On Wed, 13 Jan 2016, Valery Smyslov wrote:
I thought Tommy had data that showed that IKE fragmentation is not
an issue. If UDP flows then IKE fragmentation works too. It is only
when udp is blocked that TCP was needed.
The IKE_SA_INIT message size is an issue here. If it is too long
then IKE fragmentation won't help (it starts working from the IKE_AUTH).
Ah right. That's a fair point.
IPsec tunnels can use IPcomp too, as recommended for the low-power
consumption devices.
Did anyone actually meassure battery costs of this versus not using it?
Is burning main CPU cheaper than burning a bit more in the transmission
chip?
Paul
_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec
