Re: Address privacy (was: Re: RFC4941bis: consequences of many addresses for the network)

[Michael Richardson <[e-mail]>]

Ted Lemon <[e-mail]> wrote:
    > Another solution that could be useful is to do connections through an
    > anonymity concentrator that tunnels your flow to the selected server.
    > The idea here is that your ISP (but it doesn’t have to be your ISP!)
    > has a bunch of anonymity boxes sitting in their data centers, and when
    > you want to connect to foo.com <http://foo.com/>, you establish a
    > connection to the anonymity server.   The anonymity server constructs a
    > new 5-tuple using its own fixed IP address.   This is effectively a NAT
    > translation, and of course it can maintain a set of IP addresses large

Except that instead of doing it at layer 4, you do it with IPsec, and extrude
that /128 to your machine.  This is already a thing :-)

    > Another solution I’ve considered is to have a giant anonymity mesh,
    > with every ISP’s user participating, and forward flows through this
    > mesh, treating each customer as an anonymity server.   I think this is

This is also a thing called Tor.

--
Michael Richardson <[e-mail]>, Sandelman Software Works
 -= IPv6 IoT consulting =-