[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Distributing site-wide RFC 3484 policy



On 24-jul-2007, at 10:10, Jun-ichiro itojun Hagino wrote:

Before moving to "draft-fujisaki-dhc-addr-select-04.txt",

Can't find a draft with that name...

	- the entire "source address selection" stuff was a mistake.
	  network has to be deployed so that any ip6_src/ip6_dst pair can go
	  out of the organization somehow.

That ship has sailed. Even if you could, through some kind of herculian effort, make it so that only a single IPv6 address is available per host rather than 1 or more for 1 or more interfaces, there's going to be the issue of having both an IPv4 and an IPv6 address. I currently have a mail client that won't fall back to IPv4 if IPv6 doesn't work. That's not acceptable.

(a) if there's some issue like uRPF in some of your ISPs, the egress
	      routers in your organization should implement source-based
	      routing to workaround it.

When a host has selected addresses, other boxes can't overrule that. The best thing you can do is generate a quick unreachable so the host can retry with a different source/dest address combination.

	  (b) the whole idea of ULA/ULA-x should be killed at once.

No it shouldn't. People want it, no reasonable counter arguments have been presented.

	- alain durand said that he would prefer to have single IPv6 address
	  on a node.  i would not go that far (for renumbering and multi-
	  address multihoming) but i object to have addresses with different
	  reachability or "scoping".

You should have spoken up somewhere in the last century. This stuff is a done deal today, no point in turning back halfway and turning back completely is not possible at this point.

	- so, there's no need for you to think about "distributing source
	  address selection policy".

Deciding for other people what they don't need is extremely impolite.