RE: IPCOMP and IPSEC

Avram Shacham <shacham@cisco.com> Fri, 05 June 1998 05:30 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id BAA27485 for ipsec-outgoing; Fri, 5 Jun 1998 01:30:50 -0400 (EDT)
Message-Id: <3.0.2.32.19980604224547.006a18ec@airedale.cisco.com>
X-Sender: shacham@airedale.cisco.com
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.2 (32)
Date: Thu, 04 Jun 1998 22:45:47 -0700
To: Robert Moskowitz <rgm-sec@htt-consult.com>
From: Avram Shacham <shacham@cisco.com>
Subject: RE: IPCOMP and IPSEC
Cc: ipsec@tis.com, ippcp@external.cisco.com, Stephen Waters <Stephen.Waters@digital.com>
In-Reply-To: <3.0.5.32.19980604120133.00a58c50@homebase.htt-consult.com>
References: <250F9C8DEB9ED011A14D08002BE4F64C01A23E5D@wade.reo.dec.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

At 12:01 PM 6/4/98 -0400, Robert Moskowitz wrote:

>TCPng needs to add intelligent compression (that is interact with the
>application).  There is could have history.

In previous discussions of compression at level 4, several people correctly
pointed that TCP-compression may reduce the number of IP packets while IP
compression can only reduce the size of each packet. Fewer IP packets may
enhance performance even more than utilizing compression history.

But - and this may be a BIG implementation obstacle - the current
compression algorithms require ~16KB of compression and decompression
context for _each_ connection.  In other words, 16KB per socket...

Also, UDP is still a useful L4 protocol and no stateful compression is
possible here either.

Regards,
avram