Re: [nvo3] VxLAN Security Consideration

2015-06-02 Thread Michael Shieh
:03 PM *To:* nvo3@ietf.org *Cc:* Xuxiaohu; Liuyuanjiao *Subject:* [nvo3] VxLAN Security Consideration Dear fellows: Now, in the VxLAN environment, there is no specific Security method to protect the VxLAN packet in the middle network. The middle network is not controlled

Re: [nvo3] VxLAN Security Consideration

2015-06-02 Thread Michael Shieh
@ietf.org Cc: Xuxiaohu; Liuyuanjiao Subject: [nvo3] VxLAN Security Consideration Dear fellows: Now, in the VxLAN environment, there is no specific Security method to protect the VxLAN packet in the middle network. The middle network is not controlled

Re: [nvo3] VxLAN Security Consideration

2015-06-02 Thread Tom Herbert
On Tue, Jun 2, 2015 at 6:57 PM, Dacheng Zhang dacheng@alibaba-inc.com wrote: I think both ipsec and dtls would work. The middle network is not controlled by customer and the service provider, it’s provided by 3nd company, so the environment is not trusted, we need to encrypt the

Re: [nvo3] VxLAN Security Consideration

2015-06-02 Thread Dacheng Zhang
I think both ipsec and dtls would work. The middle network is not controlled by customer and the service provider, it’s provided by 3nd company, so the environment is not trusted, we need to encrypt the VxLAN packets or VxLAN payload for our user data. Currently, no such specific method,

[nvo3] VxLAN Security Consideration

2015-06-02 Thread Liuyuanjiao
Dear fellows: Now, in the VxLAN environment, there is no specific Security method to protect the VxLAN packet in the middle network. The middle network is not controlled by customer and the service provider, it's provided by 3nd company, so the environment is not trusted, we need