Proposal for site-local clean-up

2002-11-12 Thread Brian E Carpenter
Unfortunately it's too late to catch the addressing architecture document unless we recall it from the RFC Editor and cycle it through the IESG again. But I propose that we do exactly that, in order to change the following paragraph in section 2.5.6: Current text: >Site-local addresses are de

Re: Proposal for site-local clean-up

2002-11-12 Thread Margaret Wasserman
Current text: Hi Brian, >Site-local addresses are designed to be used for addressing inside of >a site without the need for a global prefix. Although a subnet ID >may be up to 54-bits long, it is expected that globally-connected >sites will use the same subnet IDs for site-l

Re: Proposal for site-local clean-up

2002-11-12 Thread Brian Haberman
Margaret Wasserman wrote: Current text: Hi Brian, >Site-local addresses are designed to be used for addressing inside of >a site without the need for a global prefix. Although a subnet ID >may be up to 54-bits long, it is expected that globally-connected >sites will use t

Re: Proposal for site-local clean-up

2002-11-12 Thread Pekka Savola
On Tue, 12 Nov 2002, Brian Haberman wrote: > Margaret Wasserman wrote: > > > >> > >> Current text: > > > > > > Hi Brian, > > > >> >Site-local addresses are designed to be used for addressing > >> inside of > >> >a site without the need for a global prefix. Although a subnet ID > >> >

Re: Proposal for site-local clean-up

2002-11-12 Thread Pekka Savola
On Tue, 12 Nov 2002, Brian E Carpenter wrote: [...] > Otherwise, we will need a whole new RFC just for this paragraph. > > Alternatively, we could spend the next 5 years discussing the > unnecessary complexities of using site-locals on connected sites. Note that we will need at least one more RFC

RE: Proposal for site-local clean-up

2002-11-12 Thread Bound, Jim
aberman > Cc: Margaret Wasserman; Brian E Carpenter; [EMAIL PROTECTED] > Subject: Re: Proposal for site-local clean-up > > > On Tue, 12 Nov 2002, Brian Haberman wrote: > > Margaret Wasserman wrote: > > > > > >> > > >> Current text: > > > >

Re: Proposal for site-local clean-up

2002-11-12 Thread Michael Thomas
Count me in on agreeing with Brian too. Mike Pekka Savola writes: > On Tue, 12 Nov 2002, Brian Haberman wrote: > > Margaret Wasserman wrote: > > > > > >> > > >> Current text: > > > > > > > > > Hi Brian, > > > > > >> >Site-local addresses are designed to be used for add

Re: Proposal for site-local clean-up

2002-11-12 Thread Alain Durand
Brian E Carpenter wrote: Unfortunately it's too late to catch the addressing architecture document unless we recall it from the RFC Editor and cycle it through the IESG again. But I propose that we do exactly that, in order to change the following paragraph in section 2.5.6: [...] Alternati

RE: Proposal for site-local clean-up

2002-11-12 Thread Bound, Jim
: Tuesday, November 12, 2002 1:50 PM > To: Brian E Carpenter > Cc: [EMAIL PROTECTED] > Subject: Re: Proposal for site-local clean-up > > > > > Brian E Carpenter wrote: > > >Unfortunately it's too late to catch the addressing architecture > >document un

Re: Proposal for site-local clean-up

2002-11-12 Thread Ralph Droms
I support this suggested course of action and the proposed new text. - Ralph At 01:53 PM 11/12/2002 +0100, Brian E Carpenter wrote: Unfortunately it's too late to catch the addressing architecture document unless we recall it from the RFC Editor and cycle it through the IESG again. But I propose

RE: Proposal for site-local clean-up

2002-11-12 Thread Brian Zill
I strongly disagree with this suggestion. Site-local addresses (and more generally, scoped addresses) are a fundamental part of the IPv6 architecture. They are an important feature of IPv6, one of the great improvements that makes IPv6 better than IPv4. It would be a serious loss to IPv6 if site

