I wasn't sure from your reply if you agreed with my numbers, or wanted to
revise them.  I think some numbers should go into the document, do you?

Sandeep Kampati <[email protected]> wrote:
    > Most if deployment scenario what I observed is initiator is sending at
    > least 5 cryptographic suits, in some deployment scenarios they are
    > sending 120 cryptographic suites

5 suites makes sense.
120 does not sense to me, do you know what the combinatorics involved are?
Since the gateway picks one and replies, the situation where the gateway
wants to continue with the same one, there doesn't seem to be that much savings.

    > If more cryptographic suites are configured the saving with will
    > increase exponential.

I don't think it's *exponential*, I think it's linear per connection :-)
If you want to count savings per gateway, then it's O(n*m) where n=number of
clients, m=number of suites.



-- 
Michael Richardson <[email protected]>, Sandelman Software Works
 -= IPv6 IoT consulting =-



Attachment: signature.asc
Description: PGP signature

_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to