Re: [Ila] [5gangip] PS draft: New Version Notification for draft-hspab-5gangip-atticps-00.txt

[Dino Farinacci <[e-mail]>]

What if you and I are running ILA and are attached to different providers. How do you get packets to me if my locators are not exposed outside my provider?

Dino

> On Jan 31, 2018, at 4:08 PM, Tom Herbert <[e-mail]> wrote:
> 
> On Wed, Jan 31, 2018 at 3:25 PM, Dino Farinacci <[e-mail]> wrote:
>>> That should only be true if you are my network provider. To anyone
>>> else the only thing they should be able to deduce from an address is
>>> that the packet originated from a random user of my network provider.
>> 
>> I can tcpdump packets on my router for packets you send before the locator is translated back to the sir-prefix. And count on the locator being in DNS for a reverse lookup so I can get some ascii text that gives me a clue.
> 
> Again, that is only true if your router is in the provider network  If
> locators imply geo-location, which they likely would in a mobile
> network, then exposing them to anyone outside of the trusted network
> is asking for trouble.
>> 
>>> 
>>>> You have to change and obfuscate EIDs and you have to keep using different RLOCs. Cat and mouse game.
>>>> 
>>> For best privacy you would keep using different source addresses
>>> (identifiers) for different flows, Locators are not an issue if their
>>> visibility is restricted to the provider network, so that neither UEs
>>> nor external nodes ever see them .
>> 
>> Don’t you want your provider to not track you?
> 
> It's inherent in the operations  that my provider tracks me in order
> to be able to forward packets. But, I have a contractual agreement
> with the provider to do that and protect privacy. For anyone outside
> of my provider, I don't want them to be able to track me. This is why
> I don't want locators to be visible outside of the network. That would
> include UEs attached to the network (they are not trusted devices) and
> putting locators in DNS.
> 
> Tom
> 
> 
> 
>> 
>> Dino
>>