RE: Proposal for site-local clean-up

2002-11-12 Thread Hesham Soliman (EAB)
I don't really have a strong opinion one way or the other, but I would like to make the following observations: - "MUST NOTs" are there for a reason, saying MUST NOT when it can be done and protocols don't break is not a good idea. - People have shown that there are ways of using site-locals f

Re: Proposal for site-local clean-up

2002-11-12 Thread Mark Smith
I support this change and the new text. Mark. > At 01:53 PM 11/12/2002 +0100, Brian E Carpenter wrote: > >Unfortunately it's too late to catch the addressing architecture > >document unless we recall it from the RFC Editor and cycle it > >through the IESG again. But I propose that we do exactly

Re: Proposal for site-local clean-up

2002-11-12 Thread Randy Bush
> Unfortunately it's too late to catch the addressing architecture > document unless we recall it from the RFC Editor and cycle it > through the IESG again. But I propose that we do exactly that, > in order to change the following paragraph in section 2.5.6: > > Current text: > >> Site-local addr

Re: Proposal for site-local clean-up

2002-11-12 Thread Rob Austein
What Brian C., Margaret, Brian H., Pekka, Mike, Jim, Alain, Ralph, Keith, and Mark said, but not what Brian Z. said :). IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP a

Re: Proposal for site-local clean-up

2002-11-12 Thread Randy Bush
> What Brian C., Margaret, Brian H., Pekka, Mike, Jim, Alain, Ralph, > Keith, and Mark said, but not what Brian Z. said :). what he said IETF IPng Working Group Mailing List IPng Home Page: http://playground

RE: Proposal for site-local clean-up

2002-11-12 Thread Michel Py
> Randy Bush wrote: > processwise it could be done with a note to the rfc > editor or in the 48 hour edit call as s/he is doing > the final edits. Processwise a recall from the RFC editor could also be challenged all the way to the IAB or even the ISOC and lead us to 1000+ more emails up front and

Re: Proposal for site-local clean-up

2002-11-12 Thread John Bartas
Hi, What they said. I mean, I support Brian's wording change in the RFC. Being a newbie on this list I probably shouldn't get a vote, but being a newbie I may have a new perspective. A lot of the networking world sees IPv6 as still thrashing and not ready for prime time. A year ag

RE: Proposal for site-local clean-up

2002-11-12 Thread Mohan Parthasarathy
> > Personally, I don't have a big problem with the suggestion > itself, but I do not agree with it, simply because it's a > meaningless restriction. I'd rather see a > separate BCP for this, or at least say should not and > explain why. > I agree with Hesham here. Should we not explain w

RE: Proposal for site-local clean-up

2002-11-12 Thread Michael Thomas
Mohan Parthasarathy writes: > > > > > Personally, I don't have a big problem with the suggestion > > itself, but I do not agree with it, simply because it's a > > meaningless restriction. I'd rather see a > > separate BCP for this, or at least say should not and > > explain why. >

RE: Proposal for site-local clean-up

2002-11-12 Thread Tony Hain
ber 12, 2002 11:59 AM > To: Alain Durand; Brian E Carpenter > Cc: [EMAIL PROTECTED] > Subject: RE: Proposal for site-local clean-up > > > OK folks I am counting and I see clear majority for margarets > proposal? > > /jim > [In matters of style, swim with the cur

Re: Proposal for site-local clean-up

2002-11-12 Thread Shannon -jj Behrens
he currentsin matters of principle, > stand like a rock. - Thomas Jefferson] > > > > -Original Message- > > From: Alain Durand [mailto:Alain.Durand@;Sun.COM] > > Sent: Tuesday, November 12, 2002 1:50 PM > > To: Brian E Carpenter > > Cc: [EMAIL PROT

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
I support this text. should "must not" be in upper case? >Proposed new text: > >Site-local addresses are designed to be used for addressing inside of >a site which is not connected to the Internet and therefore does not >need a global prefix. They must not be used for a site that i

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
> Site-local addresses (and more generally, scoped addresses) are a > fundamental part of the IPv6 architecture. They are an important > feature of IPv6, one of the great improvements that makes IPv6 better > than IPv4. It would be a serious loss to IPv6 if site-local addresses > were only allowe

Re: Proposal for site-local clean-up

2002-11-12 Thread JINMEI Tatuya / 神明達哉
> On Tue, 12 Nov 2002 13:53:00 +0100, > Brian E Carpenter <[EMAIL PROTECTED]> said: > Unfortunately it's too late to catch the addressing architecture > document unless we recall it from the RFC Editor and cycle it > through the IESG again. But I propose that we do exactly that, > in orde

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
> I don't really have a strong opinion one way > or the other, but I would like to make the following > observations: > > - "MUST NOTs" are there for a reason, saying MUST NOT > when it can be done and protocols don't break is not > a good idea. perhaps not, but protocols DO break when we subject

Re: Proposal for site-local clean-up

2002-11-12 Thread Kurt Erik Lindqvist
Processwise a recall from the RFC editor could also be challenged all the way to the IAB or even the ISOC and lead us to 1000+ more emails up front and 1 more before all the appeal processes have been exhausted. Is this the road we are taking? Without pointing at anyone in particular... Why

Re: Proposal for site-local clean-up

2002-11-12 Thread itojun
>Unfortunately it's too late to catch the addressing architecture >document unless we recall it from the RFC Editor and cycle it >through the IESG again. But I propose that we do exactly that, >in order to change the following paragraph in section 2.5.6: > >Current text: > >>Site-local addresse

Re: Proposal for site-local clean-up

2002-11-13 Thread Harald Tveit Alvestrand
I think Brian's proposal, if adopted, makes my worry about site-locals inducing complexity in naming lookup mechanisms go away (naming mechanisms for disconnected networks have to be different from those for connected networks anyway). So you can count me as supporting the proposal. That said,

Re: Proposal for site-local clean-up

2002-11-13 Thread Kurt Erik Lindqvist
If I could sleep assured that site-locals would not be used for any other network than networks not connected to global Internets, I would be all for this. What still have me really worried is that there is no way to enforce this, and it is just inviting NATv6. In that case Brians wording wil

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
> There is absolutely no reason to restrict SL to disconnected sites. Tony, we've been discussing the reasons for weeks now. It's pretty disingeneous to say 'absolutely no reason' in the face of this. Face it, SLs as originally conceived are broken. This is the simplest fix. Keith

RE: Proposal for site-local clean-up

2002-11-13 Thread NOISETTE Yoann FTRD/DMI/CAE
EMAIL PROTECTED] Objet : Proposal for site-local clean-up Unfortunately it's too late to catch the addressing architecture document unless we recall it from the RFC Editor and cycle it through the IESG again. But I propose that we do exactly that, in order to change the following paragraph in sec

RE: Proposal for site-local clean-up

2002-11-12 Thread Tony Hain
Keith Moore wrote: > > There is absolutely no reason to restrict SL to disconnected sites. > > Tony, we've been discussing the reasons for weeks now. It's > pretty disingeneous to say 'absolutely no reason' in the face of this. > > Face it, SLs as originally conceived are broken. This is the

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
> The fundemental issue here the architecture has been changed to support > multiple simultanious scopes. And it was taken too far before the consequences were understood. Now we're fixing this bug, and it's about time. > Those that are having a hard time figuring > out how to do that are oppo

RE: Proposal for site-local clean-up

2002-11-12 Thread Tony Hain
Keith Moore wrote: > ... > Why in the world you should be trying to promote dysfunction in the > network is beyond me. I am not promoting dysfunction, that will happen for operational / policy reasons. I am trying to make sure that when it does happen, there is a clearly understood mechanism fo

