[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Comments on draft-ietf-ipsec-new-auth-00.txt
Perry,
A good question, but one that requires translating from TCP window
measurements (in bytes) to IPSEC units (packets), as Steve Bellovin pointed
out. I don't know who has the data to make this translation. However, we
have seen smoe statistics cited that note modest numbers of packets
arriving out of order in some circumstances, and that prompted us to
abandon the window size of 1 that had been in a previous draft of AH. It
is the lack of good data in this area, plus the move to bigger, faster
pipes, that makes it hard to figure out if 32 or 64 is big enough, although
such numbers seem reasonable for today's Internet.
Steve
References: