- ipv6-wg - mailman.ripe.net

Still open for discussion: Invitation to supply feedback on ITU draft Recommendation on IPv6 address planning for IoT
by Jetten Raymond 24 May '18

24 May '18

Hello All, We are happy to announce that ITU Study Group 20 has responded positively to our offer and have decided to share the current working draft with us, for the purpose of review and for RIPE community to provide feedback. As it is quite big, the text of this draft Recommendation Y.IPv6RefModel "Reference model of IPv6 subnet addressing plan for Internet of things deployment" has been made available on the IPv6 WG pages: https://www.ripe.net/participate/ripe/wg/ipv6/documents/itu-ipv6refmodel We kindly invite you to provide feedback and comments on the contents of this document via this mailing list or of course the RIPE Forum web interface. The RIPE NCC has agreed to ensure that the comments will be collected and made available to the ITU via response to the Liaison Statement below. We of course also hope to discuss the feedback with the editor of the document during our second session at RIPE 76. Regards, Benedikt, Jen, Raymond Liaison Statement we received from ITU Study Group 20 in response to our invite: > ITU-T Study Group 20 Q3/20 thanks the RIPE NCC for their contribution that contained the invitation from the RIPE IPv6 Working Group. We thank the RIPE IPv6 Working Group for the invitation to present Draft Recommendation ITU-T Y.IPv6RefModel at the May 2018 RIPE meeting for the purpose of obtaining operational feedback and input. We are delighted to recognize the invitation from RIPE and confirm it is the intention of the editor of the Draft Recommendation ITU-T Y.IPv6RefModel to participate in the RIPE meeting in May 2018. > > Attached is a copy of the draft Recommendation. We look forward to the feedback and comments from the RIPE community. For Internal Use Only

4 3

Re: [ipv6-wg] Invitation to supply feedback on ITU draft Recommendation on IPv6 address planning for IoT
by Patrik Fältström 24 May '18

24 May '18

Hi, FWIW, I spent some time going through Y.IPv6RefModel and really really want RIPE NCC to be strong and blunt in their answer. The short response is clearly what Jordi wrote: > In short the document makes no sense at all and is plenty of errors even in the way some notation, protocol names and references are used. The slightly longer response is that there are a number of explicit misunderstandings in the document, and they are not small misunderstandings. They will (not might) create operational issues if implemented as explained. Let me give a few examples: 1. Transition from IPv4 to IPv6 The whole document includes in a number of cases statements that claim transmission from IPv4 to IPv6 is easier if there is a mechanical mapping between the addresses in the two protocols. This is wrong in so many ways. First of all that there is a transition. What is happening is that IPv6 is deployed. Then one day maybe IPv4 is depleted, or rather, made less important. Sure, various applications with move from using IPv4 to using IPv6, but having application layer transition their default protocol has not much or anything to do with the address plan. Further, due to the limited number of IPv4 addresses, the subletting (if any) in IPv4 space is constrained in a way that IPv6 do not have to be. Limiting IPv6 address plans to the same scheme we have been squeezed into for IPv4 is a bad idea from the beginning. Its like adding ICT to existing processes instead of reviewing and optimizing processes the way possible thanks to ICT. This is mentioned in for example the Summary, Section 10, 11, 12.1, 12.2, 12.3, 12.4 and more. 2. Consultation with IETF It is claimed in the Summary that Y.IPv6RefModel have been developed in coordination with IETF. This without any reference to any discussion, Internet-Draft or such. 3. Deployment of IPv6 There is a claim in Section 7 that IPv6 might be the advent of a new Digital Divide. Some countries are mentioned as having high deployment of IPv6 and others very low. The examples are clearly chosen to strengthen the argument as development countries with low IPv6 deployment (Sweden for example) are not mentioned. Further, in Section 8 where large scale deployment of IPv6 is mentioned, China is listed as a clear winner, although China is not listed as an exception when exceptions are listed in Section 7. In short, having such statistics and drawing conclusions from it in such broad strokes with the brush is just a stupid idea, imflammatory and creates unnecessary discussion. If the document is good from a technical grounds it should be able to stand on its own for such reasons. 4. Reference Model for IPv6 deployment There is a claim in Section 7 that having a reference model for how to subnet end users allocations developed in the ITU-T, and this specific model, will address issues regarding Digital Divide. As the earlier portion of Section 7 and arguments in other places in the document is at best weak, if not wrong, making claims based on this is not possible. Further, there are no examples or arguments why the reference model explained would help with solving the low IPv6 deployment in for example Sweden. 5. Reference Model for IoT deployment In Section 8 it is claimed this model should be particularly interesting for large scale IoT deployments but also IoT deployments. As IoT devices are connected to the Internet like any Internet Connected Device there is no difference between IoT deployment and non-IoT deployment. The contrary. We will have IoT deployment everywhere. In every house, home, car, owen, airplane, ship, watch we will have some IoT devices or IoT functionality. Having specific IoT reference models and then non-IoT allocation models as well will absolutely create a digital divide and fragmentation of the Internet. If any reference model is to be created (or Best Practice) it must be created from the general use of IPv6 in the world, and not for IoT specifically. 6. Explicit mapping between geographical location and addresses In Section 11 there is a requirement that the geographical location of a device is to be visible as a specific set of bits (the first four). This implies a device is changing IPv6 address when being moved from one building to another, and that one can not have a subnet covering more than 16 buildings. I do not give more comments on this. 7. DMZ Section 11 talks about DMZ in singular. This is built upon the thinking used in the 20th century that one have a firewall (i.e. one firewall) that separates the "inside" from the "outside" and that everything on the "inside" of the firewall was secure, safe and trusted. And further, that devices that where to be reached from the outside had to be in a so called DMZ. This is a model that no longer is valid. All devices and services should not be reachable, and this can not be based on some firewall. Every active network element that can filter traffic must do so, and the devices themselves must filter explicitly what services they expose and make available. And this independently of whether it is on the "inside" or "outside" of whatever layer in the layered protection designed in the network. 8. Internal servers Similarly to the misunderstanding of network design described in (7) above also the concept of "internal server" is confusing. Today network structure consists of various services being exposed from various virtual and otherwise existing processes that announce themselves to clients. Various discovery mechanisms exists for such services, and the existence of dynamic allocation of services, failover mechanisms etc existing in todays architectures makes discussion of "server" on the IP addressing layer feel like discussions on how to move a rune stone in the most optimal way. 9. Proposed addressing schemes Based on the above and more, the proposed models in section 12 are just wrong. If, and this is a big if, some coordination is to be created regarding best practices regarding address management of whatever is allocated to the end user, that obviously must be developed in the IETF, or possibly, the RIR community (or a mix between the two -- as normal). The IETF and RIR communities must in this specific case be clear and crisp in the response to the ITU-T that having ITU-T injecting themselves in matters like this is stepping too far into the area where other SDOs are responsible for. paf

