Re: [nat66] Comments on draft-mrw-nat66-12

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 16 March 2011 20:25 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: nat66@core3.amsl.com
Delivered-To: nat66@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E52D93A6919 for <nat66@core3.amsl.com>; Wed, 16 Mar 2011 13:25:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.952
X-Spam-Level:
X-Spam-Status: No, score=-102.952 tagged_above=-999 required=5 tests=[AWL=-0.353, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bYMlXzJGRXhu for <nat66@core3.amsl.com>; Wed, 16 Mar 2011 13:25:25 -0700 (PDT)
Received: from mail-vx0-f172.google.com (mail-vx0-f172.google.com [209.85.220.172]) by core3.amsl.com (Postfix) with ESMTP id CA4713A6909 for <nat66@ietf.org>; Wed, 16 Mar 2011 13:25:24 -0700 (PDT)
Received: by vxg33 with SMTP id 33so2378151vxg.31 for <nat66@ietf.org>; Wed, 16 Mar 2011 13:26:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=DdhhGzvRGp2wZwoTDyyXrTPOT1xAdOwTWKDck4ADIQI=; b=puAg96PiN3vec0KLO/cVT+yXgdd+tsUKCmaxEhueOU+zU/5Wtg1WJHM7e410iHdtFn rdPIsew6UxW4Z3juLXXha8kGU4C/mVhabsBFloxkoOSLzSH0sqJboehW4jqjkgx1Dek7 jmirZ0/cuomMuhJc/gIaFvozRCBhE6uDZgYyM=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; b=owT4NsUZnsZLINUysREBIhtA6NoK40/E7vJufDki/GQbEnotP33IsjJM4YWRC15o0D f0nux59sCDFKqydq4/dHldD+irOkYNU3Cj68c2RJDhhOT99nUzgd9lHzy58DyY+/WHBV UljegZ2/1L0zoYnfK3ppry3Vswd4kS4fwzFNo=
Received: by 10.52.173.74 with SMTP id bi10mr684454vdc.47.1300307210681; Wed, 16 Mar 2011 13:26:50 -0700 (PDT)
Received: from [130.216.38.124] (stf-brian.sfac.auckland.ac.nz [130.216.38.124]) by mx.google.com with ESMTPS id e10sm504109vch.19.2011.03.16.13.26.47 (version=SSLv3 cipher=OTHER); Wed, 16 Mar 2011 13:26:49 -0700 (PDT)
Message-ID: <4D811D05.4070307@gmail.com>
Date: Thu, 17 Mar 2011 09:26:45 +1300
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: "S.P.Zeidler" <spz@serpens.de>
References: <20110314063002.28048.29694.idtracker@localhost> <19F3A4CD-F39C-4F17-A6E9-7AA8AFBC6B3B@cisco.com> <CF8367A6-F303-43D7-99C6-D40D1DD5D5D9@free.fr> <125BC580-ED43-40EE-B6B9-FD88557C35B9@apple.com> <758DD037-9DC2-4A1E-BEAE-7E99CBED6D3A@cisco.com> <4D7FFEA7.9040304@gmail.com> <20110316070938.GE8465@serpens.de>
In-Reply-To: <20110316070938.GE8465@serpens.de>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: NPTv6 <nat66@ietf.org>
Subject: Re: [nat66] Comments on draft-mrw-nat66-12
X-BeenThere: nat66@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "List for discussion of IPv6-to-IPv6 NAT." <nat66.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/nat66>, <mailto:nat66-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/nat66>
List-Post: <mailto:nat66@ietf.org>
List-Help: <mailto:nat66-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nat66>, <mailto:nat66-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Mar 2011 20:25:26 -0000

On 2011-03-16 20:09, S.P.Zeidler wrote:
> Thus wrote Brian E Carpenter (brian.e.carpenter@gmail.com):
> 
>> On 2011-03-16 11:51, Fred Baker wrote:
>> ...
>>> people don't spend a lot of cycles thinking about NAPT44 route flap effects. 
>> The interesting thing is that people don't spend cycles thinking about
>> any of the NAT-induced glitches which cause end users to lose sessions;
>> some of these will apply to NPTv6 of course. I wonder if it's possible
>> to quantify this (rough % of sessions lost by NAPT44 glitches, and
>> how many of these would *not* occur with NPTv6)?
> 
> You get NAPT44 glitches under two circumstances, in my experience:
> - your NAT gateway is buggy or overwhelmed and loses NAT state ->
>   single sessions fail randomly
> - your NAT gateway reboots, all sessions that were going previously are
>   toast
> 
> Both are due to the statefulness of NAPT44. Since NPTv6 is stateless,
> I do not expect either to apply. (Modulo "it's buggy as an ant farm", but
> that's not a protocol failure, especially not of the protocol algorithm
> is fairly simple).
> 
> If an outside link fails, I would say it was unfair to blame the NPTv6 for
> the sessions across it failing; it's not the cause, the sessions would
> have died without translation just the same.

Well, I think Fred was comparing two multihoming solutions:

1. RFC4116 (PI/BGP4) based multihoming), where user sessions should survive
   if a single ISP link goes down;
2. NAPT based multihoming, where the external address will change if
   an ISP link goes down, so the NAPT session inevitably dies.

I don't know how common that failure is in practice.

However, I agree - the user experience with NPTv6 based multihoming
should be much less prone to glitches than NAPT.

   Brian