> > > > In an ideal world maybe. Sometimes the netwwork needs to > mark traffic > > at the edge switch but doesn't 'trust' the endpoint to do it. So > > typically it would be done with policy rules. > > We're talking about making changes to the end nodes anyways, > so why not > make them handle QoS correctly?
QoS remarking is done by the service provider based on various factors (the SLA negotiated with the customer), and it cannot simply trust what it receives from the customer (the end nodes in this case). Cheers, Manav _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec