Re: [BEHAVE] Port Management To Reduce Logging In Large-Scale NATs

Tina TSOU <tena@huawei.com> Wed, 01 September 2010 10:28 UTC

Return-Path: <tena@huawei.com>
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 716293A63D3 for <behave@core3.amsl.com>; Wed, 1 Sep 2010 03:28:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.024
X-Spam-Level:
X-Spam-Status: No, score=-100.024 tagged_above=-999 required=5 tests=[AWL=0.470, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1, STOX_REPLY_TYPE=0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pI+8UyZu6uIg for <behave@core3.amsl.com>; Wed, 1 Sep 2010 03:28:26 -0700 (PDT)
Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 5B5693A6803 for <behave@ietf.org>; Wed, 1 Sep 2010 03:28:26 -0700 (PDT)
Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0L8200BUED3YHK@szxga01-in.huawei.com> for behave@ietf.org; Wed, 01 Sep 2010 18:28:46 +0800 (CST)
Received: from huawei.com ([172.24.2.119]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0L820063XD3Y3E@szxga01-in.huawei.com> for behave@ietf.org; Wed, 01 Sep 2010 18:28:46 +0800 (CST)
Received: from z00147053k ([10.70.39.122]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0L82003DHD3XS0@szxml06-in.huawei.com> for behave@ietf.org; Wed, 01 Sep 2010 18:28:46 +0800 (CST)
Date: Wed, 01 Sep 2010 18:28:45 +0800
From: Tina TSOU <tena@huawei.com>
To: behave@ietf.org, "Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com>, Reinaldo Penno <rpenno@juniper.net>
Message-id: <1D19011028794D60B1344B404821DB50@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
Content-type: text/plain; format="flowed"; charset="iso-8859-1"; reply-type="original"
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
References: <C8A35196.27A44%rpenno@juniper.net>
Subject: Re: [BEHAVE] Port Management To Reduce Logging In Large-Scale NATs
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Sep 2010 10:28:27 -0000

Big pool and small pool are containing relationship. Release the port first 
to the small pool. After finishing releasing all the ports in the small 
pool, release the port to the big port. Here we go, there is no 
fragmentation.

B. R.
Tina
http://tinatsou.weebly.com/index.html

----- Original Message ----- 
From: "Reinaldo Penno" <rpenno@juniper.net>
To: "Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com>; "Tina TSOU" 
<tena@huawei.com>; <behave@ietf.org>
Sent: Wednesday, September 01, 2010 3:40 PM
Subject: Re: [BEHAVE] Port Management To Reduce Logging In Large-Scale NATs


Agreed. I mentioned on the first email that there are basically two choices:

* Individual port release which in the long run leads to fragmentation but
better resource use.

* Or allocating/releasing in blocks of well-known size which in a sense is
almost a static division given a number N of subscribers.


On 9/1/10 12:35 AM, "Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com>
wrote:

> [Senthil] I would think the port ranges are allocated/deallocated in
> blocks to avoid fragmentation. Otherwise,
> it would prove difficult to manage the ports within a short span of
> time. The question now may be how is oversubscription handled. For
> instance, subscriber A is idle and not using his ports for the past n
> minutes and subscriber Z wants more ports because he is actively
> opening/closing connections but doesn't have any ports, what do we do. I
> guess that is a network administration issue to solve.