Hello, I believe the working group should work on IPsec performance and scalability issues. I agree with most of what is stated in the draft, but also have concerns about the scalability of the proposed solution.
In draft-ponchon-ipsecme-anti-replay-subspaces-00, we tried to extend the problem statement and discuss why a purely multi-sa approach to solving anti-replay performance-related issues might results in scalability issues caused by having too many Child SAs. During the presentation of our draft, multiple folks commented at the mic that they agree on the scalability issues of multi-core, multi-QoS and multi-path put together. Since I doubt the working group would have the time and energy to work on two different solutions, my support to this draft's adoption is conditioned to whether the authors plan to consider addressing our concerns listed above. - Pierre Le 09/11/2022 18:35, « IPsec au nom de Tero Kivinen » <[email protected] au nom de [email protected]> a écrit : This is two week working group adoption call for the draft-pwouters-ipsecme-multi-sa-performance. If you support adoption of this document to the IPsecME WG send email to the list before the 2022-11-24. Note, that this is starting point for the document, so if you have any comments send them to list also. There is no specific item for this in our charter, but this should (now) be small enough change to fit in the "minor extensions" category... -- [email protected] _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
