Re: [Netrqmts] IETF 105 Minutes

"Joe Clarke (jclarke)" <jclarke@cisco.com> Wed, 31 July 2019 22:38 UTC

Return-Path: <jclarke@cisco.com>
X-Original-To: netrqmts@ietfa.amsl.com
Delivered-To: netrqmts@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 546951200F1 for <netrqmts@ietfa.amsl.com>; Wed, 31 Jul 2019 15:38:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=LWaG4r2D; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=sWvydo8P
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ucxb2mOu2WK for <netrqmts@ietfa.amsl.com>; Wed, 31 Jul 2019 15:38:52 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 156A01200C7 for <netrqmts@ietf.org>; Wed, 31 Jul 2019 15:38:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=876; q=dns/txt; s=iport; t=1564612731; x=1565822331; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=H6IknT8xQqdEt0fd03QF5EtYORudM1gKZNlIpKZf3b0=; b=LWaG4r2DJVMCGLz5+dAVgwLAzcZPrMpoP9xMr5/nvs0ggqM0u0VUVIn+ Wbv7e5ZDtnbYm/L7ssfAkl4HTeARvlxyu7uRNrlPQAv+9Q/P9ZdpfsXjx +YOzIbfZddko9moeh6xbMvS2Naxj/F+Z1TaNkUxIBfMlkWQ2UF8QlGDOn 4=;
IronPort-PHdr: 9a23:pkroFRUIHSnDk+TicwrpmXruF1nV8LGuZFwc94YnhrRSc6+q45XlOgnF6O5wiEPSA92J8OpK3uzRta2oGXcN55qMqjgjSNRNTFdE7KdehAk8GIiAAEz/IuTtank4F8BLTlxo13q6KkNSXs35Yg6arw==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AIAAAVGEJd/49dJa1lGgEBAQEBAgEBAQEHAgEBAQGBUwUBAQEBCwGBRFADgUIgBAsqCodbA4RShlSCW5dVgS6BJANUCQEBAQwBAS0CAQGEQAKCTiM0CQ4BAwEBBAEBAgEGbYUeDIVKAQEBAQIBEigGAQE3AQQLAgEIGB4QMiUCBA4FIoMAgWsDDg8BoUYCgTiIYIIjgnoBAQWCR4I9GIITCYE0AYtfF4FAP4E4H4IXNT6BBINAgz2CJqsTCQKCGpQZG5gWpSQCBAIEBQIOAQEFgVA4gVhwFWUBgkGCQhiDWYpTcoEpjH4BgSABAQ
X-IronPort-AV: E=Sophos;i="5.64,331,1559520000"; d="scan'208";a="596276474"
Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 31 Jul 2019 22:38:51 +0000
Received: from XCH-RCD-008.cisco.com (xch-rcd-008.cisco.com [173.37.102.18]) by rcdn-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id x6VMcp4K012647 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 31 Jul 2019 22:38:51 GMT
Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-008.cisco.com (173.37.102.18) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 31 Jul 2019 17:38:50 -0500
Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 31 Jul 2019 17:38:49 -0500
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 31 Jul 2019 17:38:49 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=f4iwbJrfVL5ApSI9k9gBEmHrCW/L6QAzNbY3Rw91AA15VqjCMHffQNUzNCv6j9IgOwaWJHYRjtZPfLoIol/wDBdam7FIUhWCJNlbbIF222FNsJTp2S4pwI85+lVLaFAoamr16JKJCQS7mHtitBzrZYa1n4T2E57+M1qjLGXwNxvlOZW1hohNFnuSnwWWqlcB1AKD/mIOa9tDoZVBZ+rH3czcmeNf7+ICpkccV6FD4r3ovXJynKoz/dgtc+kVOU2JN2H/4aar1FU6/oiLJ11ZxtwK2L+1SQrATb44r+8dRu0bkEEofXnHeXNswOIVJgG4UiPjbWEuIKuh/EjOL+uytg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=T1wLUghTxQgAupWXfTm4UwFkd3IOjAHPoPb+wd0k4jU=; b=BAvPWx1VKYqMnV84y/shGf0wB8adsyIMe1/Dk+qmlF4BHRoOne5CjHh0Gd/vJkmHKDAmflMTPIVVHaQFKGVIrOnxr7vnZNLyQZ+nbcMACqJhv8I9Q5uUvJehmYZonBqmiuGsGdC95keBQ5J+A3SYZ8dUF46J+2Oq4PhyO7qWp0l88CFJxH/m5sJZvDXJKcKG+bSapCORW2exXbe5H/Y9dAiPO0CURl84YLq6DMo61KrUr7XC1z0mYRrr2prELyGH3QV+3Psv9aZrU2vxxtbqGsKZyfdbOZOBBBd6I9E1wYkB7yIlLOxG8a2FZmMOIU49fKHWv3Qv5FT8K1r0XP7uQQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=cisco.com;dmarc=pass action=none header.from=cisco.com;dkim=pass header.d=cisco.com;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=T1wLUghTxQgAupWXfTm4UwFkd3IOjAHPoPb+wd0k4jU=; b=sWvydo8P/FOEFOsFsLI1BtZsIGwJjOJj0+rW7RR1fWQ17OmQZAdG9dPBee4wXknmYEJPX0VBsyTKEBzdNL4GrlPEN/NSwLVVTpfMGHFHriiBu7dDlfBBZmhk0XC4c/zmwVV4QHwMgXS93TM6L5ojntmWNckWemE0+BEBuOOX3l4=
Received: from CH2PR11MB4200.namprd11.prod.outlook.com (10.141.118.161) by CH2PR11MB4391.namprd11.prod.outlook.com (10.141.118.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.13; Wed, 31 Jul 2019 22:38:48 +0000
Received: from CH2PR11MB4200.namprd11.prod.outlook.com ([fe80::9dc4:365:907d:c943]) by CH2PR11MB4200.namprd11.prod.outlook.com ([fe80::9dc4:365:907d:c943%7]) with mapi id 15.20.2115.005; Wed, 31 Jul 2019 22:38:48 +0000
From: "Joe Clarke (jclarke)" <jclarke@cisco.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
