Re: /27 the new /24

[Mel Beckman <mel () beckman org>]

Randy,

Your claim is a red herring. IPSec has nothing to do with IPv6 deployment. Deployment doesn't require global IPSec, 
which need only reside in endpoint nodes. It's not needed at all in the routjg and distribution infrastructure, which 
is where deployment happens

The vast majority of IPv6 nodes -- which is where the IPSec requirement exists -- have IPSec built in: Linux, Mac OSX, 
and Windows. Devices that sometimes act as nodes, such as firewalls terminating IPSec tunnels, also obviously need 
IPSec. Devices that are simply IPv6 pass-through, such as consumer-grade routers, don't.

Users can buy whatever level of functionality they need at the edges. If you don't need IPSec tunnel support in your 
firewall, you can buy one without it. Deployment cares nothing about IPSec.

 -mel beckman

On Oct 4, 2015, at 8:05 AM, Randy Bush <randy () psg com<mailto:randy () psg com>> wrote:

If it doesn't support IPSec, it's not really IPv6.

by that criterion, ipv6 deployment is effectively zero