Re: [shara] port randomization (draft-ymbk-aplusp-03)

"Jan Zorz @ go6.si" <jan@go6.si> Sat, 14 March 2009 08:04 UTC

Return-Path: <jan@go6.si>
X-Original-To: shara@core3.amsl.com
Delivered-To: shara@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F11A3A69B8 for <shara@core3.amsl.com>; Sat, 14 Mar 2009 01:04:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.523
X-Spam-Level:
X-Spam-Status: No, score=-2.523 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EALVuU2+a7LY for <shara@core3.amsl.com>; Sat, 14 Mar 2009 01:04:08 -0700 (PDT)
Received: from nety.net (poirot.nety.net [89.212.42.194]) by core3.amsl.com (Postfix) with ESMTP id DA8CC3A67DA for <shara@ietf.org>; Sat, 14 Mar 2009 01:04:07 -0700 (PDT)
Received: from [192.168.1.106] (unverified [89.212.15.159]) by nety.net (SurgeMail 3.9e) with ESMTP id 3462965-1926523 for <shara@ietf.org>; Sat, 14 Mar 2009 09:04:46 +0100
Message-ID: <49BB651C.8050700@go6.si>
Date: Sat, 14 Mar 2009 09:04:44 +0100
From: "Jan Zorz @ go6.si" <jan@go6.si>
Organization: go6.si
User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209)
MIME-Version: 1.0
To: shara@ietf.org
References: <022a01c9a2ab$fd5abf60$fd736b80@cisco.com> <A99B171D26E1564B92D36826128CD66127EE038A28@NOK-EUMSG-01.mgdnok.nokia.com> <040401c9a327$974763a0$fd736b80@cisco.com> <m24oxyg1gk.wl%randy@psg.com> <18034D4D7FE9AE48BF19AB1B0EF2729F27F25FF603@NOK-EUMSG-01.mgdnok.nokia.com>
In-Reply-To: <18034D4D7FE9AE48BF19AB1B0EF2729F27F25FF603@NOK-EUMSG-01.mgdnok.nokia.com>
Content-Type: multipart/alternative; boundary="------------020003050300010804040508"
X-Originating-IP: 89.212.15.159
X-Authenticated-User: jan@pragma.si
X-Encryption: SSL encrypted
X-IP-stats: Notspam Incoming Last 0, First 27, in=8, out=0, spam=0 Known=true ip=89.212.15.159
Subject: Re: [shara] port randomization (draft-ymbk-aplusp-03)
X-BeenThere: shara@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Sharing of an IPv4 Address discussion list <shara.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/shara>, <mailto:shara-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/shara>
List-Post: <mailto:shara@ietf.org>
List-Help: <mailto:shara-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/shara>, <mailto:shara-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Mar 2009 08:04:09 -0000

Teemu, hi.
>
> Now if the non-contiguous port set is less random, say contains multiple non-contiguous ranges allocated with port masks (see the same draft), less effort is needed in dhcp-client (no AES calls needed) and multiplexing gateway, as no AES calls are needed and mapping tables can be simpler (as bitmasks can be used). In DHCP server effort is pretty similar except for key generation part that is not needed.
>   
Exactly.
> Comments? This is interesting topic to look into.
>
> I don't think these are issues for the end-nodes, but maybe someone who would be involved in gateway implementation could comment their perspectives?
>   
ISP's already have issues with not enough memory in CPE for firmwares 
even without v6 and/or shared IP solution. With growing complexity of 
shared IP solution their problem is not going away, but getting bigger 
:) If we suspect, that ISP will replace all the HW, then we can go 
complex. If we suspect, that ISP will want to "just upgrade" CPE 
firmware to support IPv6 and shared IP, then we need to do something 
that would fit into HW of yesterday and today. Am I somehow thinking 
into sensible direction?

regards, Jan Zorz
> Best regards,
>
> 	Teemu
>
>
>   
>> -----Original Message-----
>> From: shara-bounces@ietf.org [mailto:shara-bounces@ietf.org] 
>> On Behalf Of ext Randy Bush
>> Sent: 12 March, 2009 18:18
>> To: shara@ietf.org
>> Subject: Re: [shara] port randomization (draft-ymbk-aplusp-03)
>>
>> would a potential implementor care to speak to any resource 
>> and scaling aspects of non-contiguous port assignment?
>>
>> randy
>> _______________________________________________
>> shara mailing list
>> shara@ietf.org
>> https://www.ietf.org/mailman/listinfo/shara
>>
>>     
> _______________________________________________
> shara mailing list
> shara@ietf.org
> https://www.ietf.org/mailman/listinfo/shara
>