[166593] in North American Network Operators' Group
large scale ipsec
daemon@ATHENA.MIT.EDU (Jan Schaumann)
Fri Nov 1 09:38:53 2013
Date: Fri, 1 Nov 2013 09:38:38 -0400
From: Jan Schaumann <jschauma@netmeister.org>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--DfnuYBTqzt7sVGu3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hello,
Who here on this list has deployed IPSec or other comparable lower layer
encryption in a large scale environment, or attempted to do so?
I've repeatedly heard claims that doing so is not feasible (either
operationally or financially), but I have not seen any specific studies,
reports, numbers or anything else to support this. Of course I haven't
seen anything proving the opposite, either, which is why I'm reaching
out here on this list.
What was your experience, and what alternatives have you considered? If
your findings were made longer than, say, 5 years ago, what might have
changed to change the results?
-Jan
--DfnuYBTqzt7sVGu3
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (NetBSD)
iQEVAwUBUnOu3mbOT+lva9PXAQJeoQgAntXnA1PGv2SqegFZq4I6W6uCrorQ4OCv
bBV10ey1MvAsOMmEiAhgwt9B0J8PlRpwqcdx0KmdClPU6AnRZyMnMixDQRhtMfae
uB+M6w7hcIi+GFyly5IhzLuDVqueb4dvEozhmGYAEDCk4CU2/jRR1G3oY3QJmlNr
Ry9hAr7j8xf1aztbnkcuYQweGRX8k5Gzk5CwxZK3MaaeJWz2mDuhQzZkf8Zcevek
EPZdkwreHRUmghpB8nNcum2+Zcb5w1H4OizYJCIm8n0Ny4QrzmTF8DTR4+llFhBc
wycztw+67O6UGqUHOlhbntrCJiyYxKRwplrw2UqXl+mcYFCzTebYDQ==
=BeGk
-----END PGP SIGNATURE-----
--DfnuYBTqzt7sVGu3--