Host Identity Protocol BOF (hipbof)
Monday, November 10 at 0900-1130
================================
CHAIRS: Pekka Nikander <
[email protected]>
David Ward <
[email protected]>
AGENDA:
5 min Intro and Agenda Bashing Chairs
25 min Introduction to HIP Pekka Nikander
20 min Demo of current implementations Demo team
- HIP base exchange
- HIP mobility between IPv4 and IPv6
- HIP based IPv4/IPv6 API bridging
10 min Status of current work Chairs
50 min Charter discussion All
10 min Summary and next steps Chairs
DESCRIPTION:
Host Identity Protocol (HIP) proposes a solution for separating the
end-point identifier and locator roles of IP addresses. It introduces
a new Host Identity (HI) name space, based on public keys. The public
keys are typically, but not necessarily, self generated.
The HIP protocol permits IPv6 and IPv4 hosts to identify each other
based on the public keys, to establish a pair of host-to-host ESP
security associations using these public keys, and to run both IPv4 and
IPv6 applications side-by-side independent of the underlying type of
connectivity. It also allows many IPv4 applications to communicate
directly with IPv6 applications, and vice versa.
Currently, the HIP base protocol works well with any pair of co-operating
end-hosts. However, to be more useful and more widely deployable, HIP
needs some support from the existing infrastructure and a new piece of
infrastructure, called the HIP rendezvous server or the HIP proxy.
+--------------------------------------------------------+
| The purpose of the proposed Working Group is to define |
| the required infrastructure elements that are needed |
| for HIP experimentation on a wide scale. |
+--------------------------------------------------------+
In particular, the objective of the proposed working working group is to
complete the DNS, mobility, multi-homing, and NAT traversal work on HIP,
and produce Experimental RFCs for these. If necessary, the WG can also
revise the base HIP protocol specification, but only if the changes do
not unnecessarily increase the complexity of the base protocol.
Additionally, the proposed working group aims to standardize, together
with the IPsec Working Group, a set of small additions to IPsec ESP.
The goal of these additions is to allow HIP to utilize existing ESP
implementations. The same additions would also be potentially benefit
for other multi-addressing mechanisms, such as Mobile IP.
READING LIST:
draft-moskowitz-hip-arch-04.txt (soon -05.txt)
draft-moskowitz-hip-07.txt (soon -08.txt)
draft-nikander-hip-mm-00.txt
draft-nikander-esp-beet-mode-00.txt
http://www.tml.hut.fi/~pnr/HIP/hip_charter_proposal.txt
MAILING LIST:
General Discussion:
[email protected]
Send mail to:
[email protected]
With a subject line: subscribe
List archive:
http://honor.trusecure.com/pipermail/hipsec/
Host Identity Protocol (HIP)
The following are charter items for the working group:
0) If the architecture and base protocol specifications have not been
submitted to the IESG by the time the WG is formally created, complete
the specifications and submit them to the IESG.
1) Complete the basic mobility and multi-homing support for HIP.
This work will use draft-nikander-hip-mm-00.txt as a starting point.
While this work partially overlaps the work in Mobile IP and Multi6
Working Groups, it is very different in the sense that is based on the
Experimental HIP specification, and cannot function without it.
2) Define DNS interactions, including how to store HIP Host Identifiers
into the DNS.
3) Define NAT traversal for HIP.
The NAT traversal must work with mobile and multi-homed HIP hosts.
The mechanism MAY require changes to existing NAT boxes.
4) Define a HIP rendezvous and proxy mechanism.
A HIP rendezvous mechanism is needed to provide initial connectivity
with fast moving HIP hosts, and to allow simultaneously moving hosts
to find each other after con-current movements.
Additionally, HIP hosts are currently able to talk to non-HIP hosts
using standard IPv6 or IPv4, including MIPv6 or MIPv4. However, if
they do so, the HIP hosts do not benefit from the mobility and
multi-homing aspects of HIP. A proxy would allow a HIP host to talk
to a non-HIP host, but still use HIP mobility and multi-homing.
It looks like these two functions would be fairly similar, and
therefore they are currently grouped together. If the perception of
similarity appears to be wrong, the working group may decide to
separate the functions.
5) Optionally, define a mechanism that allows any Host Identifier to be
as a seach key to find a DNS name and/or an IP address. Such a
mechanism could be based on Distributed Hash Tables.
6) If needed to complete any of the items above, revise the base protocol
specification. If any such revisions are needed, care must be taken
not to unnecessarily increase the complexity of the base protocol.
The Working Group bases all the work on the base HIP protocol specifications
(as defined above).
Specifically out of scope is comparison of HIP to existing or other proposed
IP based mobility, multi-homing, other multi-addressing, security, or NAT
traversal solutions. This does *not* mean that such comparison should not
be made (indeed, such comparisons would be very valuable), but that they are
outside of the scope of the working group, and should not be discussed at
the working group mailing list. Announcements of any completed works in
those areas are acceptable.
Goals and Milestones:
Nov 03 Complete the architecture and and base protocol specifications
and submit them to the IESG to be considered as Experimental.
Nov 03 First version of the HIP basic mobility and multi-homing mechanism
specification, using draft-nikander-hip-mm-00.txt as a starting
point.
Nov 03 First version of the ESP additions specification, using
draft-nikander-esp-beet-mode-00.txt as a starting point.
Dec 03 First version of the HIP DNS interactions specification.
Jan 04 First version of the HIP NAT traversal specification.
Jan 04 Combined HIP and IPsec WG LC on the ESP additions specification.
Feb 04 First version of HIP rendezvous and proxy mechanism specification.
Mar 04 Submit the ESP additions specification to the IESG for Standards
Track.
Mar 04 WG LC on the HIP DNS interactions specification.
Apr 04 WG LC on the HIP basic mobility and multihoming specification
together with the HIP NAT traversal specification.
May 04 Submit the HIP DNS interactions specification to the IESG for
Experimental.
Jun 04 Submit the HIP basic mobility and multihoming specification
together with the HIP NAT traversal specification to the IESG for
Experimental.
Jul 04 WC LC on the HIP rendezvous and proxy mechanism specification.
Sep 04 Submit the HIP rendezvous and proxy mechanism specification to
the IESG for Experimental.
Nov 04 Close or recharter the WG.
Current Internet-Drafts:
draft-moskowitz-hip-arch-04.txt (soon -05.txt)
draft-moskowitz-hip-07.txt (soon -08.txt)
draft-nikander-hip-mm-00.txt
draft-nikander-esp-beet-mode-00.txt
Proposed WG items:
draft-ietf-hip-mm-XX.txt (HIP basic mobility and multihoming)
draft-ietf-hip-esp-beet-XX.txt (ESP additions)
draft-ietf-hip-dns-XX.txt (HIP DNS interactions)
draft-ietf-hip-nat-XX.txt (HIP NAT traversal)
draft-ietf-hip-rendezvous-XX.txt (HIP rendezvous and proxy)