Joe Touch wrote:
Remember, with IPv6, the firewall can't fragment the reassembled
packets.
Routers shouldn't reassemble, but then routers aren't supposed to look
beyond L3. You cannot have it both ways.
Once you inspect L4, you *are* acting as a host.
That is an abstract nonsense by you and others who do not
understand layering at all, which constitutes part of the
collective stupidity.
QoS (not CoS but real QoS) capable routers must inspect L4. Though
fragmentation is generally prohibited for QoS, it is merely because
increased link overhead changes bandwidth requirement, which does
not mean QoS capable routers are acting as a host.
As Fred pointed out, existing devices already emulate reassembly without
emmitting the reassembled result.
As I pointed out, if it were acceptable, we could widely accept
fragmentation overhead.
Warren Kumari wrote:
So, this entire thread (which has reminded me why I stopped
participating in v6ops) is just a terminology issue? ;-)
People in v6 committee are not acting as professionals.
Masataka Ohta