Re: [Softwires] ISP CGN logging inc. Destination ??
"Rajiv Asati (rajiva)" <rajiva@cisco.com> Wed, 09 May 2018 11:30 UTC
Return-Path: <rajiva@cisco.com>
X-Original-To: softwires@ietfa.amsl.com
Delivered-To: softwires@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD8B3126CC4; Wed, 9 May 2018 04:30:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -12.61
X-Spam-Level:
X-Spam-Status: No, score=-12.61 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ayS9E9CjRb4B; Wed, 9 May 2018 04:30:55 -0700 (PDT)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6336E126B7E; Wed, 9 May 2018 04:30:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=41490; q=dns/txt; s=iport; t=1525865455; x=1527075055; h=from:to:cc:subject:date:message-id:mime-version; bh=dBUqMObcbfCcS+Wr/cmDZQ+qugvFaU9AUvfNXyLBUYI=; b=CzqXC/XokfdUReReCHGHVyMlOrxgZ9iqKV9z2sNuaXs6zD6vsRTNPVMB vOpYUbylQw3Mjtg/VjMM8s7Pe1j74s0xUQEGF0km0RvIAwClybg9LF4ni y4b2PuLRCMBM8cC/S667xrHfXEc9cw66utd+2tlMKTpnaXcoQbBFIpcIg k=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0ATAQCe2vJa/5FdJa1cGQEBAQEBAQEBAQEBAQcBAQEBAYJNSythF2MoCoNliAKMcIF5gQ+TKRSBYQMLGAEKhANGAhqCTSE0GAECAQEBAQEBAmwcDIUoAQEBAQMBASEKQQsMBgEIEQMBAQEhAQYDAgQlCxQJCgQBDQWDIwKBG0wDFQ+nfIIciEKCQwWHKH2BVD8lgQ2CaIJPQgEBgSQEBQESASYHCQkMCgKCSDCCJAKHHAGBA4hjhykIAow3ghaBNYNgh02QKQIREwGBJAEcOGFxcBU7KgGCGAmDKAECBodWhT5vAY5sgR+BGAEB
X-IronPort-AV: E=Sophos;i="5.49,381,1520899200"; d="scan'208,217";a="392790952"
Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 May 2018 11:30:53 +0000
Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id w49BUrP0025118 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 9 May 2018 11:30:54 GMT
Received: from xch-aln-005.cisco.com (173.36.7.15) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1320.4; Wed, 9 May 2018 06:30:53 -0500
Received: from xch-aln-005.cisco.com ([173.36.7.15]) by XCH-ALN-005.cisco.com ([173.36.7.15]) with mapi id 15.00.1320.000; Wed, 9 May 2018 06:30:53 -0500
From: "Rajiv Asati (rajiva)" <rajiva@cisco.com>
To: "Ramesh.R.Chandra@ril.com" <Ramesh.R.Chandra@ril.com>, "Yiu_Lee@comcast.com" <Yiu_Lee@comcast.com>
CC: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, "softwires@ietf.org" <softwires@ietf.org>, "int-area@ietf.org" <int-area@ietf.org>
Thread-Topic: ISP CGN logging inc. Destination ??
Thread-Index: AQHT54kwQsPwS4mEj0Wx5sa9RJtTQQ==
Date: Wed, 09 May 2018 11:30:53 +0000
Message-ID: <5E56943D-E04E-43F0-8FBB-9401D1F674CE@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.c.0.180410
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.82.230.34]
Content-Type: multipart/alternative; boundary="_000_5E56943DE04E43F08FBB9401D1F674CEciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/softwires/LG0h5XQ-WV1WGkZEaEvYBQaGCJY>
Subject: Re: [Softwires] ISP CGN logging inc. Destination ??
