Re: [pcp] OpCopdes (RE: draft-wing-pcp-base-01 posted)

"Dan Wing" <dwing@cisco.com> Thu, 28 October 2010 23:08 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: pcp@core3.amsl.com
Delivered-To: pcp@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A6673A67B2 for <pcp@core3.amsl.com>; Thu, 28 Oct 2010 16:08:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.528
X-Spam-Level:
X-Spam-Status: No, score=-110.528 tagged_above=-999 required=5 tests=[AWL=0.071, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tqAHkQ3+DfqP for <pcp@core3.amsl.com>; Thu, 28 Oct 2010 16:08:30 -0700 (PDT)
Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by core3.amsl.com (Postfix) with ESMTP id EC89B3A659C for <pcp@ietf.org>; Thu, 28 Oct 2010 16:08:29 -0700 (PDT)
Authentication-Results: sj-iport-4.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhIFAOOfyUyrRN+K/2dsb2JhbACUf4xVcaIdnCqFSASEVw
X-IronPort-AV: E=Sophos;i="4.58,255,1286150400"; d="scan'208";a="208505590"
Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-4.cisco.com with ESMTP; 28 Oct 2010 23:10:23 +0000
Received: from dwingWS (sjc-vpn3-281.cisco.com [10.21.65.25]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id o9SNAMuE017114; Thu, 28 Oct 2010 23:10:22 GMT
From: Dan Wing <dwing@cisco.com>
To: mohamed.boucadair@orange-ftgroup.com, 'Reinaldo Penno' <rpenno@juniper.net>, pcp@ietf.org
References: <2899_1288246515_4CC914F3_2899_17623_1_94C682931C08B048B7A8645303FDC9F32F984DCC70@PUEXCB1B.nanterre.francetelecom.fr> <C8EE9BE9.2E5F0%rpenno@juniper.net> <17145_1288280058_4CC997FA_17145_56982_1_94C682931C08B048B7A8645303FDC9F32F984DCF7F@PUEXCB1B.nanterre.francetelecom.fr>
In-Reply-To: <17145_1288280058_4CC997FA_17145_56982_1_94C682931C08B048B7A8645303FDC9F32F984DCF7F@PUEXCB1B.nanterre.francetelecom.fr>
Date: Thu, 28 Oct 2010 16:10:22 -0700
Message-ID: <10ae01cb76f5$4c4e0e00$e4ea2a00$@com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Act0qmEmNPjZTPadQ9+oCG+ZBBiacAALWvxgABHQ37AAAKljnQAdNipAAAYPCycAAWuI0AABARo6AA4LWzAAAsqoiQAAWLDwAADauuMAAHO4oAAAft+dABiu/AAACI84ygAKiogQABA5tWA=
Content-Language: en-us
Subject: Re: [pcp] OpCopdes (RE: draft-wing-pcp-base-01 posted)
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Oct 2010 23:08:31 -0000

> -----Original Message-----
> From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of
> mohamed.boucadair@orange-ftgroup.com
> Sent: Thursday, October 28, 2010 8:34 AM
> To: Reinaldo Penno; pcp@ietf.org
> Subject: Re: [pcp] OpCopdes (RE: draft-wing-pcp-base-01 posted)
> 
> Hi Reinaldo,
> 
> In fact, there are several dimensions to this problem of determining
> the external IP Address.
> 
> Retrieving the capabilities helps to avoid overloading the PCP Server
> in some scenarios: e.g., there is no reason for a PCP Client embedded
> in a dual stack host to issue 4 requests to a PCP Server which controls
> only a NAT44 function.

A dual stack host has not purpose or need to send a PIN64 or PIN46.  It
has only a reason to send PIN66 or PIN44.  I explained that earlier, 
and you must have disagreed because you keep talking about 4 messages.

For an IPv4-only host, without a discovery function it might send
two PCP messages (PIN46, PIN44).  Adding a discovery function doesn't
reduce the number of messages -- it would send a discovery message
message (1 message) and then a PIN46 (2 messages) and/or PIN44 message
(3 messages).  It could, in fact, add a message.

For an IPv6-only host, it's the same analysis as an IPv6-only host.

For a dual-stack host, without a discovery function it might send two
PCP messages (PIN44, PIN66).  It has no reason to use its IPv4
interface to get an IPv6 address (PIN46), nor any reason to use
its IPv6 interface to get an IPv4 address (PIN64).  Adding a 
discovery function doesn't reduce the number of messages --
same as analysis for IPv4-only host.

