Re: [IPsec] Discussion about solving ESP limitations with parallel processing, handling QoS classes etc.

I'm interested and would attend.

Thanks,
Chris.

Steffen Klassert <steffen.klassert@secunet.com> writes:

> Hi,
>
> over the last years, quite some work was done from different parties
> to overcome some limitations of ESP to handle parallel datapaths,
> QoS classes etc.
>
> Chronologically ordered, we have:
>
> November 2019:
>
> https://datatracker.ietf.org/doc/html/draft-mglt-ipsecme-multiple-child-sa-00
>
> That was replaced in November 2020 by:
>
> htpps://datatracker.ietf.org/doc/draft-pwouters-multi-sa-performance/
>
> At IETF 108 in July 2020 there was this proposal:
>
> https://datatracker.ietf.org/meeting/108/materials/slides-108-ipsecme-proposed-improvements-to-esp-01
>
> October 2022:
>
> https://www.ietf.org/archive/id/draft-ponchon-ipsecme-anti-replay-subspaces-00.txt
>
> Aditionally, Google published the PSP Security Protocol (PSP) for
> datacenters in April 2022:
>
> https://github.com/google/psp
>
> All these proposals try to solve related problems in different ways.
> They all have pros and cons, but the number of proposals shows that
> there is a real need to solve these problems better sooner than later.
>
> So instead of creating even more proposals, we maybe should take a
> step back and try to do a clear problem statement. Based on that
> we then can rethink about possible solutions.
>
> The next possibiltiy to sit together for an 'in person' discussion
> would be at the IETF Meeting in London. Is there anyone interested
> in a sidemeeting about that topic?
>
> Steffen
>
>
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec

Re: [IPsec] Discussion about solving ESP limitations with parallel processing, handling QoS classes etc.

Attachment: signature.asc