RE: NAT64 in RA, draft-ietf-6man-ra-pref64

"Mudric, Dusan (Dusan)" <dmudric@avaya.com> Fri, 05 July 2019 19:16 UTC

Return-Path: <dmudric@avaya.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A102120118; Fri, 5 Jul 2019 12:16:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=avaya365.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uELQbGY7dPBd; Fri, 5 Jul 2019 12:16:14 -0700 (PDT)
Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AE2F120119; Fri, 5 Jul 2019 12:16:13 -0700 (PDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2EkAAANoR9d/wUHmMZmHAEBAQQBAQcEAQGBVAYBAQsBgUNQbXUEMwqEEoNHA45JgluJTY8nFIEQAxgXJQkBAQENASMKAgEBAoQ+AheCGCM1CA4BAwEBAQQBAQEBBAECAmmKNwyCeE0vCgIvAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQUCDQIpHgEBGAEBAQEDEhERDAEBLAsBCwQCAQgNAQMEAQEBAgImAgICHxEVCAgCBA4FCBqDAYFqAx0BAgIKmjcCgQgwiF8BAXCBMhoCgjMqAQEFdYQfDQuCEgkJAYECKAGIQYMdF4FBPoEQAUaCTD6CGkcEGIELJhgkgmQygiaMGYJRmx9ACQKCF4ZWiTqEDoIsbIYyg3kDijKUb4FzjgkCAgICBAUCDgEBBYFRATeBWHAVO4JsCYI4g3GEWYV6coEpjEoBgSABAQ
X-IPAS-Result: A2EkAAANoR9d/wUHmMZmHAEBAQQBAQcEAQGBVAYBAQsBgUNQbXUEMwqEEoNHA45JgluJTY8nFIEQAxgXJQkBAQENASMKAgEBAoQ+AheCGCM1CA4BAwEBAQQBAQEBBAECAmmKNwyCeE0vCgIvAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQUCDQIpHgEBGAEBAQEDEhERDAEBLAsBCwQCAQgNAQMEAQEBAgImAgICHxEVCAgCBA4FCBqDAYFqAx0BAgIKmjcCgQgwiF8BAXCBMhoCgjMqAQEFdYQfDQuCEgkJAYECKAGIQYMdF4FBPoEQAUaCTD6CGkcEGIELJhgkgmQygiaMGYJRmx9ACQKCF4ZWiTqEDoIsbIYyg3kDijKUb4FzjgkCAgICBAUCDgEBBYFRATeBWHAVO4JsCYI4g3GEWYV6coEpjEoBgSABAQ
X-IronPort-AV: E=Sophos;i="5.63,456,1557201600"; d="scan'208";a="289129879"
Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by de307622-de-outbound.net.avaya.com with ESMTP; 05 Jul 2019 15:16:10 -0400
X-OutboundMail_SMTP: 1
Received: from unknown (HELO AZ-US1EXHC04.global.avaya.com) ([135.11.85.15]) by co300216-co-erhwest-out.avaya.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Jul 2019 15:16:10 -0400
Received: from PW365VMAP02.avaya.com (135.8.98.110) by AZ-US1EXHC04.global.avaya.com (135.11.85.15) with Microsoft SMTP Server (TLS) id 14.3.439.0; Fri, 5 Jul 2019 15:16:08 -0400
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (104.47.33.56) by PW365VMAP02.avaya.com (135.8.98.110) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1531.3; Fri, 5 Jul 2019 14:16:08 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Avaya365.onmicrosoft.com; s=selector1-Avaya365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WvwCv4rWvZGgbyTBrikDiVVuuPinG+8sU2BQJ0BEhN0=; b=nxSTt1KH6T/H5ilrD0faD/mSs83lDOMTI/ol/sD1TZhBdOkhf5P4dsLEx0tB7bsSl3AVoDVJOU+rys8V95ov+hPgSfhhpwYC4Rs0+Vwo4BxU1xn7mitw17uaV9e65r5zt/xEPUo0IQDLJBIPSJg82eJ3PhLJ/GThXwRuaCppggQ=
Received: from DM6PR15MB2506.namprd15.prod.outlook.com (20.176.71.32) by DM6PR15MB3259.namprd15.prod.outlook.com (20.179.50.78) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2032.20; Fri, 5 Jul 2019 19:16:07 +0000
Received: from DM6PR15MB2506.namprd15.prod.outlook.com ([fe80::e0dd:fb47:323c:d5ac]) by DM6PR15MB2506.namprd15.prod.outlook.com ([fe80::e0dd:fb47:323c:d5ac%7]) with mapi id 15.20.2052.019; Fri, 5 Jul 2019 19:16:07 +0000
From: "Mudric, Dusan (Dusan)" <dmudric@avaya.com>
