Subject: [BEHAVE] My review of draft-ietf-dime-nat-control-09

From: Dave Thaler <[email-masked]>
Date: Fri, 5 Aug 2011 00:13:02 +0000

My review of this draft is at
http://research.microsoft.com/en-us/um/people/dthaler/draft-ietf-dime-nat-control-09.pdf
or (same content)
http://research.microsoft.com/en-us/um/people/dthaler/draft-ietf-dime-nat-control-09.docx

High level questions:

1)      The model discussed in the draft appears to assume there's only one NAT device in the domain.  In contrast, the models in the Behave WG allow for multiple.   What happens if there are multiple NAT-devices (for failover or load balancing or whatever else)?

2)      Security seems to be a MAY.   Why not a SHOULD or a MUST?   Using only a MAY warrants an explanation.

3)      There's no mention of DoS attack by filling up logs.   Is that a concern?

Rest is mostly editorial nits.

I also reviewed it for consistency with RFC 4008 and for consistency with draft-ietf-behave-lsn-requirements, and I didn't spot any inconsistencies other that in question 1 above.

-Dave