Re: IPSEC Configuration and Performance

2020-07-03 Thread Peter Vander Woude
We did setup an ipsec tunnel between our z/os system down to a group of devices. Our environment may be different in that the tunnel goes to our firewall, which the devices are in a secure vlan behind the firewall. a couple of notes: 1) the ipsec tunnel definition is between your base (i.e./

Re: IPSEC Configuration and Performance

2020-07-02 Thread Grant Taylor
On 7/2/20 1:27 AM, kekronbekron wrote: Ditto, sorry to go "off-topic" again ... I hope IBM is reading this, and hope they look to adding WireGuard support on Z. I would be mildly, but pleasantly, surprised to see WireGuard added to z/OS. Adding WireGuard support to z/OS shouldn't be too much

Re: IPSEC Configuration and Performance

2020-07-02 Thread kekronbekron
Ditto, sorry to go "off-topic" again ... I hope IBM is reading this, and hope they look to adding WireGuard support on Z. >From what little I know, WireGuard is far more manageable and performant than >IPSec & IKEv2. Adding WireGuard support to z/OS shouldn't be too much of a "deviation" too,

Re: IPSEC Configuration and Performance

2020-07-01 Thread Grant Taylor
On 7/1/20 1:49 PM, Crawford, Robert C. wrote: We're considering using IPSEC to secure traffic between an internal router and a CICS application. Can anyone on this list give us any hints, tips or gotchas they may have from doing something similar themselves. I can't help. But I'd love to

IPSEC Configuration and Performance

2020-07-01 Thread Crawford, Robert C.
We're considering using IPSEC to secure traffic between an internal router and a CICS application. Can anyone on this list give us any hints, tips or gotchas they may have from doing something similar themselves. Thanks in advance. Robert Crawford Mainframe Management United Services