%% You should probably cite draft-pwouters-ipsecme-multi-sa-performance instead of this I-D. @techreport{pwouters-multi-sa-performance-01, number = {draft-pwouters-multi-sa-performance-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-pwouters-multi-sa-performance/01/}, author = {Antony Antony and Steffen Klassert and Paul Wouters}, title = {{IKEv2 support for per-queue Child SAs}}, pagetotal = 11, year = 2021, month = feb, day = 22, abstract = {This document defines two Notification Payloads for the Internet Key Exchange Protocol Version 2 (IKEv2): NUM\_QUEUES and QUEUE\_INFO. These payloads add support for indicating that the negotiating of multiple identical Child SAs are to be used to optimize performance based on the number of queues or CPUs, or to create multiple Child SAs for different Quality of Service (QoS) levels. It indicates that a newer idetnical Child SA should not be interpreted as a replacement Child SA. Using multiple identical Child Sa's has the benefit that each stream has its own Sequence Number, ensuring that CPU's don't have to synchronize their crypto state or disable their packet replay detection.}, }