Dormant Mode?

"James Kempf" <[email protected]>
Newsgroups gmane.ietf.mobike
Message-ID <[email protected]>
So I'd like to raise a possible issue here, namely whether or not Mobike 
should attempt to support dormant mode hosts. I say that it's a "possible" 
issue because, in general, most IETF protocols don't do a very good job 
supporting dormant mode, and it would be entirely consistent to say that 
Mobike doesn't either. But I think the point should at least be raised.

Section 2.4 of draft-ietf-ipsec-ikev2-17.txt (IKEv2 spec) has some guidance 
about connection timers, but there is nothing specific about recommended 
values for timeouts or retransmissions, since, as the document correctly 
notes, this will vary depending on circumstance. Since some mobile hosts can 
actually spend more time in dormant mode than active, for power saving 
purposes, there's a possibility that the IKE SAs will need to be regenerated 
from scratch every time the mobile host comes out of dormant mode, if the 
timeouts are set too short. In addition, if there are any stateful 
middleboxes (proxies, firewalls), the state on them could expire 
prematurely, causing a request incoming through the VPN tunnel gateway to be 
rejected even though the VPN tunnel gateway itself didn't time out the SA.

The basic issue I think that needs addressing is: should Mobike attempt in 
some way to address dormant mode, since, like address changes, it is a 
characteristic of mobile hosts?

Thoughts?

            jak
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.