Re: Proposal for site-local clean-up

2002-11-12 Thread Keith Moore
> > Why in the world you should be trying to promote dysfunction in the > > network is beyond me. > > I am not promoting dysfunction, that will happen for operational / > policy reasons. I am trying to make sure that when it does happen, > there is a clearly understood mechanism for identifying

RE: Proposal for site-local clean-up

2002-11-13 Thread Brian Zill
Keith Moore writes: > Hesham writes: > > - "MUST NOTs" are there for a reason, saying MUST NOT > > when it can be done and protocols don't break is not > > a good idea. I agree with Hesham. We shouldn't be applying "MUST NOT"s to situations where we have workable solutions. Restricting site-loca

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> I agree with Hesham. We shouldn't be applying "MUST NOT"s to situations > where we have workable solutions. the closest thing we have to a workable solution is to find a way to give every site that connects to another network a global prefix (whether it's globally connected or not) and have ap

Re: Proposal for site-local clean-up

2002-11-13 Thread Markku Savela
> From: Harald Tveit Alvestrand <[EMAIL PROTECTED]> > every time we come across a case where complexity is increased by > considering how to use site-local concurrently with global addresses (my > favourite list starts with source address selection and DNS lookup, but > does not end there.

Re: Proposal for site-local clean-up

2002-11-13 Thread Harald Tveit Alvestrand
--On onsdag, november 13, 2002 16:38:55 +0200 Markku Savela <[EMAIL PROTECTED]> wrote: (my favourite list starts with source address selection and DNS lookup, but does not end there.), 1. There is NO PROBLEM with source address selection. - if your destination is site local, your sourc

Re: Proposal for site-local clean-up

2002-11-13 Thread Vladislav Yasevich
Brian E Carpenter wrote: Proposed new text: Site-local addresses are designed to be used for addressing inside of a site which is not connected to the Internet and therefore does not need a global prefix. They must not be used for a site that is connected to the Internet. Using si

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> My view on this is that you need the "scoped DNS" architecture, which > can be seens as extension to "two-faced DNS". You can have DNS is only one of many applications that have this problem. you can't solve the DNS problem and ignore those of the other applications. also, scoped DNS will break

Re: Proposal for site-local clean-up

2002-11-13 Thread Brian E Carpenter
Vladislav Yasevich wrote: > > Brian E Carpenter wrote: > > > > Proposed new text: > > > >Site-local addresses are designed to be used for addressing inside of > >a site which is not connected to the Internet and therefore does not > >need a global prefix. They must not be used for a s

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Keith Moore wrote: > the closest thing we have to a workable solution is to find a > way to give every site that connects to another network a > global prefix > (whether it's globally connected or not) and have applications > ignore the SLs (at least for purpose of referrals). and if you do >

Re: Proposal for site-local clean-up

2002-11-13 Thread Richard Carlson
Keith; At 09:27 PM 11/12/02 -0500, Keith Moore wrote: [snip snip snip] No. Scopes reduce the ablity of the network to support apps. They make it harder to produce an app that works independently of network location, and they don't add a single extra capability that wasn't present already. You

RE: Proposal for site-local clean-up

2002-11-13 Thread Hesham Soliman (EAB)
> Keith; > > At 09:27 PM 11/12/02 -0500, Keith Moore wrote: > >[snip snip snip] > >No. Scopes reduce the ablity of the network to support apps. > >They make it harder to produce an app that works independently > >of network location, and they don't add a single extra capability >

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> >No. Scopes reduce the ablity of the network to support apps. > >They make it harder to produce an app that works independently > >of network location, and they don't add a single extra capability > >that wasn't present already. > > You keep saying that some apps will fail with scoped addresses

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> => I think he did to some extent, but the point > is Brian Z. and Rich already showed how this can be > done. Sure there is additional complexity, but > didn't we know this 3 years ago ? I think we did. It is simply not acceptable to expect apps to absorb all of this complexity for the sake of t

