[BEHAVE] need for ALGs in NAT64 scenarios [was RE: adopt draft-van-beijnum-behave-ftp64-06 as WG item]

"Dan Wing" <dwing@cisco.com> Thu, 29 October 2009 07:29 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4217C3A6911 for <behave@core3.amsl.com>; Thu, 29 Oct 2009 00:29:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.302
X-Spam-Level:
X-Spam-Status: No, score=-6.302 tagged_above=-999 required=5 tests=[AWL=0.296, BAYES_00=-2.599, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DiSmO9FExO4W for <behave@core3.amsl.com>; Thu, 29 Oct 2009 00:29:33 -0700 (PDT)
Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 5BDCB3A68F1 for <behave@ietf.org>; Thu, 29 Oct 2009 00:29:33 -0700 (PDT)
Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApwEABvh6EqrR7Ht/2dsb2JhbACKX49WqRuJGgGOd4Q/BIFh
X-IronPort-AV: E=Sophos;i="4.44,645,1249257600"; d="scan'208";a="420297591"
Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 29 Oct 2009 07:29:49 +0000
Received: from dwingwxp01 ([10.32.240.197]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id n9T7TnZC010802; Thu, 29 Oct 2009 07:29:49 GMT
From: Dan Wing <dwing@cisco.com>
To: 'bo zhou' <zhouboyj@gmail.com>, 'Iljitsch van Beijnum' <iljitsch@muada.com>
References: <02b101ca5337$8f3fcbf0$5ba36b80@cisco.com><a7c8d0a30910270840l3fca4fa6v6ce58fa5d6db34f4@mail.gmail.com><0BD12441-097D-44D3-8D10-E58B84277DBB@muada.com><a7c8d0a30910270859i1b5ca44cjc0b3e2473d78f84d@mail.gmail.com><D3A4D7F4-F2DB-40AD-A37B-5C500B630169@muada.com> <36a593230910280500o2737e5c5t77a433a770dc9364@mail.gmail.com>
Date: Thu, 29 Oct 2009 00:29:49 -0700
Message-ID: <1bbb01ca5869$98f67720$c5f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcpXxj4SA+e7H0XqQbqbgepAosyx0gAojE4g
In-Reply-To: <36a593230910280500o2737e5c5t77a433a770dc9364@mail.gmail.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Cc: behave@ietf.org, 'Zhen Cao' <caozhenpku@gmail.com>
Subject: [BEHAVE] need for ALGs in NAT64 scenarios [was RE: adopt draft-van-beijnum-behave-ftp64-06 as WG item]
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Oct 2009 07:29:34 -0000

> -----Original Message-----
> From: behave-bounces@ietf.org 
> [mailto:behave-bounces@ietf.org] On Behalf Of bo zhou
> Sent: Wednesday, October 28, 2009 5:00 AM
> To: Iljitsch van Beijnum
> Cc: behave@ietf.org WG; Zhen Cao
> Subject: Re: [BEHAVE] adopt draft-van-beijnum-behave-ftp64-06 
> as WG item
> 
> Hi Iljitsch,
>  
> "minimize" does not mean avoid in my mind. 
> BTW, you ask "which protocols do you feel need ALGs to work 
> through 6-to-4 translator?"
> I guess Zhen want to answer your question using RTSP, SIP as 
> two examples.
> I believe more applications rather than RTSP, SIP need to do 
> ALG in such scenario, but it is really depend on how the user 
> use these applications. for example, a standard HTTP protocol 
> can include IP address or domain name inside. if the user 
> choose the IP address filling, then the ALG cannot avoid.

An ALG is not necessary for that problem.  I describe a workaround
for that specific problem in
http://tools.ietf.org/html/draft-wing-behave-http-ip-address-literals-01
which does not use an ALG.  However, as noted that draft, my workaround 
may not properly handle Java or Javascript which contains IPv4 
address literals -- but neither will an ALG (unless the ALG is
going to interpret Java and Javascript, which *significantly* 
increases its complexity and CPU hit to solve a small problem; 
see below).

> But likely, more user use domain name rather than IP address for 
> HTTP application which need not ALG in the translator.

Yes.  I analyzed the likelyhood by looking at the top 1,000,000 
domains per alexa.com, results are at:
http://tools.ietf.org/html/draft-wing-behave-http-ip-address-literals-01#appen
dix-B
which says:

...
   An examination of Alexa's top 1 million domains [Alexa] at the end of
   August, 2009, showed 2.38% of the HTML in their home pages contained
   IPv4 address literals.  
...
   Of the top 1 million websites at the end of August, 2009, 3455
   (0.35%) of them are IPv4 address literals (e.g., http://192.0.2.1).
...

-d


> regards,
>  
> Bo 
> 
> 
>  
> On Wed, Oct 28, 2009 at 6:29 PM, Iljitsch van Beijnum 
> <iljitsch@muada.com> wrote:
> 
> 
> 	On 27 okt 2009, at 16:59, Zhen Cao wrote:
> 	
> 	
> 
> 			Which protocols do you feel need ALGs 
> to work through IPv6-to-IPv4
> 			translators?
> 			
> 
> 
> 		RTSP, SIP where there needs SDP to carry the address.
> 		
> 
> 
> 	I'm not sure about the status of RTSP, but I believe 
> that it's used less and less exactly because it doesn't work 
> through NAT44 without an ALG...
> 	
> 	As for SIP, I believe the consensus is that ALGs create 
> more harm than benefit.
> 	
> 	The wg consensus is that the use of ALGs should be 
> minimized. I don't believe there would be consensus to 
> specify RTSP and SIP ALGs for NAT64. 
> 
> 	_______________________________________________
> 	Behave mailing list
> 	Behave@ietf.org
> 	https://www.ietf.org/mailman/listinfo/behave
> 	
> 
> 
> 
> 
> -- 
> Regards,
> 
> Bo Zhou
> China Mobile
> 
>