Re: [sunset4] WG Adoption call for draft-chen-sunset4-nat64-port-allocation

Lee Howard <Lee@asgard.org> Tue, 02 June 2015 17:21 UTC

Return-Path: <Lee@asgard.org>
X-Original-To: sunset4@ietfa.amsl.com
Delivered-To: sunset4@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1768A1B2CF5 for <sunset4@ietfa.amsl.com>; Tue, 2 Jun 2015 10:21:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.57
X-Spam-Level: *
X-Spam-Status: No, score=1.57 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_SORBS_WEB=0.77] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gwVPDNYvfRzk for <sunset4@ietfa.amsl.com>; Tue, 2 Jun 2015 10:21:27 -0700 (PDT)
Received: from atl4mhob08.myregisteredsite.com (atl4mhob08.myregisteredsite.com [209.17.115.46]) by ietfa.amsl.com (Postfix) with ESMTP id E6DE91B2C77 for <sunset4@ietf.org>; Tue, 2 Jun 2015 10:21:26 -0700 (PDT)
Received: from mailpod.hostingplatform.com ([10.30.71.203]) by atl4mhob08.myregisteredsite.com (8.14.4/8.14.4) with ESMTP id t52HLP3f014983 for <sunset4@ietf.org>; Tue, 2 Jun 2015 13:21:25 -0400
Received: (qmail 23371 invoked by uid 0); 2 Jun 2015 17:21:25 -0000
X-TCPREMOTEIP: 204.235.115.163
X-Authenticated-UID: lee@asgard.org
Received: from unknown (HELO ?10.71.36.75?) (lee@asgard.org@204.235.115.163) by 0 with ESMTPA; 2 Jun 2015 17:21:24 -0000
User-Agent: Microsoft-MacOutlook/14.5.0.150423
Date: Tue, 02 Jun 2015 13:21:22 -0400
From: Lee Howard <Lee@asgard.org>
To: JF Tremblay <jean-francois.tremblay@viagenie.ca>, GangChen <phdgang@gmail.com>
Message-ID: <D1935C72.B3E69%Lee@asgard.org>
Thread-Topic: [sunset4] WG Adoption call for draft-chen-sunset4-nat64-port-allocation
References: <D15C0547.4E335%wesley.george@twcable.com> <66189322-D15E-4D84-9844-493C00D8068A@viagenie.ca> <CAM+vMES8KK2gRYD+0Q-8W5mMHLzTrTRt=7ChEshXpO=Y1Vazjg@mail.gmail.com> <096F8AFE-9A16-4986-8050-85047DD87C17@viagenie.ca>
In-Reply-To: <096F8AFE-9A16-4986-8050-85047DD87C17@viagenie.ca>
Mime-version: 1.0
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/sunset4/ppBgOgVhWbRdFbPca628JsWpzfA>
Cc: "sunset4@ietf.org" <sunset4@ietf.org>
Subject: Re: [sunset4] WG Adoption call for draft-chen-sunset4-nat64-port-allocation
X-BeenThere: sunset4@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: sunset4 working group discussion list <sunset4.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sunset4>, <mailto:sunset4-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sunset4/>
List-Post: <mailto:sunset4@ietf.org>
List-Help: <mailto:sunset4-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sunset4>, <mailto:sunset4-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jun 2015 17:21:28 -0000


On 5/4/15, 10:29 AM, "JF Tremblay" <jean-francois.tremblay@viagenie.ca>
wrote:

>Inline. 
>
>> On May 3, 2015, at 9:36 AM, GangChen <phdgang@gmail.com> wrote:
>> 
>> Thank you for the comments. I'd seen it's great useful to improve the
>> draft quality.
>> Please see my reply inline.
>> 
>> 2015-05-02 4:36 GMT+08:00, JF Tremblay
>><jean-francois.tremblay@viagenie.ca>:
>> 
>>> 2.4.1 "The storage of log information may pose a challenge to
>>>operators,
>>> since it requires additional resources and data inspection processes to
>>> identify users."
>>> The data inspection remark here does not make sense. The NAT might
>>>correlate
>>> source addresses to user information if it has it available, but it
>>>won¹t
>>> inspect. The NAT does not store either.
>> 
>> the issue is a NAT may don't know what source address should be
>>correlated.
>> Therefore, the NAT have to store entire information preparing the
>>searching.
>> For your information, the NAT should store at least three-months log
>> in our networks.
>
>In my opinion: 
>- NATs do not / should not store logs. This is done by an external server
>(syslog or other).

True; the operators of NATs store logs.

>- NATs do not correlate source addresses to users, unless it already has
>that information available. This can be done offline by a server with
>much more ressources.

Also true. As guidance to the operator of a NAT, though, this is useful
guidance.

Lee


> 
>
>/JF