RE: [Hipsec] Rechartering items?

"Henderson, Thomas R" <thomas.r.henderson@boeing.com> Fri, 04 November 2005 06:09 UTC

Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EXulG-0007Tt-Ix; Fri, 04 Nov 2005 01:09:14 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EXul8-0007Ti-Kd for hipsec@megatron.ietf.org; Fri, 04 Nov 2005 01:09:12 -0500
Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA24979 for <hipsec@ietf.org>; Fri, 4 Nov 2005 01:08:44 -0500 (EST)
Received: from slb-smtpout-01.boeing.com ([130.76.64.48]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EXv02-0002GY-Ud for hipsec@ietf.org; Fri, 04 Nov 2005 01:24:33 -0500
Received: from stl-av-01.boeing.com ([192.76.190.6]) by slb-smtpout-01.boeing.com (8.9.2.MG.10092003/8.8.5-M2) with ESMTP id WAA14471; Thu, 3 Nov 2005 22:08:39 -0800 (PST)
Received: from XCH-NWBH-11.nw.nos.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.11.3/8.11.3/MBS-AV-LDAP-01) with ESMTP id jA468cY06950; Fri, 4 Nov 2005 00:08:38 -0600 (CST)
Received: from XCH-NW-5V1.nw.nos.boeing.com ([130.247.55.44]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 3 Nov 2005 22:08:37 -0800
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [Hipsec] Rechartering items?
Date: Thu, 03 Nov 2005 22:08:36 -0800
Message-ID: <77F357662F8BFA4CA7074B0410171B6DC9E5F9@XCH-NW-5V1.nw.nos.boeing.com>
Thread-Topic: [Hipsec] Rechartering items?
Thread-Index: AcXfx8sttiwSzQAsRjOo/zmqA2V3ugAxY+xw
From: "Henderson, Thomas R" <thomas.r.henderson@boeing.com>
To: Pekka Nikander <pekka.nikander@nomadiclab.com>
X-OriginalArrivalTime: 04 Nov 2005 06:08:37.0390 (UTC) FILETIME=[31F1A2E0:01C5E106]
X-Spam-Score: 0.0 (/)
X-Scan-Signature: d0bdc596f8dd1c226c458f0b4df27a88
Content-Transfer-Encoding: quoted-printable
Cc: HIP <hipsec@ietf.org>, David Ward <dward@bgp.nu>
X-BeenThere: hipsec@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/hipsec>
List-Post: <mailto:hipsec@lists.ietf.org>
List-Help: <mailto:hipsec-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=subscribe>
Sender: hipsec-bounces@lists.ietf.org
Errors-To: hipsec-bounces@lists.ietf.org

 

> -----Original Message-----
> From: Pekka Nikander [mailto:pekka.nikander@nomadiclab.com] 
> Sent: Wednesday, November 02, 2005 2:34 AM
> To: Henderson, Thomas R
> Cc: HIP; David Ward
> Subject: Re: [Hipsec] Rechartering items?
> 
> Tom,
> 
> > The RG is also considering solutions involving HIP-aware 
> firewalls and 
> > NATs, but IMO that type of work (as well as native HIP API) is not 
> > ready for a WG.
> 
> I agree.
> 
> >>   - invisible HIP, or using HIP with IP addresses as LSIs, 
> similar to 
> >> SHIM6 ULIDs
> >>
> > A draft that discusses this topic is at: http://www.ietf.org/ 
> > internet-drafts/draft-henderson-hip-applications-01.txt
> >
> > It has not generated any mailing list or meeting discussion.  I was 
> > thinking of submitting it to RFC Editor as an individual 
> submission.  
> > This topic is not one that necessarily involves 
> interoperability, so I 
> > would like to understand better what is left to do (as a 
> possible WG 
> > item) beyond the present draft.
> 
> There are severe interoperability issues with upper layer 
> protocols.   
> Depending on what you use at the API as LSI, those upper 
> layer protocols that send LSIs in their datagrams to third 
> hosts will either fail or work.  One could consider this also 
> as an architectural issues, as it circles around the 
> semantics of LSIs/ ULIDs, specifically whether they are 
> routable or not.
> 

I was referring to HIP interoperability, but you are correct that more
general interoperability conditions are a problem.  I agree that there
are upper-layer interoperability issues with RFC 1958-non-compliant
applications if an HIP implementation decides to implement LSIs that
spoof IP addresses to those apps.

> The existing draft is pretty good in outlining the issues, 
> and fine as long as we want to use HIP only as experimental.  
> However, if we would like to advance HIP to standards track, 
> then we need to have
> *one* RECOMMENDED way for LSIs...  The other way would remain 
> experimental, between consenting hosts, IMHO.
> 

I would like to reserve judgement on whether only one way is needed
until we get some more experience.  

> At the protocol level there may be desire to negotiate this.  
> I.e. an extension that defines in I2 which LSI format is used 
> by the peer....  That could be informational, as any 
> two-hosts protocols can function even if the communicating 
> hosts use different LSI formats.
> 

I don't see how this would work since it is too late to be deciding on
LSI once I2 is happening.

Tom

_______________________________________________
Hipsec mailing list
Hipsec@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/hipsec