|
|
Subscribe / Log in / New account

Bottomley: Creating a home IPv6 network

Bottomley: Creating a home IPv6 network

Posted Sep 20, 2020 18:57 UTC (Sun) by Cyberax (✭ supporter ✭, #52523)
In reply to: Bottomley: Creating a home IPv6 network by ebiederm
Parent article: Bottomley: Creating a home IPv6 network

Flow labels can not be relied on to be consistent and fair. They are certainly can not be reliably used for TCP flow balancing right now.

Along with priority and class fields they basically just uselessly waste 28 bits in every packet. There are multiple RFCs looking at WTF we are going to do with these fields that are just here right now.


to post comments

Bottomley: Creating a home IPv6 network

Posted Sep 21, 2020 17:18 UTC (Mon) by zlynx (guest, #2285) [Link] (1 responses)

Use flow labels and force people to use them correctly or get bad results.

It's really the same problem you have load balancing TLS encrypted HTTP/2 where instead of multiple connections you have everything in a single TCP flow. There's no visibility unless the load balancer is also doing the TLS termination and handling the HTTP/2 multiplexing.

If users are going to do it wrong then make them suffer. It's not as if we'd let people get away with using random UDP source ports, so don't let them get away with any other broken thing.

Allowing people to ignore a feature or refusing to use it because it might break something, somewhere, is what made ECN take so long to roll out. Oh no! Some firewall box somewhere in Ethiopia is blocking "evil bits" whatever shall we do?

Don't make it possible to even use the Internet if people firewall block ICMP either. Break it. Break it all.

Bottomley: Creating a home IPv6 network

Posted Sep 21, 2020 17:22 UTC (Mon) by Cyberax (✭ supporter ✭, #52523) [Link]

> It's really the same problem you have load balancing TLS encrypted HTTP/2 where instead of multiple connections you have everything in a single TCP flow. There's no visibility unless the load balancer is also doing the TLS termination and handling the HTTP/2 multiplexing.
Typically balancing is done based on a 4-tuple, not on individual subflows from a client. QUIC is going to be interesting to watch, though.

> Don't make it possible to even use the Internet if people firewall block ICMP either. Break it. Break it all.
I don't mind that, but business people paying the bills do.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds