[v6ops] Re: [E] New Version Notification for draft-mishra-v6ops-variable-iids-problem-statement-01.txt

"Philipp S. Tiesel" <philipp@tiesel.net> Sat, 28 September 2024 08:29 UTC

Return-Path: <philipp@tiesel.net>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9DCAC1516EA for <v6ops@ietfa.amsl.com>; Sat, 28 Sep 2024 01:29:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.607
X-Spam-Level:
X-Spam-Status: No, score=-2.607 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x_xNIvcveJpZ for <v6ops@ietfa.amsl.com>; Sat, 28 Sep 2024 01:29:53 -0700 (PDT)
Received: from einhorn-mail-out.in-berlin.de (einhorn-mail.in-berlin.de [217.197.80.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D623C180B41 for <v6ops@ietf.org>; Sat, 28 Sep 2024 01:29:52 -0700 (PDT)
X-Envelope-From: philipp@tiesel.net
Received: from x-berg.in-berlin.de ([IPv6:2a0a:4580:1018:0:5054:ff:feb2:aa6a]) by einhorn.in-berlin.de with ESMTPS id 48S8Thvs3737214 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Sat, 28 Sep 2024 10:29:43 +0200
Received: from [2a0a:4580:1018:451:a46b:360b:f36a:cea9] (helo=smtpclient.apple) by x-berg.in-berlin.de with esmtpsa (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <philipp@tiesel.net>) id 1suSpj-0005UY-CC; Sat, 28 Sep 2024 10:29:43 +0200
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3818.100.11.1.3\))
From: "Philipp S. Tiesel" <philipp@tiesel.net>
In-Reply-To: <CACyFTPGQXcuT16401+dNGJyfi2auOXsckxrvs64Z6Ew605Y9Uw@mail.gmail.com>
Date: Sat, 28 Sep 2024 10:29:32 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <5A77230A-F821-4564-809C-9C61E2CC34ED@tiesel.net>
References: <CAKD1Yr3qdqMNPJa7bietzat5HFM4g=OLHeJQgvc+tktd4+rW8w@mail.gmail.com> <A83B7972-6937-42FF-947F-47A9C0E8DBA5@gmail.com> <CAO42Z2ySu5mAFg26ZJR5sPFnYrgB3wCkYaA72RzMFNKKQr5fpg@mail.gmail.com> <ZuxEdwwAw4EkvDH7@Space.Net> <f74270ff-ba7b-40d7-8fc3-45a24613c8be@nsrc.org> <BL1PR18MB4277A9F29C8D3A98D324E5D0AC632@BL1PR18MB4277.namprd18.prod.outlook.com> <ZuxOwr-PEqF-wLbc@Space.Net> <BL1PR18MB427773F64F722CD554AB369AAC632@BL1PR18MB4277.namprd18.prod.outlook.com> <ZuxQVTn30V0rw7md@Space.Net> <BL1PR18MB427754802623D05FE3E2A9FFAC632@BL1PR18MB4277.namprd18.prod.outlook.com> <ZuxTcvv0cA94_6QG@Space.Net> <89FB4AA2-E2DC-4379-A4AA-23B4E4633165@tiesel.net> <CACyFTPGQXcuT16401+dNGJyfi2auOXsckxrvs64Z6Ew605Y9Uw@mail.gmail.com>
To: Daryll Swer <contact@daryllswer.com>
X-Mailer: Apple Mail (2.3818.100.11.1.3)
Message-ID-Hash: BZWBEIGOSWE26VMFBHUC7USAH7HLM4JT
X-Message-ID-Hash: BZWBEIGOSWE26VMFBHUC7USAH7HLM4JT
X-MailFrom: philipp@tiesel.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-v6ops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Lorenzo Colitti <lorenzo=40google.com@dmarc.ietf.org>, IPv6 Operations <v6ops@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [v6ops] Re: [E] New Version Notification for draft-mishra-v6ops-variable-iids-problem-statement-01.txt
List-Id: v6ops discussion list <v6ops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/ygF43bmS4rzJbOU2DElZzQvCtuQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Owner: <mailto:v6ops-owner@ietf.org>
List-Post: <mailto:v6ops@ietf.org>
List-Subscribe: <mailto:v6ops-join@ietf.org>
List-Unsubscribe: <mailto:v6ops-leave@ietf.org>

