From owner-freebsd-net@freebsd.org Wed Jun 14 02:57:29 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F018AC782BA for ; Wed, 14 Jun 2017 02:57:29 +0000 (UTC) (envelope-from wollman@hergotha.csail.mit.edu) Received: from hergotha.csail.mit.edu (wollman-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:ccb::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B86C47651B for ; Wed, 14 Jun 2017 02:57:29 +0000 (UTC) (envelope-from wollman@hergotha.csail.mit.edu) Received: from hergotha.csail.mit.edu (localhost [127.0.0.1]) by hergotha.csail.mit.edu (8.15.2/8.15.2) with ESMTP id v5E2vRLK029174; Tue, 13 Jun 2017 22:57:27 -0400 (EDT) (envelope-from wollman@hergotha.csail.mit.edu) Received: (from wollman@localhost) by hergotha.csail.mit.edu (8.15.2/8.14.4/Submit) id v5E2vRDE029173; Tue, 13 Jun 2017 22:57:27 -0400 (EDT) (envelope-from wollman) Date: Tue, 13 Jun 2017 22:57:27 -0400 (EDT) From: Garrett Wollman Message-Id: <201706140257.v5E2vRDE029173@hergotha.csail.mit.edu> To: rpaulo@me.com Cc: freebsd-net@freebsd.org Subject: Re: Enable IPv6 Privacy Extensions by default References: <20170611215904.4612ee41@kalimero.tijl.coosemans.org> <20170612131912.42537b13@kalimero.tijl.coosemans.org> <1497408664.2220.3.camel@me.com> Organization: none Cc: X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (hergotha.csail.mit.edu [127.0.0.1]); Tue, 13 Jun 2017 22:57:27 -0400 (EDT) X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=disabled version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on hergotha.csail.mit.edu X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jun 2017 02:57:30 -0000 In article <1497408664.2220.3.camel@me.com>, rpaulo@me.com writes: >I don't see any reason why we shouldn't have privacy addresses enabled >by default. In fact, back in 2008 no one voiced their concerns. Back in 2008 most people hadn't had their networks fall over as a result of MLD listener report implosions when a thousand machines report (via multicast, natch) their eight[1] single-member solicited-node multicast groups in the space of a few seconds. -GAWollman [1] Assuming the vendor actually implemented the thing correctly. Some of us have seen what happens when one machine reports eight hundred single-member solicited-node multicast groups in the space of a few milliseconds.