Re: I-D Action: draft-ietf-hip-native-nat-traversal-12.txt
Miika Komu <[email protected]> Fri, 1 Jul 2016 13:57:38 +0300
| Newsgroups | gmane.ietf.hipsec,gmane.ietf.hip |
|---|---|
| Organization | Ericsson AB |
| Message-ID | <[email protected]> |
Hi Jeff, On 06/30/2016 07:33 PM, Jeff Ahrenholz wrote: > On 6/30/16, 9:06 AM, "Miika Komu"<[email protected]> wrote: >>> >>Seems like a good idea. No ESP_TRANSFORM -> no need to establish two-way comms between peers. >>> >>For example, when performing a registration procedure with a relay server. >> > >> >The direct path could be, of course, used for exchange HIP messages >> >directly (including hiccups v2). Does this make sense? > yes, makes sense > >> >If not, what should happen when both ESP_TRANSFORM and ICE-HIP-UDP are >> >both negotiated? Or should we just be proactive and state that upon >> >receiving R1, the Initiator MUST NOT include ICE-HIP-UDP if it is not >> >going to employ any ESP_TRANSFORM. > > This proposed sentence seems like a good revision. we need to choose between the two alternatives: 1. Either always set up the direct path with connectivity tests when ICE mode negotiated 2. ...or set it up only when both ESP and ICE-HIP-UDP are present After this discussion, I would actually lean towards the first option because this would make the two options independent. And even if you don't use ESP, you would still get a direct path for hiccups v2. So actually no change to the draft :) What say you? _______________________________________________ Hipsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/hipsec
smime.p7s
(application/pkcs7-signature, 4 KB) - not displayed