RE: [midcom] Port preservation

"Yutaka Takeda" <takeday@pcrla.com> Thu, 29 April 2004 01:06 UTC

Received: from optimus.ietf.org (iesg.org [132.151.1.19]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA08520 for <midcom-archive@odin.ietf.org>; Wed, 28 Apr 2004 21:06:46 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BIzwt-00085w-8R for midcom-archive@odin.ietf.org; Wed, 28 Apr 2004 21:02:51 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id i3T12ltE031103 for midcom-archive@odin.ietf.org; Wed, 28 Apr 2004 21:02:47 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BIzpP-0006Tl-CG; Wed, 28 Apr 2004 20:55:03 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 1BIzcP-0004So-5M for midcom@optimus.ietf.org; Wed, 28 Apr 2004 20:41:37 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA07673 for <midcom@ietf.org>; Wed, 28 Apr 2004 20:41:35 -0400 (EDT)
Received: from ietf-mx.ietf.org ([132.151.6.1] helo=ietf-mx) by ietf-mx with esmtp (Exim 4.32) id 1BIzcL-0002yi-HE for midcom@ietf.org; Wed, 28 Apr 2004 20:41:33 -0400
Received: from exim by ietf-mx with spam-scanned (Exim 4.12) id 1BIzbM-0002sa-00 for midcom@ietf.org; Wed, 28 Apr 2004 20:40:33 -0400
Received: from 67.105.118.114.ptr.us.xo.net ([67.105.118.114] helo=mail.kmerl.com) by ietf-mx with esmtp (Exim 4.12) id 1BIzaO-0002jM-00 for midcom@ietf.org; Wed, 28 Apr 2004 20:39:32 -0400
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [midcom] Port preservation
x-mimeole: Produced By Microsoft Exchange V6.0.6249.0
Date: Wed, 28 Apr 2004 17:39:00 -0700
Message-ID: <B002AA5B97382E40935F83502A566F20010CC2@mail.kmerl.com>
Thread-Topic: [midcom] Port preservation
Thread-Index: AcQrvwiDW/KQ05mdSoyi86NZv+0RigBuhJDQ
From: Yutaka Takeda <takeday@pcrla.com>
To: Cullen Jennings <fluffy@cisco.com>, Midcom <midcom@ietf.org>, stun@www.vovida.org, Pyda Srisuresh <srisuresh@yahoo.com>
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ietf-mx.ietf.org
X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.60
Content-Transfer-Encoding: quoted-printable
Sender: midcom-admin@ietf.org
Errors-To: midcom-admin@ietf.org
X-BeenThere: midcom@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/midcom>, <mailto:midcom-request@ietf.org?subject=unsubscribe>
List-Id: <midcom.ietf.org>
List-Post: <mailto:midcom@ietf.org>
List-Help: <mailto:midcom-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/midcom>, <mailto:midcom-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: quoted-printable

Thanks everyone for the comments.

After reading the comments and observing the actual NATs behavior,
and considering the amount of deployment of NATs that operates port 
preservation, my conclusion is that there is no solid and practical
situation where the port preservation (on dynamically created 
bindings, not the static port mapping) is 'desired' in the real network
environment.

IKE-v1 might get a benefit from the port preservation behavior (thanks
to Suresh for letting me know), however, since majority of NATs do 
not preserve the port number, I believe network admins do not depend 
on this behavior, or they do not even know about port preservation.

For NAT developers, they might feel like picking the same port
number for a new binding if available rather than generating a 
different one, might be considering retaining a 'service' associated
to the port number at best but not knowing how an application 
would use it. This seems to be convincing me why we have it today.

Thanks,
Yutaka


> -----Original Message-----
> From: Cullen Jennings [mailto:fluffy@cisco.com]
> Sent: Monday, April 26, 2004 1:41 PM
> To: Yutaka Takeda; Midcom; stun@www.vovida.org
> Subject: Re: [midcom] Port preservation
> 
> 
> 
> There may be many but the two reasons I have heard are below 
> - neither of
> which make much sense to me.
> 
> Makes debugging easier by not switching the port traffic is 
> on. This allows
> network sniffers and such guess the type of traffic from the port.
> (Personally I find this argument a little hard to buy given 
> it is the source
> port that is being preserved and using ports for traffic type 
> determination
> is usually based on the destination port)
> 
> Higher odds of interoperability for protocols. The argument 
> goes that A
> sends though a NAT to B. B may reply expecting to go to a certain port
> number so if that does not change life will be better. I 
> suspect that most
> applications that reply to the correct IP, are likely to also 
> reply to port
> the packet came from but who knows.
> 
> The most common answer I get to this questions and the one 
> that seems most
> believable ... "Because vendor X's NAT worked that way so we 
> made ours do
> the same"
> 
> I don't know - it is a good questions. Can others provide any 
> insight into
> this?
> 
> 
> 
> On 4/23/04 11:19 AM, "Yutaka Takeda" <takeday@pcrla.com> wrote:
> 
> > 
> > Does anyone know what the real motivation for NAT designers to
> > implement the port preservation[1] is? Is there an actual service
> > or application that depends on this behavior? I just realized that
> > I know such NATs exist but why...
> > 
> > [1] 
> > 
http://www.ietf.org/internet-drafts/draft-jennings-midcom-stun-results-00.txt
> 
> Yutaka
> 
> _______________________________________________
> midcom mailing list
> midcom@ietf.org
> https://www1.ietf.org/mailman/listinfo/midcom
> 


_______________________________________________
midcom mailing list
midcom@ietf.org
https://www1.ietf.org/mailman/listinfo/midcom