<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">First, most small businesses don’t need any stable internal addressing. For example, a café switching ISP’s probably won’t even have to fix their guest network - everything will just work when switching PA to PA.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Second, I agree ULA+NTPv6 is a terrible workaround. I hate the idea. It seems like a step back to IPv4 thinking. I’ve seen the benefits of the end-to-end principle and anything that prevents that seems like the wrong design.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Third, to address the cost of those orgs might benefit from PI space, switching ISP’s with RFC1918 or ULA is fewer steps and lower cost than even the steps you listed. This demonstrates that switching PA addressing is not without potential
disruption and cost not present with PI, ULA and RFC1918.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">DNS fixes a lot, but where there is an IP-only or CIDR requirement - the re-numbering step 8 is fixing all the things that broke. The cost of switching IPv4+RFC1918 is almost nothing, often is nothing. The same is not true of IPv6 PA.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Most SMB’s using private address space can currently switch ISP’s now without actually breaking anything internally or having to contract someone to do the steps you outlined because no internal addresses need to change. Almost as important
- they can know ahead of time they are free to switch rather than it being a work effort, or an unknown.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Having recently re-IP’ed a handful of orgs:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Anything, anywhere, using CIDR including but not limited to: Endpoint and server firewall rules, hardware firewall rules, AD Policies (e.g. WinRM IP-range limiting).<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Tyler Tech software is written in such a way to require single-IP addresses in places where DNS should be possible.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Devices not correctly registering with DNS (in particular printers). This can be scripted with a prefix swap in DNS.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Print Servers - Though you can specify hostname, most orgs still use IP address. This can be fixed, but is not required in PI space or RFC1918 and is a cost to fix (fix the hostname on every printer, then fix the
servers). See also above.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">A lot of poorly written software. A whole lot. Input validators that are looking to validate an IPv4 or IPv6 address. Hostnames often are not an option. A document management software required a single IP address
for LDAP.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I know the fix is to all of the above is to have Microsoft, Tyler, and all other software vendors in the world fix their software, and have the SMBs that are running these awesome GUI firewalls with 3 years left on their contracts to ditch
all of that and move to better systems. And those are all really valid points, but still, a significant cost not present in RFC1918, ULA or IPv6 PI.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">And fourth, I agree - the answer to this is PI space.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Owen DeLong <owen@delong.com> <br>
<b>Sent:</b> Monday, September 13, 2021 10:44 AM<br>
<b>To:</b> Larry R. Dockery <lrdocker@co.douglas.or.us><br>
<b>Cc:</b> arin-ppml@arin.net<br>
<b>Subject:</b> Re: [arin-ppml] Proposal - Remove Initial Small Assignment Requirements for IPv6<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I disagree…<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Renumbering a wisely deployed network in IPv6 is _MUCH_ less overhead and much much easier (and faster) in IPv6 than it was in IPv4, even on large-ish scales.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">There’s on PA-ISP lockin in IPv6 unless you build your network stupidly.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If you use DHCPv6 or SLAAC to assign addresses to the majority of your systems and static address your servers only, renumbering is relatively quick and<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">not particularly painful.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>1.<span class="apple-tab-span">
</span>Connect the new ISP and add the new ranges to the routers.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>2.<span class="apple-tab-span">
</span>Add the new address range(s) to the servers.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>3.<span class="apple-tab-span">
</span>Change your SLAAC RAs and DHCP servers over to announcing the new addresses<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>4.<span class="apple-tab-span">
</span>Wait until the old addresses are deprecated off the interfaces of all the clients.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>5.<span class="apple-tab-span">
</span>Remove the old address range(s) from the servers.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>6.<span class="apple-tab-span">
</span>Remove the old address ranges from the routers.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span"> </span>7.<span class="apple-tab-span">
</span>Disconnect the old ISP<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Personally, if I were running an SMB IT department, I’d much rather face the above 7 steps for each ISP changeover than the joys of ULA+NPTv6.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">OTOH, I’d probably just multi home in most cases, in which case, RIR /48 here I come, easy peasy, current policy.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Owen<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Sep 13, 2021, at 09:38 , Larry R. Dockery <<a href="mailto:lrdocker@co.douglas.or.us">lrdocker@co.douglas.or.us</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Aside from it making ULA+NTPv6 a smart move, perhaps even best practice for the majority of businesses to adopt rather than allow PA-ISP lock-in, no.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">With the mentioned routing issue not being sustainable however, my proposal is likely DOA.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thank you.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><b>From:</b><span class="apple-converted-space"> </span>Owen DeLong <<a href="mailto:owen@delong.com">owen@delong.com</a>><span class="apple-converted-space"> </span><br>
<b>Sent:</b><span class="apple-converted-space"> </span>Monday, September 13, 2021 9:00 AM<br>
<b>To:</b><span class="apple-converted-space"> </span>Larry R. Dockery <<a href="mailto:lrdocker@co.douglas.or.us">lrdocker@co.douglas.or.us</a>><br>
<b>Cc:</b><span class="apple-converted-space"> </span><a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [arin-ppml] Proposal - Remove Initial Small Assignment Requirements for IPv6<o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Is there a reason that you think the majority of small businesses that are not going to multi home should<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">receive PI addresses rather than use PA?<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">I’m neither in favor nor opposed at this time, but the answer to the above question is pivotal to whether<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">this proposal serves an actual need or merely panders to the idea of PI for everybody, which until we<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">change our routing technology to separate locators from identifiers isn’t sustainable.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">Owen<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal">On Sep 13, 2021, at 07:51 , Larry R. Dockery <<a href="mailto:lrdocker@co.douglas.or.us">lrdocker@co.douglas.or.us</a>> wrote:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><a href="https://www.arin.net/participate/policy/proposals/2021/ARIN_prop_301_orig/">https://www.arin.net/participate/policy/proposals/2021/ARIN_prop_301_orig/</a><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">I would like to hear community feedback on this proposal. Thank you.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">_______________________________________________<br>
ARIN-PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (</span><a href="mailto:ARIN-PPML@arin.net"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">ARIN-PPML@arin.net</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">).<br>
Unsubscribe or manage your mailing list subscription at:<br>
</span><a href="https://lists.arin.net/mailman/listinfo/arin-ppml"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">https://lists.arin.net/mailman/listinfo/arin-ppml</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>
Please contact<span class="apple-converted-space"> </span></span><a href="mailto:info@arin.net"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">info@arin.net</span></a><span class="apple-converted-space"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"> </span></span><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">if
you experience any issues.</span><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>