nanog mailing list archives

Re: interesting troubleshooting


From: William Herrin <bill () herrin us>
Date: Fri, 20 Mar 2020 20:11:42 -0700

On Fri, Mar 20, 2020 at 3:07 PM Job Snijders <job () ntt net> wrote:
Do we know which specific VPN technologies specifically are harder to
hash in a meaningful way for load balanacing purposes, than others?

I would expect it to be true of any site to site VPN data flow. The
whole idea is for the guy in the middle to be unable to deduce
anything about the flow. If the technology provides hints about which
packets match the same subflow, it isn't doing a very good job.

Regards,
Bill Herrin


-- 
William Herrin
bill () herrin us
https://bill.herrin.us/


Current thread: