Re: [Hipsec] Rechartering items?

Pekka Nikander <pekka.nikander@nomadiclab.com> Wed, 02 November 2005 16:09 UTC

Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EXLBN-0003LD-41; Wed, 02 Nov 2005 11:09:49 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EXLBL-0003L2-HY for hipsec@megatron.ietf.org; Wed, 02 Nov 2005 11:09:47 -0500
Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA15506 for <hipsec@ietf.org>; Wed, 2 Nov 2005 11:09:26 -0500 (EST)
Received: from n2.nomadiclab.com ([193.234.219.2]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EXLPw-0000Be-TC for hipsec@ietf.org; Wed, 02 Nov 2005 11:24:54 -0500
Received: from [127.0.0.1] (localhost [127.0.0.1]) by n2.nomadiclab.com (Postfix) with ESMTP id CAB51212C55; Wed, 2 Nov 2005 18:09:21 +0200 (EET)
In-Reply-To: <77F357662F8BFA4CA7074B0410171B6DC9E5B7@XCH-NW-5V1.nw.nos.boeing.com>
References: <77F357662F8BFA4CA7074B0410171B6DC9E5B7@XCH-NW-5V1.nw.nos.boeing.com>
Mime-Version: 1.0 (Apple Message framework v746.2)
Content-Type: text/plain; charset="US-ASCII"; delsp="yes"; format="flowed"
Message-Id: <F28903F2-F301-4E30-9102-452963F05DAC@nomadiclab.com>
Content-Transfer-Encoding: 7bit
From: Pekka Nikander <pekka.nikander@nomadiclab.com>
Subject: Re: [Hipsec] Rechartering items?
Date: Wed, 02 Nov 2005 11:33:50 +0100
To: "Henderson, Thomas R" <thomas.r.henderson@boeing.com>
X-Mailer: Apple Mail (2.746.2)
X-Spam-Score: 0.7 (/)
X-Scan-Signature: 7baded97d9887f7a0c7e8a33c2e3ea1b
Content-Transfer-Encoding: 7bit
Cc: HIP <hipsec@ietf.org>, David Ward <dward@bgp.nu>
X-BeenThere: hipsec@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/hipsec>
List-Post: <mailto:hipsec@lists.ietf.org>
List-Help: <mailto:hipsec-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=subscribe>
Sender: hipsec-bounces@lists.ietf.org
Errors-To: hipsec-bounces@lists.ietf.org

Tom,

> The RG is also considering solutions involving HIP-aware firewalls  
> and NATs, but IMO that type of work (as well as native HIP API) is  
> not ready for a WG.

I agree.

>>   - invisible HIP, or using HIP with IP addresses as LSIs, similar  
>> to SHIM6 ULIDs
>>
> A draft that discusses this topic is at: http://www.ietf.org/ 
> internet-drafts/draft-henderson-hip-applications-01.txt
>
> It has not generated any mailing list or meeting discussion.  I was  
> thinking of submitting it to RFC Editor as an individual  
> submission.  This topic is not one that necessarily involves  
> interoperability, so I would like to understand better what is left  
> to do (as a possible WG item) beyond the present draft.

There are severe interoperability issues with upper layer protocols.   
Depending on what you use at the API as LSI, those upper layer  
protocols that send LSIs in their datagrams to third hosts will  
either fail or work.  One could consider this also as an  
architectural issues, as it circles around the semantics of LSIs/ 
ULIDs, specifically whether they are routable or not.

The existing draft is pretty good in outlining the issues, and fine  
as long as we want to use HIP only as experimental.  However, if we  
would like to advance HIP to standards track, then we need to have  
*one* RECOMMENDED way for LSIs...  The other way would remain  
experimental, between consenting hosts, IMHO.

At the protocol level there may be desire to negotiate this.  I.e. an  
extension that defines in I2 which LSI format is used by the  
peer....  That could be informational, as any two-hosts protocols can  
function even if the communicating hosts use different LSI formats.

--Pekka


_______________________________________________
Hipsec mailing list
Hipsec@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/hipsec