Re: Proposal for site-local clean-up

2002-11-13 Thread Fred L. Templin
So much traffic has flown by on this subject that my head is still spinning. But, let me give one example in which the use of site-locals on globally connected networks might be useful. While at SRI International, I had the privilege of participating in a study of autonomous teams of unmanned vehc

Re: Proposal for site-local clean-up

2002-11-13 Thread Alain Durand
NOISETTE Yoann FTRD/DMI/CAE wrote: Hi all, I would possibly agree with this change, but it must be clear that some ongoing work or considered solutions will be restricted or even totally impossible after this new statement becomes effective. For instance, draft-ietf-ipv6-dns-discovery-07.txt g

Re: Proposal for site-local clean-up

2002-11-13 Thread Fred L. Templin
FWIW, This study, along with others in the US Army CECOM division, produced the transition mechansim now known as ISATAP. Fred Templin [EMAIL PROTECTED] Fred L. Templin wrote: So much traffic has flown by on this subject that my head is still spinning. But, let me give one example in which the

Re: Proposal for site-local clean-up

2002-11-13 Thread Tim Chown
Hi Fred, That's interesting. There has been some talk about multiple ISATAP site routers, and scalability. Can you comment on how ISATAP performed in this network of thousands of (mobile) hosts? (I assume you meant hundreds or thousands, not hundreds of thousands) Tim On Wed, Nov 13, 2002 at

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> > IMHO, it would almost be easier to remove the "must not be used" sentence > > from the above paragraph. > > Yes, I like that suggestion. It's consistent with Harald's comment > that we don't have an enforcement department. Well, I don't think the paragraph is sufficient without it. How abo

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Michael Thomas wrote: > So I have a question for those who support > connected site locals: what would prevent a new > RFC from updating Brian's wording for site locals > (if that's the right thing)? > > I say this because it seems to me that there's a > lot of issues being conflated in these argu

RE: Proposal for site-local clean-up

2002-11-13 Thread Michael Thomas
Tony Hain writes: > Michael Thomas wrote: > > So I have a question for those who support > > connected site locals: what would prevent a new > > RFC from updating Brian's wording for site locals > > (if that's the right thing)? > > > > I say this because it seems to me that there's a > > l

RE: Proposal for site-local clean-up

2002-11-13 Thread Mohan Parthasarathy
Tony, > > Michael Thomas wrote: > > So I have a question for those who support > > connected site locals: what would prevent a new > > RFC from updating Brian's wording for site locals > > (if that's the right thing)? > > > > I say this because it seems to me that there's a > > lot of issues be

RE: Proposal for site-local clean-up

2002-11-13 Thread Margaret Wasserman
Take the case of a 20,000 node network where half are allowed global access and half are not. It is much more complex to sort through a 10,000 node list per packet for access filtering than it would be to have two entries, SL deny & PA allow. Yes the list of which 10,000 nodes are allowed the gl

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Mohan Parthasarathy wrote: > > ... > I miss something here. How do you make sure that nodes > configure just site local and not global address on seeing an > RA ? Are you keeping them in separate networks i.e not mixing > nodes that require globals and site locals ? If so, then I > can do the s

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Margaret Wasserman wrote: > ... > How are you planning to configure and organize these 20,000 nodes? The ones that should not have public access would be configured to only listen for the SL prefix in an RA, or could be fed by DHCP. > > If the private nodes are randomly distributed around the

Re: Proposal for site-local clean-up

2002-11-13 Thread Fred L. Templin
Keith Moore wrote: Finally, the team as a whole is only intermittently connected to the global Internet - perhaps with long periods of disconnected operation. yes, intermittent connection is one of the genuinely valid justifications for SLs. Glad to hear you agree. however even with intermi

RE: Proposal for site-local clean-up

2002-11-13 Thread Roy Brabson
> > I miss something here. How do you make sure that nodes > > configure just site local and not global address on seeing an > > RA ? Are you keeping them in separate networks i.e not mixing > > nodes that require globals and site locals ? If so, then I > > can do the same with globals with app

Re: Proposal for site-local clean-up

2002-11-13 Thread Fred L. Templin
Tim Chown wrote: Hi Fred, That's interesting. There has been some talk about multiple ISATAP site routers, and scalability. Can you comment on how ISATAP performed in this network of thousands of (mobile) hosts? I don't have any scaling figures from actual experiments, but scaling is bounded

RE: Proposal for site-local clean-up

2002-11-13 Thread Mohan Parthasarathy
> Mohan Parthasarathy wrote: > > > ... > > I miss something here. How do you make sure that nodes > > configure just site local and not global address on seeing an > > RA ? Are you keeping them in separate networks i.e not mixing > > nodes that require globals and site locals ? If so, then I

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Roy Brabson wrote: > ... > So, instead of filtering global addresses at the firewall, > you go to each > individual box in the network which you want to restricted > access to/from > and configure it to only use restricted (i.e., site-local) > addresses? And, > as a bonus, you get to deal wit

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Mohan Parthasarathy wrote: > I agree that this is possible. But this is extra > configuration and assumption that the restricted box IPv6 > implementation has support for such policy knobs. Yes. It also aligns the policy implementation with the device that is restricted, rather than trying to tr

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Keith Moore wrote: > ... > > Even > > when it is available, that does not automatically create a > reason to > > restrict the use of SL. It will always be easier to filter > a short /10 > > than to maintain a long list of access controls at the > border. THIS IS > > A MAJOR OPERATIONAL REASON

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> I don't know how you can get from needing a simple filter to not needing > a filter... > A simple example would be; as per spec, SL is blocked at the border, > globals are allowed without restriction, and hosts that are allowed out > have a policy that allows them to configure a global prefix alo

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> Finally, the team as a whole is only intermittently connected to the > global Internet - perhaps with long periods of disconnected operation. yes, intermittent connection is one of the genuinely valid justifications for SLs. however even with intermittent connection it is often possible to use

RE: Proposal for site-local clean-up

2002-11-13 Thread Tony Hain
Keith Moore wrote: > > I don't know how you can get from needing a simple filter to not > > needing a filter... A simple example would be; as per spec, SL is > > blocked at the border, globals are allowed without restriction, and > > hosts that are allowed out have a policy that allows them > t

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> One opinion. You keep saying that, but it is not requiring that the app > work using SL across the border. In fact the reason the network manager > likes SL is the apps will explicitly not work in that case. Actually that's a delusion. In today's networks the apps are still expected to "work"

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> Some of the uses for SL would be better served by PI addresses, but not > all. > > Take the case of a 20,000 node network where half are allowed global > access and half are not. yes, let's take that case. but give them all global addresses. assign one bit in the site's portion of the address

Re: Proposal for site-local clean-up

2002-11-13 Thread Richard Carlson
Keith; At 01:43 PM 11/13/02 -0500, Keith Moore wrote: > >No. Scopes reduce the ablity of the network to support apps. > >They make it harder to produce an app that works independently > >of network location, and they don't add a single extra capability > >that wasn't present already. > > You kee

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> >example 1: Process A sends the addresses of process B to process C. > >Processes B and C are in different scopes. (Either one might or might > >not share a scope with A.) Process C cannot communicate with process > >B using SLs that it has received from A. > > > >example 2: A sends the addre

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> > If the private nodes are organized into private and public > > subnets, so that you could use autoconfiguration with > > site-local addresses on some networks and global addresses on > > others, then why would you need site-locals for that? You > > could just advertise two different global pre

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> > I agree that this is possible. But this is extra > > configuration and assumption that the restricted box IPv6 > > implementation has support for such policy knobs. > > Yes. It also aligns the policy implementation with the device that is > restricted, rather than trying to track it at every e

RE: Proposal for site-local clean-up

2002-11-14 Thread Brian Zill
Keith Moore writes: > In either example the problem is solved if B and C > have global addresses, and all referrals filter > SL addresses. Yes, nodes communicating globally should have global addresses, and then there is no problem. (Although again, I think you're being overly draconian with the

RE: Proposal for site-local clean-up

2002-11-14 Thread NOISETTE Yoann FTRD/DMI/CAE
me service ?? Did I miss something ? Yoann -Message d'origine- De : Alain Durand [mailto:Alain.Durand@;Sun.COM] Envoye : mercredi 13 novembre 2002 19:57 A : NOISETTE Yoann FTRD/DMI/CAE Cc : [EMAIL PROTECTED] Objet : Re: Proposal for site-local clean-up NOISETTE Yoann FTRD/DMI/CAE wrote:

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> Either way, when associated with a MANET that is currently disconnected > from the global Internet, site-locals seem like a nice feature. Right. But I don't know how to get arbitrary apps to work over such networks. IETF IPng

Re: Proposal for site-local clean-up

2002-11-13 Thread Keith Moore
> It aligns access policy with the device rather than a difficult to > manage table at every edge of the network. This is much simpler at > scale. neither one scales well, but for many networks (those with only one border router) you'd rather control the edge than the hosts. ideally you want to s

Re: Proposal for site-local clean-up

2002-11-14 Thread Keith Moore
> Keith Moore writes: > > In either example the problem is solved if B and C > > have global addresses, and all referrals filter > > SL addresses. > > Yes, nodes communicating globally should have global addresses, and then > there is no problem. they don't need to be communicating globally, or

RE: Proposal for site-local clean-up

2002-11-18 Thread Erik Nordmark
> It doesn't matter how many times you write this, you can not make it > become true. Brian keeps pointing out the simple case of an > intermittently connected network getting a different prefix on each > connect, but you keep ignoring it. STABLE ADDRESS SPACE IS A MAJOR > APPLICATION REASON TO HAV

Re: Proposal for site-local clean-up

2002-11-18 Thread Keith Moore
> So let's not loose sight of the fact that the goal is a robust network. well said. and offhand I don't see any reason to assume that SL addresses are more stable/robust than globals. IETF IPng Working Group Mailing List IPng H

RE: Proposal for site-local clean-up

2002-11-18 Thread Dan Lanciani
Erik Nordmark <[EMAIL PROTECTED]> wrote: |Being the probable guilty party for introducing this thought back in |draft-*-site-prefixes-00.txt I can offer a slightly expanded perspective. | |I don't think stable addresses per se is the key thing - it is |the robustness of the communication that is i

RE: Proposal for site-local clean-up

2002-11-18 Thread Brian Zill
Erik Nordmark writes: > I don't think stable addresses per se is the key > thing - it is the robustness of the communication > that is important. I agree with this. However, the minimal degree of robustness is working at all - something which requires some address of some sort. There needs to be

RE: Proposal for site-local clean-up

2002-11-19 Thread Bound, Jim
> Erik Nordmark writes: > > I don't think stable addresses per se is the key > > thing - it is the robustness of the communication > > that is important. > > I agree with this. However, the minimal degree of robustness > is working at all - something which requires some address of > some sort.

Re: Proposal for site-local clean-up

2002-11-19 Thread Tim Chown
On Mon, Nov 18, 2002 at 10:49:42PM -0500, Dan Lanciani wrote: > > We have always been told that stable global v6 addresses will not be available > to end users, or at least will not be available to end users at a low cost. Told by who? I can see ISPs wanting to charge for extra services where th

RE: Proposal for site-local clean-up

2002-11-19 Thread Erik Nordmark
> I agree with this. However, the minimal degree of robustness is working > at all - something which requires some address of some sort. There > needs to be a way to get an address when you don't have a provider. > This means either scoped addresses as we have defined them already (and > in mult

Re: Proposal for site-local clean-up

2002-11-19 Thread Keith Moore
> Erik Nordmark <[EMAIL PROTECTED]> wrote: > > |Being the probable guilty party for introducing this thought back in > |draft-*-site-prefixes-00.txt I can offer a slightly expanded perspective. > | > |I don't think stable addresses per se is the key thing - it is > |the robustness of the communica

