Re: [IPsec] ESP next payload number [Re: Some thoughts regarging draft-hopps-ipsecme-iptfs-01]

2019-12-01 Thread Benjamin Kaduk
On Sun, Dec 01, 2019 at 03:52:30AM -0500, Christian Hopps wrote: > I think it's important for this discussion to recognize that we have 2 > orthogonal issues. > > 1) How does IP-TFS work on the wire with IPsec/ESP - this is where we need to > make sure we don't unnecessarily restrict uni-directi

Re: [IPsec] IKEv2 IPTFS transform [Re: Some thoughts regarging draft-hopps-ipsecme-iptfs-01]

2019-12-01 Thread Christian Hopps
> On Nov 30, 2019, at 1:35 AM, Paul Wouters wrote: > > > On Nov 29, 2019, at 21:01, Valery Smyslov wrote: > >> A lot of things in IKEv2 is negotiated by using notifications. With regard >> to child SA they are - >> using transport mode, using IPcomp, using WESP, using ROHC. >> IP-TFC look

Re: [IPsec] ESP next payload number [Re: Some thoughts regarging draft-hopps-ipsecme-iptfs-01]

2019-12-01 Thread Christian Hopps
I think it's important for this discussion to recognize that we have 2 orthogonal issues. 1) How does IP-TFS work on the wire with IPsec/ESP - this is where we need to make sure we don't unnecessarily restrict uni-directional use. 2) What are the changes to IKEv2 to support IP-TFS - this is whe