Re: [IPsec] RFC8229 (IKE over TCP) and retransmissions

2018-04-06 Thread Valery Smyslov
Hi Tero, > [WG chair hat off] > > Valery Smyslov writes: > > TCP provides reliable transport, so there is no need for application to > > deal with retransmissions. Moreover, performing retransmissions by IKE > > in case of TCP on congested networks could further increase congestion >

Re: [IPsec] RFC8229 (IKE over TCP) and retransmissions

2018-04-06 Thread Valery Smyslov
Hi Tommy, > Hi Valery, > > Thanks for bringing this up with the WG! > > I agree that retransmissions of IKE packets within the TCP stream may be > pointless, and add to congestion. > We do mention this for ESP packets over the TCP stream (Section 12.2 Added > Reliability for Unreliable >

Re: [IPsec] RFC8229 (IKE over TCP) and retransmissions

2018-04-05 Thread Tommy Pauly
Hi Valery, Thanks for bringing this up with the WG! I agree that retransmissions of IKE packets within the TCP stream may be pointless, and add to congestion. We do mention this for ESP packets over the TCP stream (Section 12.2 Added Reliability for Unreliable Protocols), but it doesn’t call

Re: [IPsec] RFC8229 (IKE over TCP) and retransmissions

2018-04-05 Thread Tobias Brunner
Hi Valery, I agree that generally retransmits are not useful or needed with TCP encapsulation. But as I see it, retransmits might actually be required in some situations. If the client sends e.g. a CREATE_CHILD_SA request but the TCP connection is closed or gets unusable for some reason before