[IPsec] New version of IPsec Cluster Solution Draft posted [earliar, HA design team started]

Raj Singh <rsjenwar@gmail.com> Mon, 19 July 2010 10:24 UTC

Return-Path: <rsjenwar@gmail.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 08A923A67EA for <ipsec@core3.amsl.com>; Mon, 19 Jul 2010 03:24:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y0EIYEYm5FvZ for <ipsec@core3.amsl.com>; Mon, 19 Jul 2010 03:24:01 -0700 (PDT)
Received: from mail-qw0-f44.google.com (mail-qw0-f44.google.com [209.85.216.44]) by core3.amsl.com (Postfix) with ESMTP id BDDC53A67B8 for <ipsec@ietf.org>; Mon, 19 Jul 2010 03:24:00 -0700 (PDT)
Received: by qwe5 with SMTP id 5so1914170qwe.31 for <ipsec@ietf.org>; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=tdgJFsycuwaw6zL1ayZX4CKFQ/As7+9hPBIXUCaRBxo=; b=mBk2HIGSN9NpXL8jdzPuqQI329p22cUF3hzELJBMC6uLGNfZC+1FwSUNaKtOIGIOeZ xfETwx2kuhc6SaVIyXsEx4orLGwKYt3ca2oT7ILocmsqWEQZ3V1Z8vR5jt+9DTufWIfp PAHDKblV+WdB9zgokbz6sKxtnshmNcJIGx3aU=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=RtASf48fBd//jTEWAMGxAqkkGqm4UP+M+Dm5ya8lXQvVRBpamr+nRIPHUgKPL2TcgT K6pqJgfyE3VxfPnbtqOgUxnC4OO4dpEq3cKm6FWMf093W80BxvqkIk2cIfDPhGhVumvB W7ps95eVpuhIqWs21o1cGZYHErO5U/LJNysDg=
MIME-Version: 1.0
Received: by 10.224.72.37 with SMTP id k37mr4532333qaj.398.1279535054343; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
Received: by 10.229.227.211 with HTTP; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
Date: Mon, 19 Jul 2010 15:54:14 +0530
Message-ID: <AANLkTinsIhov3aVuKqVRf7gmHG5oG70e5OoM6yWc7NAQ@mail.gmail.com>
From: Raj Singh <rsjenwar@gmail.com>
To: IPsecme WG <ipsec@ietf.org>
Content-Type: multipart/alternative; boundary="00c09f899227645e5c048bbaf8a8"
Subject: [IPsec] New version of IPsec Cluster Solution Draft posted [earliar, HA design team started]
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Jul 2010 10:24:03 -0000

Hi Group,

We have come up with new version of the "IPsec Cluster Solution"draft
addressing comments which we got, the new version can be find here:
http://trac.tools.ietf.org/wg/ipsecme/trac/wiki/TempDocs.<http://trac.tools.ietf.org/wg/ipsecme/trac/wiki/TempDocs>
We will submit the draft as soon as submission window re-opens.
Please read the draft and give you comments before Maastricht meeting.

Regards,
Raj


On Sun, Jul 11, 2010 at 4:39 PM, Raj Singh <rsjenwar@gmail.com> wrote:

> Hi Group,
>
> We would like to present the HA design team's output for IPsec Cluster
> Solution Draft before Maastricht meeting as
> http://tools.ietf.org/id/draft-kagarigi-ipsecme-ikev2-windowsync-03.txt
>
> This draft solves the main issues of IPsec Cluster Problem Statement draft
> using a simple IKEv2 protocol extension, and  provides implementation advice
> for other issues.
>
> I sincerely thanks all the team members of HA Design Team for attending all
> internal meetings and giving their valuable inputs and doing reviews.
> My special thanks to Yaron and Yoav for their expert inputs and comments. I
> would also like to thanks Paul for providing TeamSpeak server for conducting
> internal design team meetings.
>
> The team started with these draft as inputs.
> 1. http://tools.ietf.org/html/draft-kagarigi-ipsecme-ikev2-windowsync-00 -
> G. Kalyani
> 2.
> http://www.ietf.org/id/draft-arora-ipsecme-ikev2-alt-tunnel-addresses-00.txtJ. Arora
> 3. http://www.ietf.org/id/draft-ietf-ipsecme-ipsec-ha-09.txt - Y. Nir - As
> Input
>
> The current draft is based on [1], then it got enhanced and extended with
> all team's contribution.
> The problem and solution presented in [2], is more towards load balancing
> than HA cluster.
> Also this problem can be solved using IKEv2 REDIRECT mechanism. Also, this
> solution requires IKEv2
> protocol change. So, this is deferred for now.
>
> I request the IPsecME group members to review and give comments on
> http://tools.ietf.org/id/draft-kagarigi-ipsecme-ikev2-windowsync-03.txt,
> so that we can discuss this draft with more details in Maastricht meeting.
>
> Regards,
> Raj Singh
>
> On Fri, Jun 18, 2010 at 11:56 AM, Yaron Sheffer <yaronf.ietf@gmail.com>wrote:
>
>> Hi,
>>
>> As promised, we have started a design team on IPsec HA. Paul and I have
>> asked Raj Singh to lead the team. His job is to make sure that the team
>> meets regularly in the next few weeks, and produces a good output document
>> before the Maastricht face-to-face meeting.
>>
>> The initial membership of the team is:
>>
>> - Raj Singh (rsjenwar@gmail.com, lead)
>>
>> - Jitender Arora (JArora@acmepacket.com)
>> - Min Huang (huangmin@huaweisymantec.com)
>> - Dacheng Zhang (zhangdacheng@huawei.com)
>> - Yoav Nir (ynir@checkpoint.com)
>> - Yaron Sheffer (yaronf.ietf@gmail.com, observer)
>>
>> According to IETF rules (see
>> http://www.ietf.org/iesg/statement/design-team.htm), every design team
>> needs to have a mission statement. So here it is:
>>
>> Produce a high-level solution document that covers most or all of the
>> issues raised by the HA problem statement (draft-ietf-ipsecme-ipsec-ha). Any
>> solution should be applicable to different deployments, in order to
>> accommodate the variety of existing and future IPsec products. Solutions
>> should have a similar level of security as the IKE/IPsec suite.
>>
>> Another process reminder: the design team's output serves as input to the
>> full WG, essentially like an individual draft. So all protocol decisions
>> will eventually be made by the working group.
>>
>> Thanks,
>>        Yaron
>>
>> _______________________________________________
>> IPsec mailing list
>> IPsec@ietf.org
>> https://www.ietf.org/mailman/listinfo/ipsec
>>
>
>