1 0

New on RIPE Labs: What Drives IPv6 Deployment?
by Mirjam Kuehne 23 May '18

23 May '18

Dear colleagues, For those of you who missed Geoff Huston's presentation at RIPE 76, it is now on RIPE Labs: What Drives IPv6 Deployment? https://labs.ripe.net/Members/gih/what-drives-ipv6-deployment Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Conditional Router Advertisements in Enterprise Multihoming
by Mirjam Kuehne 22 May '18

22 May '18

Dear colleagues, For those of you who were not at the IPv6 WG meeting at RIPE 76 last week, here is Jen Linkova's article on "Conditional Router Advertisements in Enterprise Multihoming": https://labs.ripe.net/Members/jen_linkova/conditional-router-advertisements… Kind regards, Mirjam Kühne RIPE NCC

1 0

slides about transition tutorial and comparison among mechanisms
by JORDI PALET MARTINEZ 17 May '18

17 May '18

Hi all, As mention in the meeting today, here is the link to the latest tutorial that I did 2 weeks ago in the LACNIC meeting (slides are in English), including a comparison among all the transition mechanisms. http://www.lacnic.net/innovaportal/file/2621/1/ipv6-trans-and-ipv6-only_v8.… Look for the "summary" comparison at slide number 57. Regards, Jordi ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

1 0

Chair election
by Jen Linkova 13 May '18

13 May '18

Hello, Wow, it's been 3.5 years already since I joined IPv6 WG chairs club ;) As per our current policy [1] it's time for me to step down. Fortunately for me, that policy does allow me to stand for re-election, so I'd love to serve another term as IPv6 WG co-chair if the group believes it's a good idea ;) See you all in Marseilles! [1] https://www.ripe.net/participate/ripe/wg/ipv6/ipv6-wg-chair-selection-proce… -- SY, Jen Linkova aka Furry

14 13

Re: [ipv6-wg] budgetkonto Henrik Kramshøj 2724291 tilpasning
by Henrik Lund Kramshøj 09 May '18

09 May '18

On Tue, 8 May 2018 14:23:15 +0000 Lise-Lotte Sørensen <liselotte.sorensen(a)nordjyskebank.dk> wrote: > Hej Henrik Hej igen > > Jeg har slettet Børnefonden og nedsat indbetalingen i forhold hertil. > Nyt skema er lagt i e-arkiv. > > Der er betalt kr. 6.232,87 den 7/6 2017, 8.821,71 den 7/9 2018, kr. > 6.505,18 den 7/12 og kr. 6.591,74 til henholdsvis DONG/Ørsted, så > derfor er udgiften sat til kr. 6.600 hvert kvartal. Kan vi se, hvad > opgørelsen viser til juni, inden vi retter beløbet ned ? Ja det kan vi da. Det er godt at få ryddet lidt op, og tak for hjælpen. -- Mvh/Best regards Henrik Lund Kramshøj, Follower of the Great Way of Unix internet samurai cand.scient CISSP hlk(a)kramse.org hlk(a)zencurity.dk +45 2026 6000

1 0

IPv6 WG Agenda (RIPE76)
by Jen Linkova 07 May '18

07 May '18

Hello, The draft agenda for Ipv6 WG sessions at RIPE76 has been published: https://ripe76.ripe.net/programme/meeting-plan/ipv6-wg/ -- SY, Jen Linkova aka Furry on behalf of IPv6 WG chairs.

3 3

RIPE75 IPv6 WG meeting minutes
by Jen Linkova 11 Apr '18

11 Apr '18

Hello, Just in time for RIPE76...;) Meeting minutes from RIPE75 IPv6 WG sessions are posted at RIPE website: https://www.ripe.net/participate/ripe/wg/ipv6/minutes/ipv6-working-group-mi… If you said anything at the mic during those sessions, please review and let us know if any correction is required! Thanks! -- SY, Jen Linkova aka Furry

1 0

New on RIP Labs: Persistent DHCPv6 Prefix Delegation at GavleNet
by Mirjam Kuehne 10 Apr '18

10 Apr '18

Dear colleagues, Read on RIPE Labs how Torbjorn Eklov helped municipalities in Sweden to deploy IPv6. In this second part he discusses how they used persistent DHCPv6 prefix delegation: https://labs.ripe.net/Members/teklov/static-dhcpv6-prefix-delegation Kind regards, Mirjam Kühne RIPE NCC

1 0