Re: [v6ops] Are we competitive?

Vasilenko Eduard <vasilenko.eduard@huawei.com> Thu, 11 August 2022 07:42 UTC

Return-Path: <vasilenko.eduard@huawei.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85AFCC157B41 for <v6ops@ietfa.amsl.com>; Thu, 11 Aug 2022 00:42:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.664
X-Spam-Level:
X-Spam-Status: No, score=-0.664 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=1.242, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ejrqYmcURDI for <v6ops@ietfa.amsl.com>; Thu, 11 Aug 2022 00:42:03 -0700 (PDT)
Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E34A8C157B5F for <v6ops@ietf.org>; Thu, 11 Aug 2022 00:42:02 -0700 (PDT)
Received: from fraeml703-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4M3JfW2b5Vz683nW; Thu, 11 Aug 2022 15:41:55 +0800 (CST)
Received: from mscpeml100001.china.huawei.com (7.188.26.227) by fraeml703-chm.china.huawei.com (10.206.15.52) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2375.24; Thu, 11 Aug 2022 09:41:59 +0200
Received: from mscpeml500001.china.huawei.com (7.188.26.142) by mscpeml100001.china.huawei.com (7.188.26.227) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Thu, 11 Aug 2022 10:41:59 +0300
Received: from mscpeml500001.china.huawei.com ([7.188.26.142]) by mscpeml500001.china.huawei.com ([7.188.26.142]) with mapi id 15.01.2375.024; Thu, 11 Aug 2022 10:41:59 +0300
From: Vasilenko Eduard <vasilenko.eduard@huawei.com>
To: "Soni \"They/Them\" L." <fakedme+ipv6@gmail.com>, Gábor LENCSE <lencse@hit.bme.hu>
CC: IPv6 Operations <v6ops@ietf.org>
Thread-Topic: [v6ops] Are we competitive?
Thread-Index: AQHYoi0ZEjRK7z4aJ0mo31PReLBUu62TUvkAgACe0QCAACL2AIAADSQAgAACUYCAAEx0gIAA9pUAgBAq/YCAAQhUgIAALmAAgAAC3YCAAChFgIAACP+AgAD/3nD//91ygIAAnHiAgADvybA=
Date: Thu, 11 Aug 2022 07:41:59 +0000
Message-ID: <6eb49bdf007943108d58c10a88334712@huawei.com>
References: <e4a35f0c-757a-aefa-c211-05b6015a4215@gmail.com> <YuJXbruluDmzF3RD@Space.Net> <ec68b29c62034d3e98adec9c5da45ff3@huawei.com> <25e4f9e4-e055-241c-7047-97dca8b09cc8@gmail.com> <3c35a91af90d4b82af724e7ce98378d3@huawei.com> <CAE=N4xcPq3CB5DDjPOk3oAqBfpJRebhXsFExSEAX_Yr3_XsSUg@mail.gmail.com> <97662d43-7daa-191c-792b-49a626fb9769@gmail.com> <CAM5+tA_w9n2=cXc=mgsr8iOx2rndAWgPhnoNBs4UQnJd3gJxNA@mail.gmail.com> <CADzU5g4mSqqVXE9ppe1U=dMM59GUPviArL_5tiQe0yxm-YZrgw@mail.gmail.com> <CAM5+tA9tOGuy8scXStxOTzWOwG_zvDHx4Hi5CwkGiYmzNLOvqw@mail.gmail.com> <CAPt1N1neKi_8A=WQz44vsO9nywmfCjXhiWrDMuhaFFTHvj_g7A@mail.gmail.com> <CAM5+tA-hse1OoVT_R90u76GpF8ZSW7PaGhXP4V6UbT4Xe8=BFg@mail.gmail.com> <CADzU5g6q=PL+yaijHZvgTz9F7ePUtdAgPCv-3Qmf0vNS4mZENQ@mail.gmail.com> <40a92b22-eeee-c359-3c50-e9ba51375364@gmail.com> <6f2e674aa8b3417983fe43435761d331@huawei.com> <47d37ba4-840d-8948-84f4-be1a2a51a243@hit.bme.hu> <a803e9e9-4913-53a8-b628-ece055fa3344@gmail.com>
In-Reply-To: <a803e9e9-4913-53a8-b628-ece055fa3344@gmail.com>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.81.209.202]
Content-Type: multipart/alternative; boundary="_000_6eb49bdf007943108d58c10a88334712huaweicom_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/NyOxmA6KlTDZWjCviNPsuHeT96g>
Subject: Re: [v6ops] Are we competitive?
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Aug 2022 07:42:04 -0000

