Re: Is NAT66 a help in migration to IPv6?

[Jen Linkova <[e-mail]>]

On Tue, Dec 1, 2020 at 1:49 AM Vasilenko Eduard
<[e-mail]> wrote:
>Just in my opinion: complexity of MHMP on PA addresses (see RFC 7157 and RFC 8028) overweights the complexity of NAT that exist only for some applications.
>Looking to it – “other people” (responsible for networking) would block IPv6 progress in enterprises. Especially if they would read above mentioned RFCs

I do not see how those things are more complex than STUN, for example.
They are not more complex, they are just new.
I suspect (might be wrong indeed) that there are not so many people
reading RFCs anyway. The majority of network engineers would read the
vendor documentation first.
Most of the complexity in the modern networks are very well hidden
from people operating those networks.
RFC8028 talks about hosts mostly, so very few changes are required
from the network.
It might be a shameless plug ;) but I did try to make rfc8475 as
simple as 'vrrp uplink tracking' which any enterprise engineer can
configure, I hope ;)
So it's all about *vendors* providing configuration knobs and
configuration guides.

> It should be not be a problem for big Enterprises that are ready to manage their own PI addresses.

Big enterprises - ones which could 'vote with money' are usually using
their PA address space as they are usually LIRs themselves.
PI addresses are more suitable for multihomed SMB.
So if an enterprise is large enough to vote with money, then they do
not need NAT66. AFAIR in Europe setting up an LIR would cost EUR2000
sign-up fee + EUR1400/year.
Definitely less than it would cost to deploy NAT.

> I am wondering: is it possible to migrate more Enterprises to PI addresses?

It would be an enterprise choice. The obvious drawbacks for using PIs
instead of using PAs from the uplinks (we are not comparing 'PI va
getting your own PA' as the latter is in most cases the best choice
anyway)
1) For the Internet at whole: inflating the global routing table and
increasing instability
2) For the enterprise itself:
   - Money. I've stopped following all those address allocations
policies development but AFAIR getting PI is not free, at least in
some regions. You either need to be an LIR (then you have your own PA
space) or pay an LIR to get PIs for you.
   - you need to run BGP. In some cases it's just not possible as the
uplink might not even support it.

-- 
SY, Jen Linkova aka Furry