[191977] in North American Network Operators' Group
Re: Questions re: VPN protocols globally
daemon@ATHENA.MIT.EDU (Eric Germann)
Wed Oct 5 13:47:25 2016
X-Original-To: nanog@nanog.org
From: Eric Germann <ekgermann@semperen.com>
In-Reply-To: <CAL9jLabHMkufMFwE8041WZYTUw+wXso-7=Mq445pNeavgUKi3A@mail.gmail.com>
Date: Wed, 5 Oct 2016 12:06:07 -0400
To: Christopher Morrow <morrowc.lists@gmail.com>
X-Assp-Envelope-From: ekgermann@semperen.com
Cc: nanog list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_02E867DF-526F-4E1C-B66C-99265F10FBBF
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
IPSec and corporate.
Customers will connect to their respective regional sites separately. =
Any ITAR concerns there?
> On Oct 5, 2016, at 12:01 PM, Christopher Morrow =
<morrowc.lists@gmail.com> wrote:
>=20
>=20
>=20
> On Tue, Oct 4, 2016 at 11:15 PM, Eric Germann <ekgermann@semperen.com =
<mailto:ekgermann@semperen.com>> wrote:
> I=E2=80=99ve been charged with building a global VPN as an overlay on =
top of a certain 3 letter company who also sells lots of stuff.
>=20
>=20
> you say 'vpn' do you mean 'mpls vpn' or 'ipsec vpn over intertubes' ?
> =20
> We=E2=80=99re looking at
>=20
> US East
> US West
> US Central (eventually)
> Brazil
> Singapore
> Frankfurt
> Ireland
> Sydney
> Maybe Canada
> Maybe India (outsourcesrs)
>=20
> In the planning stages now and wondering if there are any protocols I =
need to stay away from ITAR wise with this list of countries.
>=20
> Contemplating Suite B with GCM, etc and AES acceleration.
>=20
>=20
> most places dont' really care about encryption if your use is 'for =
corporate use', not providing use by external parties (internet access =
sorts of things), I believe.
--Apple-Mail=_02E867DF-526F-4E1C-B66C-99265F10FBBF
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail=_02E867DF-526F-4E1C-B66C-99265F10FBBF--
