Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 24
Abstract: This document is a collection of potential solutions for revealing a host identifier (denoted as HOST_ID) when a Carrier Grade NAT (CGN) or application proxies are involved in the path. This host identifier could be used by a remote server to sort packets according to the sending host. The host identifier must be unique to each host under the same shared IP address. This document analyzes a set of potential solutions for revealing a host identifier and does not recommend a particular solution, although it does highlight the hazards of some approaches.
Publication Date: 2013-06-01
Status Note: Informational
DOI: 10.17487/RFC6967
Link: https://doi.org/10.17487/RFC6967
Author(s): Mohamed Boucadair
Dr. Joseph D. Touch
Pierre Levis
Reinaldo Penno
Keyword(s): NAT, HIP

Latest version of IETF RFC 6967

Document Versions — IETF RFC 6967

▶ IETF RFC 6967 (2013-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 791 [Active*]
IETF RFC 3022 [Active*]
IETF RFC 6056 [Active*]

Bibliographic Reference(s)

R. Fonseca, G. Porter, R. Katz, S. Shenker, and I. Stoica,, "IP Options Are Not An Option", 2005, < http://www.eecs.berkeley.edu/Pubs/TechRpts/2005/ EECS-2005-24.html >. EXTERNAL
Abdo, E., Boucadair, M., and J. Queiroz, "HOST_ID TCP Options: Implementation & Preliminary Test Results", Work in Progress, July 2012. EXTERNAL
Cheng, Y., Chu, J., Radhakrishnan, S., and A. Jain, "TCP Fast Open", Work in Progress, February 2013. EXTERNAL
Petersson, A. and M. Nilsson, "Forwarded HTTP Extension", Work in Progress, October 2012. EXTERNAL
Tarreau, W., "The PROXY protocol", November 2010, < http://haproxy.1wt.eu/download/1.5/doc/ proxy-protocol.txt >. EXTERNAL
Honda, M., Nishida, Y., Raiciu, C., Greenhalgh, A., Handley, M. and H. Tokuda,, "Is It Still Possible to Extend TCP?", November 2011, < http://nrg.cs.ucl.ac.uk/mjh/tmp/mboxes.pdf >. EXTERNAL
Boucadair, M., Reddy, T., Patil, P., and D. Wing, "Using PCP to Reveal a Host behind NAT", Work in Progress, November 2012. EXTERNAL
Yourtchenko, A., "Revealing Hosts Sharing An IP Address Using ICMP Echo Request", Work in Progress, March 2012. EXTERNAL
Wu, Y., Ji, H., Chen, Q., and T. ZOU), "IPv4 Header Option For User Identification In CGN Scenario", Work in Progress, March 2011. EXTERNAL
Cooper, A., Tschofenig, H., Aboba, B., Peterson, J., Morris, J., Hansen, M., and R. Smith, "Privacy Considerations for Internet Protocols", Work in Progress, July 2012. EXTERNAL
Medina, A, Allman, M. and S. Floyd, "Measuring Interactions Between Transport Protocols and Middleboxes", 2005, < http://conferences.sigcomm.org/imc/2004/papers/ p336-medina.pdf >. EXTERNAL
Donley, C., Grundemann, C., Sarawat, V., Sundaresan, K., and O. Vautrin, "Deterministic Address Mapping to Reduce Logging in Carrier Grade NAT Deployments", Work in Progress, January 2013. EXTERNAL
Yourtchenko, A. and D. Wing, "Revealing Hosts Sharing An IP Address Using TCP Option", Work in Progress, December 2011. EXTERNAL
Wikimedia, "Trusted XFF List", May 2013, < http://meta.wikimedia.org/w/ index.php?title=XFF_project&oldid=5507690 >. EXTERNAL
Sivakumar, S. and R. Penno, "IPFIX Information Elements for Logging NAT Events", Work in Progress, March 2013. EXTERNAL
Belloven, S., "A Technique for Counting NATted Hosts", < http://www.cs.columbia.edu/~smb/papers/fnat.pdf >. EXTERNAL
Dingledine, R., Mathewson, N., and P. Syverson, "Tor: The secondgeneration onion router", In Proceedings of the 13th USENIX Security Symposium, August 2004. EXTERNAL
Chen, Z., Zhou, C., Tsou, T., and T. Taylor, "Syslog Format for NAT Logging", Work in Progress, May 2013. EXTERNAL
IETF RFC 1413 [Active*]
IETF RFC 2753 [Active*]
IETF RFC 5201 [Superseded*]
IETF RFC 6146 [Active*]
IETF RFC 6269 [Active*]
IETF RFC 6302 [Active*]
IETF RFC 6346 [Active*]
IETF RFC 6462 [Active*]
IETF RFC 6864 [Active*]
IETF RFC 6889 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6967.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6967, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments. Available at https://doi.org/10.17487/RFC6967

Snippet:

IETF RFC 6967, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments. Available at https://doi.org/10.17487/RFC6967

HTML (ISO 690 compliant)

Preview:

IETF RFC 6967, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments. Available at https://doi.org/10.17487/RFC6967

Snippet:

<span class="citation"><cite>IETF RFC 6967</cite>, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments. Available at <a href="https://doi.org/10.17487/RFC6967" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6967</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6967, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments
doi: 10.17487/RFC6967
url: https://doi.org/10.17487/RFC6967

Snippet:

<li>
<cite id="bib-rfc6967">IETF RFC 6967</cite>, Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments
<span class="doi">10.17487/RFC6967</span>
</li>

Referenced By

IETF RFC 7269 [Active*]
IETF RFC 9099 [Active*]