Re: Linux and ULA support and default route

2016-10-14 Thread Brian E Carpenter
On 15/10/2016 00:57, Holger Zuleger wrote: >> If the delegated prefix changes, you'll be simply postponing the local >> communication failure, not prevent it. > Only if the new prefix is different to the old one. > >> The last year has convinced me that the best user experience is >> achieved by h

Re: Linux and ULA support and default route

2016-10-14 Thread Brian E Carpenter
On 14/10/2016 23:32, Gert Doering wrote: > Hi, > > On Fri, Oct 14, 2016 at 12:00:04PM +0200, Holger Zuleger wrote: >> Of course the default route should *not* be withdrawn. >> The RA default router announcement says just, "Hey hosts, I'm the way >> out of your local subnet", and not "Hey host, I h

Re: DHCPv6 client in Windows 10 broken after anniversary update

2016-10-14 Thread Brzozowski, John Jason
Has this been confirmed? What is next? On Fri, Oct 14, 2016 at 5:59 AM, Harald F. Karlsen wrote: > On 11.10.2016 18:37, Marcus Keane wrote: > >> We've raised it with the product group and we are investigating further. >> > Great! Also feel free to keep us updated on any findings here on the lis

Re: Linux and ULA support and default route

2016-10-14 Thread Brian E Carpenter
On 14/10/2016 23:20, Thomas Schäfer wrote: > I was wrong. Randomly set: no, manually change possible: yes. > The reason for my confusion was "::" versus ":" > Sometimes reading ipv6-addresses is hard. Yes, and in fact my box has that feature. So thanks again! Brian

Re: Linux and ULA support and default route

2016-10-14 Thread Brian E Carpenter
On 14/10/2016 21:07, Thomas Schäfer wrote: > Am 13.10.2016 um 21:56 schrieb Brian E Carpenter: >> On 13/10/2016 21:14, Lorenzo Colitti wrote: >>> Of note is the fact that the ULA prefix being announced is the ubiquitous >>> fd00::/64. >> >> 0 is a perfectly random number, just like the ubiquitous P

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
On 14.10.2016 15:26, otr...@employees.org wrote: > Holger, > >>> >> Imagine a setup with *two* routers. One of them has broken Internet, >> the other is working. How can the hosts decide if both keep announcing >> themselves as "I can reach anything"? > > in the general cas

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
On 14.10.2016 15:20, sth...@nethelp.no wrote: >> At the end, the whole behavior is because some host have problems in >> handling situations where they have an IPv6 address configured and now >> internet connectivity. But the solution to this requires that the host >> is able to understand and wo

Re: Linux and ULA support and default route

2016-10-14 Thread otroan
Holger, >> > Imagine a setup with *two* routers. One of them has broken Internet, > the other is working. How can the hosts decide if both keep announcing > themselves as "I can reach anything"? in the general case the host still has to take the 'I can reach anything' >>

Re: Linux and ULA support and default route

2016-10-14 Thread sthaug
> At the end, the whole behavior is because some host have problems in > handling situations where they have an IPv6 address configured and now > internet connectivity. But the solution to this requires that the host > is able to understand and work with RIO options, which seams to be "at > the tim

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
On 14.10.2016 14:33, otr...@employees.org wrote: > Holger, > Imagine a setup with *two* routers. One of them has broken Internet, the other is working. How can the hosts decide if both keep announcing themselves as "I can reach anything"? >>> >>> in the general case the host sti

Re: Linux and ULA support and default route

2016-10-14 Thread otroan
Holger, >>> Imagine a setup with *two* routers. One of them has broken Internet, >>> the other is working. How can the hosts decide if both keep announcing >>> themselves as "I can reach anything"? >> >> in the general case the host still has to take the 'I can reach anything' >> announcement

Re: contact with One & One ?

2016-10-14 Thread Paul Stewart
Yes and my understanding with ECMP on the network side is that this is exactly what’s happening … and that’s what Cloudflare blog entry is referring to as well … I need to dig into this further - their code on Github for the fix I don’t believe will work in our network architecture… although w

Re: contact with One & One ?

2016-10-14 Thread Mikael Abrahamsson
On Fri, 14 Oct 2016, JORDI PALET MARTINEZ wrote: Up to now, every time I’ve seen this problem was just related to ICMPv6 being filtered, as many folks do in IPv4 … I know several cases where the problem was that the load balancer didn't forward the ICMPv6 PTB to the correct host and didn't ha

Re: Linux and ULA support and default route

2016-10-14 Thread Thomas Schäfer
Am 14.10.2016 um 13:57 schrieb Holger Zuleger: If the delegated prefix changes, you'll be simply postponing the local communication failure, not prevent it. Only if the new prefix is different to the old one. I get never the same prefix! (ISP DTAG, private consumer) The last year has conv

Re: contact with One & One ?