Hi Daryll,

> On 28. Sep 2024, at 07:53, Daryll Swer <contact@daryllswer.com> wrote:
> 
> In the cloud, I can’t:
> - If I go with a /64 per VM at my employer, the subnetting math over all aggregation levels
>   tells me I will also need a /16.
> - If I go with a /80 per VM I could fit our whole SaaS business in a /32 …
> 
> I'm not sure what you mean by “in the cloud”, are you referring to your own in-house on-prem IaaS infrastructure, where you are the owner of both underlay and overlay networking?
> 
> If the answer is yes, then, you don't need a /16 for /64 routed to each VM over ia_pd.

First, we are talking here about a extra large use-case anyway… 
“in the cloud” means a hosting SaaS/PaaS on all continents except Antarctica, 
10+ IaaS providers (+ our own data centers)
100+ infrastructure regions
10k+ VPCs

As the workload is not evenly distributed, one would need quite some bits to fit all aggregation levels with the same numbering scheme. We have a decent address plan based on /80 per VM, but shifting it 16bits to the left would require us to burn at least one /16 or go back to IPv4 thinking in address planning.

I just want to make you aware that a /64 per VM does not work when thinking at the scale of AWS, Azure, GCP, … and given the aggregation levels they have (VPC, VNET, VM).  

AVE!
  Philipp
> 
> 
> 
> On Fri, 27 Sept 2024 at 22:00, Philipp S. Tiesel <philipp@tiesel.net> wrote:
> 
> 
> > On 19. Sep 2024, at 18:38, Gert Doering <gert@space.net> wrote:
> > 
> > Hi,
> > 
> > On Thu, Sep 19, 2024 at 04:29:31PM +0000, Jeremy Duncan wrote:
> >> Here's some basic math: the year 9,000,000:
> >> https://samsclass.info/ipv6/exhaustion-2016.htm
> > 
> > Totally missing the point.
> > 
> > (... and with ARIN starting to allocate /16 to, basically, random
> > ARIN members to are willing to pay, the top level numbers also are
> > changing)
> 
> I also watch this with worries… but by focus is not so much on end users but on cloud infrastructure.
> In the corporate/office networks, I can afford a /64 per host. 
> 
> In the cloud, I can’t:
> - If I go with a /64 per VM at my employer, the subnetting math over all aggregation levels
>   tells me I will also need a /16.
> - If I go with a /80 per VM I could fit our whole SaaS business in a /32 …
> 
> A /80 is also the PD size AWS uses for VMs and other competitors start standardising around.
> That very well fits the use case… a /64 per VNET, a /80 per VM, a /96 per container.
> 
> Having a /80 or /96 on SLAAC would make VMs on developer laptops or 
> linux-bridges in a server VM much easier to deploy, but making /96 
> the new standard for physical hosts would also completely defeat the purpose.
> 
> I guess a good rule would be: 
>  - A /64 is the smallest prefix that MUST be used across administrative boundaries.
>  - A /80 or /96 can be used in virtualised environments that belong to the same administrative domain.
> This rule could be enforced by standardising variable IIDs in a way that they SHOULD be 
> turned off by default on physical interfaces or interfaces that may cross administrative domains.  
> 
> > 
> > Gert Doering
> >        -- NetMaster
> > -- 
> > have you enabled IPv6 on something today...?
> > 
> > SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Ingo Lalla,
> >                                           Karin Schuler, Sebastian Cler
> > Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
> > D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
> > Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
> > _______________________________________________
> > v6ops mailing list -- v6ops@ietf.org
> > To unsubscribe send an email to v6ops-leave@ietf.org
> 
> AVE!
>    Philipp S. Tiesel
> 
> --  
> Philipp S. Tiesel
> https://philipp.tiesel.net/
> 
> _______________________________________________
> v6ops mailing list -- v6ops@ietf.org
> To unsubscribe send an email to v6ops-leave@ietf.org

--  
Philipp S. Tiesel
https://philipp.tiesel.net/