CC: Toerless Eckert <tte@cs.fau.de>, "netrqmts@ietf.org" <netrqmts@ietf.org>
Thread-Topic: [Netrqmts] IETF 105 Minutes
Thread-Index: AQHVRvOUhc4fQToA6UyrciBvWgUDVabjiayAgAASDICAAB0WgIABVIQAgABGNgA=
Date: Wed, 31 Jul 2019 22:38:48 +0000
Message-ID: <FC556CD4-3DBD-4F4D-87E3-CE1BDB088250@cisco.com>
References: <DF3803B7-C05B-4A31-B873-73A86B1416CE@vigilsec.com> <19915.1564514403@localhost> <20190730202439.zl6gjvzasxofvej2@faui48f.informatik.uni-erlangen.de> <27837.1564524525@localhost> <67849904-0195-d913-f4f5-3ce068039b71@sandelman.ca>
In-Reply-To: <67849904-0195-d913-f4f5-3ce068039b71@sandelman.ca>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=jclarke@cisco.com;
x-originating-ip: [173.38.117.87]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 0ffb68d0-ce1f-4540-958a-08d71607dacb
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:CH2PR11MB4391;
x-ms-traffictypediagnostic: CH2PR11MB4391:
x-microsoft-antispam-prvs: <CH2PR11MB439100CBEF8C7E47C0AF4C50B8DF0@CH2PR11MB4391.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 011579F31F
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(376002)(366004)(346002)(396003)(136003)(199004)(189003)(66556008)(76176011)(36756003)(64756008)(8676002)(446003)(6436002)(6116002)(4744005)(66574012)(53936002)(186003)(476003)(11346002)(229853002)(6246003)(81156014)(71190400001)(14444005)(6486002)(26005)(86362001)(486006)(3846002)(25786009)(305945005)(76116006)(91956017)(71200400001)(2616005)(14454004)(53546011)(102836004)(66946007)(68736007)(81166006)(8936002)(54906003)(256004)(33656002)(66476007)(4326008)(7736002)(6506007)(66066001)(316002)(66446008)(5660300002)(6512007)(478600001)(2906002)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:CH2PR11MB4391; H:CH2PR11MB4200.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: zWjHQeJmC57W+bhakV9ZdY57mtHo/sW/ULep6qPp+HM0/Q2u26SWzkOrfVWA8DNUxvIZdMjTlFFDOyGcyLkMNBnmfPJFfmOiyQCJxAUB8//0+QMOxQ4b7Nxk7TPlak4CaeF9zEnqf1zd6g35F44EbBI9thROHieApJvl4j8JtEiOL+sZCexU/7UFQtkPY+yiMpmkDkEmTA5GCj1/7Ij5wtp6QuPFRoUnhMIzojDdxEeuUoipzBET/RPCanbPD1EAP+sVyMuyWx+G9d9pCDf3oDgoJb4av8BRyBAQK3lJhnKrtuwo29nx/ltDSD1YwdlVCI4te6swuQmIp49jssGWlZ4I3fPk+Eh2mysPaVUIkhdqiOt3OvnLQWT7U7lV948YWHdZzyE22eD6qbA673v7YsBh3oh+Ciak9x1eFCxu5xU=
Content-Type: text/plain; charset="us-ascii"
Content-ID: <DBA748C4D03D5C44A8DB32495055E5ED@namprd11.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 0ffb68d0-ce1f-4540-958a-08d71607dacb
X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Jul 2019 22:38:48.6472 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: jclarke@cisco.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR11MB4391
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.18, xch-rcd-008.cisco.com
X-Outbound-Node: rcdn-core-7.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/netrqmts/DFBmhJ8YUnNAicrgd2OMmQI16uA>
Subject: Re: [Netrqmts] IETF 105 Minutes
X-BeenThere: netrqmts@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Meeting Network Requirements <netrqmts.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netrqmts>, <mailto:netrqmts-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netrqmts/>
List-Post: <mailto:netrqmts@ietf.org>
List-Help: <mailto:netrqmts-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netrqmts>, <mailto:netrqmts-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2019 22:38:53 -0000


> On Jul 31, 2019, at 14:27, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> On 2019-07-30 6:08 p.m., Michael Richardson wrote:
>>     > all those users not working at the network level. I also think that
>>     > folks who want to test if their applications work well and invested
>>     > into ICE/STUN and other firewall traversal mechanisms (like RTCweb and
>>     > other app groups), would maybe like to have something more reflective
>>     > of relevant end-user access (with firewall).
>> A $22 home router fixes that problem.
> 
> Actually, I realized in the shower this morning, that the ietf-nat64 network provides all the "security" of a home router, in that TCP SYN packets leave, but can never enter.

Not exactly.  You still have a public IPv6 address on this network.  IPv6 TCP SYNs can still enter.

Joe