[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: draft-vandevelde-v6ops-nap-01.txt - "maybe add a bit more on proxy servers ..."
On Mar 20, 2005, at 7:07 PM, Mark Smith wrote:
I agree that if there is demand, [proxies and stateful firewalls] will
be created. I suppose my position tends to be that some technologies
shouldn't be encouraged, and going into detail in an RFC tends to be
encouraging them.
Actually, that isn't the case. The IETF documents the good, the bad,
and the ugly, and the purpose is often community memory. For an
example, take a look at Transaction TCP (RFC 1644) and the rather large
number of experimental and historical RFCs. "Experimental" doesn't mean
"bad", but it also doesn't mean "thought well of" either.
And something that can be immensely helpful is documenting the purpose
being served, the options available for serving it, and giving advice
on how to do that in a way that imposes the least damage. Saying
nothing gives no guidance; saying "stateful firewalls have <this>
limiting characteristics which can be mitigated if <that> attribute is
a feature of it and is used in a certain way" can be a very helpful
thing.
Instead of saying "As a purist I don't like this", I think we're all
better off if we can describe how to meet network requirements in a way
that minimizes damage to the architecture - which IIRC is what the NAP
document is all about.