[ppml] [address-policy-wg] Re: article about IPv6 vs firewalls vs NAT in arstechnica (seen on slashdot)

[Tony Hain]

bmanning at karoshi.com wrote:

> > ULA-central is NOT intended to be uses as IPv6 PI.
> 
> 	but there is no way to stop it from becoming so.

The only effective way to stop it is to make PI have a lower cost than
ULA-C. The most straight forward way to implement that is; at the RIR policy
level acknowledge that PI will exist and create the appropriate mechanisms
to manage it; at the ISP level, recognize that PI is available and refuse
(set exorbitant fees) to route ULA-C.

Trying to stop something that is outside the RIR policy control through RIR
policy is a waste of time and energy. Recognize that whatever you do PI will
exist in some form, and avoid the situation where it is completely
unmanageable by creating a formal process where it is easy enough to get
that people won't bother with working around you. If you want something to
be contained and managed then step up and manage it. Trying to abolish it
will only ensure that it exists outside the realm of manageability.

Tony