Re: [IPsec] Cost-efficient quantum-resistant DoS protection

2021-11-01 Thread Valery Smyslov
Hi Michael, > Tero Kivinen wrote: > >> Even without surpassing the 64KB limit, this must be a concern. > >> IKEv2's cookie mechanism and puzzles try to increase the cost of the > >> attacker per each connection. Now, an attacker must still accept > >> these costs but can use one c

[IPsec] IP-TFS Management Drafts Status

2021-11-01 Thread Don Fedyk
Hi Here is the status of the IP Traffic Flow Security Management drafts. We have not asked for time on the agenda; however, we can discuss if there is interest. Summary: draft-ietf-ipsecme-yang-iptfs-02 * Received YANG Doctors Feedback and Updated the Draft to address all issues raised.

Re: [IPsec] Comments on draft-pwouters-multi-sa-performance

2021-11-01 Thread Paul Wouters
On Fri, 29 Oct 2021, Panwei (William) wrote: Hi William, Subject: [IPsec] Comments on draft-pwouters-multi-sa-performance I’ve read the recent version. This is an interesting solution. I think it should be adopted. Below are some comments. Thnks for reading the draft and giving us feedbac