-out-an-analysis-in-users-tables-and-traffic/#:~:text=On%20the%20Internet%20exchanges%2C%20the,observes%20an%20average%20of%204.1%25
> <
> https://labs.ripe.net/author/wilhelm/ipv6-10-years-out-an-analysis-in-users-tables-and-traffic/#:~:text=On%20the%20Internet%20exchanges%2C%20the,observes%20an%20average%20of%204.1%25>).
>  These traffic% are far lower than worldwide IPv6 user%.
>
> >
>
> > In summary, I call for the experts in v6ops to make an effort to:
>
> >
>
> >  1. Report and discuss IPv6 traffic%
>
> >  2. Identify the problems hiding behind the low IPv6 traffic% (e.g. the
> CPE problems reported by the Heise article), and recommend solutions for
> them
>
> >
>
> > XiPeng
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>