X-BeenThere: softwires@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: softwires wg discussion list <softwires.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/softwires>, <mailto:softwires-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/softwires/>
List-Post: <mailto:softwires@ietf.org>
List-Help: <mailto:softwires-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/softwires>, <mailto:softwires-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 May 2018 11:30:58 -0000
For native ipv4 communication (or ipv6 communication for that matter), netflow/IPFIX are the in-band means to help log the IPv4-tuple (or IPv6-tuple) information. Sure, that can help. -- Cheers, Rajiv From: "Ramesh.R.Chandra@ril.com" <Ramesh.R.Chandra@ril.com> Date: Wednesday, May 9, 2018 at 3:25 AM To: "Yiu_Lee@comcast.com" <Yiu_Lee@comcast.com>, Rajiv Asati <rajiva@cisco.com> Cc: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, Softwires-wg list <softwires@ietf.org>, "int-area@ietf.org" <int-area@ietf.org> Subject: RE: [EXTERNAL] Re: [Softwires] ISP CGN logging inc. Destination ?? Hi Lee, good thought. If we enable 5 tuple on BR for IPv4, required DA+P shall meet DA+P requirement. Using SA+P from 5-tuple should help to correlate with user IP based on DHCP assignment. Key here is on BR to do 5-tuple after de-encapsulation of IPv6. Rajiv, pls check if we can do this on ASR9k as BNG. Regds Ramesh From: Lee, Yiu [mailto:Yiu_Lee@comcast.com] Sent: 09 May 2018 08:35 To: Rajiv Asati (rajiva); Ramesh R Chandra Cc: ianfarrer@gmx.com; softwires@ietf.org; int-area@ietf.org Subject: Re: [EXTERNAL] Re: [Softwires] ISP CGN logging inc. Destination ?? Let’s me be precise. This regulation must exist today. So there must exist a way to log the five-IPv4-tuple. If Ramesh combines the dhcpv6 logs with the current five-IPv4-tuple logs, will this be enough? From: "Rajiv Asati (rajiva)" <rajiva@cisco.com<mailto:rajiva@cisco.com>> Date: Tuesday, May 8, 2018 at 5:42 PM To: "Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>" <Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>>, "Lee, Yiu" <Yiu_Lee@Cable.Comcast.com<mailto:Yiu_Lee@Cable.Comcast.com>> Cc: "ianfarrer@gmx.com<mailto:ianfarrer@gmx.com>" <ianfarrer@gmx.com<mailto:ianfarrer@gmx.com>>, "softwires@ietf.org<mailto:softwires@ietf.org>" <softwires@ietf.org<mailto:softwires@ietf.org>>, "int-area@ietf.org<mailto:int-area@ietf.org>" <int-area@ietf.org<mailto:int-area@ietf.org>> Subject: Re: [EXTERNAL] Re: [Softwires] ISP CGN logging inc. Destination ?? Agree with Ramesh. DHCP(v6) helps with logging source IP assignment, but that’s it. The requirement here is about keeping track of not only source IP+port, but also destination IP+port per connection. DHCP(v6) doesn’t apply here. -- Cheers, Rajiv From: "Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>" <Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>> Date: Tuesday, May 8, 2018 at 1:15 AM To: "Yiu_Lee@comcast.com<mailto:Yiu_Lee@comcast.com>" <Yiu_Lee@comcast.com<mailto:Yiu_Lee@comcast.com>> Cc: "ianfarrer@gmx.com<mailto:ianfarrer@gmx.com>" <ianfarrer@gmx.com<mailto:ianfarrer@gmx.com>>, Rajiv Asati <rajiva@cisco.com<mailto:rajiva@cisco.com>>, Softwires-wg list <softwires@ietf.org<mailto:softwires@ietf.org>>, "int-area@ietf.org<mailto:int-area@ietf.org>" <int-area@ietf.org<mailto:int-area@ietf.org>> Subject: RE: [EXTERNAL] Re: [Softwires] ISP CGN logging inc. Destination ?? Not really. Need IPv4 because desitination IP is on IPv4. Regds ramesh chandra M#: +91 90829 61303 O#: +91 22 7965 9762 -----Original Message----- From: Lee, Yiu [mailto:Yiu_Lee@comcast.com] Sent: 07 May 2018 16:46 To: Ramesh R Chandra Cc: ianfarrer@gmx.com<mailto:ianfarrer@gmx.com>; rajiva@cisco.com<mailto:rajiva@cisco.com>; softwires@ietf.org<mailto:softwires@ietf.org>; int-area@ietf.org<mailto:int-area@ietf.org> Subject: Re: [EXTERNAL] Re: [Softwires] ISP CGN logging inc. Destination ?? Just a quick thought. Will the dhcpv6 logs help? Sent from mobile device, pardon possible typo. On May 7, 2018, at 7:06 AM, "Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>" <Ramesh.R.Chandra@ril.com<mailto:Ramesh.R.Chandra@ril.com>> wrote: Dear