Le mercredi 13 juin 2007, Thomas Narten a écrit :
> To be clear, if even a small fraction of firewalls get deployed that
> just block all traffic with a RH, MIPv6 breaks and becomes
> undeployable in practice. For EVERYONE!

The answer to the upcoming question must be obvious to many people here, 
but anyway not to me: Does blocking RH2 breaks Mobile Nodes in your 
network, or does it break both Mobile Nodes *AND* Correspondant Nodes?

In the later case, it might be worth mentioning that "blocking RH breaks 
connectivity toward external peers completely (or almost)". This looks 
more terrifying to me that "blocking RH prevents deployment of future 
technology". In fact, whether you and I like it or not (I hate it), 
firewalls are quite often blocking "future technology" on purpose.

In the poor real world of IT, there are some network administrator that 
are responsible for the security of their perimeter. There are seldom 
responsible for new technology not working out of the box. It's a 
truth, we'd rather adapt to, if we can.

My 2 eurocents,

-- 
Rémi Denis-Courmont
http://www.remlab.net/

--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to