To: Jen Linkova <furry13@gmail.com>
CC: Fred Baker <fredbaker.ietf@gmail.com>, IPv6 Operations <v6ops@ietf.org>, 6man <6man@ietf.org>
Subject: RE: NAT64 in RA, draft-ietf-6man-ra-pref64
Thread-Topic: NAT64 in RA, draft-ietf-6man-ra-pref64
Thread-Index: AQHVMthYQTP2spnzX0G8BrvKPAtN5qa8YmwQ
Date: Fri, 05 Jul 2019 19:16:06 +0000
Message-ID: <DM6PR15MB2506ABCBD8457003114E60EBBBF50@DM6PR15MB2506.namprd15.prod.outlook.com>
References: <DM6PR15MB2506C03D1D88F2785B5016C1BBFB0@DM6PR15MB2506.namprd15.prod.outlook.com> <675D1F10-02FF-4AB4-88E3-5A0D95A34ABF@gmail.com> <DM6PR15MB250640D3141DCB2C64789B95BBFA0@DM6PR15MB2506.namprd15.prod.outlook.com> <CAFU7BAROif-44uFy1+oiutsQLiFOa09jM1Ve_8qaqpr1TPLGyQ@mail.gmail.com>
In-Reply-To: <CAFU7BAROif-44uFy1+oiutsQLiFOa09jM1Ve_8qaqpr1TPLGyQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dmudric@avaya.com;
x-originating-ip: [104.129.196.166]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a2b57e3d-0445-4291-9962-08d7017d3b28
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:DM6PR15MB3259;
x-ms-traffictypediagnostic: DM6PR15MB3259:
x-ms-exchange-purlcount: 1
x-microsoft-antispam-prvs: <DM6PR15MB3259A62823A6FC2491BFCC56BBF50@DM6PR15MB3259.namprd15.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:289;
x-forefront-prvs: 008960E8EC
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(136003)(346002)(366004)(39860400002)(396003)(13464003)(199004)(189003)(476003)(6246003)(446003)(54906003)(19627235002)(316002)(11346002)(66476007)(52536014)(66446008)(66946007)(73956011)(66556008)(64756008)(2906002)(256004)(86362001)(5660300002)(33656002)(478600001)(3846002)(6116002)(486006)(305945005)(7736002)(66066001)(4326008)(76116006)(71190400001)(966005)(71200400001)(99286004)(6436002)(74316002)(1411001)(6916009)(229853002)(68736007)(14454004)(26005)(53936002)(55236004)(9686003)(8936002)(7696005)(8676002)(6506007)(55016002)(25786009)(81156014)(76176011)(53546011)(102836004)(6306002)(81166006)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR15MB3259; H:DM6PR15MB2506.namprd15.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: avaya.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: mXu+Vtn4a5YRPeqyGSDiLx+4+te4RbX7ht/WVLyqr4Qyu2mnLYJx9TRvzK6mxu4D/90oRB7IlEX/Zus2Zj5oh7WYVBRcgdjuutkx0vBmPy9Xk9a/9r4ZYdUiPtMb+ZjA0HMd9m9yG4u8w+vNvXkR81fOeU1XCOZIhlNf3ZevK40Buwg+XoRJNCsopyOoJf3EZLLrw1Zu3XwDtqJl5PQseWCZtMf4xHLDntuSX9jyqPZFY433PcxX3uAZpJWgqLfYDP9A1UIArbjNigiBLj/usqflV69QAEzf0Bf/V0w0lif54fHGUFeK3jsLHL14OISchH/HwE5+HZq5KnK2PNfNECai1exMBwjkQQaCjg1h9jte0d4AwcTSOKmgEfi/jgidEPMORZhACk/6X6AHKr1IXPL9xy697S0DmRX+6z2uJ2E=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: a2b57e3d-0445-4291-9962-08d7017d3b28
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jul 2019 19:16:06.9551 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 04a2636c-326d-48ff-93f8-709875bd3aa9
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: dmudric@avaya.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR15MB3259
X-OriginatorOrg: avaya.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/XdJWT5lQmLGYU6n5D3MYzSBYJGg>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jul 2019 19:16:19 -0000

