> -----Original Message----- > From: Manfredi, Albert E [mailto:[email protected]] > Sent: Wednesday, September 28, 2011 2:50 PM > To: Dan Wing; 'Roland Bless'; 'Joel M. Halpern' > Cc: '6man' > Subject: RE: Centrally assigned "ULAs" for automotives and other > environments > > Dan Wing wrote: > > > ALGs are harmful and the NAT industry has over a decade experience > > that shows ALGs are harmful. ALGs have prevented proper operation > > of SIP, FTP, and a variety of other protocols. > > Harmful in your sense of the word is good, in some circles. Remember, > we are only talking about ALGs to the outside Internet, not ALGs in > paths internal to the controls network. (I guess I didn't make that > clear when responding to Joel, but Roland did.) And too, other networks > that are non-critical would not be limited this way. > > In some circles, the fact that SIP, FTP, or what have you, are either > hampered or rendered useless, from the Internet direct to an internal > device, is deemed to be a feature. Nothing must be allowed to go > direct.
You're not getting my point. It doesn't matter which protocol has an ALG. Pick some fancy car-only protocol that hasn't yet been invented. Its future development will be *hampered* by the existence and reliance on an ALG. And as we have all experienced, today's "only goes to the Internet" protocols are tomorrows "used within my network" protocols (e.g., HTTP used within a home for video streaming) and visa versa (e.g., NFS used across the Internet). > I think there are very few arguments now, if any, that would change > this culture. In fact, all the talk is about locking everything down > more, not less. People get beat up for creating vulnerabilities, never > for making outside access more difficult. And yet, IP is what everyone > is specifying. Go figure. It's too bad computer science is not a science, or we would actually look at the past, and this mistakes that were made, to build tomorrow's systems. ALGs were a mistake. -d -------------------------------------------------------------------- IETF IPv6 working group mailing list [email protected] Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