2016-10-14 Thread JORDI PALET MARTINEZ
Right I missed that too, and now reading the article instead of “quick review”, I think the solution is there: https://github.com/cloudflare/pmtud Saludos, Jordi -Mensaje original- De: en nombre de Paul Stewart Responder a: Fecha: viernes, 14 de octubre de 2016, 14:09 Para: Mikael

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
>> Imagine a setup with *two* routers. One of them has broken Internet, >> the other is working. How can the hosts decide if both keep announcing >> themselves as "I can reach anything"? > > in the general case the host still has to take the 'I can reach anything' > announcement with a pinch of

Re: contact with One & One ?

2016-10-14 Thread Paul Stewart
You are correct - i misspoke on that … the reported issue from some visitors is site doesn’t load. Sorry for the confusion - need more caffeine this morning :) > On Oct 14, 2016, at 8:05 AM, Mikael Abrahamsson wrote: > > On Fri, 14 Oct 2016, Paul Stewart wrote: > >> honestly we’ve never fixed

Re: contact with One & One ?

2016-10-14 Thread Paul Stewart
Thanks .. I meant to include link to that article - appreciate you doing so :) We don’t filter ICMPv6 on those servers and the problem we are pretty confident is ECMP related (as per what we learned from the Cloudflare blog) … need to set up some time to look deeper though as internally and on o

Re: contact with One & One ?

2016-10-14 Thread Mikael Abrahamsson
On Fri, 14 Oct 2016, Paul Stewart wrote: honestly we’ve never fixed it. it works for lots of customer/visitors but breaks for others (and they fail back to IPv4) - we thought it was Errr, how does this fallback work? I am not aware of any such mechanism. Happy Eyeballs is done when the SYN+A

Re: contact with One & One ?

2016-10-14 Thread JORDI PALET MARTINEZ
The issue here is that customers (the ones that browse the broken web sites), don’t know about MTU, ICMP, etc. So I guess is in your side as the “provider” of the content, who is the interested party in making sure it works for “all” your possible customers. Up to now, every time I’ve seen this

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
> If the delegated prefix changes, you'll be simply postponing the local > communication failure, not prevent it. Only if the new prefix is different to the old one. > The last year has convinced me that the best user experience is > achieved by having an in-home stable ULA prefix to complement th

Re: contact with One & One ?

2016-10-14 Thread Paul Stewart
At $$$job we run quite a bit of dual stack towards customers as an ISP (mainly PPPoE) - our own public website fails the PTB test and quite honestly we’ve never fixed it. it works for lots of customer/visitors but breaks for others (and they fail back to IPv4) - we thought it was only external

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
On 14.10.2016 12:32, Gert Doering wrote: > Hi, > > On Fri, Oct 14, 2016 at 12:00:04PM +0200, Holger Zuleger wrote: >> Of course the default route should *not* be withdrawn. >> The RA default router announcement says just, "Hey hosts, I'm the way >> out of your local subnet", and not "Hey host, I

Re: contact with One & One ?

2016-10-14 Thread Mikael Abrahamsson
On Fri, 14 Oct 2016, JORDI PALET MARTINEZ wrote: I think is time to retire happy-eye-balls, it is the only way the people will react to those issues! Happy eyeballs doesn't solve PMTU blackhole. So this is actually customer breakage occuring, but I imagine lots of ISPs are actually doing MSS

Re: contact with One & One ?

2016-10-14 Thread JORDI PALET MARTINEZ
I don’t think it will help … I’ve got several of their customers, several *months* ago, which opened a ticket, and they didn’t get a solution/response … It may happen that the folks in the ticketing system don’t understand the problem or don’t scale it or whatever … I think is time to retire h

Re: Linux and ULA support and default route

2016-10-14 Thread Tore Anderson
* Holger Zuleger > Hmm, what's so bad with still using the global prefix until the global > connectivity comes back and the CPE gets a new one? > Than it's early enough to set the preferred time of the former prefix to > 0 and let them time out. > In this way all local communication will not be i

Re: contact with One & One ?

2016-10-14 Thread Kurt Jaeger
Hi! > > www.corso-kino.de > > Thanks. > > If it helps, point them to this website (still in development/beta): > > https://ipv6alizer.se/ > > The result is (verifies what you said): > > INFO: server-mss 1440, result: pmtud-fail > ERROR: http://www.corso-kino.de don't listen to PTB Thanks. I

Re: contact with One & One ?

