Re: [BEHAVE] NAT64 mapping behaviour w.r.t. scaling

"Dan Wing" <dwing@cisco.com> Tue, 01 December 2009 16:21 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: behave@core3.amsl.com
Delivered-To: behave@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5477128C0EE for <behave@core3.amsl.com>; Tue, 1 Dec 2009 08:21:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.194
X-Spam-Level:
X-Spam-Status: No, score=-6.194 tagged_above=-999 required=5 tests=[AWL=0.405, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id foaq2UaaE302 for <behave@core3.amsl.com>; Tue, 1 Dec 2009 08:21:50 -0800 (PST)
Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 1FE4128C0E0 for <behave@ietf.org>; Tue, 1 Dec 2009 08:21:50 -0800 (PST)
Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApsEAHfRFEurRN+K/2dsb2JhbACKNrZSmAqCLoIDBIFq
X-IronPort-AV: E=Sophos;i="4.47,321,1257120000"; d="scan'208";a="204122328"
Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-3.cisco.com with ESMTP; 01 Dec 2009 16:21:42 +0000
Received: from dwingwxp01 ([10.32.240.195]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id nB1GLgaj002225; Tue, 1 Dec 2009 16:21:42 GMT
From: Dan Wing <dwing@cisco.com>
To: 'marcelo bagnulo braun' <marcelo@it.uc3m.es>
References: <4AFF20DC.2050308@viagenie.ca> <4B02FC62.9010309@viagenie.ca><4B0E9061.40107@ericsson.com> <4B0E9744.4080606@viagenie.ca> <04e301ca71ec$5b6dbf20$c3f0200a@cisco.com> <4B14E601.7020500@it.uc3m.es>
Date: Tue, 01 Dec 2009 08:21:42 -0800
Message-ID: <08f501ca72a2$5e5e0990$c3f0200a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
In-Reply-To: <4B14E601.7020500@it.uc3m.es>
Thread-index: AcpyazDX+JcuYPWyS/uBVq0D0aA91AANxbZQ
Cc: behave@ietf.org
Subject: Re: [BEHAVE] NAT64 mapping behaviour w.r.t. scaling
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Dec 2009 16:21:51 -0000

 

> -----Original Message-----
> From: marcelo bagnulo braun [mailto:marcelo@it.uc3m.es] 
> Sent: Tuesday, December 01, 2009 1:47 AM
> To: Dan Wing
> Cc: 'Simon Perreault'; 'Magnus Westerlund'; behave@ietf.org
> Subject: Re: [BEHAVE] NAT64 mapping behaviour w.r.t. scaling
> 
> Dan Wing escribió:
> >  
> >
> >   
> >> -----Original Message-----
> >> From: behave-bounces@ietf.org 
> >> [mailto:behave-bounces@ietf.org] On Behalf Of Simon Perreault
> >> Sent: Thursday, November 26, 2009 6:57 AM
> >> To: Magnus Westerlund
> >> Cc: behave@ietf.org
> >> Subject: Re: [BEHAVE] NAT64 mapping behaviour w.r.t. scaling
> >>
> >> Magnus Westerlund wrote, on 2009-11-26 09:27:
> >>     
> >>> I think for that address dependent mapping may work if one 
> >>>       
> >> restrict it
> >>     
> >>> to cases where it is known that there is a strict client 
> >>>       
> >> server protocol
> >>     
> >>> on the port. I think the most gain for the least hassle 
> would be to
> >>> allow address dependent mappings for flows that has 
> destination that
> >>> matches TCP.port=80 or TCP.port=443. I don't know how that 
> >>>       
> >> would affect
> >>     
> >>> the more esoteric usages of HTTP.
> >>>       
> >> Something similar to this was proposed by Rémi Després on 
> >> 2008-05-22 with the
> >> name "Address-port sparing NATs".
> >>
> >> I would agree that this is a useful optimization.
> >>
> >>     
> >>> But, in general it is difficult to know what application 
> >>>       
> >> that runs on
> >>     
> >>> top of the transport protocol and what its need is. Thus 
> >>>       
> >> this should be
> >>     
> >>> done with significant care. I would recommend a minimal set of
> >>> identified applications where an operator may chose this option to
> >>> achieve a bit better address re-use.
> >>>       
> >> Agreed.
> >>
> >> Rémi Després suggested HTTP, HTTPS, DNS, POP3, IMAP, SNMP.
> >>
> >> I suggest that this list be interpreted as guidance for 
> >> operators, as in e.g.
> >> "these protocols fine with adddress and port-dependent 
> >> mappnig." Ultimately this
> >> is an operational issue and we can only provide guidance.
> >>
> >> However, address and port-dependent mapping is implemented 
> completely
> >> differently than what is described in the current draft. For 
> >> instance, there is
> >> no longer a need for separate binding and session tables. So 
> >> I would like to
> >> hear from authors what they think of this suggestion, and if 
> >> they'd like me to
> >> provide text.
> >>     
> >
> > This sort of optimization feels like an 
> informational/experimental-track
> > document and can be separate from 
> draft-ietf-behave-v6v4-xlate-stateful.
> >   
> 
> Yes, this seems to be common to any CGN,  nat64 and nat44.
> I understand that this is related to having bigger nat boxes and i 
> understand there is ongoing work to identify what of the behave 
> requirements can be lifted in the case of CGNs.
> 
> So, this has been discussed several tiems already and the 
> proposed way 
> forward was:
> - define nat64 as complying with the behave requirements
> - define another doc where the behave requirements are 
> contrasted witht 
> eh reality of CGNs and identify which requirements can be lifted.
> 
> makes sense?

Yes, makes sense.

It also allows us to keep stateful NAT64 on its current schedule
to be sent to IESG this month.

-d


> Regards, marcelo
> 
> 
> > -d
> >
> >
> >   
> >> Simon
> >> -- 
> >> DNS64 open-source   --> http://ecdysis.viagenie.ca
> >> STUN/TURN server    --> http://numb.viagenie.ca
> >> vCard 4.0           --> http://www.vcarddav.org
> >> _______________________________________________
> >> Behave mailing list
> >> Behave@ietf.org
> >> https://www.ietf.org/mailman/listinfo/behave
> >>     
> >
> > _______________________________________________
> > Behave mailing list
> > Behave@ietf.org
> > https://www.ietf.org/mailman/listinfo/behave
> >
> >   
>