Re: NATs *ARE* evil!

Keith Moore <moore@cs.utk.edu> Fri, 22 December 2000 20:10 UTC

Received: by ietf.org (8.9.1a/8.9.1a) id PAA12661 for ietf-outbound.10@ietf.org; Fri, 22 Dec 2000 15:10:03 -0500 (EST)
Received: from astro.cs.utk.edu (astro.cs.utk.edu [128.169.93.168]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA12275 for <ietf@ietf.org>; Fri, 22 Dec 2000 14:55:51 -0500 (EST)
Received: from astro.cs.utk.edu (astro.cs.utk.edu [128.169.93.168]) by astro.cs.utk.edu (cf 8.9.3) with ESMTP id OAA13772; Fri, 22 Dec 2000 14:55:42 -0500 (EST)
Message-Id: <200012221955.OAA13772@astro.cs.utk.edu>
X-URI: http://www.cs.utk.edu/~moore/
From: Keith Moore <moore@cs.utk.edu>
To: V Guruprasad <prasad@watson.ibm.com>
cc: Keith Moore <moore@cs.utk.edu>, Sean Doran <smd@ebone.net>, fred@cisco.com, iab@ISI.EDU, ietf@ietf.org, tytso@MIT.EDU
Subject: Re: NATs *ARE* evil!
In-reply-to: Your message of "Fri, 22 Dec 2000 14:26:50 EST." <20001222142650.A24039@bubble.watson.ibm.com>
Date: Fri, 22 Dec 2000 14:54:27 -0500
Sender: moore@cs.utk.edu
X-Loop: ietf@ietf.org

> > IMHO what we need to change is the *implicit* association between
> > "host" related identifiers and "network topology" related identifiers -
> > so that coders treat them as separate entities, and provide a way
> > for the two to be different at the IP layer - while still allowing
> > the optimization to take place where it makes sense.  then you
> > only need to maintain the mapping for the case where the identifiers
> > are different.
> > 
> > I'm still waiting for folks to see this "overloading" as a design compromise
> 
> A fundamentally different approach that does achieve this separation
> is described in draft-guruprasad-addressless-internet-00.txt.

thank you, I think you've advertised this draft quite adequately for the 
time being. I'm quite willing to look at it, but there are numerous 
other drafts that are also on my list.

> > rather than a pure evil.  not overloading at all would be even more evil.
> 
> You don't have adequate grounds for the second statement unless you can
> formally establish that you have considered all *possible* alternative
> architectures. 

I was referring to the set of identifiers I mentioned in my earlier
message, all of which are IP addresses, or contain IP addresses,
in the current Internet architecture.  And no, I don't have to consider 
every possible alternative architecture to conclude that (a) most or all
of these identifiers are necessary, and (b) reserving space for each
one separately, and maintaining all of the mappings between them,
would be onerous.

Keith