-d


> Cheers,
> Med
> 
> -----Message d'origine-----
> De : Reinaldo Penno [mailto:rpenno@juniper.net]
> Envoyé : jeudi 28 octobre 2010 12:18
> À : BOUCADAIR Mohamed NCPI/NAD/TIP; pcp@ietf.org
> Objet : Re: [pcp] OpCopdes (RE: draft-wing-pcp-base-01 posted)
> 
> Hi,
> 
> I talked to Dan today and I believe we came to an agreement on the
> 'problem
> statement'. Unfortunately what you/we propose below also does not solve
> the
> problem.
> 
> It is a very practical problem and already described in detail:
> http://tools.ietf.org/html/draft-troan-multihoming-without-nat66-01
> (specifically in section 7.1) and
> https://tools.ietf.org/html/draft-kuarsingh-lsn-deployment-00. But
> imagine
> both combined, more NAT modes and other CPE/Hosts being served.
> 
> These features and deployments are the norm in actual ISPs and PCP will
> hopefully play along along and prove useful.
> 
> As a *simple example* let's say an IPv6-only host and a ING (Integrated
> NAT
> Gateway) that does NAT66, NAT64 and FW66. Let's suppose the host
> traffic
> will _never_ traverse the NAT64 or NAT66. If the PCP Client asks for
> the
> capability, it would get NAT64/NAT66/FW66 in the list and consequently
> requests 3 mappings. This brings some interesting questions that I
> tried
> articulating earlier:
> 
> * How can a client determine that 2 out of 3 mappings are not really
> needed?
> It is a function of actual traffic and not all the NAT modes in the
> ING.
> Scalability (permanent storage), performance (lookups) will be
> adversely
> impacted.
> 
> * Should the client keep trying until it gets the same port from all
> three
> different NAT types? Referral of objects (in this case ports) plays a
> role
> here. The Application needs to decide which external port to advertise
> to
> another host.
> 
> * If the Application Server can be reached through FW66 and NAT64 but
> their
> semantics are different, say: anybody coming through FW66 can reach me
> in
> port X, but if you are coming through the NAT64 I need an EIF (Endpoint
> Independent Filter) attached to the mapping and the external port will
> be
> different. Much like 'zones' (or a similar concept) in ING today.
> 
> Thanks,
> 
> Reinaldo
> 
> 
> 
> 
> 
> 
> 
> 
> 
> On 10/27/10 11:15 PM, "mohamed.boucadair@orange-ftgroup.com"
> <mohamed.boucadair@orange-ftgroup.com> wrote:
> 
> > Hi Reinaldo, all,
> >
> > FWIW, an example of how the capabilities of the PCP-controlled device
> is
> > retrieved can be found at:
> >
> > http://tools.ietf.org/html/draft-bpw-softwire-pcp-flow-examples-
> 00#section-6.2
> >
> > Cheers,
> > Med
> >
> > -----Message d'origine-----
> > De : Reinaldo Penno [mailto:rpenno@juniper.net]
> > Envoyé : mercredi 27 octobre 2010 20:26
> > À : Dan Wing; BOUCADAIR Mohamed NCPI/NAD/TIP; pcp@ietf.org
> > Objet : Re: [pcp] OpCopdes (RE: draft-wing-pcp-base-01 posted)
> >
> > Dan,
> >
> > Your premise is that a host somehow knows these things. My question
> is on
> > the 'somehow'. Why (and how) an IPv6-only host will determine that it
> needs
> > and request NAT64 mapping? An IPv6-only host as far as it is
> concerned only
> > sends or receives IPv6 packets - it has no idea of IPv4 or NAT64.
> >
> > I think a discovery procedure is needed so that a host can find out
> what
> > type of NAT is behind when it actually sends or receives packets (as
> opposed
> > to all NAT types on the Gateway).
> >
> > Thanks,
> >
> > Reinaldo
> >
> >
> >
> > On 10/27/10 11:17 AM, "Dan Wing" <dwing@cisco.com> wrote:
> >
> >> If those are running on an IPvX-only host, and there is a desire
> >> to accept IPvY connections (where X is different from Y), then
> >> a NAT46 or NAT64 is needed, and thus a PIN46 (or PIN64) would
> >> be requested by the host.
> >
> >
> > *********************************
> > This message and any attachments (the "message") are confidential and
> intended
> > solely for the addressees.
> > Any unauthorised use or dissemination is prohibited.
> > Messages are susceptible to alteration.
> > France Telecom Group shall not be liable for the message if altered,
> changed
> > or falsified.
> > If you are not the intended addressee of this message, please cancel
> it
> > immediately and inform the sender.
> > ********************************
> >
> 
> 
> *********************************
> This message and any attachments (the "message") are confidential and
> intended solely for the addressees.
> Any unauthorised use or dissemination is prohibited.
> Messages are susceptible to alteration.
> France Telecom Group shall not be liable for the message if altered,
> changed or falsified.
> If you are not the intended addressee of this message, please cancel it
> immediately and inform the sender.
> ********************************
> 
> _______________________________________________
> pcp mailing list
> pcp@ietf.org
> https://www.ietf.org/mailman/listinfo/pcp