It's already happening.  Try running IPSec from one 10 network to another 10
network.  Much pain.

-C

-----Original Message-----
From: Keith Moore [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 15, 2000 9:24 AM
To: Dave Robinson
Cc: Keith Moore; M Dev; Sean Doran; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: NATs *ARE* evil! 


> What's the problem with locally significant addresses?  Having thousands
of
> 10 networks will never present a problem unless those networks at some
point
> would like to talk to each other.  

right.  if net 10 networks stay completely isolated from one another,
then there's no problem.  the problem only exists when people want to
tie those networks together. but it's inevitable that the vast majority 
of private networks *will* want to communicate with the public Internet
in ways that NAT does not facilitate.

> Is that where this whole discussion is
> going (or coming from) - that ultimately the more NAT'ing we do, the more
> headaches we're creating for ourselves en route to true global
connectivity?

in a nutshell, yes.

Keith

Reply via email to