North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: shim6 @ NANOG

  • From: Stephen Sprunk
  • Date: Mon Mar 06 10:10:17 2006 
Thus spake "Tony Li" <[email protected]>

Stephen Sprunk wrote:

Who exactly has been trying to find scalable routing solutions?

Well, for the last decade or so, there's been a small group of us who
have been working towards a new routing architecture.  Primary
influences in my mind are Chiappa, O'Dell, Hain, Hinden, Nordmark,
Atkinson, Fuller, Huston, Rekhter and Meyer.  Apologies to any folks
that feel I've incorrectly included or excluded them.  ;-)
And my apologies for not recognizing the work that y'all have done; my point was that none of this seems to be officially supported by the IETF, and thus hasn't borne much fruit. I've seen a few proposals by folks listed above, and it seems to be old drafts (or even napkins) that get trotted out when this discussion comes up. If there's work actively going on today, it's not well publicized.

IPv6 advocates have been pushing a no-PI model for over a decade
because that's what ISPs told them to do.

More accurately, the routing community has been trying to avoid PI
addressing simply because of the scalability (and thus cost) concerns.
s/routing/ISP/ and I'd agree with that. The IETF has virtually no enterprise representation, and those folks (a) have a lot more routers than the ISPs, and (b) pay the ISPs' bills.

I agree that PI has scaling/cost problems, but so far all of the alternatives presented by the IETF present worse problems _in the eyes of the people that pay the bills_. That doesn't mean the latter are right, but their views should not be taken lightly.

When they found end users didn't like that, they went off and
developed what has become shim6 as a poor apology. There has
never been any significant work done on replacing CIDR with
something that scales better.

More accurately, that work (GSE/8+8) was slapped down politically
without due technical consideration.

Correction noted.


Note that replacing CIDR isn't exactly the point.  The point is to have
something that scales.  Where CIDR can't cope is exactly when we
come to multihoming.  When multihoming was a rare exception, the
small number of PI prefixes remains tolerable.  However, over time,
the continued growth in multihoming, even solely as a function of the
growth of the Internet will come to dominate the cost structure of
the routing subsystem.
I'm not sure I agree with that. The ISPs out there have tens of prefixes each even in v6 land (and hundreds in v4 land), whereas the goal is to have one per end site. Until the number of multihomed end sites exceeds the number of ISPs by several orders of magnitude, the impact on the routing table will be non-dominant though certainly also non-trivial.

Also, consider how easy it is to do PI-based multihoming in v4: all you need is a couple pipes (or tunnels), an ASN, and enough hosts to justify a /24. If you believed all the chicken littles, this would leave us with millions of v4 PI routes and the DFZ would be in ruins, yet only a few hundred people have taken ARIN up on that offer. In short, implementation of PI-based multihoming has ground almost to a halt even under today's liberal policies.

Now, given the floodgates are open for v4 and all we see is a trickle of water, why is everyone running around screaming that the sky will fall if we do something similar for v6? Do we have any evidence at all that multihoming growth will outpace Moore and this whole debate is even relevant?

The only alternative to a PI-like architecture is to provide multihomed
sites with multiple prefixes, none of which need to be globally
disseminated.  Making this multiple prefix architecture work was the
charter of the multi6 group.  This was constrained in interesting ways,
as both NAT box solutions were considered politically unacceptable, as
was changing the core functionality of the v6 stack (i.e., redefining
the TCP pseudoheader).  Given these constraints, it was somewhat
unsurprising that NAT got pushed into the host.

From my perspective, we have now explored the dominant quadrants of the
solution space and various factions have vociferously denounced all
possible solutions.  You'll pardon me if some of us are feeling just a
tad frustrated.
I think we're all a bit frustrated at this point.

However, I think we haven't adequately explored several ideas that allow PI space for all that need it yet don't require carrying all those routes in every DFZ router or schemes that do away with our current idea of the DFZ entirely. The solution space is a lot bigger than the few corners that we've explored over and over.

Every such proposal I've seen has been ignored or brushed aside by
folks who've been doing CIDR for their entire careers and refuse to
even consider that anything else might be better.

More accurately, the folks that have been CIDR advocates 'for their
entire careers' are exactly the same folks who have been advocating
shifting to something else, but have been rejected by other political
elements when trying to propose actual architectural change.  Further,
those same CIDR advocates have been, and continue to be, in such
political disfavor that they are effectively powerless anyhow.  It
hardly seems like their rejection could count for much.
CIDR is in political disfavor? Then explain how the IETF's golden solution for multihoming perfectly toes the CIDR line of not allowing end sites to have PI space, forcing them to use multiple CIDR-style PA prefixes in parallel.

Or did you mean that the folks that came up with CIDR are now personally out of favor? That'd be a shame, since that was good work at the time and we need every bright mind we can get to make the next step past CIDR.

All this time, energy, and thought spent on shim6 would have been better
spent on a scalable IDR solution.

On that, we can agree.  However, my feeling is that fully exploring the
solution space is an unfortunate necessity before the community is
willing to accept changes to the fundamental v6 architecture.
IMHO, it's 5+ years too late to change _anything_ about how end hosts process IPv6 packets. If we need to do that, it's time to scrap v6 and start working on IPv9 (or whatever the next unassigned number is), with the understanding it won't be deployed for another 15+ years and we'll need to keep IPv4 working that long.

Luckily, we still have another decade or so to come up with something.

Unfortunately, that's not entirely true.  If the RIR's begin wholesale
PI assignment, then we start down the road of re-constituting the v4
routing architecture, locking in additional cost and complexity with
each PI prefix.  All such prefixes will be indefinitely grandfathered,
so even if something new does come along, we will continue to pay for
the overhead forever.
If the new solution is sufficiently attractive, then folks using PI-based multihoming will switch. If nobody wants to switch and/or there's still demand for PI space, that is a very strong sign that the proposed solution is not acceptable in the first place.

S

Stephen Sprunk "Stupid people surround themselves with smart
CCIE #3723 people. Smart people surround themselves with
K5SSS smart people who disagree with them." --Aaron Sorkin