nanog mailing list archives
Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?
From: Mark Smith <nanog () 85d5b20a518b8f6864949bd940457dc124746ddc nosense org>
Date: Thu, 29 Apr 2010 20:38:23 +0930
On Thu, 29 Apr 2010 10:33:02 +1000 Mark Andrews <marka () isc org> wrote:
In message <A3F2FF6F-AFE3-4ED1-AD33-5B627724930B () virtualized org>, David Conrad writes:Mark, On Apr 28, 2010, at 3:07 PM, Mark Andrews wrote:Perhaps the ability to change service providers without having to =renumber?=20 We have that ability already. Doesn't require NAT.Cool! You've figured out, e.g., how to renumber authoritative name = servers that you don't have direct control over!Don't do that. It was a deliberate design decision to use names rather than IP addesses in NS records. This allows the operators of the nameservers to change their addresses when they need to. B.T.W. we have the technology to automatically update delegations if we need to and have for the last 10 years. People just need to stop being scared about doing it.And modify filter = lists on a firewalls across an enterprise network! And remotely update = provisioning systems and license managers without interrupting services! = Etc., etc. http://www.rfc-editor.org/internet-drafts/draft-carpenter-renum-needs-work= -05.txt A tiny home office network managed by a highly technical individual with = full control over all aspects of the network is not a good model on = which to base the definition of "we". Regards, -drcWell if you insist on using IP addresses rather than real crypto for access control.
I suppose it'll protect us when Skynet emerges. I think the current security threat is the people behind the machines, not the machines themselves and their IP addresses. Regards, Mark.
Current thread:
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough?, (continued)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Smith (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Matthew Kaufman (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Smith (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Carl Rosevear (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? David Conrad (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Felipe Zanchet Grazziotin (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? William Pitcock (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Andrews (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? David Conrad (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Andrews (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Smith (Apr 29)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Valdis . Kletnieks (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Paul Timmins (Apr 29)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? David Conrad (Apr 30)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Owen DeLong (Apr 30)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? David Conrad (Apr 30)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Paul Timmins (Apr 30)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Dave Pooser (Apr 28)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? Mark Smith (Apr 29)
- Re: the alleged evils of NAT, was Rate of growth on IPv6 not fast enough? David Barak (Apr 28)
- Re: Rate of growth on IPv6 not fast enough? Jens Link (Apr 21)