Gábor, Soni,
Thanks for your comments.
It still looks like NAT66 is not a requirement for translational technology.
Ed/
From: v6ops [mailto:v6ops-bounces@ietf.org] On Behalf Of Soni "They/Them" L.
Sent: Wednesday, August 10, 2022 11:21 PM
To: Gábor LENCSE <lencse@hit.bme.hu>
Cc: IPv6 Operations <v6ops@ietf.org>
Subject: Re: [v6ops] Are we competitive?

(attempting to re-send this because something seems to have gone wrong...)

On Wed, Aug 10, 2022, 08:01 Gábor LENCSE <lencse@hit.bme.hu<mailto:lencse@hit.bme.hu>> wrote:
Dear Eduard,

TAYGA is a stateless NAT64 implementation. We use it for educational
purposes: we demonstrate stateful NAT64 using TAYGA (stateless NAT64) +
iptables (stateful NAT44). We use it because it is easy to configure and
everything can be easily observed and debugged (unlike with the much
more powerful Jool stateful NAT64 solution).

1. why with NAT44 instead of NAT66?
2. can jool really use the same 192.0.0.2 on all clients? it seemed to use 1918 and 100.64.0.0/10<http://100.64.0.0/10>?


However, I would not recommend TAYGA for ISP-s due to performance
issues. (It works in userspace and it is not able to utilize more than a
single CPU core.)

ohh. but it's fine for hotspot software? why isn't hotspot software using 464 instead of 1918? it's gonna be NAT either way but one of them at least stress tests IPv6 in the wild.


Best regards,

Gábor


8/10/2022 12:12 PM keltezéssel, Vasilenko Eduard írta:
> Hi Soni,
> I do not understand how your comment is relevant to NAT66.
>
> If the source traffic is private IPv4 then indeed we need stateful translation somewhere.
> lw4o6 and MAP-E/T prefer to do the stateful translation on the client.
> DS-Lite, 464XLAT, and DS-Lite prefer to do the stateful translation on the CGNAT.
> NAT66 requirement is not visible in any translation RFC.
>
> Sorry, I am not familiar with TAYGA implementation.
> And could not guess which one RFC it breaks.
> Eduard
> -----Original Message-----
> From: v6ops [mailto:v6ops-bounces@ietf.org<mailto:v6ops-bounces@ietf.org>] On Behalf Of Soni "They/Them" L.
> Sent: Wednesday, August 10, 2022 12:49 AM
> To: v6ops@ietf.org<mailto:v6ops@ietf.org>
> Subject: Re: [v6ops] Are we competitive?
>
>
>
> On 2022-08-09 18:16, Clark Gaylord wrote:
>> That there are commercial NAT66 offerings is less compelling. Vendors
>> frequently want you to do bad things. NAT66 suffers from the same
>> problem as NAT44 -- there is no exit strategy. NAT64 is specifically a
>> *transition* technology and over time there is less and less NAT.
>>
> how do you make it so e.g. TAYGA uses the same client IP(v4) for all CLATs without NAT66, i.e. without mapping IPv6 addresses to a single canonical, internal IPv6 address (maybe [::1]) for TAYGA to use?
>
> since TAYGA is stateless, it wants to map single IPv6 to single IPv4.
> "true" NAT64 using the DS-Lite range requires the use of NAT66 + TAYGA, otherwise you have to use 1918 (or, alternatively, CGNAT addresses) +
> NAT44 + TAYGA.
>
> (still trying to see if this works, haven't had the time to play with it... still annoyed at the lack of out-of-box linux distro 464XLAT support also.)
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org<mailto:v6ops@ietf.org>
> https://www.ietf.org/mailman/listinfo/v6ops
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org<mailto:v6ops@ietf.org>
> https://www.ietf.org/mailman/listinfo/v6ops

_______________________________________________
v6ops mailing list
v6ops@ietf.org<mailto:v6ops@ietf.org>
https://www.ietf.org/mailman/listinfo/v6ops