Re: issues 18, 15, 6 -- return routability

Vijay Devarapalli wrote:

>>
>>  - Do the tests if configuration tells you to
>
>
> the configuration could be in many different ways, right? for
> example, even if the configuration on a VPN gateway is to
> perform the test, the configuration could further say, perform
> the text only when the traffic to a particular address exceeds
> a certain volume? basically I see the configuration as internal
> to the node. It could say
>   - just perform the test for everyone, everytime
>   - exclude this list of nodes for return routability tests
>   - perform the test if the traffic exceeds a certain volume
>   - and so on....
>
> do we want all of the above to be allowed, or just a simple
> perform the test/don't perform the test?

Yes. I guess what we are saying that you must at least
have an on/off config knob... but a particular implementation
could have a fancier scheme. I agree that its largely
internal, and hard to standarize what the "fancier" stuff
is.

>>  - If the specific IP address can be found in the peer's certificate, 
>> you can skip the test
>
>
> how do dynamic addresses get into the certificate? I think
> I missed the discussion. maybe, I should look in the archives.
>
They don't. You could only do this between stationary gateways.

--Jari