Re: [IPsec] [I2nsf] draft-abad-i2nsf-sdn-ipsec-flow-protection

2017-07-20 Thread Valery Smyslov
Hi Gabriel, I think that at this point the discussion is not very productive. I admit that I’m not very familiar with SDNs, so I have to blindly trust you when you state that the SDN Controller knows everything and is able to control everything, so it is like God. Probably this is true.

Re: [IPsec] [I2nsf] draft-abad-i2nsf-sdn-ipsec-flow-protection

2017-07-20 Thread Yoav Nir
> On 20 Jul 2017, at 9:56, Valery Smyslov wrote: > > Hi Gabriel, > > I think that at this point the discussion is not very productive. > I admit that I’m not very familiar with SDNs, so I have to > blindly trust you when you state that the SDN Controller > knows everything and is able to contro

Re: [IPsec] Suggestions in draft-mglt-lwig-minimal-esp

2017-07-20 Thread Tobias Guggemos
Hey Ashok, thanks for your feedback. For your first comment I tend to agree and I think we can add this to the draft! For the second, I agree with your assumption that tunnels might appear in constrained scenarios (it’s actually one of our main goals for ipsec/esp). However, I’m not sure if this

Re: [IPsec] Suggestions in draft-mglt-lwig-minimal-esp

2017-07-20 Thread Valery Smyslov
Hi, IP fragmentation is a Bad Thing in general and it is better to avoid it. With TCP traffic the TCP/IP stack usually sends only unfragmented IP packets, so this is usually not a problem (especially if you fool the stack that the MTU is a bit smaller than real, so the packet is still withi