[nat66] Comments on draft-mrw-nat66-12

Rémi Després <remi.despres@free.fr> Tue, 15 March 2011 17:27 UTC

Return-Path: <remi.despres@free.fr>
X-Original-To: nat66@core3.amsl.com
Delivered-To: nat66@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A5B123A6D3C for <nat66@core3.amsl.com>; Tue, 15 Mar 2011 10:27:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.535
X-Spam-Level:
X-Spam-Status: No, score=-0.535 tagged_above=-999 required=5 tests=[AWL=-0.075, BAYES_05=-1.11, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FnxXjhPSSMyK for <nat66@core3.amsl.com>; Tue, 15 Mar 2011 10:27:26 -0700 (PDT)
Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr [93.17.128.10]) by core3.amsl.com (Postfix) with ESMTP id 9E1413A69F9 for <nat66@ietf.org>; Tue, 15 Mar 2011 10:27:26 -0700 (PDT)
Received: from filter.sfr.fr (localhost [127.0.0.1]) by msfrf2203.sfr.fr (SMTP Server) with ESMTP id 9F4DF7000090; Tue, 15 Mar 2011 18:28:51 +0100 (CET)
Received: from [192.168.0.14] (per92-10-88-166-221-144.fbx.proxad.net [88.166.221.144]) by msfrf2203.sfr.fr (SMTP Server) with ESMTP id 30CF370000A7; Tue, 15 Mar 2011 18:28:50 +0100 (CET)
X-SFR-UUID: 20110315172851200.30CF370000A7@msfrf2203.sfr.fr
Mime-Version: 1.0 (Apple Message framework v1082)
Content-Type: text/plain; charset="iso-8859-1"
From: Rémi Després <remi.despres@free.fr>
In-Reply-To: <19F3A4CD-F39C-4F17-A6E9-7AA8AFBC6B3B@cisco.com>
Date: Tue, 15 Mar 2011 18:28:50 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <CF8367A6-F303-43D7-99C6-D40D1DD5D5D9@free.fr>
References: <20110314063002.28048.29694.idtracker@localhost> <19F3A4CD-F39C-4F17-A6E9-7AA8AFBC6B3B@cisco.com>
To: Fred Baker <fred@cisco.com>
X-Mailer: Apple Mail (2.1082)
Cc: Margaret Wasserman <margaretw42@gmail.com>, NAT66 HappyFunBall <nat66@ietf.org>
Subject: [nat66] Comments on draft-mrw-nat66-12
X-BeenThere: nat66@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "List for discussion of IPv6-to-IPv6 NAT." <nat66.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/nat66>, <mailto:nat66-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/nat66>
List-Post: <mailto:nat66@ietf.org>
List-Help: <mailto:nat66-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nat66>, <mailto:nat66-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2011 17:27:27 -0000

Hello Fred,

Here are some comments, with references to sections.

Le 14 mars 2011 à 13:54, Fred Baker a écrit :
>> ...
>> New version (-12) has been submitted for draft-mrw-nat66-12.txt.
>> http://www.ietf.org/internet-drafts/draft-mrw-nat66-12.txt

1.2
Some caveat concerning the multihoming case may be appropriate (see 2.4 below).

2.1
IMHO, it should be mentioned here that, behind an NPTv6 having a /48, subnet 0xFFFF is forbidden:
- This constraint is significant because it exists neither if global addresses are routed nor with NAPTv6.
- Mentioning it only in section 2.6 and 4.2 with the justification found only in appendix B would let many readers miss it. 

2.4
In case of multihoming with PA's, a limitation of NPTv6 that should be noted is that some incoming connections can fail:
- In a site having global prefixes PA1 and PA2, an internal server has two global IPv6 addresses S1 and S2. 
- If its default exit route goes to the PA1-CPE, incoming connections addressed to S2 will fail due to ingress filtering in the PA1-CPE.
(If only S1 would be advertised to clients, incoming connections would become impossible the PA1-CPE fails, a negation of what multihoming is expected to bring.) 

3.2 and remainder of the document.
The word datagram seems to be used instead of packet:
- RFC 2460 doesn't use the word datagram for IPv6, even in case of fragmentation 
- In any case, NPTv6 operates individually on packets without concern with reassembling fragments. 

9.
Last... and least (but already signaled), my name is Remi Despres, not Remi Depres
(Actually, it is Rémi Després but it is understood that ASCII doesn't permit.)

Regards,
RD