Last Call: <draft-ietf-ipsecme-multi-sa-performance-06.txt> (IKEv2 support for per-resource Child SAs) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Wed, 20 March 2024 06:03 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-ipsecme-multi-sa-performance-06.txt> (IKEv2 support for per-resource Child SAs) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
CC: draft-ietf-ipsecme-multi-sa-performance@ietf.org, ipsec@ietf.org, ipsecme-chairs@ietf.org, kivinen@iki.fi, rdd@cert.org
Reply-To: last-call@ietf.org
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <171091458217.59486.15425119912169115328@ietfa.amsl.com>
Date: Tue, 19 Mar 2024 23:03:02 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/2C62OTqjfzbgQfJ1EMgeRkQp0HE>

The IESG has received a request from the IP Security Maintenance and
Extensions WG (ipsecme) to consider the following document: - 'IKEv2 support
for per-resource Child SAs'
  <draft-ietf-ipsecme-multi-sa-performance-06.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2024-04-02. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   This document defines two Notify Message Type Payloads for the
   Internet Key Exchange Protocol Version 2 (IKEv2) to support the
   negotiation of multiple Child SAs with the same Traffic Selectors
   used on different resources, such as CPUs, to increase bandwidth of
   IPsec traffic between peers.

   The SA_RESOURCE_INFO notification is used to convey information that
   the negotiated Child SA and subsequent new Child SAs with the same
   Traffic Selectors are a logical group of Child SAs where most or all
   of the Child SAs are bound to a specific resource, such as a specific
   CPU.  The TS_MAX_QUEUE notify conveys that the peer is unwilling to
   create more additional Child SAs for this particular negotiated
   Traffic Selector combination.

   Using multiple Child SAs with the same Traffic Selectors has the
   benefit that each resource holding the Child SA has its own Sequence
   Number Counter, ensuring that CPUs don't have to synchronize their
   cryptographic state or disable their packet replay protection.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-multi-sa-performance/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-ipsecme-multi-sa-performan… The IESG