[186465] in North American Network Operators' Group
Re: ISP marking ipsec traffic based on certificate, how is this
daemon@ATHENA.MIT.EDU (Tin, James)
Fri Dec 18 22:58:06 2015
X-Original-To: nanog@nanog.org
From: "Tin, James" <jtin@akamai.com>
To: Nick Ellermann <nellermann@broadaspect.com>, Mark Zimmer <sgi@tango.lu>,
'North American Network Operators' Group' <nanog@nanog.org>
Date: Fri, 18 Dec 2015 08:01:33 +0000
In-Reply-To: <bdb668387fd940429086f03e2c55f9e1@exchange.broadaspect.local>
Errors-To: nanog-bounces@nanog.org
SWYgeW914oCZcmUgdXNpbmcgY2VydGlmaWNhdGVzLCBJdCBjb3VsZCBiZSBwb3NzaWJsZSB5b3Ug
bWF5IGhhdmUgY2hhbmdlZCB5b3VyIFZQTiBmcm9tIElQU0VDIHRvIFNTTFZQTi4gDQpJbiB3aGlj
aCBjYXNlIGl0IG5vdyBydW5zIG92ZXIgVENQIHBvcnQgNDQzLg0KU28gbWF5YmUgdGhleeKAmXJl
IG5vdCBkb2luZyB0cmFmZmljIHNoYXBpbmcgb24gVENQIDQ0My4NCg0KSmFtZXMNCg0KDQoNCk9u
IDE4LzEyLzIwMTUgMjoyMSBwbSwgIk5pY2sgRWxsZXJtYW5uIiA8bmVsbGVybWFubkBicm9hZGFz
cGVjdC5jb20+IHdyb3RlOg0KDQo+U3VyZSB5b3VyIFZQTiB0dW5uZWwgd2Fzbid0ICdzdHVjaycg
Zmxvd2luZyB0aHJvdWdoIGEgbGVzcyB0aGFuIG9wdGltYWwgb3Igc2F0dXJhdGVkIElTUCB1cHN0
cmVhbSB0cmFuc2l0IHBlZXI/IFNvbWV0aW1lcywganVzdCByZXN0YXJ0aW5nIHlvdXIgVlBOIG1h
eSBmb3JjZSB0aGUgdHJhZmZpYyB0aHJvdWdoIGEgZGlmZmVyZW50IHBhdGggaW4geW91ciBJU1An
cyBuZXR3b3JrIGFuZCBjbGVhciB1cCBhbiBpc3N1ZS4gV2UgbWFuYWdlIG1hbnkgY3VzdG9tZXIg
SVBzZWMgdHVubmVscywgaGl0IHNpbWlsYXIgc2l0dWF0aW9ucyB3aGVyZSBhIHJlc3RhcnQgd29y
a3MgdGhlIGJlc3QgZXNwZWNpYWxseSB3aGVuIHRoZSBpc3N1ZSBpcyBub3QgaW4gdW5kZXIgeW91
ciBjb250cm9sLg0KPg0KPlNpbmNlcmVseSwNCj5OaWNrIEVsbGVybWFubiDigJMgQ1RPICYgVlAg
Q2xvdWQgU2VydmljZXMNCj5Ccm9hZEFzcGVjdA0KPiANCj5FOiBuZWxsZXJtYW5uQGJyb2FkYXNw
ZWN0LmNvbSANCj5QOiA3MDMtMjk3LTQ2MzkNCj5GOiA3MDMtOTk2LTQ0NDMNCj4gDQo+VEhJUyBD
