Subject: Re: [ippm] Meeting at IETF 85

From: Bixiaoyu <[email-masked]>
Date: Fri, 7 Sep 2012 01:10:04 +0000

Hi, Henk

We'd like to submit an individual draft to discuss the problems that we met in practice.

In RFC4656, cryptographic security mechanisms such as IPsec have been examined and given up at an early stage of OWAMP protocol design, for a series of problems.
However, with the wide deployment of IPsec and other security mechanism, there are more and more practical use cases that IPsec and O/TWAMP protocols are needed simultaneously.
Thus, it becomes an important issue how to measure the IP performance over the IPsec tunnel with O/TWAMP.

One possible solution to this problem (general idea) might be to take advantage of the secret key derived by IKEv2 protocol, to provision the key needed in RFC4656 and RFC5357.
And it is able to further extend the O/TWAMP protocol to support the deployment of IPsec.
A 00-version draft will be uploaded soon, and welcome discussions via email.

We believe that there may be other possible solutions to the underlying problem.
Hope that we could have a face to face discussion at Atlanta meeting.

Best Regards,

Emily Bi