Re: R41 in draft-ietf-v6ops-cpe-simple-security-07

[Rémi Denis-Courmont <remi@remlab.net>]

On Tue, 4 Aug 2009 15:57:34 -0700, james woodyatt <jhw@apple.com> wrote:

> The most like scenario is applications soliciting any-source

> inbound traffic will use techniques like RFC 5389 modulo NAT, and

> because there is no standard for choosing an exterior filtering

> regime, applications will then perform filter-state behavior tests and

> use rendezvous services when the exterior filtering regime isn't

> endpoint-independent.  This will end up costing battery and network

> resources that would otherwise not be spent if there was a protocol

> like R41 recommends, but it will work, it will be simple and it won't

> require any authentication credentials that users may or may not

> possess, much less remember where they wrote them down.

> 

> The point of allowing passive listeners to solicit any-source incoming

> flows with something like ALD has *always* been to make more wasteful

> techniques like RFC 5389 modulo NAT completely unnecessary.  Does this

> need to be spelled out more clearly in the draft?



From this discussion, I guess so.

You might mention that RFC5389 only works for UDP while at it.



-- 

Rémi Denis-Courmont