ESP Header Compression and Diet-ESP
draft-mglt-ipsecme-diet-esp-06
ipsecme D. Migault
Internet-Draft Ericsson
Intended status: Standards Track T. Guggemos
Expires: November 30, 2018 LMU Munich
C. Bormann
Universitaet Bremen TZI
D. Schinazi
Apple Inc.
May 29, 2018
ESP Header Compression and Diet-ESP
draft-mglt-ipsecme-diet-esp-06
Abstract
ESP Header Compression (EHC) defines a flexible framework to compress
communications protected with IPsec/ESP. Compression and
decompression is defined by EHC Rules orchestrated by EHC Strategies.
The document specifies the Diet-ESP EHC Strategy and associated EHC
Rules. Diet-ESP compresses up to 32 bytes per packet for traditional
IPv6 VPN and up to 66 bytes for IPv6 VPN sent over a single TCP or
UDP session.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on November 30, 2018.
Copyright Notice
Copyright (c) 2018 IETF Trust and the persons identified as the
document authors. All rights reserved.
Migault, et al. Expires November 30, 2018 [Page 1]
Internet-Draft Diet-ESP May 2018
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Requirements notation . . . . . . . . . . . . . . . . . . . . 3
2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3
3. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 3
4. Protocol Overview . . . . . . . . . . . . . . . . . . . . . . 4
5. IPsec Compression Mode . . . . . . . . . . . . . . . . . . . 5
6. EHC Context . . . . . . . . . . . . . . . . . . . . . . . . . 6
6.1. Diet-ESP Context Parameters for ESP . . . . . . . . . . . 6
6.2. EHC Context Parameters for Inner IP . . . . . . . . . . . 7
6.3. EHC Context Parameters for Transport Protocol . . . . . . 8
7. EHC Rules . . . . . . . . . . . . . . . . . . . . . . . . . . 10
7.1. EHC Rules for ESP . . . . . . . . . . . . . . . . . . . . 12
7.2. EHC Rules for inner IPv4 . . . . . . . . . . . . . . . . 13
7.3. EHC Rules for inner IPv6 . . . . . . . . . . . . . . . . 15
7.4. EHC Rules for UDP . . . . . . . . . . . . . . . . . . . . 17
7.5. EHC Rules for UDP-Lite . . . . . . . . . . . . . . . . . 18
7.6. EHC Rules for TCP . . . . . . . . . . . . . . . . . . . . 19
8. Diet-ESP EHC Strategy . . . . . . . . . . . . . . . . . . . . 20
8.1. Outbound Packet Processing . . . . . . . . . . . . . . . 23
8.2. Inbound Packet Processing . . . . . . . . . . . . . . . . 25
9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 28
10. Security Considerations . . . . . . . . . . . . . . . . . . . 28
11. Privacy Considerations . . . . . . . . . . . . . . . . . . . 29
12. Acknowledgment . . . . . . . . . . . . . . . . . . . . . . . 30
13. References . . . . . . . . . . . . . . . . . . . . . . . . . 30
13.1. Normative References . . . . . . . . . . . . . . . . . . 30
13.2. Informational References . . . . . . . . . . . . . . . . 31
Appendix A. Illustrative Examples . . . . . . . . . . . . . . . 31
A.1. Single UDP Session IoT VPN . . . . . . . . . . . . . . . 31
A.2. Single TCP session IoT VPN . . . . . . . . . . . . . . . 34
A.3. Traditional VPN . . . . . . . . . . . . . . . . . . . . . 37
Show full document text