Re: [Softwires] DS-Lite vs. 4rd

Suresh Krishnan <suresh.krishnan@ericsson.com> Thu, 22 October 2015 02:50 UTC

Return-Path: <suresh.krishnan@ericsson.com>
X-Original-To: softwires@ietfa.amsl.com
Delivered-To: softwires@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C7C01ACE67 for <softwires@ietfa.amsl.com>; Wed, 21 Oct 2015 19:50:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LOlsgyJ0DgoO for <softwires@ietfa.amsl.com>; Wed, 21 Oct 2015 19:50:54 -0700 (PDT)
Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A66A41ACE65 for <softwires@ietf.org>; Wed, 21 Oct 2015 19:50:54 -0700 (PDT)
X-AuditID: c6180641-f792c6d00000686a-38-5627e24e9713
Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id E6.77.26730.E42E7265; Wed, 21 Oct 2015 21:06:54 +0200 (CEST)
Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0248.002; Wed, 21 Oct 2015 22:50:52 -0400
From: Suresh Krishnan <suresh.krishnan@ericsson.com>
To: Edward Lopez <elopez@fortinet.com>, "softwires@ietf.org" <softwires@ietf.org>
Thread-Topic: [Softwires] DS-Lite vs. 4rd
Thread-Index: AQHRC/wf3wccd7lEXEyzxdxbtMt96g==
Date: Thu, 22 Oct 2015 02:50:51 +0000
Message-ID: <E87B771635882B4BA20096B589152EF63A9CEE95@eusaamb107.ericsson.se>
References: <93713E75-257C-4967-B76D-75D1E29774B7@fortinet.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [147.117.188.11]
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrELMWRmVeSWpSXmKPExsUyuXRPrK7fI/Uwg7m79CxavqdZHF62lcmB yWP/6TVsHkuW/GQKYIrisklJzcksSy3St0vgyph9ezFrwSLuimurJzI1ME7k7GLk5JAQMJGY ffcwG4QtJnHh3nogm4tDSOAoo8SDC9vZIZzljBILX89mB6liA+rYsPMzE4gtIhAs0bfqIAuI LSygIbHn8gygOAdQXFOi558URImexKEzZ1hBbBYBVYmttxYyg9i8Ar4S/y7MZgSxhQTsJY5t PQ42hhHoiO+n1oCNZxYQl7j1ZD4TxHECEkv2nGeGsEUlXj7+xwphK0l8/D2fHaLeQOL9ufnM ELa2xLKFr6F2CUqcnPmEZQKjyCwkY2chaZmFpGUWkpYFjCyrGDlKi1PLctONDDcxAkP+mASb 4w7GBZ8sDzEKcDAq8fAmzFIPE2JNLCuuzD3EKMHBrCTC+89SI0yINyWxsiq1KD++qDQntfgQ ozQHi5I477wZ90OFBNITS1KzU1MLUotgskwcnFINjDMsW9WVnbb8XLu55vO3Za884+axnLmn nase/zeDr1pRfPZ3kxONlnlpTO+KzS+vLhOIF9miE/7+7pH7bvF+6h9dtWrUePhK3OtvGh4+ uVJ2RfgDjk65P/s4rjR8rOvwuiPBxiX9uHPq7I0JdSHC0z52mJQw/n4z4VipbHXemT0P/S+d fzShR4mlOCPRUIu5qDgRABheab51AgAA
Archived-At: <http://mailarchive.ietf.org/arch/msg/softwires/EGnnwu-xo6IGR0NaAR70heNRAOE>
Subject: Re: [Softwires] DS-Lite vs. 4rd
X-BeenThere: softwires@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: softwires wg discussion list <softwires.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/softwires>, <mailto:softwires-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/softwires/>
List-Post: <mailto:softwires@ietf.org>
List-Help: <mailto:softwires-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/softwires>, <mailto:softwires-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Oct 2015 02:50:56 -0000

Hi Edward,

On 10/21/2015 08:29 AM, Edward Lopez wrote:
> I apologize if this has been thrashed out in the past.  In looking as implementing DS-Lite support, it appears that the need to include an additional tuple of information on the IPv6 B4 address of the CPE is cumbersome to NAT performance and tunnel capacitance, as many HW accelerated NAT engines exist without this extra tuple.  It would appear that by splitting the AFTR into two functions, 4in6 encapsulation & NAT(CGN), we can overcome scaling and performance issues of DS-Lite.
>
> However, the issue of overlapping endpoint subnets supported internally by the CPE leads to the issue potentially supporting NAT44 on the CPE, to support stateless encapsulation of returning IPv4 packets into IPv6 by the AFTR.  Section 4.2 of RFC-6333 states that CPE devices ‘should not’ perform NAT44, but that’s not the same as a ‘must not’
>
> But as you craft this solution out, you begin to realize that you are re-creating the majority of 4rd, RFC-7600.  However, 4rd is currently an experimental standard.
>
> My questions:
>
> -	Has anyone implemented or considered implementing DS-Lite with CPEs performing NAT44?

Have you looked at RFC7596 (Lightweight 4over6)? Its main goal was to move 
the NAT to the B4 (CPE) from the AFTR.

Thanks
Suresh