Re: [BEHAVE] Comments ondraft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt

"Dan Wing" <dwing@cisco.com> Fri, 07 November 2008 23:30 UTC

Return-Path: <behave-bounces@ietf.org>
X-Original-To: behave-archive@optimus.ietf.org
Delivered-To: ietfarch-behave-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C226C28C174; Fri, 7 Nov 2008 15:30:00 -0800 (PST)
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A580A28C16C for <behave@core3.amsl.com>; Fri, 7 Nov 2008 15:29:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XuZSmoLc8JXg for <behave@core3.amsl.com>; Fri, 7 Nov 2008 15:29:58 -0800 (PST)
Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id D051628C123 for <behave@ietf.org>; Fri, 7 Nov 2008 15:29:58 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.33,566,1220227200"; d="scan'208";a="190723799"
Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-6.cisco.com with ESMTP; 07 Nov 2008 23:29:48 +0000
Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mA7NTmiL023455; Fri, 7 Nov 2008 15:29:48 -0800
Received: from dwingwxp01 ([10.32.240.195]) by sj-core-4.cisco.com (8.13.8/8.13.8) with ESMTP id mA7NTmWV011419; Fri, 7 Nov 2008 23:29:48 GMT
From: Dan Wing <dwing@cisco.com>
To: teemu.savolainen@nokia.com
References: <E9CACA3D8417CE409FE3669AAE1E5A4F0A10A7CA6C@NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com> <DC237AE116C10E4C9AD162D6C2EE62FE01424BEE@vaebe102.NOE.Nokia.com>
Date: Fri, 07 Nov 2008 15:29:46 -0800
Message-ID: <000301c94130$b98ad950$c3f0200a@cisco.com>
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
In-Reply-To: <DC237AE116C10E4C9AD162D6C2EE62FE01424BEE@vaebe102.NOE.Nokia.com>
Thread-Index: AclARf29AXL7mD/+QROPqhpXbyBSLgAeaxEwABsE5lA=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1964; t=1226100588; x=1226964588; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dwing@cisco.com; z=From:=20=22Dan=20Wing=22=20<dwing@cisco.com> |Subject:=20RE=3A=20[BEHAVE]=20Comments=20ondraft-bajko-v6o ps-port-restricted-ipaddr-assign-02.txt |Sender:=20; bh=wJcdYMXtcNWJxRrne73GZVcrrnOgXA6tCvWG9mri5PI=; b=dgifYLJSh5Gi3scDAqBsaNdiADC6A/PcruqTl3NEg5V+q1NzjIiRwsIIRd cuXy5aJJ2vsnSAiL4qUgISmVOlGyyDnN4wg+d3trbPsYqNdHYv9WuZitehx9 LNWyadzApcoq2aOeSie4CtfDw/sacqlcl1wKjyKBTM7A82edfBPGk=;
Authentication-Results: sj-dkim-1; header.From=dwing@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; );
Cc: cheshire@apple.com, Gabor.Bajko@nokia.com, behave@ietf.org, dthaler@windows.microsoft.com
Subject: Re: [BEHAVE] Comments ondraft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: behave-bounces@ietf.org
Errors-To: behave-bounces@ietf.org

> -----Original Message-----
> From: behave-bounces@ietf.org 
> [mailto:behave-bounces@ietf.org] On Behalf Of 
> teemu.savolainen@nokia.com
> Sent: Friday, November 07, 2008 4:14 AM
> To: dthaler@windows.microsoft.com; Gabor.Bajko@nokia.com
> Cc: cheshire@apple.com; behave@ietf.org
> Subject: Re: [BEHAVE] Comments 
> ondraft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt

I have two comments:

...
> With our approach also public IPv4 address is allocated to a 
> host (with restrictions), while in NAT-PMP and UPnP IGD 
> cases private IPv4 addresses are used afaik? 

Both NAT-PMP and UPnP IGD allocate an IP address on the 
'public' interface of the NAT (the WAN interface).  Of course 
if there are nested NATs, this doesn't provide a truly public 
IP address because neither NAT-PMP nor UPnP IGD know if the 
NAT's WAN interface is behind another NAT, nor do NAT-PMP or
UPnP IGD describe how they might be nested.  To avoid this
deficiency, one solution is to disable the inner NAT when it
appears to be behind another NAT; this of course creates
other problems.  Disabling the NAT is a requirement to get one 
of the Microsoft certification stickers on a NAT; see "Windows 
Hardware Logo Program Requirements for Devices", requirement 
NETWORK-0076, 
http://www.microsoft.com/whdc/winlogo/hwrequirements.mspx

> Another aspect is that if CGN is used, it most
> probably does not support NAT-PMP or UPNP IGD usage at all,
> and even local NAT is probably having keep-alive timers 
> running that need to be refreshed with battery-consuming 
> keep-alive messages.

For whatever it's worth to mention, I had proposed a STUN-
based technique to reduce UDP keepalives and a related BoF
to discuss the problem and solution.  But it died,
http://tools.ietf.org/id/draft-wing-behave-nat-control-stun-usage-05.txt
(expired)
http://www.ietf.org/mail-archive/web/safe/current/msg00075.html (minutes from
the BoF)

-d

_______________________________________________
Behave mailing list
Behave@ietf.org
https://www.ietf.org/mailman/listinfo/behave