Re: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing
"Murthy N Srinivas-B22237" <B22237@freescale.com> Tue, 08 December 2009 17:40 UTC
Return-Path: <B22237@freescale.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 009C73A68AD for <ipsec@core3.amsl.com>; Tue, 8 Dec 2009 09:40:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ro8SJObMVIwE for <ipsec@core3.amsl.com>; Tue, 8 Dec 2009 09:40:30 -0800 (PST)
Received: from az33egw02.freescale.net (az33egw02.freescale.net [192.88.158.103]) by core3.amsl.com (Postfix) with ESMTP id 8F99E3A67A7 for <ipsec@ietf.org>; Tue, 8 Dec 2009 09:40:30 -0800 (PST)
Received: from de01smr02.am.mot.com (de01smr02.freescale.net [10.208.0.151]) by az33egw02.freescale.net (8.14.3/az33egw02) with ESMTP id nB8He3Cw017235 for <ipsec@ietf.org>; Tue, 8 Dec 2009 10:40:08 -0700 (MST)
Received: from zin33exm29.fsl.freescale.net (zin33exm29.ap.freescale.net [10.232.192.28]) by de01smr02.am.mot.com (8.13.1/8.13.0) with ESMTP id nB8Hj2v0005413 for <ipsec@ietf.org>; Tue, 8 Dec 2009 11:45:03 -0600 (CST)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA782D.779233DE"
Date: Tue, 08 Dec 2009 23:09:58 +0530
Message-ID: <2E13B90533934A499FD727F9B353613C5160E5@zin33exm29.fsl.freescale.net>
In-Reply-To: <51eafbcb0912070731w2c13d799va76a43f6b3bb6aa5@mail.gmail.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing
Thread-Index: Acp3Um0vgjSDO8YsRdmhjW3sU7T/1QA2rXNg
References: <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF88E04F1@il-ex01.ad.checkpoint.com><4B187F5C.6050102@sandelman.ca> <51eafbcb0912070731w2c13d799va76a43f6b3bb6aa5@mail.gmail.com>
From: Murthy N Srinivas-B22237 <B22237@freescale.com>
To: Daniel Migault <mglt.ietf@gmail.com>, Michael Richardson <mcr@sandelman.ca>
Cc: ipsec@ietf.org
Subject: Re: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Dec 2009 17:40:35 -0000
I would like to coauthor IKE/IPsec high availability and load sharing. Looks like a challenging and intereting problem. Thanks -ns murthy ________________________________ From: ipsec-bounces@ietf.org [mailto:ipsec-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Monday, December 07, 2009 9:02 PM To: Michael Richardson Cc: ipsec@ietf.org Subject: Re: [IPsec] Proposed work item: IKE/IPsec high availability andload sharing I will also review this document. Regards, Daniel On Fri, Dec 4, 2009 at 4:17 AM, Michael Richardson <mcr@sandelman.ca> wrote: Yaron Sheffer wrote: This work item will define the problem statement and requirements for a solution that allows interoperable HA/LS device groups. Mixed-vendor clusters are specifically out of scope; but single-vendor clusters should be fully interoperable with other vendors' devices or clusters. The main challenge is to overcome the strict use of sequence numbers in both IPsec and IKE, in HA and LS scenarios. Following the Hiroshima discussion, the WI is initially focused on defining the problem, rather than a particular solution. Proposed starting point: http://tools.ietf.org/id/draft-nir-ipsecme-ipsecha-00.txt. Please reply to the list: It is interesting work, and may well be valuable. It is not a priority to me, and I would not have time to work on it. I might read a WG FC, and I might respond to threads, if I came across them. _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec -- Daniel Migault Orange Labs -- Security +33 6 70 72 69 58
- [IPsec] Proposed work item: IKE/IPsec high availa… Yaron Sheffer
- Re: [IPsec] Proposed work item: IKE/IPsec high av… Scott C Moonen
- Re: [IPsec] Proposed work item: IKE/IPsec high av… Michael Richardson
- Re: [IPsec] Proposed work item: IKE/IPsec high av… Daniel Migault
- Re: [IPsec] Proposed work item: IKE/IPsec high av… Jean-Michel Combes
- Re: [IPsec] Proposed work item: IKE/IPsec high av… V Jyothi-B22245
- Re: [IPsec] Proposed work item: IKE/IPsec high av… Murthy N Srinivas-B22237