Re: [v6ops] [BEHAVE] protocols without need for ALG ?

[Tore Anderson <[e-mail]>]

* Toerless Eckert

> On Fri, Jul 31, 2015 at 10:17:16PM +0200, Tore Anderson wrote:
> > You could also use Stateful NAT64 (RFC6146)
> > with statically configured BIB entries to accomplish pretty much the
> > same thing as the SIIT-DC approach, but you do get a lot of superfluous
> > baggage that way (all the stateful connection/session tracking stuff).
> 
> Is there a Yang model for 4146 so i can beter understand what the
> intended operator experience is ? ;-))
> 
> Yes, it does mention "static configured mapping" in three places in the
> text, and i see in Cisco IOS implementation also the ability to
> configure 1:1 IPv4<->IPv6 mappings, and i therefore guess that these
> are the "static configured mappings" of 4146, but what i can't find
> is any explanation why the operations of such entries would have
> to be stateful at all. What would those 4146 entries do different than
> stateless siit-eam /32 <-> /128 entries, and whats the "benefit" ?

Well, one implementation I tested (Cisco ASR1K) allowed these 1:1
IPv4<->IPv6 mappings in Stateful NAT64 mode. However I noticed that it
did install session table entries for every connection made towards the
statically mapped IPv4 address. Not sure if those session table entries
were ever used for anything though.

Another implementation (Jool) would allows adding static BIB entries in
Stateful NAT64 mode, but it requires you to also include the ports used
- so if you wanted to do a full 1:1 mapping between an IPv4 address and
an IPv6 address you'd have to add 64k static BIB entries in order to
make traffic to arbitrary ports work...

> But obviously, in a network with 50,000 IPv6 nodes with ULAs,
> i wouldn't want to set up an orchestration to configure 50,000
> 1:1 entries, even stateless, but rather a single /16 <-> /112
> (or a few similar slightly longer prefixes). 

Indeed, if the IPv6 destinations are nicely aggregatable in a small
prefix like a /112 SIIT with an EAM sounds like exactly what you want.
I'll follow up off-list.

Tore