> On 24 Jul 2020, at 23:42, Michael Rossberg
> wrote:
>
> Wiliam, Yoav,
>
> thanks for the comments, I’ll try to elaborate in a single mail as you are
> heading in a similar direction.
>
>> RFC 6311 allows multiple members in a cluster of IPsec gateways to have
>> independent parallel SAs
On 7/24/20 4:42 PM, Michael Rossberg wrote:
@William: The 16-bit sender ID is something we already get from protocols like
GDOI to do IV space
partitioning (details in https://tools.ietf.org/html/rfc6054). So the mistake
is already there.
My memory was 8 bits, ludicrously small. Reading more
