Re: [addr-select-dt] RFC 3484 issues in address selection in the presence of an IPv4 NAT

Fred Baker <fred@cisco.com> Mon, 23 March 2009 21:51 UTC

Return-Path: <fred@cisco.com>
X-Original-To: addr-select-dt@core3.amsl.com
Delivered-To: addr-select-dt@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3B25F3A6AF1 for <addr-select-dt@core3.amsl.com>; Mon, 23 Mar 2009 14:51:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.268
X-Spam-Level:
X-Spam-Status: No, score=-106.268 tagged_above=-999 required=5 tests=[AWL=-0.269, BAYES_00=-2.599, J_CHICKENPOX_13=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qjseEVt4QkDJ for <addr-select-dt@core3.amsl.com>; Mon, 23 Mar 2009 14:51:18 -0700 (PDT)
Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 209B13A6831 for <addr-select-dt@ietf.org>; Mon, 23 Mar 2009 14:51:18 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.38,410,1233532800"; d="scan'208";a="145514316"
Received: from sj-dkim-3.cisco.com ([171.71.179.195]) by sj-iport-2.cisco.com with ESMTP; 23 Mar 2009 21:52:08 +0000
Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-3.cisco.com (8.12.11/8.12.11) with ESMTP id n2NLq82T027662; Mon, 23 Mar 2009 14:52:08 -0700
Received: from dhcp-41cd.meeting.ietf.org (sjc-vpn6-723.cisco.com [10.21.122.211]) by sj-core-5.cisco.com (8.13.8/8.13.8) with ESMTP id n2NLpLU1008610; Mon, 23 Mar 2009 21:52:08 GMT
Message-Id: <AB501AE2-69A0-4B31-8860-ECD3CC095FDE@cisco.com>
From: Fred Baker <fred@cisco.com>
To: bob.hinden@nokia.com
In-Reply-To: <695BF428-E196-4492-8FC7-51045BA2D89D@nokia.com>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Mon, 23 Mar 2009 14:52:08 -0700
References: <A28B6BD7-6BCF-4E1B-B0C0-2A3785B845B4@cisco.com> <695BF428-E196-4492-8FC7-51045BA2D89D@nokia.com>
X-Mailer: Apple Mail (2.930.3)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1606; t=1237845128; x=1238709128; c=relaxed/simple; s=sjdkim3002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=fred@cisco.com; z=From:=20Fred=20Baker=20<fred@cisco.com> |Subject:=20Re=3A=20RFC=203484=20issues=20in=20address=20se lection=20in=20the=20presence=20of=20an=20IPv4=20NAT |Sender:=20; bh=vG95gPBAex/Fqdr+fpyUci+jIeZGqBlpJhzQz8NSpGg=; b=mfqaCRB0pF47H2I1iORzbdLsFyBfs43GaF6QQWhOl3xrcF4K5iDFI7FeyD zLrlKAp4SiAlr1aTQQNvvpvJCK+B8kkDlXCFiNf7n8PaXoBsZZ42OWo9ns6f tS2ykicLPx;
Authentication-Results: sj-dkim-3; header.From=fred@cisco.com; dkim=pass ( sig from cisco.com/sjdkim3002 verified; );
X-Mailman-Approved-At: Mon, 23 Mar 2009 16:18:18 -0700
Cc: 6man Chairs <6man-chairs@tools.ietf.org>, 6man-ads@tools.ietf.org, Ron Bonica <rbonica@juniper.net>, addr-select-dt@ietf.org, Kurt Erik Lindqvist <kurtis@kurtis.pp.se>, draft-denis-v6ops-nat-addrsel@tools.ietf.org
Subject: Re: [addr-select-dt] RFC 3484 issues in address selection in the presence of an IPv4 NAT
X-BeenThere: addr-select-dt@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IPv6 Address Selection Design Team <addr-select-dt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/addr-select-dt>, <mailto:addr-select-dt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/addr-select-dt>
List-Post: <mailto:addr-select-dt@ietf.org>
List-Help: <mailto:addr-select-dt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/addr-select-dt>, <mailto:addr-select-dt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2009 21:51:19 -0000

On Mar 23, 2009, at 2:36 PM, Bob Hinden wrote:

> Fred,
>
> We have a design team in this area.  I suspect they were in the the  
> v6ops session this morning.  I copied them here.

I'm pretty sure they were. I'm formally closing the loop here, which I  
said I would do this morning.

> Bob
>
>
> On Mar 23, 2009, at 2:02 PM, ext Fred Baker wrote:
>
>> I'd like to bring
>>
>> http://tools.ietf.org/html/draft-denis-v6ops-nat-addrsel
>> "Problems with IPv6 source address selection and IPv4 NATs", Remi
>> Denis-Courmont, 18-Feb-09, <draft-denis-v6ops-nat-addrsel-00.txt>
>>
>> to your attention. We discussed it briefly this morning in v6ops.  
>> The sense of the room was that it was likely related to your effort  
>> to improve RFC 3484.
>>
>> Along those lines, the discussion at the mike included at least two  
>> points that RFC 3484 runs afoul of. One is that RFC 3484 enables no  
>> API for administrative control, and administrators are likely to  
>> want to update it in their environments. The other is that the  
>> logic that addresses have degrees of likelihood of being useful in  
>> a fixed order - any fixed order - is problematic. Rather, one might  
>> have an initial order one uses, but as the system gains experience  
>> of what address selections are most useful, it would be better to  
>> have the OS, guided by the application, try those addresses that  
>> have historically been useful first.
>>
>> How would you recommend proceeding? Would you prefer to take this  
>> draft into 6man and including it in the RFC 3484 update?
>