I-D Action: draft-antony-ipsecme-muse-00.txt

Internet-Draft draft-antony-ipsecme-muse-00.txt is now available.

   Title:   Multiple Ephemeral UDP Source Ports for ESP in UDP Encapsulation (MUSE)
   Authors: Antony Antony
            Steffen Klassert
   Name:    draft-antony-ipsecme-muse-00.txt
   Pages:   20
   Dates:   2026-08-18

Abstract:

   This document specifies a mechanism to improve network path
   distribution and host receive-queue load distribution for IPsec
   traffic using ESP in UDP encapsulation [RFC3948].  Using the per-
   resource Child SA mechanism of [RFC9611], peers negotiate multiple
   Child SAs each bound to a distinct UDP source port.  The resulting
   entropy in the UDP source port enables network devices to distribute
   per-resource traffic across distinct paths (equal-cost multi-path,
   ECMP) and lets the host NIC steer each per-resource flow to a
   distinct receive queue via receive-side scaling (RSS), supporting
   efficient per-CPU IPsec processing.  This document specifies the
   IKEv2 negotiation, NAT traversal behavior, and operational
   requirements for this mechanism.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-antony-ipsecme-muse/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-antony-ipsecme-muse-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]