Interesting problems with using IPv6

There's been a lot of on-and-off discussion about v6, especially about
security and operational concerns about some aspects of IPv6
deployment, specifically regarding neighbor discovery (although there
are other operational security concerns, as well).

I'd like to provide this as an example of those concerns, without any
additional commentary. :slight_smile:

See also:

http://www.ietf.org/mail-archive/web/ietf/current/msg89517.html

Cheers,

- - ferg

- -------- Forwarded Message --------

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

There's been a lot of on-and-off discussion about v6, especially about
security and operational concerns about some aspects of IPv6
deployment, specifically regarding neighbor discovery (although there
are other operational security concerns, as well).

I'd like to provide this as an example of those concerns, without any
additional commentary. :slight_smile:

See also:

Interesting problems with using IPv6

ietf@... Yawn.

Cheers,

- - ferg

Ferg,

What's your point? Is it that ip networks fail?

There are decades of mailing lists archives at nanog and others that have
the same thing -- 1) stressed out ops guy 2) buggy code (tac says need to
load latest code as first step) 3) L2 mess -- most of those examples of
epic failure are ipv4 related, but many are just ethernet fails.

If your point is that IPv6 cannot be deployed at scale, i have a list of
meaningful counter examples where in fact it does work.

And as already mention, the mailing list archive at nanog and others is
full of folks with poor design or gear.

There are various docs that try to help folks deploy networks well.

CB

- -------- Forwarded Message --------
Subject: Interesting problems with using IPv6
Date: Sun, 7 Sep 2014 09:28:45 +0000
From: l.wood@surrey.ac.uk
To: ietf@ietf.org

There are decades of mailing lists archives at nanog and others that have
the same thing -- 1) stressed out ops guy 2) buggy code (tac says need to
load latest code as first step) 3) L2 mess -- most of those examples of
epic failure are ipv4 related, but many are just ethernet fails.

If your point is that IPv6 cannot be deployed at scale, i have a list of
meaningful counter examples where in fact it does work.

And as already mention, the mailing list archive at nanog and others is
full of folks with poor design or gear.

Did you actually read the whole story? Did you read Jeff Wheeler's
presentation, referenced in the comment?

Steinar Haug, AS 2116