Re: NAT66: my conclusions

On Nov 30, 2008, at 7:23 PM, Keith Moore wrote:
>> 1. A stateless 1-to-1 checksum-proof NAT breaks referrals.
>
> this actually doesn't exist, because nothing says that all transport
> protocols have to use the same kind of pseudo-header or checksum.
>
This is absolutely true.  The goal of the checksum correction in NAT66  
is to avoid having to touch the TCP, UDP and ICMPv6 checksums which  
contain an IPv6 pseudo-header checksum (a 16-bit one's complement  
sum).  It will work for any transport layer that includes the IPv6  
addresses in a 16-bit one's complement checksum and will have no  
benefit (or detriment) for transport layers that don't.

Margaret


_______________________________________________
Behave mailing list
Behave@...
https://www.ietf.org/mailman/listinfo/behave