Re: [I2nsf] Oct 5 2016 I2NSF Interim meeting slides, webex bridge and the Etherpad

2016-10-07 Thread Sowmini Varadhan
t: Re: Next steps about SDN and IPSec > From: Rafa Marin Lopez <r...@um.es> > Date: Sun, 2 Oct 2016 23:59:14 +0200 > Cc: Rafa Marin Lopez <r...@um.es>, Gabriel Lopez <gab...@um.es>, > Sowmini Varadhan <sowmini.varad...@oracle.com>, > David Carrel &l

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-30 Thread Sowmini Varadhan
Hi, sorry for the delay in response, needed some time to go over the draft carefully. Here are some comments. > 1. Introduction : >.. In this sense, it will provision the required >parameters to create valid entries in the Security Association >Database (SAD), which we

Re: [I2nsf] [IPsec] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF

2016-06-19 Thread Sowmini Varadhan
On (06/19/16 20:06), Rafa Marin Lopez wrote: > > I had a related question Section 8.2, #2 as well: is the first > > data packet in the clear or not? If it is not in the clear, how > > can you determine the flow in the general case? > > [Rafa] Please be aware that, if ESP (AH does not encrypt

Re: [I2nsf] How does Overlay Network inform the Underlay network on which flows among Overlay network nodes need to go through IPSec Tunnel? (was : Flow Security Policies exchanged over I2NSF service

2016-06-17 Thread Sowmini Varadhan
On (06/17/16 08:43), Linda Dunbar wrote: >Sowmini, > >You said: >"However, applying IPsec to specific flows (e.g., those defined by a src >or dst port on which the service listens) is important." > >What is the current operation procedure for Overlay network to inform