Re: [Idr] Issue 1: IPSEC related drafts

[Paul Wouters <[e-mail]>]

On Tue, 11 Jun 2019, Hu, Jun (Nokia - US/Mountain View) wrote:

I'll be at IETF105, so as long as there is no conflict I can attend a
meeting, whether WG or side meeting. I'll have to read up on some of
these documents though to ensure I understand the items for discussion.

Paul

> From: Idr <[e-mail]> On Behalf Of Susan Hares
> Sent: Monday, June 10, 2019 2:14 PM
> To: [e-mail]; [e-mail]
> Subject: [Idr] Issue 1: IPSEC related drafts
> 
>  
> 
> Greetings:
> 
>  
> 
> At IETF 104, we consider BGP VPNs supporting asking for TLVS in draft-ietf-idr-tunnel-encaps.    After hearing all the discussion, the BESS, IDR and
> I2RS WG chairs discussed what to do with the following
> 
>  
> 
> Drafts considered:
>
>  *  draft-sajassi-bess-secure-evpn-01.txt,
>  *  draft-hujun-idr-bgp-ipsec-00.txt,
>  *  draft-dunbar-idr-sdwan-port-safi-01.txt
> 
> relating drafts/ Supporting drafts:
>
>  *  draft-carrell-ipsecme-controller-ike-00.txt
>  *  draft-ietf-i2nsf-sdn-ipsec-flow-protection-04.txt
>  *  draft-ietf-idr-tunnel-encaps-12.txt
> 
> Basic topologies:
> 
>                        Ipsec tunnels  
> 
>      [rtrA] -------------------- [rtrB]
> 
>          |     \                           /      | 
> 
>          |       \ -- RR1 -------/     | ipsec tunnels
> 
>          |    / -----| |------\         |
> 
>      [rtrC]------------------- [rtrD]
> 
>  
> 
>  
> 
> The decision is that
>
>  *  TLVs mechanisms for new TLVS related draft-ietf-idr-tunnel-encaps should be moved to drafts with just the mechanisms. 
>      +  All three mechanisms could be included in the TLVs or portions.
>      +  The use case and the SA mechanisms can stay in BESS or IDR (depending on what is appropriate).
>  *  The RTG Chairs are not experts on Security associations, so that we will try to schedule a unique session at IETF 105 where security experts can
>     help the RTG chairs (BESS, IDR) review the Security association mechanisms. 
>      +  We’d love to have the second co-chair of I2NSF (Yoav NIR) and someone from IPSECME.
>      +  We’ll invite IPSEC experts.
>      +  We encourage the authors of the 3 drafts to attend this session in IETF 105 and present their security-association mechanisms.
>  *  The NLRI/SAFI in draft-dunbar-idr-sdwan-port-safi is unique and can be requested as IDR or ISE draft.
> 
> This email has two request:
>
>  *  WG or authors please send any questions to Susan Hares,
>  *  The IDR WG is encouraged to discuss requirements or needs in preparation for the TLV selection, and
>  *  Please help me secure 2 IPSEC experts to attend this session.
> 
>  
> 
> Susan Hares
> 
>  
> 
> 
>