T01NVU5JQ0FUSU9OIE1BWSBDT05UQUlOIENPTkZJREVOVElBTCBBTkQvT1IgT1RIRVJXSVNFIFBS
T1BSSUVUQVJZIE1BVEVSSUFMIGFuZCBpcyB0aHVzIGZvciB1c2Ugb25seSBieSB0aGUgaW50ZW5k
ZWQgcmVjaXBpZW50LiBJZiB5b3UgcmVjZWl2ZWQgdGhpcyBpbiBlcnJvciwgcGxlYXNlIGNvbnRh
Y3QgdGhlIHNlbmRlciBhbmQgZGVsZXRlIHRoZSBlLW1haWwgYW5kIGl0cyBhdHRhY2htZW50cyBm
cm9tIGFsbCBjb21wdXRlcnMuDQo+DQo+DQo+LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj5G
cm9tOiBOQU5PRyBbbWFpbHRvOm5hbm9nLWJvdW5jZXNAbmFub2cub3JnXSBPbiBCZWhhbGYgT2Yg
TWFyayBaaW1tZXINCj5TZW50OiBUaHVyc2RheSwgRGVjZW1iZXIgMTcsIDIwMTUgNDoyOSBBTQ0K
PlRvOiBuYW5vZ0BuYW5vZy5vcmcNCj5TdWJqZWN0OiBJU1AgbWFya2luZyBpcHNlYyB0cmFmZmlj
IGJhc2VkIG9uIGNlcnRpZmljYXRlLCBob3cgaXMgdGhpcyBwb3NzaWJsZT8NCj4NCj4gSGVsbG8g
bGlzdCwNCj4NCj4gIEkgaGF2ZSBhIHNpdGUtdG8tc2l0ZSBpcHNlYyB2cG4gd2l0aCBzdHJvbmdz
d2FuLiBJdCB3YXMgd29ya2luZyB3ZWxsDQo+ICBmb3IgNS02IG1vbnRocyB0aGVuIGEgZGF5IGFn
byBJIGhhdmUgbm90aWNlZCBzb21ldGhpbmcgc3RyYW5nZSwgdGhhdA0KPiAgZnJvbSBTaXRlLUEg
dG8gU2l0ZS1CICh0dW5uZWwgbW9kZSkgb25seSB0aGUgdXBsb2FkIGJhbmR3aWR0aCBpcyAgY2Fw
cGVkDQo+ICBkb3duIHRvIDIwLTMwa2JpdC9zIGluc2lkZSB0aGUgVlBOLg0KPiAgSSBoYXZlIHRy
aWVkIHZhcmlvdXMgYXBwcyBsaWtlIGZ0cCwgc2NwIG9uIGRpZmZlcmVudCBwb3J0cyBpdCB3YXMg
dGhlDQo+ICBzYW1lIHJlc3VsdC4gSSBhbHNvIHJhbiBzcGVlZHRlc3Qvd2dldCBvbiBib3RoIGVu
ZHBvaW50cyBqdXN0IHRvIG1ha2UNCj4gIHN1cmUgdGhhdCBub3QgdGhlIGVudGlyZSBjb25uZWN0
aW9uIG9mIHRob3NlIG5ldHdvcmtzIGFyZSBjYXBwZWQuDQo+DQo+ICBTaW5jZSBvdXRzaWRlIHBh
cnRpZXMgY2Fubm90IHNlZSBhbnl0aGluZyBmcm9tIHdoYXQncyBnb2luZyBvbiBpbnNpZGUNCj4g
IHRoZSB0dW5uZWwsIGZpcnN0IEkgd2FzIHRoaW5raW5nIHRoYXQgdGhleSBzdGFydGVkIGxpbWl0
aW5nIHRoZSAgdHJhZmZpYw0KPiAgYmFzZWQgb24gcG9ydCAoNDUwMCB1ZHApIG9yIGJhc2VkIG9u
IHByb3RvY29sIChFU1ApLCB0aGF0IGlzIGVhc3kgdG8gIGRvLg0KPg0KPiAgSW4gb2xkZXIgdmVy
