[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IPSEC and NAT
Granted, the issues are very complex, and I very much understand that at
the time, NAT's may have seemed to be a cheaper alternative than
fighting the address space battles. And I recognize that NAT's did not
arise out of a vacuum, either.
I will observe, though, that while NAT's may have appeared to be the
cheaper solution initially, the total bill for the NAT "solution" has
yet to be totalled up.
Interactions with IPSEC is just one such example of an additional cost
of NAT's. (And let us be clear that it is a cost imposed by NAT's, not
by IPSEC, as it is the NAT boxes which broke a fundamental property of
the Internet architecture.)
- Ted
Follow-Ups:
References: