Protocol Support for High Availability of IKEv2/IPsec
draft-ietf-ipsecme-ipsecha-protocol-06

Approval announcement
Draft of message to be sent after approval:

Announcement

From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Cc: RFC Editor <rfc-editor@rfc-editor.org>,
    ipsecme mailing list <ipsec@ietf.org>,
    ipsecme chair <ipsecme-chairs@tools.ietf.org>
Subject: Protocol Action: 'Protocol Support for High Availability of IKEv2/IPsec' to Proposed Standard (draft-ietf-ipsecme-ipsecha-protocol-06.txt)

The IESG has approved the following document:
- 'Protocol Support for High Availability of IKEv2/IPsec'
  (draft-ietf-ipsecme-ipsecha-protocol-06.txt) as a Proposed Standard

This document is the product of the IP Security Maintenance and
Extensions Working Group.

The IESG contact persons are Sean Turner and Stephen Farrell.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-ipsecme-ipsecha-protocol/

Ballot Text

Technical Summary

The IPsec protocol suite is widely used for business-critical network
traffic. In order to make IPsec deployments highly available, more scalable and
failure-resistant, they are often implemented as IPsec High Availability (HA)
clusters. However there are many issues in IPsec and IKEv2 HA clustering. This
document proposes an extension to the IKEv2 protocol to solve the main issues
raised in the "IPsec Cluster Problem Statement" for the commonly deployed hot-
standby cluster, and provides implementation advice for other issues.  The main
issues to be solved are the synchronization of IKEv2 Message ID counters, and of
IPsec Replay Counters.

Working Group Summary

There were no notable issues with the WG process. The initial document
review was more than satisfactory. More recently the WG has had a lower level of
energy, and consequently fewer reviews of ongoing work.

Document Quality

We are not aware of implementations of this protocol. However this
protocol is solving a set of well-known issues, so we expect vendors to
implement it as IKEv2 becomes mainstream. 

Personnel

Yaron Sheffer (yaronf.ietf@gmail.com) is the document shepherd.
Sean Turner (turners@ieca.com) is the responsible AD.
Tero Kivinen (kivinen@iki.fi) is the expert reviewer.

RFC Editor Note