Re: [v6ops] IPREF as a transitioning tool

waldemar <waldemar@wdmsys.com> Fri, 10 November 2023 18:07 UTC

Return-Path: <waldemar@wdmsys.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36838C18E558 for <v6ops@ietfa.amsl.com>; Fri, 10 Nov 2023 10:07:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.199
X-Spam-Level:
X-Spam-Status: No, score=-2.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.091, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=wdmsys.com header.b="PD2lGRpm"; dkim=pass (2048-bit key) header.d=outbound.mailhop.org header.b="bADYL7gX"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OVhkfKWSBRQ0 for <v6ops@ietfa.amsl.com>; Fri, 10 Nov 2023 10:07:15 -0800 (PST)
Received: from cheetah.pear.relay.mailchannels.net (cheetah.pear.relay.mailchannels.net [23.83.216.34]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4A4AC18FCAC for <v6ops@ietf.org>; Fri, 10 Nov 2023 10:06:57 -0800 (PST)
X-Sender-Id: _forwarded-from|217.96.228.89
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 443B28424FE for <v6ops@ietf.org>; Fri, 10 Nov 2023 18:06:57 +0000 (UTC)
Received: from outbound2o.ore.mailhop.org (unknown [127.0.0.6]) (Authenticated sender: duocircle) by relay.mailchannels.net (Postfix) with ESMTPA id F11258422F0 for <v6ops@ietf.org>; Fri, 10 Nov 2023 18:06:56 +0000 (UTC)
ARC-Seal: i=2; s=arc-2022; d=mailchannels.net; t=1699639617; a=rsa-sha256; cv=pass; b=AqwRjo7yeaF7gAUG6I13YyHJdYqTI3VzS0KLcn6DrjgK+4peMlh2xO5hFJNeGN0f1iCeoo DEb50oX3J6VfQIJmslnWNQEO2tTjJJv8dGhMfbdIWCRb3Rd0DGMMwJmQsxcbc1v7l1XT4j hTpYoWB0tcDXcAY7LKg+3pjotiRAO3nF7zy26hPYXn/7jGNxKfyttKDL9APEKCr+geXswX 3aupWT1WFD9W0pnkY0jwabw607dL55qq/PZ7JD1k3nQhZheHuhHmHympDkuYAe08SBkwWO xbVjyzmVwus3OHV4LB+ftSBWKH9Mw7QriPdYL4QCZb4Ef9Xrmlcb5GV7XjPMZQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1699639616; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=Vt3vRYBKM5wNitkH3Nu8+eDxiLO72WyBDPe1M0FzmWM=; b=yffThi3G8AFCELmAlCgwTw/bN3vx9lsJSJAxhm2fLoMrfRI7iQB9H747OinssVz36tT+su U5rIBnYQa3eYgC1TOw2dyNwp2qbNGWZsu2flDTWvXKJ15awyI5D3GT3bJYomas5Zgue7hB P/K1+c0YpmD5qhuCKm6epTVr20R5bKjtgDTfx3j2kXhWAG7KMbyR80jGrlx2FH8iNs+b3c lQtNPikAvP7unSumNQ3XzW5Ak6v+4TYX6q2+BlwfHFSdkcYolPhiCAlV//mSqqbHRPFxej OTrm4QSRK49D77qXaXMwAufiJVtP44eORRXVsBV3gp8quLRiMZeBh7VsURT4aw==
ARC-Authentication-Results: i=2; rspamd-6f98f74948-vjz9v; arc=pass ("outbound.mailhop.org:s=arc-outbound20181012:i=1"); auth=pass smtp.auth=duocircle smtp.mailfrom=waldemar@wdmsys.com
X-Sender-Id: _forwarded-from|217.96.228.89
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|217.96.228.89
X-MailChannels-Auth-Id: duocircle
X-Reign-Army: 016a4d7144f4ae59_1699639617094_3670779385
X-MC-Loop-Signature: 1699639617094:4284352809
X-MC-Ingress-Time: 1699639617094
Received: from outbound2o.ore.mailhop.org (outbound2o.ore.mailhop.org [54.187.213.119]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.124.29.37 (trex/6.9.2); Fri, 10 Nov 2023 18:06:57 +0000
ARC-Seal: i=1; a=rsa-sha256; t=1699639615; cv=none; d=outbound.mailhop.org; s=arc-outbound20181012; b=A7RU4m3w8ybcblNmWRYYvLTMhikS0akLuFr3sQXqMmNyM8Fsx/mjIq+GkVkdBCrTbMhD4JC2yheNM vQcD0doKccDF98QJ17B95r89ndVIFXl3A+65P+IbpT+V1K8fn0wXuVsXkRglC8dcgDBJSrz811Onfn k9i1NKY7bM/b50Ns67C1kTa4LglibagdEdXuA7CNcFN7iUHK1Itz6DegTMe4OY2+VB2mBKGtE95HCy aJuyVea7yzOCX3AQTNmZde3pWPScZDBLMVVNUeH/JhseO1AWepWyxwL0fLdOqUH8WS7ELFVfPU/uV9 mVUPQK/bRLMX6QS/9LihkB4YolZm5iA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=arc-outbound20181012; h=content-transfer-encoding:content-type:in-reply-to:from:references:cc:to: