ietf
[Top] [All Lists]

RE: NATs *ARE* evil!

2000-12-15 13:20:04
It's already happening.  Try running IPSec from one 10 network to another 10
network.  Much pain.

-C

-----Original Message-----
From: Keith Moore [mailto:moore(_at_)cs(_dot_)utk(_dot_)edu]
Sent: Friday, December 15, 2000 9:24 AM
To: Dave Robinson
Cc: Keith Moore; M Dev; Sean Doran; ietf(_at_)ietf(_dot_)org; 
iab(_at_)iab(_dot_)org
Subject: Re: NATs *ARE* evil! 


What's the problem with locally significant addresses?  Having thousands
of
10 networks will never present a problem unless those networks at some
point
would like to talk to each other.  

right.  if net 10 networks stay completely isolated from one another,
then there's no problem.  the problem only exists when people want to
tie those networks together. but it's inevitable that the vast majority 
of private networks *will* want to communicate with the public Internet
in ways that NAT does not facilitate.

Is that where this whole discussion is
going (or coming from) - that ultimately the more NAT'ing we do, the more
headaches we're creating for ourselves en route to true global
connectivity?

in a nutshell, yes.

Keith



<Prev in Thread] Current Thread [Next in Thread>