RE: Proposal for site-local clean-up

2002-11-19 Thread Richard Draves
> I think, but I'm not certain, that most of the large sites > that do this have completely different DNS content in the > two-faces i.e. it is more like two separate DNS services than > two-faces of the same DNS database. That is, the DNS outside > the firewall contain a subset of the RRs and

Re: Proposal for site-local clean-up

2002-11-19 Thread Keith Moore
> Yes, needless complexity is bad. But site-locals don't add any > significant complexity to applications (which I think I've demonstated > enough in too many emails already). this is only true if globals are always available to any node that potentially participates in an application that commu

RE: Proposal for site-local clean-up

2002-11-19 Thread Brian Zill
Hi Jim, > > There needs to be a way to get an address when you don't > > have a provider. This means either scoped addresses as we > > have defined them already (and in multi-link locations, this > > means either site-local or multi-link subnet routers and > > link-local), or some sort of provid

RE: Proposal for site-local clean-up

2002-11-19 Thread Christian Huitema
>> Ok, but it isn't clear that these two factors are of even remotely similar >> weight. Leakage is a problem that can be addressed, but there are a lot of >> things that simply will not work without stable addresses (at least not >> without a complete overhaul of many higher-level protocols). > >

RE: Proposal for site-local clean-up

2002-11-19 Thread Richard Draves
> > Yes, needless complexity is bad. But site-locals don't add any > > significant complexity to applications (which I think I've > demonstated > > enough in too many emails already). > > this is only true if globals are always available to any node > that potentially participates in an appli

RE: Proposal for site-local clean-up

2002-11-19 Thread Michael Thomas
Richard Draves writes: > > > Yes, needless complexity is bad. But site-locals don't add any > > > significant complexity to applications (which I think I've > > demonstated > > > enough in too many emails already). > > > > this is only true if globals are always available to any node >

Re: Proposal for site-local clean-up

2002-11-19 Thread Keith Moore
> I guess we are stuck with site local for now. As long as we don't have a willingness to either solve the problems with site-locals (by imposing limits on their use ) or to solve those problems in other ways (e.g. by providing provider-independent addresses) I think we are stuck in general. Bu

Re: Proposal for site-local clean-up

2002-11-19 Thread Keith Moore
> I find this kind of thinking rather suspect. The > question in my mind shouldn't be "why global", but > "why not global". There seems to an underlying > assumption that site locals would give better > security properties due to their global > inaccessibility. I find that rather uncompelling > an

Re: Proposal for site-local clean-up

2002-11-19 Thread Keith Moore
> So to restate - Keith, it sounds like you now agree, that with a > reasonably small amount of additional complexity, apps can function in a > network environment that has both globals & site-locals - subject to > your condition about globals being available for apps that communicate > off-site?

RE: Proposal for site-local clean-up

2002-11-19 Thread Richard Draves
> > I think the vendor of one of > > these devices should have the freedom to determine the > device's "out > > of the box" configuration, based on expected usage patterns. > > Here I strongly disagree. It's simply not reasonable in > general for a vendor to make assumptions about the > distr

RE: Proposal for site-local clean-up

2002-11-20 Thread Erik Nordmark
Sorry for the delayed response - didn't see me in the to: or cc: fields. > |In terms of the stability of the addresses one has to take into account > |both stability as it relates to local communication and stability for > |global communication. > > We have always been told that stable global v6

RE: Proposal for site-local clean-up

2002-11-20 Thread Bound, Jim
Hi Brian, ACK. I get it now and agree with your point. thanks /jim [Honor, Commitment, Integrity] > -Original Message- > From: Brian Zill [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, November 19, 2002 5:50 PM > To: Bound, Jim; [EMAIL PROTECTED] > Subject: RE: Proposal

  1   2   >