[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: INITIAL-CONTACT issues



Rodney Thayer wrote:
> 
> Some of us are not terribly thrilled with the unreliable nature of UDP
> and the retry burden placed on IKE.  Van Jacobsen's law applies --
> "People who don't use TCP are doomed to re-invent it."
> 
> Try running an IKE session between San Jose California and
> somewhere in the eastern Mediterranean and watch the pretty retry-
> logic crashes.
> 

(posting from home)

Before this goes any further, let me say that I too struggle with the
problems inherent in the UDP decision, in which I didn't participate. I
was just attempting to reconstruct some of the arguments that must have
gone into it, and I'll add that the  arguments are not entirely without
merit.

I assume you were involved in that original discussion in some fashion,
Rodney. I was not participating in the ipsec wg whenever this occurred,
but I assume the usual hearty debate occurred, and that this decision is
on par with other ipsec consensus design decisions in terms of caliber.
Am I being naive?

Scott


References: