Incremental deployement story for draft-ietf-nsis-nslp-natfw-20

Magnus Westerlund <[email protected]> Fri, 27 Nov 2009 13:56:47 +0100
Newsgroups gmane.ietf.nsis
Message-ID <[email protected]>
Hi,

I am reviewing the NAT/FW NSLP and have some high level questions about
this work regarding incremental deployment.

When reading the document I get the impression that it starts out in
world where the majority of the nodes have been upgraded and focus on
mechanism in that world. It is not that it needs to work, but to me the
main focus would be to ensure that the signaling protocol works well
when deploying it only in one access network, or even subnet and then
starts to grow the deployment.

I am missing this story and how to get good performance out of the NSLP
in such settings. The proxy mode enables this to some degree but seems
to lack some functionality to allow for incremental deployment. The main
issue seems to be sender proxying that seems to lack a method to
indicate: Please proxy this but also try end to end. That allows for
quick setup of the egress to public path, and allows for opening all the
way if the end-to-end actually works.

I would like to have a section that describes how one can start out with
some end-hosts and edge-NAT/FW that support proxying. Then probe the
path towards end-to-end to see if there are additional NATFW aware
entities on the path allowing for a increase functionality scope.

I am also a bit worried about the assumption that edge devices must be
correctly configured. Consider the case of an ISP that does NAT44, i.e.
the customer - ISP edge has one NAT that may have been the edge
initially, but then the ISP has run out of addresses and decides to
deploy its own NAT. For the application running in an end-host the gain
with the NATFW signalling is lost until the customer edge device is
reconfigured to not any longer be the edge. I don't know if there is a
simple solution to this problem. If not I would defer the inclusion but
it should be noted as a short coming.

Comments?

Cheers

Magnus Westerlund

IETF Transport Area Director
----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM
----------------------------------------------------------------------
Ericsson AB                | Phone  +46 10 7148287
Färögatan 6                | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden| mailto: [email protected]
----------------------------------------------------------------------