Re: Comments on multi6dt documents

Erik Nordmark <[email protected]> Thu, 11 Nov 2004 11:58:49 -0800
Newsgroups gmane.ietf.multi6
Message-ID <[email protected]>
Pekka Savola wrote:

> Agreed.  I wasn't sure of the context, just that IP+EXT+whatever might 
> not do it.  Destination options however provide the facilities today for 
> skipping over them without making assumptions; this might not in 
> practice be any better though.

If a firewall is built on the philosophy to be conservative it will not
let anything new through, whether it is a new payload type, a new
option, or whatever.

> So, the demux code needs to deal with ICMPv6 address translation. What 
> about other protocols?  Do we want to care for the others which might be 
> doing similar things, or we just say 'just do the referral thing'?

What other protocols do you have in mind?
We already know things that do explicit QoS setup needs to be locator 
aware since the routers will see packets containing locators.
There might be other signaling protocols that fall in the same category, 
but they would all be about signaling something to routers or middleboxes.

And we have things that only operate on the locators, such as the 
routing protocols, hence need no change at all.

And ICMP errors (or other error or informational packets generated by 
routers) needs special handling.

But I don't see anything else.

Oh - for multicast applications I think the only sensible thing is to 
use locators. Protocols like RTP already carry an end-to-end ID so it 
should be fine to rewrite the source IP address field for those without 
the application being upset, but it is harder to know whether the 
receivers can undo the rewrite.

> The fact this is an ALG in a sense should possibly be stated, with the 
> caveat that we're assuming that there aren't other equally "fundamental" 
> protocols where you shouldn't be required deal with the full referral 
> process.

Why do you wish to confuse things by calling it an ALG? It is a local 
matter for the implementation how it demuxes ICMP errors. ALGs and NATs 
make people think of middleboxes which perform transformations which can 
not be reversed.

    Erik