Re: Why ULA: low collision chance (Was: IPv6 fc00::/7 — Unique local addresses)
Owen DeLong
owen at delong.com
Fri Oct 22 15:40:35 UTC 2010
On Oct 22, 2010, at 5:25 AM, William Herrin wrote:
> On Fri, Oct 22, 2010 at 1:20 AM, Joel Jaeggli <joelja at bogus.com> wrote:
>> On 10/21/10 6:38 PM, Owen DeLong wrote:
>>> On Oct 21, 2010, at 3:42 PM, Jack Bates wrote:
>>>> On 10/21/2010 5:27 PM, Joel Jaeggli wrote:
>>>>>
>>>>> Announce your gua and then blackhole it and monitor your prefix.
>>>>> you can tell if you're leaking. it's generally pretty hard to
>>>>> tell if you're leaking rfc 1918 since your advertisement may well
>>>>> work depending on the filters of your peers but not very far.
>>>>
>>>> This is always the argument I hear from corporate customers
>>>> concerning wanting NAT. If mistake is made, the RFC 1918 space
>>>> isn't routable. They often desire the same out of v6 for that
>>>> reason alone.
>>
>> the rfc 1918 space is being routed inside almost all your adjacent
>> networks, so if their ingress filtering is working as expected, great,
>> but you're only a filter away from leaking.
>
> A filter away from leaking to -one- of the millions of entities on the
> internet. Two filters away from leaking to two.
>
This underestimates the transitive property of leakage.
Owen
More information about the NANOG
mailing list