Re: [v6ops] IPv6 link-local and URLs @ IETF119

Toerless Eckert <tte@cs.fau.de> Tue, 19 March 2024 08:23 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4D63C14F690 for <v6ops@ietfa.amsl.com>; Tue, 19 Mar 2024 01:23:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.658
X-Spam-Level:
X-Spam-Status: No, score=-6.658 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AMscLpF8rA97 for <v6ops@ietfa.amsl.com>; Tue, 19 Mar 2024 01:23:56 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89341C14F61B for <v6ops@ietf.org>; Tue, 19 Mar 2024 01:23:55 -0700 (PDT)
Received: from faui48e.informatik.uni-erlangen.de (faui48e.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:51]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTPS id 4TzPrS1XcVznkQ6; Tue, 19 Mar 2024 09:23:52 +0100 (CET)
Received: by faui48e.informatik.uni-erlangen.de (Postfix, from userid 10463) id 4TzPrS0kndzkn4y; Tue, 19 Mar 2024 09:23:52 +0100 (CET)
Date: Tue, 19 Mar 2024 09:23:52 +0100
From: Toerless Eckert <tte@cs.fau.de>
To: Lorenzo Colitti <lorenzo@google.com>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, "Murray S. Kucherawy" <superuser@gmail.com>, Erik Kline <ek.ietf@gmail.com>, v6ops@ietf.org
Message-ID: <ZflLmE1M93ZiosS8@faui48e.informatik.uni-erlangen.de>
References: <ZfjN-XGXZ599sxK3@faui48e.informatik.uni-erlangen.de> <CAL0qLwZfRt1o4o3Z0zC+XfO1U_=uGznpmqSaDrKjf06HXAYm5w@mail.gmail.com> <CAL0qLwZ2WELSG868Hcc=dYH_zcm+ecEbavt8Oq7GSTT8st0hWg@mail.gmail.com> <e9387f40-408a-15fb-3f2c-afaa05c5a7ce@gmail.com> <CAKD1Yr09GvBdHFqPAujGaJ-j4cLYX2yMLhMDB4b_GfEM-1SNYw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CAKD1Yr09GvBdHFqPAujGaJ-j4cLYX2yMLhMDB4b_GfEM-1SNYw@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/x8MJLY150SoJADOCKFxSGYhTRDo>
Subject: Re: [v6ops] IPv6 link-local and URLs @ IETF119
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Mar 2024 08:23:58 -0000

On Tue, Mar 19, 2024 at 04:00:39PM +1000, Lorenzo Colitti wrote:
> FWIW I don't think it makes sense to put scoped addresses in URLs, because
> the scope portion cannot be known in advance.

Consider you're programming an application which uses some form of restconf or similar
API using URI talking via IPv6 link-local address neibhbors. SUch an app would need
to know which interface the neighbor is on, when using a link-local address, and
thats the zone-id or zone-name that would need to be in the URL of the API.

I think this would be the mayority use case for such URLs.

> So it basically requires that the user who types in the URL to somehow
> figure out what interface needs to be used and what its scope ID is. The
> set of users that is capable of doing this is vanishingly small.

Thats exactly what i said: No user should ever have to do it, but i do know that
i have had to do it repeatedly in ipv6 network management. Alas, even when just
trying to get to ipv6 link-local only address on a wifi/ethernet notebook it too
is an important diagnostics option.

See: I don't think this is a case where we must prove some size of business case
volume. Nobody is forced to implement it. It is fine to have a standard, and
let the industry figure out how to serve minority users such as IPv6 network
operators. 

Of course, if we do find better solutions that would be a good reason to not
pursue such technology, and for normal users, mDNS should be able to get a long
way (not all the way right now). But not IMHO for what programming with URLs needs
and/or v6 network operators.


> certainly don't - while I use linux which uses the interface name, I never
> remember that my wlan interface is called wlp0s20f3. My ethernet interface
> name is even worse, it's enxx<mac address>. I also don't necessarily know
> whether the device is on wifi or ethernet.

Sure. We need to figure out how to fixup multi-homed local mDNS to avoid you having to
do this. I hope we can get that done through Davids drafts or followups to that.

> There's a simple solution to this problem: if the user types in a
> link-local address the browser should *open the connection on the default
> network interface*, just like what it would do with any other connection.
> This will address the common "I need to configure my home router" use case.
> It wouldn't address the "I need to configure a home router on this other
> interface that isn't the default interface", but I think that is super rare.

See above. for actual well worked out user-use-cases i hope we find a working way for
mDNS requesting on multiple interfaces and then implying the interface. Aka: no
IPv6 addresses needed. But for those API and v6 operator cases, unless we find
a way to represent the actual same information - link-local address plus zone-id/name
better in a URL tthan right now, we should just leave it be, even at the risk of
slow/bad adoption in browsers.

