Re: [pcp] WG Call for Adoption: Optimizing NAT and Firewall Keepalives Using Port Control Protocol (PCP)

<mohamed.boucadair@orange.com> Tue, 06 August 2013 13:27 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DE6721F9E63 for <pcp@ietfa.amsl.com>; Tue, 6 Aug 2013 06:27:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.209
X-Spam-Level:
X-Spam-Status: No, score=-2.209 tagged_above=-999 required=5 tests=[AWL=0.039, BAYES_00=-2.599, HELO_EQ_FR=0.35, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3rWyog0-ClDX for <pcp@ietfa.amsl.com>; Tue, 6 Aug 2013 06:27:40 -0700 (PDT)
Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id C03C421F9346 for <pcp@ietf.org>; Tue, 6 Aug 2013 06:27:39 -0700 (PDT)
Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm10.si.francetelecom.fr (ESMTP service) with ESMTP id D331A2645B5; Tue, 6 Aug 2013 15:27:38 +0200 (CEST)
Received: from PUEXCH71.nanterre.francetelecom.fr (unknown [10.101.44.33]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id B34AB2380EA; Tue, 6 Aug 2013 15:27:38 +0200 (CEST)
Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.101.44.12]) by PUEXCH71.nanterre.francetelecom.fr ([10.101.44.33]) with mapi; Tue, 6 Aug 2013 15:27:38 +0200
From: mohamed.boucadair@orange.com
To: "Markus.Isomaki@nokia.com" <Markus.Isomaki@nokia.com>, "repenno@cisco.com" <repenno@cisco.com>, "pcp@ietf.org" <pcp@ietf.org>
Date: Tue, 06 Aug 2013 15:27:32 +0200
Thread-Topic: [pcp] WG Call for Adoption: Optimizing NAT and Firewall Keepalives Using Port Control Protocol (PCP)
Thread-Index: AQHOjEWHrIMjf8sOSUiRMwszh5KQt5mGMwnQgAH4seCAAAp+kA==
Message-ID: <94C682931C08B048B7A8645303FDC9F36EE99C918C@PUEXCB1B.nanterre.francetelecom.fr>
References: <45A697A8FFD7CF48BCF2BE7E106F06040905138F@xmb-rcd-x04.cisco.com> <45A697A8FFD7CF48BCF2BE7E106F0604090E81CE@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36EE99C8E34@PUEXCB1B.nanterre.francetelecom.fr> <E44893DD4E290745BB608EB23FDDB7620A067300@008-AM1MPN1-043.mgdnok.nokia.com>
In-Reply-To: <E44893DD4E290745BB608EB23FDDB7620A067300@008-AM1MPN1-043.mgdnok.nokia.com>
Accept-Language: fr-FR
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: fr-FR
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2013.8.6.121255
Subject: Re: [pcp] WG Call for Adoption: Optimizing NAT and Firewall Keepalives Using Port Control Protocol (PCP)
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Aug 2013 13:27:45 -0000

Hi Markus,

Please see inline.

Cheers,
Med


>-----Message d'origine-----
>De : Markus.Isomaki@nokia.com [mailto:Markus.Isomaki@nokia.com]
>Envoyé : mardi 6 août 2013 15:15
>À : BOUCADAIR Mohamed OLNC/OLN; repenno@cisco.com; pcp@ietf.org
>Objet : RE: [pcp] WG Call for Adoption: Optimizing NAT and Firewall
>Keepalives Using Port Control Protocol (PCP)
>
>Hi,
>
>mohamed.boucadair@orange.com wrote:
>>
>> I have one comment for the authors: consider adding some text to
>highlight
>> PCP benefits to reduce keepalive messages when deployed in managed
>> networks (i.e., both the underlying network and the service are managed
>by
>> the same administrative entity). A typical example is SIP-based
>deployments:
>> optimize the load on access service nodes (SBC, SBE, P-CSCF, etc.)
>because
>> the lifetime of the mapping is known to the SIP UA and as such there is
>no
>> need to issue frequent register messages to maintain the mapping alive,
>etc.
>>
>
>Thanks for the comment.
>
>I have a question, though: If the same entity operates the network and the
[Med] This is indeed the same entity but distinct operational teams. 

>service such as SIP, do they need an explicit protocol like PCP to control
>or learn about the mapping lifetimes, or can they just configure them?
[Med] Configure (dedicated) longer timer is indeed an approach but the use of PCP is superior since the user agent can discover the configured lifetime and therefore react accordingly. 

 I
>mean, since the service provider is able to configure the NAT/FW mapping
>lifetimes in the way they like, can't they just set the keep-alives in
>their SIP clients accordingly?
[Med] As I said above, this is doable but it is static and needs off-line coordination to tweak the midbox and the user agent. 


 As an example, the Firewall in a mobile
>network can be configured to set the lifetime for TCP connections destined
>to the SIP proxy (SBC, P-CSCF) to 1 hour, and via Device Management the
>operator could also turn off or set the IMS client keep-alives to match
>that.
[Med] Agree; that's doable. 

 PCP would not be needed for that particular case.
[Med] PCP can be avoided but still there is a need for coordination between distinct operational teams (those operating the network and those operating the service). If for any reason the timers is to be updater because of some observed failures (synchronization issues), having PCP is superior sine the timers is hinted by the user agent and the user agent is aware of the timer without requiring an additional management interface. Note, pcp is not supposed to be activated only for SIP but for other purposes: one single solution for a variety of usages. 

>
>It would seem to me that PCP would have more utility in "unmanaged" or
>"unrelated" cases where the client app basically has no a priori knowledge
>about the network, and neither does the application service provider. Or
>similarly, the NATs or Firewalls would have no idea what the TCP
>connections would be used for.
>
>Markus