[BEHAVE] Comments on draft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt

Dave Thaler <dthaler@windows.microsoft.com> Thu, 06 November 2008 19:29 UTC

Return-Path: <behave-bounces@ietf.org>
X-Original-To: behave-archive@optimus.ietf.org
Delivered-To: ietfarch-behave-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 338A63A69E2; Thu, 6 Nov 2008 11:29:56 -0800 (PST)
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 880C33A6A4D for <behave@core3.amsl.com>; Thu, 6 Nov 2008 11:29:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.449
X-Spam-Level:
X-Spam-Status: No, score=-110.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RUJeb1QnlkFt for <behave@core3.amsl.com>; Thu, 6 Nov 2008 11:29:54 -0800 (PST)
Received: from smtp.microsoft.com (mailc.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id 928DE3A69E2 for <behave@ietf.org>; Thu, 6 Nov 2008 11:29:54 -0800 (PST)
Received: from tk5-exhub-c103.redmond.corp.microsoft.com (157.54.88.96) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.1.291.1; Thu, 6 Nov 2008 11:29:43 -0800
Received: from tk5-exmlt-w601.wingroup.windeploy.ntdev.microsoft.com (157.54.18.32) by tk5-exhub-c103.redmond.corp.microsoft.com (157.54.88.96) with Microsoft SMTP Server id 8.1.291.1; Thu, 6 Nov 2008 11:29:33 -0800
Received: from NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com ([fe80::75be:c82f:ae04:55bf]) by tk5-exmlt-w601.wingroup.windeploy.ntdev.microsoft.com ([157.54.18.32]) with mapi; Thu, 6 Nov 2008 11:29:33 -0800
From: Dave Thaler <dthaler@windows.microsoft.com>
To: "gabor.bajko@nokia.com" <gabor.bajko@nokia.com>, "teemu.savolainen@nokia.com" <teemu.savolainen@nokia.com>
Date: Thu, 06 Nov 2008 11:29:31 -0800
Thread-Topic: Comments on draft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt
Thread-Index: AclARf29AXL7mD/+QROPqhpXbyBSLg==
Message-ID: <E9CACA3D8417CE409FE3669AAE1E5A4F0A10A7CA6C@NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
MIME-Version: 1.0
Cc: Stuart Cheshire <cheshire@apple.com>, "behave@ietf.org" <behave@ietf.org>
Subject: [BEHAVE] Comments on draft-bajko-v6ops-port-restricted-ipaddr-assign-02.txt
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: behave-bounces@ietf.org
Errors-To: behave-bounces@ietf.org

Like other port range approaches, this breaks applications
when a host (as opposed to a NAT) is directly connected to the provider.

> This enables incremental deployment of modified
> hosts that are supporting public IPv4 address conservation by using
> DHCP port restricted IPv4 address assignment

It's not just host modifications, it can also break applications,
so you also have to modify all the legacy apps that break
(see draft-iab-ip-model-evolution-01.txt sections 3.2.3 and 3.3
for additional discussion/references).

Section 2.3 talks about creating a NAT in the host, but this means
that you have to hide the physical interface from the applications
and instead show them some virtual interface.  This causes
user confusion (as an aside, this is why virtual interfaces
like Teredo and 6to4 don't show up in the UI in Windows,
because feedback indicated it confuses users too much).

You'd be better off saying that this proposal is only applicable
to networks that don't allow hosts to directly attach to the network.

Furthermore, the use of port-restricted IP addresses prevents the
use of ping (e.g. the provider cannot ping a CPE) and other
protocols that don't use port numbers, including ARP.  I see
section 7 does say this.

It's not clear whether the pain is greater with this approach or
with double NAT'ed CGNs.  It would be useful for someone to
enumerate the pain with each in a single place and do a
comparison.

Section 3:

The concept of asking for one or more ports to be allocated, and an
externally visible address, seems to overlap to a large extent
with NAT-PMP in draft-cheshire-nat-pmp-03 (and work on UnP IGD v2
for that matter).  The main difference seems to be that this draft
asks for a range of ports, whereas NAT-PNP asks for one.

Section 4:

If the client can get a non-port-restricted IP by not changing,
what's the incentive for a client to change, since it only gets
worse behavior by sending an OPTION-IPv4-RPR?

-Dave Thaler
_______________________________________________
Behave mailing list
Behave@ietf.org
https://www.ietf.org/mailman/listinfo/behave