Hi Jen,

If IPv4only - to - IPv6only client initiated communication needs SIIT-DC (rfc7755), and IPv6only - to - IPv4Only client initiated communication needs Stateful NAT64 (rfc6146), can the two protocols be combined in two device (DNS and  translator) and used at the same time for bidirectional communication? Is it called NAT64-NAT46 or something similar?

- How can DNS64 tell IPv6 only client the IP of IPv4 only client, and vice versa? Is DNS64 server returning IPv4ony client address to IPv6only client, using the A RR? 
- How can IPv4only client get the address of IPv6only client (or, it is impossible for IPv4only client to get IPv6 address of IPv6only client)? 
- Do these IPv4 and IPv6 client addresses need to be pre-configured on the translator and/or DNS64?

Thanks,
Dusan.

> -----Original Message-----
> From: Jen Linkova <furry13@gmail.com>
> Sent: Thursday, July 4, 2019 10:21 PM
> To: Mudric, Dusan (Dusan) <dmudric@avaya.com>
> Cc: Fred Baker <fredbaker.ietf@gmail.com>; IPv6 Operations
> <v6ops@ietf.org>; 6man <6man@ietf.org>
> Subject: Re: NAT64 in RA, draft-ietf-6man-ra-pref64
> 
> Hi Dusan,
> 
> On Fri, Jul 5, 2019 at 6:19 AM Mudric, Dusan (Dusan) <dmudric@avaya.com>
> wrote:
> > What is the best reference document for a Translator that facilitates:
> >
> > - IPv4only - to - IPv6only, and
> 
> https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__tools.ietf.org_html_rfc7755&d=DwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q
> &r=UT3Bk9cbLeaJxhf3iCrhIoUWB8YLZU23029sMQGQ2kY&m=rXn-
> qcfSIhjB1FVZq9fT0HWKIE4FsVW55Pw4ufcd4Qc&s=6jgy81ePeiWaBFML3XwP
> C3wDxGkyDrvzWG0Jg9Oog_w&e=
> 
> > - IPv6only - to - IPv4Only
> 
> https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__tools.ietf.org_html_rfc6146&d=DwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q
> &r=UT3Bk9cbLeaJxhf3iCrhIoUWB8YLZU23029sMQGQ2kY&m=rXn-
> qcfSIhjB1FVZq9fT0HWKIE4FsVW55Pw4ufcd4Qc&s=SobSFuvzPm9XQ3bWhSEL
> bnhk4KtAaYJ7yB5QWf70A6A&e=
> 
> > clients message exchanges?
> >
> > Is this communication bidirectional or works only from IPv6only-to-IPv4only
> client (meaning IPv6only client has to initiate the communication)?
> >
> > How can Translator or DNS64 tell IPv6 only client the IP of IPv4 only client,
> and vice versa?
> 
> In a nutshell:
> 
> IPv6-only client asks DNS64 server for AAAA for, let's say,
> ipv4only.example.net As that server is IPv4-onl, does not have AAAA RR, the
> DNS64 server synthesise a new AAAA using an IPv6 prefix (usually /96 - the
> Well-Known Prefix is 64:ff9b::/96) and IPv4 address from the A RR. The
> algorithm described in rfc6147
> 
> So if ipv4only.example.net has an IPv4 address 192.0.2.2, then DNS64 will
> return 64:ff9b::192.0.2.2 as AAAA RR.
> The ipv6-only client would initiate a connection to that address . As
> NAT64 prefix is supposed to be routed to the NAT64 device, that device
> would translate IPv6 packet to IPv4 packet using the algorithm described in
> https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__tools.ietf.org_html_rfc6052&d=DwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q
> &r=UT3Bk9cbLeaJxhf3iCrhIoUWB8YLZU23029sMQGQ2kY&m=rXn-
> qcfSIhjB1FVZq9fT0HWKIE4FsVW55Pw4ufcd4Qc&s=XTCYMjY3HOKEx535PU_I
> Ora8JAiRD_Uayt1SwrJnWv8&e=.
> 
> 
> > > -----Original Message-----
> > > From: Fred Baker <fredbaker.ietf@gmail.com>
> > > Sent: Wednesday, July 3, 2019 3:32 PM
> > > To: Mudric, Dusan (Dusan) <dmudric@avaya.com>
> > > Cc: 6man <6man@ietf.org>; IPv6 Operations <v6ops@ietf.org>
> > > Subject: Re: NAT64 in RA, draft-ietf-6man-ra-pref64
> > >
> > >
> > >
> > > > On Jul 3, 2019, at 12:01 PM, Mudric, Dusan (Dusan)
> > > > <dmudric@avaya.com>
> > > wrote:
> > > >
> > > > [Dusan] Please clarify how IPv4-only host can reach IPv6 only
> > > > host, and vice
> > > versa. Also, how IPv6 only host can know IPv4 address of IPv4 only
> > > host, assuming IPv4 only host is in a public domain?
> > >
> > > Simple. Using a Translator, either at layer 3 or above it. Any other
> > > way doesn't work.
> > > --------------------------------------------------------------------
> > > ------------ The fact that there is a highway to hell and a stairway
> > > to heaven is an interesting comment on projected traffic volume...
> >
> > --------------------------------------------------------------------
> > IETF IPv6 working group mailing list
> > ipv6@ietf.org
> > Administrative Requests:
> > https://urldefense.proofpoint.com/v2/url?u=https-
> 3A__www.ietf.org_mail
> >
> man_listinfo_ipv6&d=DwIBaQ&c=BFpWQw8bsuKpl1SgiZH64Q&r=UT3Bk9cbL
> eaJxhf3
> > iCrhIoUWB8YLZU23029sMQGQ2kY&m=rXn-
> qcfSIhjB1FVZq9fT0HWKIE4FsVW55Pw4ufcd
> > 4Qc&s=GHcNdEhtOVJ_cLvOIIb6oNNDJIgpb8m_oqHiePqYicg&e=
> > --------------------------------------------------------------------
> 
> 
> 
> --
> SY, Jen Linkova aka Furry