Re: [Int-area] AD evaluation: draft-ietf-intarea-nat-reveal-analysis

<mohamed.boucadair@orange.com> Wed, 13 February 2013 16:43 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22CC121F8945 for <int-area@ietfa.amsl.com>; Wed, 13 Feb 2013 08:43:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.144
X-Spam-Level:
X-Spam-Status: No, score=-2.144 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7mne29LnW7vi for <int-area@ietfa.amsl.com>; Wed, 13 Feb 2013 08:43:53 -0800 (PST)
Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 05D8921F891D for <int-area@ietf.org>; Wed, 13 Feb 2013 08:43:53 -0800 (PST)
Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm10.si.francetelecom.fr (ESMTP service) with ESMTP id 262CC264BA2; Wed, 13 Feb 2013 17:43:52 +0100 (CET)
Received: from PUEXCH21.nanterre.francetelecom.fr (unknown [10.101.44.28]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id 036C74C024; Wed, 13 Feb 2013 17:43:52 +0100 (CET)
Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.101.44.8]) by PUEXCH21.nanterre.francetelecom.fr ([10.101.44.28]) with mapi; Wed, 13 Feb 2013 17:43:51 +0100
From: mohamed.boucadair@orange.com
To: "sarikaya@ieee.org" <sarikaya@ieee.org>, Suresh Krishnan <suresh.krishnan@ericsson.com>
Date: Wed, 13 Feb 2013 17:43:50 +0100
Thread-Topic: [Int-area] AD evaluation: draft-ietf-intarea-nat-reveal-analysis
Thread-Index: Ac4KCD9wQ3AKoTanR+WAzZ8W+ckaXAAADapg
Message-ID: <94C682931C08B048B7A8645303FDC9F36EAFB56426@PUEXCB1B.nanterre.francetelecom.fr>
References: <51195E93.4090103@innovationslab.net> <51198814.1060809@ericsson.com> <CAC8QAcc_r3U5GqTp=yBp4K0JOvSh2i2fWxVm=5rQHc-gqxcwCw@mail.gmail.com> <511B393A.7080709@ericsson.com> <CAC8QAceQo5-8p7aBR=AuNKZeCaensP880qAbAmS86HO6eK8b5g@mail.gmail.com>
In-Reply-To: <CAC8QAceQo5-8p7aBR=AuNKZeCaensP880qAbAmS86HO6eK8b5g@mail.gmail.com>
Accept-Language: fr-FR
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: fr-FR
Content-Type: multipart/alternative; boundary="_000_94C682931C08B048B7A8645303FDC9F36EAFB56426PUEXCB1Bnante_"
MIME-Version: 1.0
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.10.24.110314
Cc: "int-area@ietf.org" <int-area@ietf.org>, "draft-ietf-intarea-nat-reveal-analysis@tools.ietf.org" <draft-ietf-intarea-nat-reveal-analysis@tools.ietf.org>
Subject: Re: [Int-area] AD evaluation: draft-ietf-intarea-nat-reveal-analysis
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/int-area>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Feb 2013 16:43:54 -0000

Hi Behcet,

I have two comments:

* Host identification issue is valid for any address sharing mechanism. This is why the introduction mentions already the following:

   As reported in [RFC6269<https://tools.ietf.org/html/rfc6269>], several issues are encountered when an IP
   address is shared among several subscribers.  These issues are
   encountered in various deployment contexts: e.g., Carrier Grade NAT
   (CGN), application proxies or A+P [RFC6346<https://tools.ietf.org/html/rfc6346>].

* RFC6346 is provided as an example of a solution making use of port sets. You are right, other solutions (than a+p) can be considered but having one pointer to a solution example is just fair. No need to be exhaustive here.

Cheers,
Med
________________________________
De : Behcet Sarikaya [mailto:sarikaya2012@gmail.com]
Envoyé : mercredi 13 février 2013 17:36
À : Suresh Krishnan
Cc : Brian Haberman; draft-ietf-intarea-nat-reveal-analysis@tools.ietf.org; int-area@ietf.org
Objet : Re: [Int-area] AD evaluation: draft-ietf-intarea-nat-reveal-analysis

Hi Suresh,

On Wed, Feb 13, 2013 at 12:56 AM, Suresh Krishnan <suresh.krishnan@ericsson.com<mailto:suresh.krishnan@ericsson.com>> wrote:
Hi Behcet,

On 02/12/2013 05:57 PM, Behcet Sarikaya wrote:
> Hi Suresh,
>
> On Mon, Feb 11, 2013 at 6:08 PM, Suresh Krishnan
> <suresh.krishnan@ericsson.com<mailto:suresh.krishnan@ericsson.com> <mailto:suresh.krishnan@ericsson.com<mailto:suresh.krishnan@ericsson.com>>> wrote:
>
>     Hi Brian,
>       Thanks for the review. I wanted to clarify three points that you
>     raised and I will ask the authors take care of the rest.
>
>     On 02/11/2013 04:11 PM, Brian Haberman wrote:
>     > 7. In Section 4.1.2, it would be good to describe any issues that the
>     > approach has with the original use of the Identification field for
>     > fragmentation reassembly.  If a middlebox changes the ID field, weird
>     > things can/will happen if those packets are fragmented somewhere.
>
>     Agree. I think this is precisely the reason that the mechanism for
>     putting the HOST_ID in the IP-ID is a non-starter.
>
>     > 11. Is Section 4.6 theoretical or is there a specific reference
>     that can
>     > be added for this technique?
>
>     There are several mechanisms that use port sets for IPv4 address
>     sharing. A+P (RFC6346) is one such mechanism.
>
> Section 4.6 is not about about A+P. In A+P there is also the use of a
> shared public IPv4 address.

Right. But section 4.6 is about assigning port sets and Brian asked if
that was any specific mechanisms that assigned port sets. A+P does so.
Not sure about what you mean by "In A+P there is also the use of a
shared public IPv4 address". This is the reason why we need a HOST_ID at
all.


I think that this draft is not about A+P (don't ask me why, ask Med :-) ).
The correct reference for Section 4.6 would be BBF document WT-146 on Subscriber Sessions


Regards,

Behcet
Thanks
Suresh