Re: [v6ops] updating RFC8026 to support 464XLAT in draft-ietf-v6ops-transition-ipv4aas

Lorenzo Colitti <lorenzo@google.com> Wed, 13 June 2018 07:38 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB0BA130E03 for <v6ops@ietfa.amsl.com>; Wed, 13 Jun 2018 00:38:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.51
X-Spam-Level:
X-Spam-Status: No, score=-17.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F607diOFm-18 for <v6ops@ietfa.amsl.com>; Wed, 13 Jun 2018 00:38:39 -0700 (PDT)
Received: from mail-wr0-x234.google.com (mail-wr0-x234.google.com [IPv6:2a00:1450:400c:c0c::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 694AD130DF9 for <v6ops@ietf.org>; Wed, 13 Jun 2018 00:38:39 -0700 (PDT)
Received: by mail-wr0-x234.google.com with SMTP id w7-v6so1590514wrn.6 for <v6ops@ietf.org>; Wed, 13 Jun 2018 00:38:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dKw9QVgygb8DXsYyyLFiIlBIaJsOUC0mWzVEqK8Pbt0=; b=Z6zdJpx+s34BZg03jGVUII7xBU7dBsYV+GjdPNvmmlMnBq8zU+LSraNurtMf97VBom 2ke0JPZBKgwrVr7mSfs2p/c7pVkrMQGrC3lXAo6t8+949h78VGnhO2bUWsrrcqjDaRsX lNqxbguB1+WfAkyux1IphdoYhvEuVHu9Ue+3+wvSzYquuwb/vAjVK71l3xw1BxKeE97g sGnhDjzG9FkHig4qGeYjo9vxn1nVrr5V6fCQ4aLrhJxDb1iqinUm8bstEuypt076m4vS TdwDo789HRZsU8I09+avyZ3INv0O7Wi8tuTxgFAKdv0a38eJHh5SmhdtoAlUp5gq3PgH XQgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dKw9QVgygb8DXsYyyLFiIlBIaJsOUC0mWzVEqK8Pbt0=; b=YCTwjTlYw/QPM7RnruRd8WB2lf6syx+jKDsMv8WPVuWYDt4c3DchNfQLOAmV4mKsqm Ju0etvnCJjGIsP8uGuY2II+VNWtpuEcHcQ+kKqwoSzZmT/pA5mqokg/P2bChVsX31AKU 3eulIgCjVIyV/7DHfvOXelMYz9MxLpLm4PZEho9pjaeYhrDzCq3S6RPkvjtJW6t96PFi ZKljsD7+MDH6gs0REXSrSr4AyqWSf3zGwPSElV/O7gH/ulVLWnX1UHcSJ3J1nS9Cpo0o Qu3hYSJS6Ut80/u8i7G0/UFducWp9nk9u+d0+2kuRjwqcPH1w2T8XeeY0lelLo/jimFJ exRw==
X-Gm-Message-State: APt69E1THYDazBxaaoxorNRizgQJ/Zi5qL16zsz7u6b/MeVSHZRqNgAN REnQ7g5/j7O3lDvQKPJVLZptXTkV3KskmAzN9UMqYNeaSOM=
X-Google-Smtp-Source: ADUXVKI3ELa4SnotFK3r6DP00UOeW5b4NDjzBy1ivCxj0Z4oxDMQiUmd7npFuFj3ZiBTKJ1tbldufPVk1wFlbDaHjLw=
X-Received: by 2002:adf:d08b:: with SMTP id y11-v6mr3272009wrh.152.1528875517531; Wed, 13 Jun 2018 00:38:37 -0700 (PDT)
MIME-Version: 1.0
References: <FEACFE5A-F2E6-4533-8602-C05F8A1FB59A@consulintel.es> <28C9E7B4-1D2F-4C65-A121-90E9AFB470AD@gmail.com> <CAHL_VyDc1iF7T4k3J1uQvDYUpxaRg7_eOqK6poV_cZ-NAFAEDQ@mail.gmail.com> <7B87AAA7-E5C5-498E-A41E-8927BC554F29@consulintel.es> <CAKD1Yr2HpJFvW3=CQQV6HVr6tOGSW=Kj5mpO-rLLrEEuPZ4vmg@mail.gmail.com> <966D347E-0A4F-4F51-90AB-03D178EF4CEB@consulintel.es> <CAKD1Yr3uSr-KJCOhTJvaf1xh4g7hOqwzxZSv7TNH5fB5Z1VigQ@mail.gmail.com> <C48F6BAD-84CE-4121-B862-218004A417D3@consulintel.es> <CAKD1Yr1_NeLyAmdAJitd=jUKeY0kW8qxV_9FWGCbNf1__ppecw@mail.gmail.com> <018DD24B-DD2F-4B31-A939-328173891F3E@consulintel.es> <CAKD1Yr1ohmb9BUV+KO2Ff+LJ1+pNwQ+-UJ6t7MmwY6PV3MLhyA@mail.gmail.com> <0F82C180-CE02-4DC1-88EE-5BB6CEC46F3C@consulintel.es>
In-Reply-To: <0F82C180-CE02-4DC1-88EE-5BB6CEC46F3C@consulintel.es>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Wed, 13 Jun 2018 16:38:25 +0900
Message-ID: <CAKD1Yr1FVdWt446zq9mDec4fsCmN6K=M1MkK4FUWv=RBMQMrbQ@mail.gmail.com>
To: jordi.palet=40consulintel.es@dmarc.ietf.org
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000216733056e811230"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/xBKT-cEqVhJgiE5IIR9FMglNUk4>
Subject: Re: [v6ops] updating RFC8026 to support 464XLAT in draft-ietf-v6ops-transition-ipv4aas
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jun 2018 07:38:45 -0000

