Re: [v6ops] Lars Eggert's No Objection on draft-ietf-v6ops-transition-comparison-03: (with COMMENT)

Lars Eggert <lars@eggert.org> Mon, 02 May 2022 13:15 UTC

Return-Path: <lars@eggert.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E91E5C14F735; Mon, 2 May 2022 06:15:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=eggert.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aj-_OHpgZiGp; Mon, 2 May 2022 06:15:20 -0700 (PDT)
Received: from mail.eggert.org (mail.eggert.org [91.190.195.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56447C15E3E9; Mon, 2 May 2022 06:15:20 -0700 (PDT)
Received: from smtpclient.apple (unknown [IPv6:2a00:ac00:4000:400:20e4:bed2:5053:c1c2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.eggert.org (Postfix) with ESMTPSA id ACCA21DB59D; Mon, 2 May 2022 16:15:07 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=eggert.org; s=dkim; t=1651497307; bh=HSGIeP6nzNFYPvhdpw7t5L326iO82tPXmY3Xm+i2tfk=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=Y+rJAIAvjaJ8Bv5Xzcpzm+/jt/bASDQrZYqHJqosPQxkkecOMH9WO5HSehEkCxl+6 2C/wWitATF+WzucPU3221tor6Ol6yIc5t3qk8bLaz2DFpEnXpE6QlKcP8YVnguLv8m +cDZ2nKeRERJyVj147DWiANyrjJ7zgXzKyGFGHQ0=
Content-Type: multipart/signed; boundary="Apple-Mail=_8081CF3B-897E-45A0-AE15-96A8A28AE013"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.80.82.1.1\))
From: Lars Eggert <lars@eggert.org>
In-Reply-To: <e8169ae4-3bdd-778c-07b3-7b051b2f12ac@hit.bme.hu>
Date: Mon, 02 May 2022 16:14:56 +0300
Cc: The IESG <iesg@ietf.org>, draft-ietf-v6ops-transition-comparison@ietf.org, v6ops-chairs@ietf.org, v6ops@ietf.org, rbonica@juniper.net
Message-Id: <4CBBF33C-00E0-46E8-9DEA-7CB026AC768C@eggert.org>
References: <165045651934.9634.14647851306453321006@ietfa.amsl.com> <e8169ae4-3bdd-778c-07b3-7b051b2f12ac@hit.bme.hu>
To: Gábor LENCSE <lencse@hit.bme.hu>
X-MailScanner-ID: ACCA21DB59D.A68E7
X-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: lars@eggert.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/5h2LFfuarMWJJZT9v6BMCzj_qZs>
Subject: Re: [v6ops] Lars Eggert's No Objection on draft-ietf-v6ops-transition-comparison-03: (with COMMENT)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 May 2022 13:15:25 -0000

Hi,

On 2022-5-2, at 15:39, Gábor LENCSE <lencse@hit.bme.hu> wrote:
>>>    Often it is assumed that each user-device (computer, tablet,
>>>    smartphone) behind a NAT, could simultaneously use about 300 ports.
>>>    Typically, in the case of a residential subscriber, there will be a
>>>    maximum of 4 of those devices in use simultaneously, which means a
>>>    total of 1,200 ports.
>>> 
>> Is there a reference for these numbers? They seem awfully low.
> 
> Shin Miyakawa has performed detailed measurements. (In his paper, 270 ports per application was the maximum, thus our 300 is an upper bound.)
> We have cited his paper as follows:
>    According to [MIY2010], each user-device (computer, tablet,
>    smartphone) behind a NAT, could simultaneously use up to 300 ports.
>    In the case of a residential subscriber, there will be typically a
>    maximum of 4 of those devices in use simultaneously, which means a
>    total of 1,200 ports.

that paper was published in 2010, so the data is at least twelve years old. Should a recommendation in 2022 be based on it?

>>> 4.2.  Tradeoff between Port Number Efficiency and Stateless Operation
>>> 
>> I'm missing some text in this section that clearly describes the bad and hard to
>> debug consequences of assigning too few ports to an end user, and ideally a
>> recommendation to assign a conservatively large number of ports.
> 
> As far as I know, MAP-T has some significant deployments e.g. in Japan, thus operator experience should exist.
> 
> Is there anyone on the v6ops list, who has experience with MAP-T/E?
> 
> As far as I know, a port set size of 2048 is commonly used with MAP-T. E.g. it can be seen in this example: https://www.jool.mx/en/run-mapt.html
> 
> Therefore, I think that this size of port set does not cause any problem. (Otherwise, they would not use it.)
> 
> So I am not sure if it is right to add such text as recommended above. But I am ready to do so, if those, who have experience, can confirm it.

So clearly there can be issues when too few ports are assigned per user; the document even anecdotally summarizes the old Google Maps experiment. And since this section intends to describe the tradeoffs, it should discuss what happens if someone turns the know too aggressively.

That some configuration has picked a setting that seems to be ok is nice, but doesn't really help readers understand the tradeoff and how to spot problematic choices.

>> Section 5, paragraph 1, comment:
>> 
>>> 5.  Performance Comparison
>>> 
>> This section is entirely about future work, which could IMO be removed before
>> the RFC is published. (This should go into
>> I-D.lencse-v6ops-transition-benchmarking.)
>> 
> 
> I think removing Section 5 completely would be an easy solution, but not the best one. I am convinced that in some cases, performance can be an important decision factor for network operators. Therefore, I would like to draw the attention of the readers our our document for the importance of the performance characristics of the various implementations of the five IPv4aaS technologies and also provide them with a pointer to I-D.lencse-v6ops-transition-benchmarking.

But work on draft-lencse-v6ops-transition-benchmarking seems to have just started, and the -00 document (which already expired) is basically completely empty. So there really isn't anything to refer a reader to?

Thanks,
Lars