[v6ops] Re: The V6OPS WG has placed draft-link-v6ops-claton in state "Call For Adoption By WG Issued"

[Jen Linkova <[e-mail]>]

Hi Jeremy,

On Wed, May 29, 2024 at 1:39 AM Jeremy Duncan
<[e-mail]> wrote:
>
> I support adoption and request making these changes:
>
> "For performance and security reasons CLAT SHOULD NOT be enabled if
>    the node has IPv4 connectivity over the given interface."
>
> To
>
> "For performance and security reasons CLAT MUST NOT be enabled if
>    the node has IPv4 connectivity over the given interface."
>
> And
>
> "From a performance perspective, native IPv4 connectivity is
>    preferrable over 464XLAT, so CLAT SHOULD NOT be enabled if the node
>    has IPv4 connectivity over the given interface."
>
> To
>
> "From a performance perspective, native IPv4 connectivity is
>    preferrable over 464XLAT, so CLAT MUST NOT be enabled if the node
>    has IPv4 connectivity over the given interface."
>
>
> The discussion points and arguments made for security and performance reasons are laid out well as I think could make the case that this be a MUST NOT instead of a SHOULD NOT.

Thank you for your comments.
I'm kind of sitting on a fence re: SHOULD vs MUST.
On one hand, it seems undesirable in a general case to keep CLAT
enabled in the presence of IPv4.
OTOH, if we ever come across a case when the host administrator wants
to do it, it would be impossible w/o violating recommendations from
this document.
I can imagine that in some topologies (e.g. mobile networks or an
enterprise network with peer2peer isolation) the security implications
do not apply, so what if the administrator prefers to use CLAT
whenever possible?

>
> -----Original Message-----
> From: IETF Secretariat <[e-mail]>
> Sent: Tuesday, May 28, 2024 11:20 AM
> To: [e-mail]; [e-mail]; [e-mail]
> Subject: [v6ops] The V6OPS WG has placed draft-link-v6ops-claton in state "Call For Adoption By WG Issued"
>
> CAUTION: This email originated from outside the organization. Do not click links or open attachments unless you validate the sender and know the content is safe. Please forward this email to [e-mail] if you believe this email is suspicious.
>
> The V6OPS WG has placed draft-link-v6ops-claton in state Call For Adoption By WG Issued (entered by Nick Buraglio)
>
> The document is available at
> https://datatracker.ietf.org/doc/draft-link-v6ops-claton/
>
> Comment:
> This email starts an adoption call for the following document:
>
> Title : 464 Customer-side Translator (CLAT): Node Recommendations Authors : J. Linkova, T. Jensen Pages : 14 Date : 28-May-2024
>
> https://datatracker.ietf.org/doc/draft-link-v6ops-claton/
>
> This draft details how CLAT shall operate on endpoints.
>
> _______________________________________________
> v6ops mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]



-- 
Cheers, Jen Linkova