[IPsec] New version of IPsec Cluster Solution Draft posted [earliar, HA design team started]
Raj Singh <rsjenwar@gmail.com> Mon, 19 July 2010 10:24 UTC
Return-Path: <rsjenwar@gmail.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 08A923A67EA for <ipsec@core3.amsl.com>; Mon, 19 Jul 2010 03:24:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y0EIYEYm5FvZ for <ipsec@core3.amsl.com>; Mon, 19 Jul 2010 03:24:01 -0700 (PDT)
Received: from mail-qw0-f44.google.com (mail-qw0-f44.google.com [209.85.216.44]) by core3.amsl.com (Postfix) with ESMTP id BDDC53A67B8 for <ipsec@ietf.org>; Mon, 19 Jul 2010 03:24:00 -0700 (PDT)
Received: by qwe5 with SMTP id 5so1914170qwe.31 for <ipsec@ietf.org>; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=tdgJFsycuwaw6zL1ayZX4CKFQ/As7+9hPBIXUCaRBxo=; b=mBk2HIGSN9NpXL8jdzPuqQI329p22cUF3hzELJBMC6uLGNfZC+1FwSUNaKtOIGIOeZ xfETwx2kuhc6SaVIyXsEx4orLGwKYt3ca2oT7ILocmsqWEQZ3V1Z8vR5jt+9DTufWIfp PAHDKblV+WdB9zgokbz6sKxtnshmNcJIGx3aU=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=RtASf48fBd//jTEWAMGxAqkkGqm4UP+M+Dm5ya8lXQvVRBpamr+nRIPHUgKPL2TcgT K6pqJgfyE3VxfPnbtqOgUxnC4OO4dpEq3cKm6FWMf093W80BxvqkIk2cIfDPhGhVumvB W7ps95eVpuhIqWs21o1cGZYHErO5U/LJNysDg=
MIME-Version: 1.0
Received: by 10.224.72.37 with SMTP id k37mr4532333qaj.398.1279535054343; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
Received: by 10.229.227.211 with HTTP; Mon, 19 Jul 2010 03:24:14 -0700 (PDT)
Date: Mon, 19 Jul 2010 15:54:14 +0530
Message-ID: <AANLkTinsIhov3aVuKqVRf7gmHG5oG70e5OoM6yWc7NAQ@mail.gmail.com>
From: Raj Singh <rsjenwar@gmail.com>
To: IPsecme WG <ipsec@ietf.org>
Content-Type: multipart/alternative; boundary="00c09f899227645e5c048bbaf8a8"
Subject: [IPsec] New version of IPsec Cluster Solution Draft posted [earliar, HA design team started]
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Jul 2010 10:24:03 -0000
Hi Group, We have come up with new version of the "IPsec Cluster Solution"draft addressing comments which we got, the new version can be find here: http://trac.tools.ietf.org/wg/ipsecme/trac/wiki/TempDocs.<http://trac.tools.ietf.org/wg/ipsecme/trac/wiki/TempDocs> We will submit the draft as soon as submission window re-opens. Please read the draft and give you comments before Maastricht meeting. Regards, Raj On Sun, Jul 11, 2010 at 4:39 PM, Raj Singh <rsjenwar@gmail.com> wrote: > Hi Group, > > We would like to present the HA design team's output for IPsec Cluster > Solution Draft before Maastricht meeting as > http://tools.ietf.org/id/draft-kagarigi-ipsecme-ikev2-windowsync-03.txt > > This draft solves the main issues of IPsec Cluster Problem Statement draft > using a simple IKEv2 protocol extension, and provides implementation advice > for other issues. > > I sincerely thanks all the team members of HA Design Team for attending all > internal meetings and giving their valuable inputs and doing reviews. > My special thanks to Yaron and Yoav for their expert inputs and comments. I > would also like to thanks Paul for providing TeamSpeak server for conducting > internal design team meetings. > > The team started with these draft as inputs. > 1. http://tools.ietf.org/html/draft-kagarigi-ipsecme-ikev2-windowsync-00 - > G. Kalyani > 2. > http://www.ietf.org/id/draft-arora-ipsecme-ikev2-alt-tunnel-addresses-00.txtJ. Arora > 3. http://www.ietf.org/id/draft-ietf-ipsecme-ipsec-ha-09.txt - Y. Nir - As > Input > > The current draft is based on [1], then it got enhanced and extended with > all team's contribution. > The problem and solution presented in [2], is more towards load balancing > than HA cluster. > Also this problem can be solved using IKEv2 REDIRECT mechanism. Also, this > solution requires IKEv2 > protocol change. So, this is deferred for now. > > I request the IPsecME group members to review and give comments on > http://tools.ietf.org/id/draft-kagarigi-ipsecme-ikev2-windowsync-03.txt, > so that we can discuss this draft with more details in Maastricht meeting. > > Regards, > Raj Singh > > On Fri, Jun 18, 2010 at 11:56 AM, Yaron Sheffer <yaronf.ietf@gmail.com>wrote: > >> Hi, >> >> As promised, we have started a design team on IPsec HA. Paul and I have >> asked Raj Singh to lead the team. His job is to make sure that the team >> meets regularly in the next few weeks, and produces a good output document >> before the Maastricht face-to-face meeting. >> >> The initial membership of the team is: >> >> - Raj Singh (rsjenwar@gmail.com, lead) >> >> - Jitender Arora (JArora@acmepacket.com) >> - Min Huang (huangmin@huaweisymantec.com) >> - Dacheng Zhang (zhangdacheng@huawei.com) >> - Yoav Nir (ynir@checkpoint.com) >> - Yaron Sheffer (yaronf.ietf@gmail.com, observer) >> >> According to IETF rules (see >> http://www.ietf.org/iesg/statement/design-team.htm), every design team >> needs to have a mission statement. So here it is: >> >> Produce a high-level solution document that covers most or all of the >> issues raised by the HA problem statement (draft-ietf-ipsecme-ipsec-ha). Any >> solution should be applicable to different deployments, in order to >> accommodate the variety of existing and future IPsec products. Solutions >> should have a similar level of security as the IKE/IPsec suite. >> >> Another process reminder: the design team's output serves as input to the >> full WG, essentially like an individual draft. So all protocol decisions >> will eventually be made by the working group. >> >> Thanks, >> Yaron >> >> _______________________________________________ >> IPsec mailing list >> IPsec@ietf.org >> https://www.ietf.org/mailman/listinfo/ipsec >> > >
- [IPsec] New version of IPsec Cluster Solution Dra… Raj Singh
- Re: [IPsec] New version of IPsec Cluster Solution… Yaron Sheffer
- Re: [IPsec] New version of IPsec Cluster Solution… Paul Hoffman
- Re: [IPsec] New version of IPsec Cluster Solution… Yaron Sheffer
- Re: [IPsec] New version of IPsec Cluster Solution… Paul Hoffman
- Re: [IPsec] New version of IPsec Cluster Solution… Yoav Nir