[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: stable addressing
On Tue, Apr 20, 2004 at 09:48:45AM -0700, Fleischman, Eric wrote:
>
> Pekka,
>
> Thank you for your helpful posting. The use of proxy servers is a good suggestion, since they can also be part of a larger authenticated firewall solution. However, due to the sheer number of the internal devices that need to be exposed in a highly controlled manner (e.g., hundreds if not low-thousands of devices), proxy servers aren't likely to be able to scale to handle the job -- hence the use of authenticated NATs that are associated with the firewall.
If an organisation wishes to continue with NAT, it might as well stick with
IPv4 though? What's the gain then from having IPv6?
Would be nice to have a "Fortune 1000" scenario documented, as it's an
interesting subcase of the v6ops enterprise scenario.
Why not just allocate Fortune 1000 companies a /32 each anyway? ;)
Tim