subject:mime-version:date:message-id:dkim-signature:dkim-signature:from; bh=Vt3vRYBKM5wNitkH3Nu8+eDxiLO72WyBDPe1M0FzmWM=; b=lLjaBL6bibSo+XQjtRAZOsQNvOsLu5tZTE7WwP77U90mUmN0DYaVBCD8/ZSNg13UJbrGcGXLdBDWg dQXHhqcVlx0VQYpXF9EB6RxYlOBcvyVNwupFGOW43jBLwdKfdukRpJq3Ho8guntITembTwECrpZdX9 Fm31gHXf9YaIlQzJbxLqxxMC108kZhJX7hZLzbjUEidaA+ToZM2ObAHKL5Cta9TtpYKT7gnJf6lnSY 042DC3nFbn85C52nTgGU+QzGh3QnewJNNFLWW3lajxX7pxztrIF40TuYZxrJGVV0qlnZKk1y3XwcTO 6oxgymjpmeaa2VXXiSJLTByP/+2GQIw==
ARC-Authentication-Results: i=1; outbound4.ore.mailhop.org; spf=softfail smtp.mailfrom=wdmsys.com smtp.remote-ip=168.235.72.19; dmarc=none header.from=wdmsys.com; arc=none header.oldest-pass=0;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wdmsys.com; s=duo-1675405977089-29a98ead; h=content-transfer-encoding:content-type:in-reply-to:from:references:cc:to: subject:mime-version:date:message-id:from; bh=Vt3vRYBKM5wNitkH3Nu8+eDxiLO72WyBDPe1M0FzmWM=; b=PD2lGRpmcezSbvrHiLAbl/FnSvOwx6JQLYlOQRj6s2KhH8ZddyxB9LEoIq33nZEEUePV/b8KGxbyv feTeFmk+esIy7jqwHtejhRZ2TBwSwGPxtsBslhEYOZuxDA5byTsGbz3wk9bTJVdqrsJE8B1EXKmn3I d5nRs4RLrSHLen84=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outbound.mailhop.org; s=dkim-high; h=content-transfer-encoding:content-type:in-reply-to:from:references:cc:to: subject:mime-version:date:message-id:from; bh=Vt3vRYBKM5wNitkH3Nu8+eDxiLO72WyBDPe1M0FzmWM=; b=bADYL7gXw77Xc/hMsPDeOknRh4gS5/UBq5imtQI9+pLYcK55qRAQbowo3AYrT2YVVdIoOeQMfRgNT 8jq7iNYLrOg8QRVK7qi9T4XK3vruaamv0gwq9uNmeIkpctj6ICV0FpoUrujmlb6v2D2pU7FX0w+hox Cg/ri3NgOCZ0RCo6l8ZtaHzGKB1CmJcL10nC/6+EhHjtYIfDFyPNtgfQfuK6TzUN54JHc0kiRh7jpl QdK5n6+7hWFyrFws9ZLiRFOsVlV0qdTd13ch8KPgA+CTHLneisk6Mw3rz8T+j1KZyBT5jmFtcGDesq DW90nYhd7pAoL983SWPKhmLBd6o1H+g==
X-Originating-IP: 168.235.72.19
X-MHO-RoutePath: d2FsZGVtYXI=
X-MHO-User: eb878e6e-7ff3-11ee-9e7d-95702c074b68
X-Report-Abuse-To: https://support.duocircle.com/support/solutions/articles/5000540958-duocircle-standard-smtp-abuse-information
X-Mail-Handler: DuoCircle Outbound SMTP
Received: from cmail.wdmsys.com (168-235-72-19.cloud.ramnode.com [168.235.72.19]) by outbound4.ore.mailhop.org (Halon) with ESMTPSA id eb878e6e-7ff3-11ee-9e7d-95702c074b68; Fri, 10 Nov 2023 18:06:53 +0000 (UTC)
Received: from 217.96.228.89.ipv4.supernova.orange.pl ([217.96.228.89] helo=[192.168.1.13]) by cmail.wdmsys.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.95) (envelope-from <waldemar@wdmsys.com>) id 1r1Vu5-000eBD-NJ; Fri, 10 Nov 2023 18:06:49 +0000
Message-ID: <9f1eede1-ab65-0b52-4cda-58d305544b4c@wdmsys.com>
Date: Fri, 10 Nov 2023 10:06:46 -0800
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1
Content-Language: en-US
To: Martin Huněk <martin.hunek@tul.cz>, Mark Andrews <marka@isc.org>
Cc: v6ops@ietf.org
References: <90f07ffa-1f44-8fa6-a6eb-b35c14fcf655@wdmsys.com> <33892F6F-A2AF-4BAA-BB33-1ED99F9FD674@isc.org> <442536ba-f736-5106-615c-7fcc0b8dc2a1@wdmsys.com> <1964267.2dr1X8vxzf@asclepius.adm.tul.cz>
From: waldemar <waldemar@wdmsys.com>
In-Reply-To: <1964267.2dr1X8vxzf@asclepius.adm.tul.cz>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/xOuSuYkJpSaXj1ND3aMhUdOgi84>
Subject: Re: [v6ops] IPREF as a transitioning tool
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Nov 2023 18:07:19 -0000

On 11/10/23 07:31, Martin Huněk wrote:
> Hi,
>
> If it is required in every network in the whole Internet, then it is a blocker, isn't it?