c2lvbnMgb2Ygc3Ryb25nc3dhbiBpdCdzIG5vdCBwb3NzaWJsZSB0byBjaGFuZ2UgdGhlIGNoYXJv
bg0KPiAgbmF0IHBvcnQgKHByb2JhYmx5IHdvdWxkbid0IHdvcmsgYW55d2F5IHNpbmNlIG1vc3Qg
b2YgdGhlIHRyYWZmaWMgIHNob3VsZA0KPiAgYmUgRVNQIChwcm90b2NvbCA1MCkpLg0KPiAgSSBo
YXZlIHJlc3RhcnRlZCB0aGUgc3Ryb25nc3dhbiBkYWVtb24gb24gYm90aCBlbmRwb2ludHMgbXVs
dGlwbGUgIHRpbWVzDQo+ICBpdCBkaWQgbm90IGNoYW5nZSB0aGUgc2l0dWF0aW9uICh0aGUgYmFu
ZHdpZHRoIGxpbWl0aW5nIHdhcyBzdGlsbCAgcHJlc2VudCkuDQo+IA0KPiAgU28gbXkgbGFzdCBp
ZGVhIHdhcyB0byBtYWtlIG5ldyB2cG4gY2VydGlmaWNhdGVzLiBGb3IgbXkgYmlnZ2VzdA0KPiAg
c3VycHJpc2Ugd2l0aCB0aGUgbmV3IGNlcnRpZmljYXRlcyB0aGUgY2FwcGluZyB3YXMgZ29uZSBh
bmQgdGhlDQo+ICBiYW5kd2lkdGggd2VudCBiYWNrIHRvIG5vcm1hbC4gSSBob3BlIEkgZG9uJ3Qg
aGF2ZSB0byBwdXQgdGhlIG9sZCAgY2VydHMNCj4gIGJhY2sgZnJvbSBiYWNrdXAganVzdCB0byBt
YWtlIGEgcG9pbnQuDQo+DQo+ICBPbmUgb2YgdGhlIElTUHMgbXVzdCBzdGFydGVkIHRhZ2dpbmcg
dGhlIGlwc2VjIHRyYWZmaWMgYmFzZWQgb24gdGhlDQo+ICBjZXJ0aWZpY2F0ZSBhbmQgdGhlbiBk
byB0cmFmZmljIHNoYXBpbmcgKFFvUykgb24gaXQgdG8gdGhyb3R0bGUgZG93biAgdGhlDQo+ICBi
YW5kd2lkdGguIEhvdyBpcyB0aGlzIGV2ZW4gcG9zc2libGU/IEkgd2FzIHRoaW5raW5nIHRoYXQg
YW4gaXBzZWMNCj4gIGNvbm5lY3Rpb24gaXMgZW5jcnlwdGVkIGFuZCByYW5kb20gZnJvbSB0aGUg
YmVnaW5uaW5nLiBIb3cgY2FuIHRoZXkNCj4gIGRlZmluZSBhIHBhdHRlcm4gdG8gdGhlaXIgd2hh
dGV2ZXIgZGV2aWNlIHRvIGJlIGFibGUgdG8gbWFyayB0aGlzDQo+ICBzcGVjaWZpYyB0cmFmZmlj
Pw0KPiAgSXMgdGhlcmUgYSBwYXJ0IGF0IHRoZSBiZWdpbm5pbmcgb2YgdGhlIGNvbm5lY3Rpb24g
c2VxdWVuY2Ugd2hpY2ggaXMNCj4gIGFsd2F5cyB0aGUgc2FtZSB3aXRoIHVzaW5nIHRoZSBzYW1l
IGNlcnRpZmljYXRlPw0KPg0KPiAgRG8gSSBoYXZlIHRvIHdvcnJ5IGFib3V0IGhlcmUgdGhhdCBt
eSB2cG4ga2V5cyBnb3QgY29tcHJvbWlzZWQ/DQo+DQo+ICBBbnlib2R5IGV2ZXIgZXhwZXJpZW5j
ZWQgdGhpcz8NCj4NCj4gIFRoYW5rcyENCg==
