IP Security Maintenance and Extensions (ipsecme) WG

IETF 111 - Monday July 26th, 2021 21:30-22:30 UTC

Agenda

• Note Well, technical difficulties and agenda bashing - Chairs (5 min)
• Document Status - Chairs (5 min)
• Work items
• Hybrid IKEv2 Interoperability Testing - Valery Smyslov (5 min)
• Improvements for post-quantum IKEv2 - Daniel Herzinger (5 min)
• Management of IPTFS (Yang and SNMP draft) - Don Fedyk (10 min)
• New items
• Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS - Valery Smyslov (10 min)
• Beyond 64KB Limit of IKEv2 Payloads - Valery Smyslov (10 min)
• IKEv2 Optional SA&TS Payloads in Child Exchange - William Panwei (5 min)
• IKEv2 support for per-queue Child SAs - Paul Wouters (5 min)
• AOB + Open Mic (0 min)

Document Status

Chairs (5 min)

Chris: We would ask that if there is more required on IPTFS for sending to IESG, that we do this quickly, as it's been a full cycle since WGLC

Tero: Yes, sounds good will get to this this week.

• Chairs promised to write the shepherd writeup for IPTFS and for IKE-Intermediate

Hybrid IKEv2 Interoperability Testing

Valery Smyslov (5 min)

draft-ietf-ipsecme-ikev2-intermediate

draft-ietf-ipsecme-ikev2-multiple-ke

Improvements for post-quantum IKEv2

Daniel Herzinger (5 min)

Management of IPTFS (Yang and SNMP draft)

Don Fedyk (10 min)

draft-ietf-ipsecme-yang-iptfs

draft-ietf-ipsecme-mib-iptfs

Don: Asked for WGLC

Tero: We have 3 WGLC ongoing, and are finishing moving the base draft to IESG. So in about a month from now we can WGLC

Don: Ok, perhaps we can start YANG doctor reviews in preperation

Tero: Ok.

Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS

Valery Smyslov (10 min)

draft-btw-add-ipsecme-ike

Beyond 64KB Limit of IKEv2 Payloads

Valery Smyslov (10 min)

draft-tjhai-ikev2-beyond-64k-limit

Paul: Asked why we are using TCP when the world is going to UDP.

Valery: TCP is optional. Can use UDP, just less reliable.

Yoav: Suggested there are other formats.

Valery: This was considered in earlier draft but it is a larger change to the protocol.

Valery Asked for WG adoption.

Tero: If falls withing the charter and for the last two drafts can make adoption calls.

IKEv2 Optional SA&TS Payloads in Child Exchange

William Panwei (5 min)

draft-kampati-ipsecme-ikev2-sa-ts-payloads-opt

Panwei: Ask for WG adoption.

Valery: In favor of Notify - SHOULD be supported. What about the very first CHild SA ? It inheirits from IKE?

Paul: IN teh Trafic selctors there is signalling for PFS - Take to mailing list.

IKEv2 support for per-queue Child SAs

Paul Wouters (5 min)

draft-pwouters-ipsecme-multi-sa-performance

Tero: Maybe outside charter. Have to dicuss with AD and authors to see if it fits. Email to list.

Ben: At the SAAG session post Quantum presenations.

AOB + Open Mic (0 min)