No, not really, We're requiring every network to transition and it is 
not a blocker.
>
> Especially if it has to be in CPE, as many don't have any software support, and changes in HW take years to do.
>
> Dne pátek 10. listopadu 2023 9:30:12 CET, waldemar napsal(a):
>> On 11/9/23 22:12, Mark Andrews wrote:
>>> There is nothing new in this proposal other than adding an unnecessary new DNS record.
>>>
>>> Many moons ago the IETF/IRTF was presented with a DNS server that talked to a NAT64 to
>>> establish A to AAAA mappings on demand to allow IPv4 machines to connect to IPv6 machines.
>>> See section 3.2 of your proposal.  It worked but clearly had scaling limitations as it needed
>>> a large IPv4 block to service a small IPv4 client base.  Putting one in every home CPE router
>>> would probably work but is it really necessary when 99.99% of clients already support dual
>>> stack.
>> ...scaling issues.  Yes, exactly. IPREF does not have scaling issues.
> If you put it in the CPE, you had to have the dual-stack all the way from the Internet to the CPE. Then you have got a dual-stack network. You are depending on both protocols until everyone transitions. If you do that, why should latecomers transition at all? Also, if everyone had to have dual-stack anyway, why use IPREF at all? Be aware that having GW on CPE means NAT/CGNAT on the operator's edge as it is now - if you do not have enough IPv4 public addresses to NAT on the GW. That can also be an issue.
There is no dual stacks with IPREF. It works differently than 
traditional tools. I guess, we really have to build it, then it would be 
easier to show it. I have a working model but model is not as convincing 
as a bona fide gateway (which could be a software upgrade on existing 
routers).  For now, maybe a detailed walkthrough would help. I'm 
guessing you already read it in the draft?? In that case, let's leave it 
at that with me saying dual stacks are not required.
>
>>> We already have the ability for IPv6 to connect to IPv6 to IPv4 using NAT64.  This can be run
>>> with initiating traffic coming from both directions at the same time.  IPv6 on the public side
>>> to IPv4 on the private side with static mapping and AAAA records in the DNS as well as the more
>>> common use of dynamic mappings when running IPv6 only on the private side.  This has been done
>>> for many years now.
>> ...thereby reinforcing IPv4. You will never do away with IPv4 Internet
>> this way.
>>
>> For as long as IPv4 Internet exists, the transition to IPv6 will never
>> be completed.  Are you concerned at all that this may happen? Has there
>> ever been a doubt in your mind that IPv4 might survive?  Is the fight
>> over transition tools worth risking IPv6? IPREF transitions only to pure
>> IPv6, it uses only pure IPv6 Internet. It removes IPv4 addresses.
> IPREF doesn't do that either - you need the dual-stack connectivity for the GW. BTW, if you use SIIT-DC, you don't have to have IPv4 inside your content-providing network. If you use NAT64, you also do not have IPv4 in your network. In both cases, traffic going through the translator is only the one for that it is needed, not all the traffic.
I guess, this is related to the comment above. Dual stacks are not 
needed. If you haven't read the draft, or read it quickly, there is a 
detailed walkthrough describing how packets travel over the different 
address spaces. At no point there is a need for dual stacks (gateways 
have them of course, but that's not what we're talking about here).
>
> Regards,
> Martin
>