Search RFCs
RFC 9347
Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS),January 2023
- File formats:
- Also available:XML file for editing
- Status:
- PROPOSED STANDARD
- Author:
- C. Hopps
- Stream:
- IETF
- Source:
- ipsecme (sec)
Cite this RFC:TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC9347
Discuss this RFC: Send questions or comments to the mailing listipsec@ietf.org
Other actions:View Errata | Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 9347
Abstract
This document describes a mechanism for aggregation and fragmentationof IP packets when they are being encapsulated in EncapsulatingSecurity Payload (ESP). This new payload type can be used for variouspurposes, such as decreasing encapsulation overhead for small IPpackets; however, the focus in this document is to enhance IP TrafficFlow Security (IP-TFS) by adding Traffic Flow Confidentiality (TFC)to encrypted IP-encapsulated traffic. TFC is provided by obscuringthe size and frequency of IP traffic using a fixed-size,constant-send-rate IPsec tunnel. The solution allows for congestioncontrol, as well as nonconstant send-rate usage.
For the definition ofStatus,seeRFC 2026.
For the definition ofStream, seeRFC 8729.