Quite, the dissappearance of un-NATed IPv4 is inevitable. Regretably the ready availability of IPv6 is not. There are two possible future outcomes here. The first is that the only widely available option is NAT-ed IPv4. The second is a dual stack offering that combines NAT-ed IPv4 with full feature IPv6. We do need to revise the architecture description. Using IP addresses as implicit signalling is bad. Another instance that hit me today is the fact that existing SSL implementations use the server IPv4 address to select which server certificate to present to a client. This means that if you want to multi-home multiple SSL sites on one box you need to burn an IPv4 address for each. EKR told me there is a solution but again we have to get people to use it. > -----Original Message----- > From: Darryl (Dassa) Lynch [mailto:dassa@xxxxxxx] > Sent: Wednesday, March 07, 2007 3:53 PM > To: ietf@xxxxxxxx > Subject: RE: NATs as firewalls > > Hallam-Baker, Phillip wrote: > >>> From: John C Klensin [mailto:john-ietf@xxxxxxx] > >> > >>> And, when I conclude that IPv6 is inevitable (unless > someone comes > >>> up with another scheme for global unique addresses RSN), > >> > >> Here we disagree, I don't think that IPv6 is inevitable. > >> When I model the pressures on the various parties in the > system and > >> consider the shortest route by which the participants can > reach their > >> short term goals there are certainly alternative schemes. > >> > >> I certainly do not want to see these schemes deployed but they are > >> certainly possible outcomes. For example, a hyperNAT where the ISP > >> NATs residential Internet as a matter of course. I suspect we will > >> start to see this deployed on a large scale as soon as the market > >> price for IP address allocation reaches a particular point. > >> > >> There is a major difference between a NAT box plugged into > the real > >> Internet and a NAT box plugged into another NAT box. It is > a pretty > >> ugly one for the residential user. > > I'm afraid it is already happening on a large scale in some > parts. Here in Australia I've seen multiple ISP's who NAT > all residential customers. Some of them amongst the largest > players in the market. Even some commercial offerings are on NATs. > > Personally I'm more set against the wholesale blocking of > ports and services which ISPs seem to be favouring at the > moment, and the pricing that is applied to have the blocks > removed. There are artificial blocks being deployed to keep > usage down that are a bigger problem than NATs IMHO. > > Darryl (Dassa) Lynch > > > _______________________________________________ > Ietf mailing list > Ietf@xxxxxxxx > https://www1.ietf.org/mailman/listinfo/ietf > _______________________________________________ Ietf@xxxxxxxx https://www1.ietf.org/mailman/listinfo/ietf