Browse Prior Art Database

Deterministic Address Mapping to Reduce Logging in Carrier-Grade NAT Deployments (RFC7422) Disclosure Number: IPCOM000240035D
Original Publication Date: 2014-Dec-01
Included in the Prior Art Database: 2014-Dec-25
Document File: 28 page(s) / 34K

Publishing Venue

Internet Society Requests For Comment (RFCs)

Related People

C. Donley: AUTHOR [+5]


It is becoming increasingly difficult to obtain new IPv4 address assignments from Regional/Local Internet Registries due to depleting supplies of unallocated IPv4 address space. To meet the growing demand for Internet connectivity from new subscribers, devices, and service types, some operators will be forced to share a single public IPv4 address among multiple subscribers using techniques such as Carrier-Grade NAT (CGN) [RFC6264] (e.g., NAT444 [NAT444], Dual-Stack Lite (DS-Lite) [RFC6333], NAT64 [RFC6146], etc.). However, address sharing poses additional challenges to operators when considering how they manage service entitlement, public safety requests, or attack/abuse/fraud reports [RFC6269]. In order to identify a specific user associated with an IP address in response to such a request or for service entitlement, an operator will need to map a subscriber's internal source IP address and source port with the

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 8% of the total text.

Independent Submission                                         C. Donley Request for Comments: 7422                                     CableLabs Category: Informational                                    C. Grundemann ISSN: 2070-1721                                         Internet Society                                                               V. Sarawat                                                            K. Sundaresan                                                                CableLabs                                                               O. Vautrin                                                         Juniper Networks                                                            December 2014

            Deterministic Address Mapping to Reduce Logging in                      Carrier-Grade NAT Deployments


   In some instances, Service Providers (SPs) have a legal logging    requirement to be able to map a subscriber's inside address with the    address used on the public Internet (e.g., for abuse response).    Unfortunately, many logging solutions for Carrier-Grade NATs (CGNs)    require active logging of dynamic translations.  CGN port assignments    are often per connection, but they could optionally use port ranges.    Research indicates that per-connection logging is not scalable in    many residential broadband services.  This document suggests a way to    manage CGN translations in such a way as to significantly reduce the    amount of logging required while providing traceability for abuse    response.  IPv6 is, of course, the preferred solution.  While    deployment is in progress, SPs are forced by business imperatives to    maintain support for IPv4.  This note addresses the IPv4 part of the    network when a CGN solution is in use.

Status of This Memo

   This document is not an Internet Standards Track specification; it is    published for informational purposes.

   This is a contribution to the RFC Series, independently of any other    RFC stream.  The RFC Editor has chosen to publish this document at    its discretion and makes no statement about its value for    implementation or deployment.  Documents approved for publication by    the RFC Editor are not a candidate for any level of Internet    Standard; see Section 2 of RFC 5741.

   Information about the current status of this document,...