Re: [lisp] We need LISP over HTTP!

On 30 Sep 2015, at 19:18, Dino Farinacci <farinacci@gmail.com> wrote:

> How about doing it via the DNS port on UDP?
> 

That’s one solution but for example at my office location, they filter DNS traffic (we must use our DNS).

Just using another port is not a big deal if we use LCAF to have ip:port instead of just ip :)

And even if we are over the same port if the traffic is not UDP it might be filtered. With HTTPs it is fine, the payload of the HTTP is the packet and the LISP header is HTTP header :) or just put the packets as-is in the payload.

Damien Saucez 

> Dino
> 
>> On Sep 30, 2015, at 10:02 AM, Damien Saucez <damien.saucez@gmail.com> wrote:
>> 
>> 
>> On 30 Sep 2015, at 18:54, Richard Li <renwei.li@huawei.com> wrote:
>> 
>>> It might solve your NAT problem, but I am afraid it is not a good idea to have something like LISP carried by TCP since you have to hold up the connection and transporting states between xTRs for each flow or each packet, which will bring you a huge scale problem. You could do experiments with it, but it is unlikely to get accepted in production networks.
>>> 
>> 
>> I agree, the point is just to have an escape mode in case of filtering. I was more thinking of an evolution of NAT-traversal so just between the node and the RTR, and only if it is strictly necessary. Obviously, it is not necessary to integrate it in LISP and we can fix it making VPNs but then you have a VPN to escape and the RTR so you jump from your place to the VPN endpoint then only RTR, which is not very efficient.
>> 
>>> Can you re-try it by re-configuring your NAT?
>>> 
>> 
>> No. In practice you don’t control the CGN or the ACLs of the network you roam in when you are in LISP-MN.
>> 
>> Damien Saucez 
>> 
>>> 
>>> Renwei
>>> 
>>> 
>>> -----Original Message-----
>>> From: lisp [mailto:lisp-bounces@ietf.org] On Behalf Of Damien Saucez
>>> Sent: Wednesday, September 30, 2015 6:48 AM
>>> To: LISP mailing list list
>>> Subject: [lisp] We need LISP over HTTP!
>>> 
>>> Dear all,
>>> 
>>> Today again I was in the situation where I was not able to run my LISP setup in the place I visited.
>>> All was supposed to work well using the NAT traversal. But reality was different: UDP traffic was filtered in the place.
>>> 
>>> So my question to the working group: who would be ready to start working on a technique to cary LISP over TCP and, even more horrible, over HTTP?
>>> 
>>> Thanks,
>>> 
>>> Damien Saucez
>>> _______________________________________________
>>> lisp mailing list
>>> lisp@ietf.org
>>> https://www.ietf.org/mailman/listinfo/lisp
>> 
>> _______________________________________________
>> lisp mailing list
>> lisp@ietf.org
>> https://www.ietf.org/mailman/listinfo/lisp
> 