Re: [BEHAVE] Stateless Address Mappings (SAMs) - new draft

Dave Thaler <dthaler@windows.microsoft.com> Wed, 05 November 2008 20:48 UTC

Return-Path: <behave-bounces@ietf.org>
X-Original-To: behave-archive@optimus.ietf.org
Delivered-To: ietfarch-behave-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8AFE73A6AB7; Wed, 5 Nov 2008 12:48:32 -0800 (PST)
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9DE803A694F; Wed, 5 Nov 2008 12:48:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gum8RzDVyfMB; Wed, 5 Nov 2008 12:48:13 -0800 (PST)
Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id C352F3A6864; Wed, 5 Nov 2008 12:48:12 -0800 (PST)
Received: from tk1-exhub-c104.redmond.corp.microsoft.com (157.54.46.188) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.1.291.1; Wed, 5 Nov 2008 12:47:40 -0800
Received: from tk5-exmlt-w602.wingroup.windeploy.ntdev.microsoft.com (157.54.18.33) by tk1-exhub-c104.redmond.corp.microsoft.com (157.54.46.188) with Microsoft SMTP Server id 8.1.291.1; Wed, 5 Nov 2008 12:47:40 -0800
Received: from NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com ([fe80::75be:c82f:ae04:55bf]) by tk5-exmlt-w602.wingroup.windeploy.ntdev.microsoft.com ([157.54.18.33]) with mapi; Wed, 5 Nov 2008 12:48:28 -0800
From: Dave Thaler <dthaler@windows.microsoft.com>
To: Rémi Després <remi.despres@free.fr>, Softwires WG <softwires@ietf.org>, Behave WG <behave@ietf.org>
Date: Wed, 05 Nov 2008 12:47:37 -0800
Thread-Topic: [BEHAVE] Stateless Address Mappings (SAMs) - new draft
Thread-Index: Ack/ZlQv/uRCGvvmSN2ldqmnUJMq9QAH2usg
Message-ID: <E9CACA3D8417CE409FE3669AAE1E5A4F0A10A7C6A4@NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com>
References: <4911CDAB.2010309@free.fr>
In-Reply-To: <4911CDAB.2010309@free.fr>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/mixed; boundary="_002_E9CACA3D8417CE409FE3669AAE1E5A4F0A10A7C6A4NAEXMSGW601wi_"
MIME-Version: 1.0
X-Mailman-Approved-At: Wed, 05 Nov 2008 12:48:32 -0800
Cc: "v4v6interim-bounces@ietf.org" <v4v6interim-bounces@ietf.org>
Subject: Re: [BEHAVE] Stateless Address Mappings (SAMs) - new draft
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
Sender: behave-bounces@ietf.org
Errors-To: behave-bounces@ietf.org

I have read this draft.  In my opinion, it is within the scope of Softwires
but may be of interest to some Behave folks.  The only real part I can see
that might be within the scope of Behave is section 3.6 where it discusses
scrambling IPv6 addresses as packets flow through a SAM.  I'd suggest this
be separated into its own draft since it's largely orthogonal to the rest
of the document (which is more about encapsulation, not translation).

Technical comments:

1) The draft doesn't say what will break and probably should (ping,
   well-known ports, etc).  Some of the same problems that occur with
   multilink subnets (RFC 4903) occur in this proposal too, since
   not everything will be aware that the "subnet" isn't an IP prefix.
   Similarly, the required Subnet-Router Anycast addresses (RFC
   4291 section 2.6.1) may not work correctly.

2) The draft assumes that the first fragment always arrives first.
   As discussed in draft-iab-ip-model-evolution-01.txt section 3.1.7,
   this is not a safe assumption today.

3) The use of the "u" bit in IIDs seems problematic for several reasons.
   One, it only applies to IPv6 addresses that don't start with binary 000.
   Two, the semantics of the bit defined in RFC 4291 have to do with
   making it easy to configure non-conflicting addresses, and are not
   about privacy demands; overloading this bit for a second purpose
   seems problematic.

4) Regarding the IPv6 address scrambling in section 3.6, not defining
   the scrambling (or at least not providing requirements for it) would be
   problematic in two regards.  1) If you allow asymmetric paths then
   you need the same algorithm in each SAM at the edge of your network;
   2) some implementations may pick a weak method that allows an
   outsider to guess the algorithm.

Comments inline (along with a bunch of editorial nits) in PDF attached.

-Dave

> -----Original Message-----
> From: behave-bounces@ietf.org [mailto:behave-bounces@ietf.org] On
> Behalf Of Rémi Després
> Sent: Wednesday, November 05, 2008 8:46 AM
> To: Softwires WG; Behave WG
> Cc: v4v6interim-bounces@ietf.org
> Subject: [BEHAVE] Stateless Address Mappings (SAMs) - new draft
>
> The new draft on SAMs is at
> http://www.ietf.org/internet-drafts/draft-despres-sam-01.txt.
>
> It deal with global connectivity, in IPv4, IPv6,  and extended IPv4,
> across local domains where routing is different.
>
> - Its automatic tunneling aspects are in the new scope of Softwires
> - Its IPv4 address extension aspects, based on dynamic-port prefixes,
> are in the scope of Behave.
>
> Regards
> RD
>
> _______________________________________________
> Behave mailing list
> Behave@ietf.org
> https://www.ietf.org/mailman/listinfo/behave

_______________________________________________
Behave mailing list
Behave@ietf.org
https://www.ietf.org/mailman/listinfo/behave