RE: Comments on the NAT66 draft

"Gunter Van de Velde (gvandeve)" <gvandeve@cisco.com> Mon, 10 November 2008 10:19 UTC

Return-Path: <owner-v6ops@ops.ietf.org>
X-Original-To: ietfarch-v6ops-archive@core3.amsl.com
Delivered-To: ietfarch-v6ops-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B436D3A694D for <ietfarch-v6ops-archive@core3.amsl.com>; Mon, 10 Nov 2008 02:19:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.547
X-Spam-Level:
X-Spam-Status: No, score=-5.547 tagged_above=-999 required=5 tests=[AWL=-1.052, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A3ZxbJWOlozT for <ietfarch-v6ops-archive@core3.amsl.com>; Mon, 10 Nov 2008 02:19:27 -0800 (PST)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id BD6A13A6983 for <v6ops-archive@lists.ietf.org>; Mon, 10 Nov 2008 02:19:27 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-v6ops@ops.ietf.org>) id 1KzTp9-000BSN-IN for v6ops-data@psg.com; Mon, 10 Nov 2008 10:16:47 +0000
Received: from [144.254.224.140] (helo=ams-iport-1.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.69 (FreeBSD)) (envelope-from <gvandeve@cisco.com>) id 1KzToz-000BRK-8o for v6ops@ops.ietf.org; Mon, 10 Nov 2008 10:16:45 +0000
X-IronPort-AV: E=Sophos;i="4.33,574,1220227200"; d="scan'208";a="25126469"
Received: from ams-dkim-2.cisco.com ([144.254.224.139]) by ams-iport-1.cisco.com with ESMTP; 10 Nov 2008 10:16:35 +0000
Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id mAAAGYuK027573; Mon, 10 Nov 2008 11:16:34 +0100
Received: from xbh-ams-332.emea.cisco.com (xbh-ams-332.cisco.com [144.254.231.87]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id mAAAGXp7002319; Mon, 10 Nov 2008 10:16:34 GMT
Received: from xmb-ams-33c.emea.cisco.com ([144.254.231.91]) by xbh-ams-332.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 10 Nov 2008 11:16:33 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Comments on the NAT66 draft
Date: Mon, 10 Nov 2008 11:16:29 +0100
Message-ID: <70672088D7D2CE409FB05DDD7B73D3810232327A@xmb-ams-33c.emea.cisco.com>
In-Reply-To: <courier.4915760A.00007FB9@softhome.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Comments on the NAT66 draft
Thread-Index: AclBlJ/QAMnUQFczRsCGb0Nq5iet2QBh2mBg
References: <4911B9E7.8090108@free.fr> <BB56240F3A190F469C52A57138047A03014762B5@xmb-rtp-211.amer.cisco.com> <courier.4912CE09.00003CB8@softhome.net> <BB56240F3A190F469C52A57138047A03014765AF@xmb-rtp-211.amer.cisco.com> <6BB0BB30-7AA4-4821-B9EB-4703794F3C87@muada.com> <courier.4914868B.00003F53@softhome.net> <20081108093045.GV89033@Space.Net> <courier.4915760A.00007FB9@softhome.net>
From: "Gunter Van de Velde (gvandeve)" <gvandeve@cisco.com>
To: EricLKlein@softhome.net, Gert Doering <gert@space.net>
Cc: Iljitsch van Beijnum <iljitsch@muada.com>, Margaret Wasserman <mrw@lilacglade.org>, v6ops@ops.ietf.org, Behave WG <behave@ietf.org>, "Wes Beebee (wbeebee)" <wbeebee@cisco.com>
X-OriginalArrivalTime: 10 Nov 2008 10:16:33.0483 (UTC) FILETIME=[6801C9B0:01C9431D]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1563; t=1226312194; x=1227176194; c=relaxed/simple; s=amsdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gvandeve@cisco.com; z=From:=20=22Gunter=20Van=20de=20Velde=20(gvandeve)=22=20<gv andeve@cisco.com> |Subject:=20RE=3A=20Comments=20on=20the=20NAT66=20draft |Sender:=20; bh=oUosAdpuVEntMmcVJhBM81mnD/8CVt/PwusTZiSnJK0=; b=QUKxc+xNOtCNOtj+71hP1MmsLnzuhmvaS7JGbc1XfD3Fznfd1YeSQSYr9R lq0SNQrmG884WYMRrR3RR1+FV95738iSCY0plyaJDvyiEVojclH2llSqb2DH 5SA7NmGJKT;
Authentication-Results: ams-dkim-2; header.From=gvandeve@cisco.com; dkim=pass ( sig from cisco.com/amsdkim2001 verified; );
Sender: owner-v6ops@ops.ietf.org
Precedence: bulk
List-ID: <v6ops.ops.ietf.org>

<>start snip<>
> As for the specifics: having 1:1 NAT without port rewriting, maybe 
> even just swapping the first /64 bits, is what should serve the 
> purpose of "I want to be able to change providers, on a whim, without 
> renumbering my internal network", while at the same time having fairly
little impact
> on applications.   
> 

This is why they have DHCPv6, one small change on the DHCP server and
the whole network should renumbered. 

<>end snip<> 

For end-systems statefull addressing could aid, however what about BGP
sessions, addressing of network elements, access-lists, firewalls,
etc... These will require manual handling and if realizing some networks
count +10k network devices the operational overhead involved is not to
be deminished.

Also, each enterprise customer I speak to of reasonable size does not
want to be tied with the address space of the service provider. The cost
of moving in addition to the downtime due to network transition is on
top of their minds when they are speaking on v6. 

RFC4864 does provide alternatives for NAT in some cases, however there
are gaps. As Brian mentioned in an earlier response, these GAPS could be
solved in different ways, and while NAT66 may be one of them, there
could be other solutions out there not being investigated. My prefered
way of moving fwd is to first understand the actual problem that needs
to be solved (problem space), then understand the solution space. Now,
it seems the other way around, which makes little sense.

G/