Re: [v6ops] The need for local-ipv4 socket transition solutions -- NAT64/DNS64 remains insufficient

James Woodyatt <jhw@nestlabs.com> Mon, 13 April 2015 19:22 UTC

Return-Path: <jhw@nestlabs.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76D491B3203 for <v6ops@ietfa.amsl.com>; Mon, 13 Apr 2015 12:22:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.521
X-Spam-Level:
X-Spam-Status: No, score=0.521 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2KDpaL3q4HSA for <v6ops@ietfa.amsl.com>; Mon, 13 Apr 2015 12:22:21 -0700 (PDT)
Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com [IPv6:2a00:1450:400c:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAAC51B320A for <v6ops@ietf.org>; Mon, 13 Apr 2015 12:21:22 -0700 (PDT)
Received: by wiun10 with SMTP id n10so78841602wiu.1 for <v6ops@ietf.org>; Mon, 13 Apr 2015 12:21:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nestlabs.com; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=yJhDT8kvm46Q9jAvF7OPPQt04/1QWjuYaCd5028ZPB4=; b=BA88YcJ2SGVotP7FJNIHT0Hla/hxHLIUf7rhYh73KtGOMBxG77jYfBhMa/lsFDiOtM YJ6vuj/fDap+C3QKcLe2asa9f0/yvsYcoZq9ZejiE/93AbIU0oX6hIu8ksTmq5GKjk1T 12cWRKg48E7R+YU3rHrgHyJiuVq1nxnGs6ZHc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=yJhDT8kvm46Q9jAvF7OPPQt04/1QWjuYaCd5028ZPB4=; b=gN8jLEWu+TFgpXhKeRYxNFDVLdH3ShBV8PU8ANzQBeH2RSeZqgt4GEMfgzN1SchIC9 MNBFLXxfpwBmU5I3hBBcDSNL89sVYN8VxXY8l7tqCOsnpKvIVuhj6ZGKCXJ7Lkeuma4h tOkCRIHq5tSKDj5CUF6sTcUdMs6iGJdC8MYSeHuNIxivAL9ec74HlxRQqPtPHhz7Wl5F /z5/Vcws9y58dFn2tx19t6YGTXF3uyqXIRhJEvaooEUHJnzvIbmjow5WmSHRErzUxGSV QkxXuXewPoQilPBNt4ax/2kz1R5JVHGKFKzm+0q3bjMsK5iUjSBOgh7zVSakcMSqne2F PArA==
X-Gm-Message-State: ALoCoQld4kxpEfIx+eRdQdhWqaVbkUnPeEZK4o5DOkjuyNOhnb4aC+vwR6eJj1b+COiR76c/Nxfr
MIME-Version: 1.0
X-Received: by 10.194.71.208 with SMTP id x16mr29696119wju.129.1428952881545; Mon, 13 Apr 2015 12:21:21 -0700 (PDT)
Received: by 10.28.16.1 with HTTP; Mon, 13 Apr 2015 12:21:21 -0700 (PDT)
In-Reply-To: <55290E26.8080500@cernet.edu.cn>
References: <CAD6AjGT-hG-uvRQvRosrZtfrf0Nb8ne9jy=tD9oh=5zNM42Xsg@mail.gmail.com> <CADhXe51MUB-czeCtpc63E0cHPpb_39Vv0o2Y57EVU2w_makP5Q@mail.gmail.com> <CAD6AjGTcKgK8W+VB1H5EQpHaYiKVYXqOz_2RS-w_CiTf9kL2CQ@mail.gmail.com> <CADhXe530+OVZrFZVaYh1-zoRDvJhUd0rf4sx6a2nO8SvKmm6zg@mail.gmail.com> <CAPi140PQ+TF0rED_bQPeS=Fj415qt0-zE2RdGnEL34PAzHyx6Q@mail.gmail.com> <CAD6AjGTjXAeMF6pw5MO2Jrf9B8LJ48D3m1YTVkdBe=_OHjtroQ@mail.gmail.com> <CADhXe51TCqU2eMP4LS3DooZxQDAPD95OVJDXbiU7qvuvKCMq+w@mail.gmail.com> <CAKD1Yr2=zc57+pOA9TFs+0azw0ZR1g67+08T=9eZPHjGXBvgFQ@mail.gmail.com> <CADhXe53T_30pj7xxwNs=mWEnd=do6oiq3KgN=U-gHLrLF-gG7Q@mail.gmail.com> <D1441574.4C168%wesley.george@twcable.com> <CAD6AjGQrzoBJrqQfKO0N8Ji=oJ-ZP6Sn88sXf=opJ6bYVmTDZg@mail.gmail.com> <552102B0.6070904@cernet.edu.cn> <35D97B17-8E83-43CF-ABEF-122572F1321A@eircom.net> <552369C8.5000801@cernet.edu.cn> <CADhXe51BDuPhc8wdKGmRiBfSnrz7PMtqYXaoDO+5cwLx_xW2tw@mail.gmail.com> <55290E26.8080500@cernet.edu.cn>
Date: Mon, 13 Apr 2015 12:21:21 -0700
Message-ID: <CADhXe50zz9EtNtifMh+tN9XT-jKCTJB=vsQ6uG515iddOo7f2Q@mail.gmail.com>
From: James Woodyatt <jhw@nestlabs.com>
To: Xing Li <xing@cernet.edu.cn>
Content-Type: multipart/alternative; boundary="047d7bfcead0e7dba80513a0042e"
Archived-At: <http://mailarchive.ietf.org/arch/msg/v6ops/zvelKfYhMaGEGNmMeYa8yfXO5o4>
Cc: IPv6 Ops WG <v6ops@ietf.org>
Subject: Re: [v6ops] The need for local-ipv4 socket transition solutions -- NAT64/DNS64 remains insufficient
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Apr 2015 19:22:22 -0000

On Sat, Apr 11, 2015 at 5:05 AM, Xing Li <xing@cernet.edu.cn> wrote:

>  No. I am an academic network service provider and my goal is to provide
> global IPv4/IPv6 Internet connectivity using an IPv6-only backbone and very
> limited public IPv4 addresses.
>

I can understand the goal of providing service on your networks to global
IPv4 and IPv6 destinations, and I can understand how you may be limited by
the scarcity of public IPv4 address space, but I fail to see either A) how
that goal is best achieved by removing IPv4 service from your local
network, or B) how the negative effects of scarcity in public IPv4 space is
mitigated by the deployment of a CLAT in host operating systems.

>From my perspective, deploying a CLAT ubiquitously in host operating
systems will have two deleterious effects: 1) it will prolong the viability
of IPv4 literals in publicly reachable application services, requiring the
maintenance of the PLAT service, and the public IPv4 routing that entails,
over a longer period of transition, possibly indefinitely; and, 2) it will
slow the transition of applications in your local network to using IPv6
instead of IPv4, because the IPv4-only legacy interfaces will still be a
viable, if somewhat impaired, despite your having removed IPv4 routing from
local subnets.

I would think the negatives of this plan would obviously outweigh the
positives. On the plus side: you get to deploy a nice clean IPv6-only
network that nobody knows is IPv6-only. On the minus side: you may never
get to stop supporting IPv4 in the applications and the hosts, because if
you ever do, the users will howl about it, and this you cannot abide. I
would think it better to just decide you can't ever live without IPv4 and
commit yourself to running dual-stack forever.


-- 
james woodyatt <jhw@nestlabs.com>
Nest Labs, Communications Engineering