@techreport{acharya-ipsecme-esp-ecmp-00, number = {draft-acharya-ipsecme-esp-ecmp-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-acharya-ipsecme-esp-ecmp/00/}, author = {Dipankar Acharya and Hugh Holbrook}, title = {{UDP encapsulated ESP for ECMP}}, pagetotal = 6, year = 2023, month = apr, day = 21, abstract = {This document modifies {[}RFC3948{]} to allow the UDP source port of a UDP-Encapsulated ESP packet to provide entropy for ECMP load balancing between IPSec tunnel endpoints. This document provides guidelines for safely allowing this behavior and falling back to the encapsulation defined in {[}RFC3948{]} when a NAT gateway is discovered in the path.}, }