Cheers
    Toerless

> 
> On Tue, Mar 19, 2024 at 11:21 AM Brian E Carpenter <
> brian.e.carpenter@gmail.com> wrote:
> 
> > Murray, Erik,
> >
> > Please read both draft-schinazi-httpbis-link-local-uri-bcp and
> > draft-carpenter-6man-zone-ui carefully. Or look at some relevant slides,
> > especially slide 5 in the first talk:
> >
> > 6man:
> > https://datatracker.ietf.org/meeting/119/materials/slides-119-6man-entering-ipv6-zone-identifiers-into-user-interfaces
> >
> > iepg:
> > https://datatracker.ietf.org/meeting/119/materials/slides-119-iepg-sessa-make-firefox-visit-an-ipv6-link-local-address
> >
> > (which is proof of concept for both drafts)
> >
> > Regards
> >     Brian Carpenter
> >
> > On 19-Mar-24 13:39, Murray S. Kucherawy wrote:
> > > Looping in Erik, the AD for the older of the two documents we're talking
> > about here.
> > >
> > > On Tue, Mar 19, 2024 at 10:38 AM Murray S. Kucherawy <
> > superuser@gmail.com <mailto:superuser@gmail.com>> wrote:
> > >
> > >     I may not be able to attend that session (HTTPBIS on Friday,
> > according to its agenda) due to other conflicts.  I'll try to get free.
> > However, there are very likely to be people in that room able to represent
> > the concern that was raised to me, such as in the ARTART review, which
> > motivated my DISCUSS position.  I will reach out to them.
> > >
> > >     -MSK
> > >
> > >     On Tue, Mar 19, 2024 at 9:27 AM Toerless Eckert <tte@cs.fau.de
> > <mailto:tte@cs.fau.de>> wrote:
> > >
> > >         Dear v6ops
> > >
> > >         You may want to think going to http(bis) WG this week for the
> > slot on
> > >         draft-schinazi-httpbis-link-local-uri-bcp. In it, he argues that
> > rfc6874 should be
> > >         retired/made-historic, because it was never implemented in
> > browsers.
> > >
> > >         For those who've been absent to the discussion:
> > >            rfc6874 says URLs can represent IPv6 link-local addresses as
> > [<ipv6addr>:<zone-name>]
> > >              and David Drafts lays out why this is difficult for browsers
> > >            rfc6874bis was held up (indefinitely) by Murray (ART AD) on
> > the prmise that the
> > >              browser vendors decided to not implement it rfc6874 nor bis.
> > >            draft-carpenter-6man-zone-ui from Brian Carpenter was
> > receiving various criticisms in 6MAN,
> > >              leading to David to write his draft. Where he primarily
> > promotes to use .local mDNS
> > >              instead of IPv6 link local addresses
> > >
> > >         My take on this:
> > >
> > >         1. The only poor souls who should ever have to use IPv6
> > link-local addresses in a browser
> > >             field are IPv6 Network Opertors (aka: here, this group),
> > when interacting in a browser
> > >             with a router (e.g.:web interface off a browser) and
> > entering URLs. Everybody else
> > >             should use names (including .local), so it is certainly a
> > minority use-case, but
> > >             i would hope an important minority use-case. Without network
> > admins being able to
> > >             troubleshoot even if/where DNS is not working, we can not
> > provide running IPv6 networks.
> > >
> > >         2. I find Murray's DISCUSS on rfc6874bis not convincing, because
> > scoped IPv6 link-local
> > >             addresses in URLs are not only needed for browsers, but for
> > any type of API in programming
> > >             languages that use URI, such as restconf or the like.
> > Besides, i do not see why we as
> > >             the IETF should constrict what we deem to be necessary by
> > the implementation problems
> > >             of effectively very few browser cores in the industry,
> > neglecting the broader use
> > >             of URLs. The argument alone that the IETF should not be able
> > to demand what's needed
> > >             for an IPv6 network archtiecture because some application
> > land work is hard is just
> > >             what has continued to slow down adoption of anything IPv6
> > for now 2 decades.
> > >
> > >         3. That being said, i would love to see Davids draft progress to
> > help eliminate the
> > >             non-working of .local addresses in Browsers today (aka:
> > create standadrd/demand for
> > >             mDNS in browsers to work), because they actually do have a
> > good
> > >             amount of actual really cool IoT use-cases (not v6ops). I
> > just don't want the work to call
> > >             for retiring rfc6874. I just want it for rfc6874 to become
> > only necessary where no other
> > >             option helps.
> > >
> > >         Cheers
> > >              Toerless
> > >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops
> >

-- 
---
tte@cs.fau.de