Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-23 Thread Daniel Migault
I agree. The point I wanted to make is that multicore can be made for both in ESPv3 and in ESPv4 so we do not wait for ESPv4 to handle multicore. The two mechanisms may be slightly different but I expect some commonalities. As a result, I expect early deployments on ESPv3 may provide some useful

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Steffen Klassert
On Tue, Nov 22, 2022 at 05:16:08PM -0500, Daniel Migault wrote: > I support Bob's suggestion. > I also believe that multicore will be addressed by design. I do want to > have some mechanisms like [1] to be included by design. That said, I would > like [1] to start on ESPv3 and take the output back

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Steffen Klassert
On Tue, Nov 22, 2022 at 04:15:54PM -0500, Paul Wouters wrote: > speaking with no hats on. > On Mon, Nov 21, 2022 at 7:47 AM Steffen Klassert < > steffen.klass...@secunet.com> wrote: > > > Is there interest in doing a virtual interim to discuss an ESP re-design? > > > > I am very interested.

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Daniel Migault
I support Bob's suggestion. I also believe that multicore will be addressed by design. I do want to have some mechanisms like [1] to be included by design. That said, I would like [1] to start on ESPv3 and take the output back to ESPv-4 as opposed to waiting for ESP-v4. Interims are free, we can

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Michael Richardson
Paul Wouters wrote: >> - How should the problems be solved? >> > Once we have a list, I think we can come up with plans to tweak ESP to > tick off our list items. > I do think we need some short presentations for an interim. Just having > a free flow discussion will

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Paul Wouters
speaking as individual, On Tue, Nov 22, 2022 at 3:28 PM Michael Richardson wrote: > > I don't think that the constrained problems are really a good mix at all > into > a higher-performance ESP. We are talking about 10 to 12 orders of > magnitude > difference in network performance. > I

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Paul Wouters
speaking with no hats on. On Mon, Nov 21, 2022 at 7:47 AM Steffen Klassert < steffen.klass...@secunet.com> wrote: > Is there interest in doing a virtual interim to discuss an ESP re-design? > I am very interested. It is a problem that we should fix sooner rather than later. First things

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Michael Richardson
I don't think that the constrained problems are really a good mix at all into a higher-performance ESP. We are talking about 10 to 12 orders of magnitude difference in network performance. -- Michael Richardson. o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Robert Moskowitz
I want to add support of constrained communications and taking diet-esp to the next step as we work in lpwan with SCHC as a protocol. The low byte overhead of DTLS makes it very attractive in constrained communications.  How can we best pair SCHC with ESP for efficient use of limited

Re: [IPsec] Virtual interim about re-designing ESP?

2022-11-22 Thread Michael Richardson
Steffen Klassert wrote: > at the last working group meeting in London, it was quite some interest > to work on a re-design of ESP to make it fit to the multi-cpu case, QoS > classes, HW offloads etc. I agree with your idea in the subject, of a virtual interim on this. >