That goes back to my earlier point of that from a technical perspective
464xlat is pretty much the worst of the transition mechanisms. I don't
think we should be recommending running it on wireline at all, let alone
prioritizing it over something else .:-)

On Wed, Jun 13, 2018 at 3:50 PM JORDI PALET MARTINEZ <jordi.palet=
40consulintel.es@dmarc.ietf.org> wrote:

> Lorenzo, you’re missing the key aspect: Being able to prioritize, when an
> ISP supports several transition mechanisms.
>
>
>
> RFC8026 key aspect is priority. If we don’t add an option code for
> 464XLAT, then it can’t be managed the same way.
>
>
> Regards,
>
> Jordi
>
>
>
>
>
>
>
> *De: *v6ops <v6ops-bounces@ietf.org> en nombre de Lorenzo Colitti
> <lorenzo=40google.com@dmarc.ietf.org>
> *Fecha: *miércoles, 13 de junio de 2018, 4:45
> *Para: *<jordi.palet=40consulintel.es@dmarc.ietf.org>
> *CC: *"v6ops@ietf.org WG" <v6ops@ietf.org>
> *Asunto: *Re: [v6ops] updating RFC8026 to support 464XLAT in
> draft-ietf-v6ops-transition-ipv4aas
>
>
>
> On Tue, Jun 12, 2018 at 7:40 PM JORDI PALET MARTINEZ <jordi.palet=
> 40consulintel.es@dmarc.ietf.org> wrote:
>
> You don’t need RFC7050 neither DNS64, you can use PCP (RFC7225) to tell
> the CLAT the NAT64 prefix. It also provides additional advantages to the
> operator to control many related aspects (see section 3 of RFC7225).
>
>
>
> 1.       If the operator wants to enable 464xlat: they should hand out a
> DNS64 to the CPE.
>
> 2.       If the operator wants to disable 464xlat: they should NOT hand
> out a DNS64 to the CPE.
>
> This doesn’t work, because the operator may be using RFC7225 instead of
> RFC7050. You need to try both in that case, and you aren’t providing a
> “priority” to a possible list of mechanisms, which is what RFC8026 does.
>
>
>
> But it's the same problem again: what's the use case for this DHCPv6
> option? An operator that's using RFC7225 has an easy way to tell the CPE
> not to do 464xlat: don't hand out the prefix64 to those CPEs. So this is
> already possible today.
>
>
>
> 3.       If the operator uses 464xlat, they should not allow the user to
> change the DNS server.
>
>
>
>
>
> Let’s be realistic. You can’t “force” the customer to avoid changing the
> DNS …
>
>
>
> On an operator-managed CPE, you can. On a user-managed CPE, you can't. But
> on such a CPE you probably shouldn't be disabling 464xlat. If the user
> wants to use it, it's their CPE, right?
>
> _______________________________________________ v6ops mailing list
> v6ops@ietf.org https://www.ietf.org/mailman/listinfo/v6ops
>
> **********************************************
> IPv4 is over
> Are you ready for the new Internet ?
> http://www.consulintel.es
> The IPv6 Company
>
> This electronic message contains information which may be privileged or
> confidential. The information is intended to be for the exclusive use of
> the individual(s) named above and further non-explicilty authorized
> disclosure, copying, distribution or use of the contents of this
> information, even if partially, including attached files, is strictly
> prohibited and will be considered a criminal offense. If you are not the
> intended recipient be aware that any disclosure, copying, distribution or
> use of the contents of this information, even if partially, including
> attached files, is strictly prohibited, will be considered a criminal
> offense, so you must reply to the original sender to inform about this
> communication and delete it.
>
>