Re: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing

"Murthy N Srinivas-B22237" <B22237@freescale.com> Tue, 08 December 2009 17:40 UTC

Return-Path: <B22237@freescale.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 009C73A68AD for <ipsec@core3.amsl.com>; Tue, 8 Dec 2009 09:40:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ro8SJObMVIwE for <ipsec@core3.amsl.com>; Tue, 8 Dec 2009 09:40:30 -0800 (PST)
Received: from az33egw02.freescale.net (az33egw02.freescale.net [192.88.158.103]) by core3.amsl.com (Postfix) with ESMTP id 8F99E3A67A7 for <ipsec@ietf.org>; Tue, 8 Dec 2009 09:40:30 -0800 (PST)
Received: from de01smr02.am.mot.com (de01smr02.freescale.net [10.208.0.151]) by az33egw02.freescale.net (8.14.3/az33egw02) with ESMTP id nB8He3Cw017235 for <ipsec@ietf.org>; Tue, 8 Dec 2009 10:40:08 -0700 (MST)
Received: from zin33exm29.fsl.freescale.net (zin33exm29.ap.freescale.net [10.232.192.28]) by de01smr02.am.mot.com (8.13.1/8.13.0) with ESMTP id nB8Hj2v0005413 for <ipsec@ietf.org>; Tue, 8 Dec 2009 11:45:03 -0600 (CST)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA782D.779233DE"
Date: Tue, 08 Dec 2009 23:09:58 +0530
Message-ID: <2E13B90533934A499FD727F9B353613C5160E5@zin33exm29.fsl.freescale.net>
In-Reply-To: <51eafbcb0912070731w2c13d799va76a43f6b3bb6aa5@mail.gmail.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing
Thread-Index: Acp3Um0vgjSDO8YsRdmhjW3sU7T/1QA2rXNg
References: <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF88E04F1@il-ex01.ad.checkpoint.com><4B187F5C.6050102@sandelman.ca> <51eafbcb0912070731w2c13d799va76a43f6b3bb6aa5@mail.gmail.com>
From: Murthy N Srinivas-B22237 <B22237@freescale.com>
To: Daniel Migault <mglt.ietf@gmail.com>, Michael Richardson <mcr@sandelman.ca>
Cc: ipsec@ietf.org
Subject: Re: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Dec 2009 17:40:35 -0000

I would like to coauthor IKE/IPsec high availability and load sharing.
Looks like a challenging and intereting problem.
 
 
Thanks
-ns murthy


________________________________

From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On Behalf
Of Daniel Migault
Sent: Monday, December 07, 2009 9:02 PM
To: Michael Richardson
Cc: ipsec@ietf.org
Subject: Re: [IPsec] Proposed work item: IKE/IPsec high availability
andload sharing


I will also review this document.
Regards, 
Daniel


On Fri, Dec 4, 2009 at 4:17 AM, Michael Richardson <mcr@sandelman.ca>
wrote:


	Yaron Sheffer wrote:
	

		This work item will define the problem statement and
requirements for a solution that allows interoperable HA/LS device
groups. Mixed-vendor clusters are specifically out of scope; but
single-vendor clusters should be fully interoperable with other vendors'
devices or clusters. The main challenge is to overcome the strict use of
sequence numbers in both IPsec and IKE, in HA and LS scenarios.
Following the Hiroshima discussion, the WI is initially focused on
defining the problem, rather than a particular solution.
		
		 
		Proposed starting point:
http://tools.ietf.org/id/draft-nir-ipsecme-ipsecha-00.txt.
		
		 
		Please reply to the list:
		


	It is interesting work, and may well be valuable.
	It is not a priority to me, and I would not have time to work on
it.
	I might read a WG FC, and I might respond to threads, if I came
across
	them. 




	_______________________________________________
	IPsec mailing list
	IPsec@ietf.org
	https://www.ietf.org/mailman/listinfo/ipsec
	




-- 
Daniel Migault
Orange Labs -- Security
+33 6 70 72 69 58