Ian, thanks for clarifications. Regulator in India mandated to preserve the following details for each flow. 1. Source IP + Port (private for end subscriber device) 2. Destination IP + Port (public) 3. Translated IP + port (public) 4. Date and time There is no brainer and all this is available in NAT44. MAP being stateless, no such data available from MAP-BR. We are exploring alternate option on BR to create this data in MAP. Pls advise. Regds ramesh -----Original Message----- From: ianfarrer@gmx.com<mailto:ianfarrer@gmx.com> [mailto:ianfarrer@gmx.com] Sent: 04 May 2018 17:28 To: Rajiv Asati (rajiva) Cc: Softwires-wg list; int-area@ietf.org<mailto:int-area@ietf.org>; Ramesh R Chandra Subject: Re: [Softwires] ISP CGN logging inc. Destination ?? Hi Rajiv, Please see inline. Cheers, Ian On 4. May 2018, at 12:01, Rajiv Asati (rajiva) <rajiva@cisco.com<mailto:rajiva@cisco.com>> wrote: Ian, Thanks for sharing the URL. While not explicit, “all metadata” would include both source and destination A+P. Is that the right interpretation? [if - My understanding is that per-flow logging is necessary to meet the requirement, but I’m not familiar enough with the legislation to know what exactly needs to be stored.] If an ISP were to use “binding” mode on the BR, then without using net flow/IPFIX, How could the compliance be achieved ? [if - If there’s address sharing and the requirement is to provide an exact match to a data retention request (in some countries, a list of e.g. 16 users is OK), then AFAICS, you have to use IPFIX. The implementation problem for this is compounded by the lack of state table on most BR implementations (e.g. how do you know when a UDP session has completed without state for that flow?)] "Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s). are confidential and may be privileged. If you are not the intended recipient. you are hereby notified that any review. re-transmission. conversion to hard copy. copying. circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient. please notify the sender immediately by return email. and delete this message and any attachments from your system. Virus Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this email. The company cannot accept responsibility for any loss or damage arising from the use of this email or attachment." _______________________________________________ Softwires mailing list Softwires@ietf.org<mailto:Softwires@ietf.org> https://www.ietf.org/mailman/listinfo/softwires his email or attachment."
- [Softwires] ISP CGN logging inc. Destination ?? Rajiv Asati (rajiva)
- Re: [Softwires] [Int-area] ISP CGN logging inc. D… Dave O'Reilly
- Re: [Softwires] ISP CGN logging inc. Destination … ianfarrer
- Re: [Softwires] ISP CGN logging inc. Destination … Rajiv Asati (rajiva)
- Re: [Softwires] [Int-area] ISP CGN logging inc. D… Rajiv Asati (rajiva)
- Re: [Softwires] [Int-area] ISP CGN logging inc. D… Dave O'Reilly
- Re: [Softwires] ISP CGN logging inc. Destination … ianfarrer
- Re: [Softwires] ISP CGN logging inc. Destination … mohamed.boucadair
- Re: [Softwires] ISP CGN logging inc. Destination … Ramesh.R.Chandra
- Re: [Softwires] [EXTERNAL] Re: ISP CGN logging in… Lee, Yiu
- Re: [Softwires] ISP CGN logging inc. Destination … mohamed.boucadair
- Re: [Softwires] ISP CGN logging inc. Destination … mohamed.boucadair
- Re: [Softwires] [EXTERNAL] RE: Re: ISP CGN loggin… Lee, Yiu
- Re: [Softwires] ISP CGN logging inc. Destination … Rajiv Asati (rajiva)
- Re: [Softwires] [EXTERNAL] Re: ISP CGN logging in… Rajiv Asati (rajiva)
- Re: [Softwires] [EXTERNAL] Re: ISP CGN logging in… Lee, Yiu
- Re: [Softwires] ISP CGN logging inc. Destination … mohamed.boucadair
- Re: [Softwires] ISP CGN logging inc. Destination … Rajiv Asati (rajiva)
- Re: [Softwires] [EXTERNAL] Re: ISP CGN logging in… Ramesh.R.Chandra
- Re: [Softwires] [EXTERNAL] Re: ISP CGN logging in… Ramesh.R.Chandra
- Re: [Softwires] ISP CGN logging inc. Destination … Rajiv Asati (rajiva)
- Re: [Softwires] ISP CGN logging inc. Destination … Gottlieb, Jordan J
- Re: [Softwires] ISP CGN logging inc. Destination … ianfarrer
- Re: [Softwires] ISP CGN logging inc. Destination … Gottlieb, Jordan J