Re: AW: [nemo] WG: new I-D on HA filtering

Hi Ken,
> 
> 
> I think we discuss filters/policies and multiple CoAs registration
> separately. Because they are independent and separate discussion is
> more simple.
> 
> The following is example for independency.
> 1. When CoAs are not changed but filters/policies need to be changed,
>    MN want to change filters/policies only.
Agreed
> 
> It is ok for me that multiple CoA registration objects and
> filters/policies objects are transfered in the same packet, 
> because it is efficient way.
> But a discussion of multiple CoAs and filters/policies needs to be
> separate.
> 
> What do you think?

Filters/policies is also a mechanism to redirect flows from a HA to 
several CoA (or interfaces) of a MN . It seems to me that some people 
think that drafts on filters/policies are solutions to realize a 
firewall on a HA. Effectively, filters/policies can also stop the 
encapsulation of packets by the HA, but this solution can be temporary 
because a MN may have not enough resources on one of its interfaces.

Perhaps, it will be interesting to define clearly what issues we would 
like to solve, and which solutions we propose to solve them.

I think filter is a mechanism to redirect and/or to stop (temporarily or 
not) packets from a HA to a MN.

Regards,

Thomas