Re: [77attendees] Bar BOF: Impact of NAT444 on content providers

"Dan Wing" <dwing@cisco.com> Mon, 15 March 2010 22:02 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: 77attendees@core3.amsl.com
Delivered-To: 77attendees@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9D6B73A68EC for <77attendees@core3.amsl.com>; Mon, 15 Mar 2010 15:02:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b9GYBgUZAk4O for <77attendees@core3.amsl.com>; Mon, 15 Mar 2010 15:02:30 -0700 (PDT)
Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 654293A6887 for <77attendees@ietf.org>; Mon, 15 Mar 2010 15:02:29 -0700 (PDT)
Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: As0IAHhLnkurRN+J/2dsb2JhbACHVYESkglzoCyYJ4JOgi0Egxo
X-IronPort-AV: E=Sophos;i="4.49,645,1262563200"; d="scan'208";a="497037011"
Received: from sj-core-3.cisco.com ([171.68.223.137]) by sj-iport-6.cisco.com with ESMTP; 15 Mar 2010 22:02:37 +0000
Received: from dwingwxp01 (dhcp-128-107-165-88.cisco.com [128.107.165.88]) by sj-core-3.cisco.com (8.13.8/8.14.3) with ESMTP id o2FM2b2a011729; Mon, 15 Mar 2010 22:02:37 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Brian E Carpenter' <brian.e.carpenter@gmail.com>, 77attendees@ietf.org
References: <4B9D70B7.2050001@gmail.com>
Date: Mon, 15 Mar 2010 15:02:35 -0700
Message-ID: <04c301cac48b$383e84c0$c4f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcrDzdfRA/2CUrjSRZ6tUwNCEyZLxgAufzeA
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
In-Reply-To: <4B9D70B7.2050001@gmail.com>
Subject: Re: [77attendees] Bar BOF: Impact of NAT444 on content providers
X-BeenThere: 77attendees@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <77attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/77attendees>, <mailto:77attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/77attendees>
List-Post: <mailto:77attendees@ietf.org>
List-Help: <mailto:77attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/77attendees>, <mailto:77attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Mar 2010 22:02:31 -0000

The title is misleading.  "NAT444" is the colloquial term for 
"double NAT":  in-home NAT and service provider NAT.  However,
the same problem occurs without the in-home NAT (that is, 
just the service provider NAT).  The problem for content 
providers are large NATs and IPv4 address sharing among 
subscribers in different physical locations, not double NAT.

Going beyond the title to Lorenzo's specific request, this seems 
a grey line to request a single document describing only 
content provider impact.  For examples:

* if my neighbor is running a POST script on a website (e.g., to 'vote
  early, vote often'), and the content provider blocks the IP
  address...  is that something that "impacts the content provider"?
  Seems answer is No.  Or does it impact the other users sharing that 
  same IPv4 address?  Seems answer is Yes.  Same for email spam
  blacklisting.
* If the web application consumes more TCP ports than available on the
  NAT, does that affect the content provider (answer: yes, has to
  design application to deal with that case, or expect application to
  break) or the user (answer: yes - content doesn't display correctly
  or maybe displays slower).
* Does inability to geo-locate affect the content provider (can't
  display targeted advertising) or the user (can't locate nearby
  businesses).

Those are just examples.  I expect we can come up with more
grey areas.

A different layout of draft-ford-shared-addressing-issues might
go a long way towards addressing the desire for a citable 
document on the negative affect of IPv4 address sharing to a 
content provider.  Failing that, perhaps a separate draft; however
it seems difficult to describe any of these as solely or even
primarily impacting the content provider -- it is the collateral
damage caused by the negative reputation of the IPv4 identifier
that is the foundation of much of the woe (for the penalty boxes).

For location delivery *solutions* with IPv4 address sharing -- which I
suppose are out of scope of this Bar BoF, but I believe are why this
document is desired -- I am aware of draft-vandergaast-edns-client-ip
which suggests the first 24 bits of the client's IPv4 address be
included in the DNS query and I imagine (but do not know) that draft
is part of the motivation for this Bar BoF on IPv4 address sharing.
If location is the primary driver, have other ideas been floated and
discussed, such a The-Son-Of-Ident to query a carrier's NAT for a
subscriber's location or query the carrier's NAT for the first 24 bits
of the client's IP address?

-d

> -----Original Message-----
> From: 77attendees-bounces@ietf.org 
> [mailto:77attendees-bounces@ietf.org] On Behalf Of Brian E Carpenter
> Sent: Sunday, March 14, 2010 4:27 PM
> To: 77attendees@ietf.org
> Subject: [77attendees] Bar BOF: Impact of NAT444 on content providers
> 
> Bar BOF: Impact of NAT444 on content providers
> 
> Day:  Tuesday March 23
> Time: 17:30
> Room: TBD
> 
> Inspired by some remarks of Lorenzo Colitti (Google) at the recent
> APRICOT/APNIC meeting in Kuala Lumpur, we plan to discuss the value
> of a short draft aimed *specifically* at content providers, 
> to describe
> the impact on them and their customers if many of those customers are
> trapped behind double IPv4 NAT (NAT444). Clearly the issues are not
> news, but they tend to be described in complex general drafts, or
> mixed in with proposed solutions or alternatives to double NAT.
> 
> Quoting Lorenzo: "...it would be
> good to put together an IETF draft that very concisely lists 
> the problems of
> NAT444 from the content provider perspective. For example: 
> worse geolocation
> for targeted advertising and streaming content restrictions; 
> higher latency;
> IP blocking for abuse/spam causing collateral damage, etc."
> 
> (Also see 
> http://www.isoc.org/educpillar/resources/docs/ipv6_200905.pdf)
> 
> The bar BOF agenda is to decide whether to proceed with such 
> a draft and
> if so, to identify the people who will write it and the target date.
> 
> Highly relevant existing documents include:
> 
>  draft-ford-shared-addressing-issues-02.txt
>  draft-azinger-additional-private-ipv4-space-issues-03.txt
> 
> Drafts that touch on the topic in one way or another include:
> 
>  draft-nishitani-cgn-04.txt
>  draft-shirasaki-nat444-01.txt
>  draft-shirasaki-nat444-isp-shared-addr-03.txt
>  draft-shirasaki-isp-shared-addr-04.txt
>  draft-davies-reusable-ipv4-address-block-00.txt
>  draft-boucadair-port-range-02.txt
>  draft-ymbk-aplusp-05.txt
>  draft-thaler-port-restricted-ip-issues-00.txt
> 
>      Brian Carpenter
>      (whose only commitment is to make the bar BOF happen)
> _______________________________________________
> 77attendees mailing list
> 77attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/77attendees
>