@techreport{plmrs-ipsecme-ipsec-ikev2-context-definition-01, number = {draft-plmrs-ipsecme-ipsec-ikev2-context-definition-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-plmrs-ipsecme-ipsec-ikev2-context-definition/01/}, author = {Daniel Palomares and Daniel Migault}, title = {{IKEv2/IPsec Context Definition}}, pagetotal = 10, year = 2014, month = mar, day = 5, abstract = {IKEv2/IPsec clusters are constituted of multiple nodes accessed via a single address by the end user. The traffic is then split between the nodes via specific IP load balancing policies. Once a session is assigned to a given node, IPsec makes it difficult to assign the session to another node. This makes management operations and transparent high availability for end users difficult to perform within the cluster. This document describes the IKEv2 and IPsec contexts that MUST be transferred between nodes within a cluster so a session can be restored. This makes possible to transfer an IPsec session between different nodes.}, }