2016-10-14 Thread Mikael Abrahamsson
On Fri, 14 Oct 2016, Kurt Jaeger wrote: www.corso-kino.de Thanks. If it helps, point them to this website (still in development/beta): https://ipv6alizer.se/ The result is (verifies what you said): INFO: server-mss 1440, result: pmtud-fail ERROR: http://www.corso-kino.de don't listen to P

Re: contact with One & One ?

2016-10-14 Thread JORDI PALET MARTINEZ
There’re tons of them ! Here are a couple of PMTUD test: tbit from 2001:df0:4:4000::1:115 to 2001:8d8:1001:238f:3cf1:2223:88f2:c80a server-mss 1440, result: pmtud-fail app: http, url: http://diskmakerx.com/ [ 0.009] TX SYN 64 seq = 0:0 [ 0.288] RX SYN/ACK 64

Re: contact with One & One ?

2016-10-14 Thread Torbjörn Eklöv
14 okt. 2016 kl. 12:38 skrev Kurt Jaeger mailto:ipv6-...@c0mplx.org>>: Hi! I've discovered, several months ago already, that all the 1&1 web sites with IPv6 support enabled are broken, because they filter PMTUD, so any residential customer with has a reduced MTU because PPP or any other encapsu

Re: Linux and ULA support and default route

2016-10-14 Thread otroan
> On 14 Oct 2016, at 12:32, Gert Doering wrote: > > Hi, > > On Fri, Oct 14, 2016 at 12:00:04PM +0200, Holger Zuleger wrote: >> Of course the default route should *not* be withdrawn. >> The RA default router announcement says just, "Hey hosts, I'm the way >> out of your local subnet", and not "H

Re: contact with One & One ?

2016-10-14 Thread Kurt Jaeger
Hi! > > I've discovered, several months ago already, that all the 1&1 web sites > > with IPv6 support enabled are broken, because they filter PMTUD, so any > > residential customer with has a reduced MTU because PPP or any other > > encapsulation/tunnel, etc., is not reaching them. > > Do you

Re: contact with One & One ?

2016-10-14 Thread Mikael Abrahamsson
On Fri, 14 Oct 2016, JORDI PALET MARTINEZ wrote: Hi, I’ve discovered, several months ago already, that all the 1&1 web sites with IPv6 support enabled are broken, because they filter PMTUD, so any residential customer with has a reduced MTU because PPP or any other encapsulation/tunnel, etc.

Re: Linux and ULA support and default route

2016-10-14 Thread Gert Doering
Hi, On Fri, Oct 14, 2016 at 12:00:04PM +0200, Holger Zuleger wrote: > Of course the default route should *not* be withdrawn. > The RA default router announcement says just, "Hey hosts, I'm the way > out of your local subnet", and not "Hey host, I have a upstream > connection to the rest of the int

contact with One & One ?

2016-10-14 Thread JORDI PALET MARTINEZ
Hi, I’ve discovered, several months ago already, that all the 1&1 web sites with IPv6 support enabled are broken, because they filter PMTUD, so any residential customer with has a reduced MTU because PPP or any other encapsulation/tunnel, etc., is not reaching them. I tried to contact someone

Re: Linux and ULA support and default route

2016-10-14 Thread Thomas Schäfer
I was wrong. Randomly set:  no, manually change possible: yes. The reason for my confusion was "::" versus ":" Sometimes reading ipv6-addresses is hard.

Re: Linux and ULA support and default route

2016-10-14 Thread Holger Zuleger
>> Great idea, ULAs. > > In the right circumstances, yes, actually. And actually my circumstances > yesterday were right for a ULA prefix: the ISP failed to give my CE a prefix. > Today, they gave me a prefix, and so Linux gives me a default route. Hmm, what's so bad with still using the global pr

Re: DHCPv6 client in Windows 10 broken after anniversary update

2016-10-14 Thread Harald F. Karlsen
On 11.10.2016 18:37, Marcus Keane wrote: We've raised it with the product group and we are investigating further. Great! Also feel free to keep us updated on any findings here on the list (especially the ship vehicle and date for the fix). -- Harald

Re: Linux and ULA support and default route

2016-10-14 Thread Thomas Schäfer
Am 13.10.2016 um 21:56 schrieb Brian E Carpenter: On 13/10/2016 21:14, Lorenzo Colitti wrote: Of note is the fact that the ULA prefix being announced is the ubiquitous fd00::/64. 0 is a perfectly random number, just like the ubiquitous PIN code 1234. But yes, this a sloppy job by the FritzBox