Re: Zero Address Set

Tschofenig Hannes wrote:
> hi jari, 
> 
> i am not sure that there is sufficient interest for this functionality. i am

I have the same doubt.

> still not quite sure that we properly understand this issue. i again thought
> about it and think that technically we need to provide two things: 
> 
> - temporarily suspend dead peer detection (or path connectivity test) 
> - drop traffic (since it cannot be delivered to the end host anyway) 

These two and you also need to signal that it should be turned
on. I'm not too worried that we understand the basic scheme
here, but I'm more worried about how this interacts in more
complicated scenarios and with other features.

You could also see this function as orthogonal to MOBIKE, i.e.,
another IKEv2 feature that can be used to temporarily suspend
all IKE and payload packet flows.

--Jari