[lisp] Wireguard and LISP [Was: Virtual meeting]

Hi all

I´d like to discuss the following topic.

We have been prototyping a LISP-based control plane for Wireguard [1] using
the Open Overlay Router implementation [2].

Wireguard is disrupting the field of VPNs by providing an easy-to-use,
high-performance and mobility-aware VPNs. Wiregard aims to replace
traditional IPsec and TLS-based VPNs, and it is open-source and available
in the Linux Kernel.

Wireguard does not have a control-plane, this means that Wireguard nodes
need to be manually configured before being able to exchange packets.
Manual configuration typically involved provisioning public keys using
out-of-band mechanisms. In this context, we have architected and prototyped
a control-plane for Wireguard using LISP, this enables automatic and secure
retrieval of public keys using LISP.

This raises -hopefully- interesting questions, how should LISP support
multiple data-planes? In this context Wireguard can be seen just as another
data-plane. Additionally, Wiregard provides a secure data-plane, can we
learn something from them?

Albert

--

[1] https://www.wireguard.com
[2] https://openoverlayrouter.org

---------- Forwarded message ---------
From: Joel M. Halpern <jmh@joelhalpern.com>
Date: Tue, Mar 10, 2020 at 10:44 PM
Subject: [lisp] Virtual meeting
To: lisp@ietf.org <lisp@ietf.org>

Vancouver has been cancelled.
We have several ways we can hold a virtual interim.  (The chairs have a
webex available, and Fabio has offered one.)

I understand that folks want to present their work.
But what I am looking for if we are going to get folks together is
actual engagement on the list.  Indication that there are things worth
discussing.

Yours,
Joel

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp